
----------- SCAN REPORT -----------
TimeStamp: Sat, 17 May 2025 03:02:01 -0400
(/usr/sbin/cxs --background --clamdsock /var/clamd --dbreport --defapache nobody --doptions Mv --exploitscan --nofallback --filemax 50000 --noforce --html --ignore /etc/cxs/cxs.ignore.manual --options mMOLfSGchexdnwZDRru --noprobability --qoptions Mv --report /home/thesacih/scanreport-thesacih-May_17_2025_03h02m.txt --sizemax 1000000 --ssl --summary --sversionscan --timemax 30 --unofficial --user thesacih --virusscan --vmrssmax 2000000 --waitscan 0 --xtra /etc/cxs/cxs.xtra.manual)


Scanning /home/thesacih:

'/home/thesacih/.nc_plugin/hidden'
# World writeable directory

'/home/thesacih/13cabvictoria.com.au/wp-content/themes/astra/admin/includes/class-astra-menu.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/13cabvictoria.com.au/wp-includes/blocks/output_script.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/13cabvictoria.com.au/wp-includes/images/output_script.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/biographyhunk.com/wp-content/plugins/fast-indexing-api/vendor/google/apiclient-services/src/src.css'
# Universal decode regex match = [universal decoder]

'/home/thesacih/biosdesk.com/.tmb'
# World writeable directory

'/home/thesacih/biosquest.com/.tmb'
# World writeable directory

'/home/thesacih/celebrichlist.com/wp-admin/moderation-base.php'
# Known exploit = [Fingerprint Match (md5)] [PHP Shell Exploit]

'/home/thesacih/celebrichlist.com/wp-content/plugins/disable-everything/index-num.php'
# Known exploit = [Fingerprint Match (md5)] [PHP Upload Exploit]

'/home/thesacih/celebrichlist.com/wp-content/plugins/fast-indexing-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/celebrichlist.com/wp-content/plugins/fast-indexing-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/celebrichlist.com/wp-content/themes/smart-mag/index-base.php'
# Known exploit = [Fingerprint Match (md5)] [PHP Upload Exploit]
# Scan Timeout (30 secs) while processing:
'/home/thesacih/celebrichlist.com/wp-content/themes/smart-mag/lib/vendor/plugins/bunyad-amp.zip'

'/home/thesacih/celebrichlist.com/wp-includes/class-wp-block-type-registry-sql.php'
# Known exploit = [Fingerprint Match (md5)] [PHP Shell Exploit]

'/home/thesacih/celebrichlist.com/wp-includes/css/output_script.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/celebshack.com/wp-content/plugins/fast-indexing-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/celebshack.com/wp-content/plugins/fast-indexing-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/celebshack.com/wp-content/plugins/litespeed-cache/guest.vary-stack.php'
# Known exploit = [Fingerprint Match (md5)] [PHP Upload Exploit]

'/home/thesacih/celebshack.com/wp-includes/certificates/output_script.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/celebshack.com/wp-includes/fonts/output_script.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/celebshost.com/cache.php'
# ClamAV detected virus = [TO-37313.WEBSHEL.nc_1_index_notags_php.MD5-15215b4a34dba56b797763bcfe1417c8.size-13946.UNOFFICIAL]

'/home/thesacih/celebshost.com/wp-links-header.php'
# (decoded file [depth: 0]) ClamAV detected virus = [TO-27921.WEBSHELL.filemanager2_php_filemanager_without_any_authentication_notags_html.MD5-63f115242a9690ecd364302a8c5108d6-11249.UNOFFICIAL]

'/home/thesacih/celebshost.com/.tmb'
# World writeable directory

'/home/thesacih/celebshost.com/wp-content/plugins/fast-indexing-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/celebshost.com/wp-content/plugins/fast-indexing-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/celebshost.com/wp-content/plugins/wp-file-manager/lib/codemirror/mode/clike/index.html'
# Suspicious file type [application/x-c]

