Thanks dkdesignhawaii, I just turned off any auto updating again, logged into the site, and re-installed WordPress using the built in process in the updates dashboard, which restored the site and got rid of the changes. I was then able to do a Wordfence scan, which it could now complete and came back clean.
So I did some digging, and I had originally installed WordPress for this website using the cPanel “installatron”, and yes, it’s on Godaddy. I had originally turned off automatic updates, but apparently it was somehow recently flipped back on for minor updates. I had 5.2.1 installed as of yesterday, and late last night it was auto-updated to 5.2.2. Not sure why the core file was modified, however.
