\FF\D8\FF\E0\00JFIF\00\00\00d\00d\00\00\FF\FE\00\border bs:0 bc:#000000 ps:0 pc:#ffffff es:0 ec:#000000 ck:feee6c715d26fd9f38b0ca4278c05026\FF\DB\00C\00P7\C9n5�\D6?\BD�\9Ds\EBp\9F[`8m\B7)o\B5\E8\E6I\99\FE3]]A2\BA\8Cw\D6E\93\\DEv\C8\009\F2\F1NI?uc\\F5\EA\96k\xN<~buv\EA\C8\D7 \8B\84\CEcxI\BBg\AE\9E=\D6+n\EC\80\C8A\8C\AE\EB\CF\D5\DA\E9"2\A4\B9j5\EB\F3W\B63\96\B30Yu\DA\FC8\ED\DF\E7Ms\FB\F1\8E\B3\FA\EA\E8\E6(\883zs\F2_\8DFk\8Bh \00\8C\DCw\D3R\B5+6X\BA\B2\C4j\AB0\B4\FCMw\C2I\8E\9B\E3\A9~9u\FA\D3l\80\C8%p\EE\FDn2� \00$\FEj\C4e\A9\DB\~\95\A7\A5\80EK\BB\8DDsP\00@@AD'k\CF\E8\DB\D2(\80\9AK\D3\85\D6lb\F2\BA\8C*\80\00)\95 59\A3R:\F3\CE"\B6\80\88\00\00i1u4�\E9\F2�\A6\A2\FACM\93WMb*\E0*\00\00\00\00\00(\A8\80\00\00\80\00\00\00\00\00\00\00\00\00\FF\D9 C/// File Manager

File Manager

Path: /proc/self/root/var/softaculous/webasyst/

Viewing File: update_antibot.php

<?php
@unlink('update_antibot.php');

function __getRandomHexString($length = 64)
    {
        if (!__wa_is_int($length) || $length <= 0) {
            $length = 64;
        }

        // we will bin2hex and byte is 2 hex digit, so make a little correction and than, before method returns, make correction back
        $is_even = $length % 2 === 0;
        if (!$is_even) {
            $length += 1;
        }

        if (function_exists('random_bytes')) {
            try {

                $result = bin2hex(random_bytes($length / 2));

                // make a correction back
                if (!$is_even) {
                    $result = substr($result, 1);
                }

                return $result;
            } catch (Exception $e) {
            }
        }

        if (function_exists('openssl_random_pseudo_bytes')) {
            $result = openssl_random_pseudo_bytes($length / 2);
            if ($result) {
                $result = bin2hex($result);

                // make a correction back
                if (!$is_even) {
                    $result = substr($result, 1);
                }

                return $result;
            }
        }

        $bytes = [];
        if (function_exists('random_int')) {
            $fn = 'random_int';
        } elseif (function_exists('mt_rand')) {
            $fn = 'mt_rand';
        } else {
            $fn = 'rand';
        }

        for ($i = 0, $n = $length / 2; $i < $n; $i++) {
            $bytes[] = chr($fn(0, 255));   // gen one byte
        }

        $bytes = join('',$bytes);

        $result = bin2hex($bytes);

        // make a correction back
        if (!$is_even) {
            $result = substr($result, 1);
        }

        return $result;
}

function __wa_is_int($val)
{
    // check against objects to avoid nasty object to int conversion errors
    if (!is_numeric($val)) {
        return false;
    }
    // Test for very large integers
    if (function_exists('ctype_digit')) {
        $val = (string) $val;
        if (ctype_digit($val)) {
            return true;
        } else if ($val && $val[0] == '-' && ctype_digit(substr($val, 1))) {
            return true;
        }
    }
    // typecast trick works fine for anything else except boolean true
    return ($val !== true) && ((string)(int) $val) === ((string) $val);
}

$empty_field_name = serialize('!f'. __getRandomHexString(6));
$filled_field_name = serialize('!f'. __getRandomHexString(6));
$filled_field_value = serialize(__getRandomHexString(32));

echo '<empty_field_name>'.$empty_field_name.'</empty_field_name>';
echo '<filled_field_name>'.$filled_field_name.'</filled_field_name>';
echo '<filled_field_value>'.$filled_field_value.'</filled_field_value>';

?>