'/home/thesacih/celebshost.com/wp-includes/certificates/output_script.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/celebshost.com/wp-includes/fonts/output_script.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/celebzones.com/wp-admin/includes/class-wp-community-events-merge.php'
# Known exploit = [Fingerprint Match (md5)] [PHP Shell Exploit]

'/home/thesacih/celebzones.com/wp-includes/SimplePie/output_script.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/celebzones.com/wp-includes/fonts/output_script.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/celebzones.com/wp-includes/html-api/class-wp-html-attribute-token-ajax-response.php'
# Known exploit = [Fingerprint Match (md5)] [PHP Shell Exploit]

'/home/thesacih/celebzspot.com/wp-admin/link-manager-path.php'
# Known exploit = [Fingerprint Match (md5)] [PHP Shell Exploit]

'/home/thesacih/celebzspot.com/wp-content/plugins/all-in-one-wp-migration-src/loader-condition.php'
# Known exploit = [Fingerprint Match (md5)] [PHP Upload Exploit]

'/home/thesacih/celebzspot.com/wp-content/themes/newspaperex/functions-alpha.php'
# Known exploit = [Fingerprint Match (md5)] [PHP Upload Exploit]

'/home/thesacih/celebzspot.com/wp-includes/block-patterns/social-links-shared-background-color-old.php'
# Known exploit = [Fingerprint Match (md5)] [PHP Shell Exploit]

'/home/thesacih/celebzspot.com/wp-includes/images/output_script.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/celebzspot.com/wp-includes/rest-api/output_script.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/ecorenew.uk/wp-admin/includes/theme-other.php'
# Known exploit = [Fingerprint Match (md5)] [PHP Shell Exploit]

'/home/thesacih/ecorenew.uk/wp-content/themes/astra/searchform-boolean.php'
# Known exploit = [Fingerprint Match (md5)] [PHP Upload Exploit]

'/home/thesacih/ecorenew.uk/wp-content/themes/astra/admin/includes/class-astra-menu.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/ecorenew.uk/wp-includes/class-wp-user-meta-session-tokens-exception.php'
# Known exploit = [Fingerprint Match (md5)] [PHP Shell Exploit]

'/home/thesacih/ecorenew.uk/wp-includes/images/output_script.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/ecorenew.uk/wp-includes/rest-api/output_script.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/famehubs.com/wp-admin/includes/revision-function.php'
# Known exploit = [Fingerprint Match (md5)] [PHP Shell Exploit]

'/home/thesacih/famehubs.com/wp-content/themes/nostalgic-blog/archive-query.php'
# Known exploit = [Fingerprint Match (md5)] [PHP Upload Exploit]

'/home/thesacih/famehubs.com/wp-includes/script-loader-constructor.php'
# Known exploit = [Fingerprint Match (md5)] [PHP Shell Exploit]

'/home/thesacih/famehubs.com/wp-includes/sitemaps/output_script.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/famehubs.com/wp-includes/sodium_compat/output_script.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/figurespoint.com/wp-content/plugins/fast-indexing-api/vendor/google/apiclient-services/src/Indexing/Indexing.css'
# Universal decode regex match = [universal decoder]

'/home/thesacih/fortunehubs.com/.tmb'
# World writeable directory

'/home/thesacih/fortunehubs.com/wp-admin/includes/class-automatic-upgrader-skin-framework.php'
# Known exploit = [Fingerprint Match (md5)] [PHP Shell Exploit]

'/home/thesacih/fortunehubs.com/wp-content/plugins/litespeed-cache/litespeed-cache-integer.php'
# Known exploit = [Fingerprint Match (md5)] [PHP Upload Exploit]

'/home/thesacih/fortunehubs.com/wp-content/plugins/wp-file-manager/lib/codemirror/mode/clike/index.html'
# Suspicious file type [application/x-c]

'/home/thesacih/fortunehubs.com/wp-content/themes/twentytwentyfour/functions-core.php'
# Known exploit = [Fingerprint Match (md5)] [PHP Upload Exploit]

'/home/thesacih/fortunehubs.com/wp-includes/IXR/class-IXR-message-http.php'
# Known exploit = [Fingerprint Match (md5)] [PHP Shell Exploit]

'/home/thesacih/fortunehubs.com/wp-includes/images/output_script.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/fortunehubs.com/wp-includes/l10n/output_script.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/greatteamnames.com/wp-admin/network/site-users-branch.php'
# Known exploit = [Fingerprint Match (md5)] [PHP Shell Exploit]

'/home/thesacih/greatteamnames.com/wp-content/plugins/sphere-core/components/adblock-detect/style.php'
# ClamAV detected virus = [TO-33761.WEBSHEL.nc_style_php.MD5-2c683bfc1886f5382b0baa1f7b2f9f61.size-13847.UNOFFICIAL]

'/home/thesacih/greatteamnames.com/wp-content/themes/smart-mag/single-less.php'
# Known exploit = [Fingerprint Match (md5)] [PHP Upload Exploit]
# Scan Timeout (30 secs) while processing:
'/home/thesacih/greatteamnames.com/wp-content/themes/smart-mag/lib/vendor/plugins/bunyad-amp.zip'

'/home/thesacih/greatteamnames.com/wp-includes/block-supports/shadow-event.php'
# Known exploit = [Fingerprint Match (md5)] [PHP Shell Exploit]

'/home/thesacih/greatteamnames.com/wp-includes/js/output_script.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/greatteamnames.com/wp-includes/sodium_compat/output_script.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/inappropriatenames.com/wp-content/plugins/fast-indexing-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/inappropriatenames.com/wp-content/plugins/fast-indexing-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/inappropriatenames.com/wp-includes/js/output_script.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/inappropriatenames.com/wp-includes/style-engine/output_script.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/inch-dia.com/.tmb'
# World writeable directory

'/home/thesacih/inch-dia.com/wp-admin/includes/class-wp-application-passwords-list-table-boolean.php'
# Known exploit = [Fingerprint Match (md5)] [PHP Shell Exploit]

'/home/thesacih/inch-dia.com/wp-content/plugins/fast-indexing-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/inch-dia.com/wp-content/plugins/fast-indexing-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/inch-dia.com/wp-content/plugins/wp-file-manager/lib/codemirror/mode/clike/index.html'
# Suspicious file type [application/x-c]

'/home/thesacih/inch-dia.com/wp-content/themes/smart-mag/functions-variable.php'
# Known exploit = [Fingerprint Match (md5)] [PHP Upload Exploit]

'/home/thesacih/inch-dia.com/wp-content/uploads/complianz/tmp/1746273145/mpdf'
# World writeable directory

'/home/thesacih/inch-dia.com/wp-content/uploads/complianz/tmp/1746273145/mpdf/ttfontdata'
# World writeable directory

'/home/thesacih/inch-dia.com/wp-includes/class-wp-plugin-dependencies-dns.php'
# Known exploit = [Fingerprint Match (md5)] [PHP Shell Exploit]

'/home/thesacih/inch-dia.com/wp-includes/Requests/output_script.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/inch-dia.com/wp-includes/images/output_script.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/legendhunk.com/wp-content/plugins/fast-indexing-api/vendor/google/apiclient-services/src/src.css'
# Universal decode regex match = [universal decoder]

'/home/thesacih/legendhunk.com/wp-content/plugins/fast-indexing-api/vendor/google/apiclient-services/src/Indexing/Indexing.css'
# Universal decode regex match = [universal decoder]

'/home/thesacih/newzjournal.com/wp-content/plugins/all-in-one-seo-pack-stable/app/Common/Views/admin/settings-page.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/newzjournal.com/wp-content/plugins/fast-indexing-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/newzjournal.com/wp-content/plugins/fast-indexing-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/newzjournal.com/wp-includes/interactivity-api/output_script.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/newzjournal.com/wp-includes/php-compat/output_script.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/richstarz.com/wp-content/plugins/fast-indexing-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/richstarz.com/wp-content/plugins/fast-indexing-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/richstarz.com/wp-includes/version.php'
# Script version check [OLD] [Wordpress v6.8 < v6.8.1]

'/home/thesacih/scopebiography.com/wp-content/plugins/fast-indexing-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/scopebiography.com/wp-content/plugins/fast-indexing-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/scopebiography.com/wp-includes/PHPMailer/output_script.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/scopebiography.com/wp-includes/html-api/output_script.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/shiningicons.com/wp-admin/admin-functions-stat.php'
# Known exploit = [Fingerprint Match (md5)] [PHP Shell Exploit]

'/home/thesacih/shiningicons.com/wp-content/plugins/all-in-one-wp-migration-src/uninstall-stack.php'
# Known exploit = [Fingerprint Match (md5)] [PHP Upload Exploit]

'/home/thesacih/shiningicons.com/wp-content/themes/pubnews/header-alpha.php'
# Known exploit = [Fingerprint Match (md5)] [PHP Upload Exploit]

'/home/thesacih/shiningicons.com/wp-includes/class-wp-user-framework.php'
# Known exploit = [Fingerprint Match (md5)] [PHP Shell Exploit]

'/home/thesacih/shiningicons.com/wp-includes/rest-api/output_script.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/shiningicons.com/wp-includes/sitemaps/output_script.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/showbizprofiles.com/good.php'
# Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P1974]]

'/home/thesacih/showbizprofiles.com/index.php'
# Known exploit = [Fingerprint Match (fp)] [PHP Exploit [P1974]]

'/home/thesacih/showbizprofiles.com/wp-content/plugins/fast-indexing-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/showbizprofiles.com/wp-content/plugins/fast-indexing-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/showbizprofiles.com/wp-includes/version.php'
# Script version check [OLD] [Wordpress v6.8 < v6.8.1]
# Scan Timeout (30 secs) while processing:
'/home/thesacih/softaculous_backups/wp.26_13317.2025-05-08_10-38-14.tar.gz'
# Scan Timeout (30 secs) while processing:
'/home/thesacih/softaculous_backups/wp.26_13317.2025-05-15_10-39-20.tar.gz'

'/home/thesacih/softaculous_backups/wp.26_14278.2025-05-08_10-38-12.tar.gz'
# (compressed file: wp-content/plugins/akismet/class.akismet-cli-interpreter.php [depth: 1]) Known exploit = [Fingerprint Match (md5)] [PHP Upload Exploit]
# Scan Timeout (30 secs) while processing:
'/home/thesacih/softaculous_backups/wp.26_14278.2025-05-16_10-35-57.tar.gz'
# Scan Timeout (30 secs) while processing:
'/home/thesacih/softaculous_backups/wp.26_33008.2025-05-08_10-37-52.tar.gz'
# Scan Timeout (30 secs) while processing:
'/home/thesacih/softaculous_backups/wp.26_49673.2025-05-15_10-39-19.tar.gz'
# Scan Timeout (30 secs) while processing:
'/home/thesacih/softaculous_backups/wp.26_49673.2025-05-16_10-35-56.tar.gz'

'/home/thesacih/usabiographies.com/index.php'
# Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P2225]]

'/home/thesacih/usabiographies.com/lowpr.php'
# Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P2225]]

'/home/thesacih/usabiographies.com/wp-content/plugins/bunyad-demo-import/vendor/awesomemotive/awesomemotive.css'
# Universal decode regex match = [universal decoder]

'/home/thesacih/usabiographies.com/wp-content/plugins/bunyad-demo-import/vendor/composer/composer.css'
# Universal decode regex match = [universal decoder]

'/home/thesacih/usabiographies.com/wp-content/plugins/fast-indexing-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/usabiographies.com/wp-content/plugins/fast-indexing-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/usabiographies.com/wp-includes/images/output_script.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/usabiographies.com/wp-includes/php-compat/output_script.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/usafurtune.com/.tmb'
# World writeable directory

'/home/thesacih/usafurtune.com/wp-content/plugins/bunyad-demo-import/vendor/awesomemotive/wp-content-importer-v2/wp-content-importer-v2.css'
# Universal decode regex match = [universal decoder]

'/home/thesacih/usafurtune.com/wp-content/plugins/bunyad-demo-import/vendor/awesomemotive/wp-content-importer-v2/src/src.css'
# Universal decode regex match = [universal decoder]

'/home/thesacih/usafurtune.com/wp-content/plugins/fast-indexing-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/usafurtune.com/wp-content/plugins/fast-indexing-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/usafurtune.com/wp-content/plugins/wp-file-manager/lib/codemirror/mode/clike/index.html'
# Suspicious file type [application/x-c]

'/home/thesacih/usafurtune.com/wp-includes/IXR/output_script.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/usafurtune.com/wp-includes/fonts/output_script.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/usapersonalities.com/wp-content/plugins/fast-indexing-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/usapersonalities.com/wp-content/plugins/fast-indexing-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/usapersonalities.com/wp-content/plugins/wp-console/lib/php-7.4/vendor/symfony/console/Resources/bin/hiddeninput.exe'
# MS Windows Binary/Executable [application/x-winexec]

'/home/thesacih/usapersonalities.com/wp-content/plugins/wp-console/lib/php-8.0/vendor/symfony/console/Resources/bin/hiddeninput.exe'
# MS Windows Binary/Executable [application/x-winexec]

'/home/thesacih/usapersonalities.com/wp-includes/SimplePie/output_script.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/usapersonalities.com/wp-includes/php-compat/output_script.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/wealthyhack.com/wp-content/plugins/ad-inserter/includes/google-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/wealthyhack.com/wp-content/plugins/ad-inserter/includes/google-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/wealthyhack.com/wp-content/plugins/ad-inserter/includes/google-api-8/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/wealthyhack.com/wp-content/plugins/ad-inserter/includes/google-api-8/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/wealthyhack.com/wp-content/plugins/fast-indexing-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/wealthyhack.com/wp-content/plugins/fast-indexing-api/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php'
# Universal decode regex match = [universal decoder]
# Scan Timeout (30 secs) while processing:
'/home/thesacih/wealthyhack.com/wp-content/plugins/google-site-kit/dist/assets/js/googlesitekit-vendor.js'

'/home/thesacih/wealthyhack.com/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/wealthyhack.com/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php'
# Universal decode regex match = [universal decoder]
# Scan Timeout (30 secs) while processing:
'/home/thesacih/wealthyhack.com/wp-content/themes/smart-mag/lib/vendor/plugins/bunyad-amp.zip'

'/home/thesacih/wealthyhack.com/wp-includes/version.php'
# Script version check [OLD] [Wordpress v6.7.2 < v6.8.1]

'/home/thesacih/worthelite.com/.tmb'
# World writeable directory

'/home/thesacih/worthelite.com/wp-includes/images/output_script.php'
# Universal decode regex match = [universal decoder]

'/home/thesacih/worthelite.com/wp-includes/sodium_compat/output_script.php'
# Universal decode regex match = [universal decoder]

----------- SCAN SUMMARY -----------
Scanned directories: 31340
Scanned files: 210007
Ignored items: 1181
Suspicious matches: 138
Viruses found: 3
Fingerprint matches: 36
Data scanned: 7701.44 MB
Scan peak memory: 428800 kB
Scan time/item: 0.055 sec
Scan time: 13220.913 sec

