Pixel WordPress Form BuilderPlugin & Autoresponder
File type
ZIP archive
File size
13.22 MB (13,860,899 bytes)
Uncompressed size
21.65 MB
Oldest file
2026-08-26 08:55
Newest file
2026-08-26 08:55
Archive contents
Contained entries
573
Files
479
Directories
94
Distinct types
22
Analysis history
Last analysis
Sep 08, 2026, 10:20 PM UTC
Engine
ClamAV 1.5.4
Signature database
v28115
Product ID
#139323
Archive contents
573 entries · 22 types
Directories16.4%94
PHP45.2%259
PNG11.9%68
JPEG8.9%51
CSS8.2%47
JavaScript3%17
SVG2.4%14
JSON0.7%4
Text0.5%3
HTML0.5%3
No Ext0.3%2
POT0.2%1
GIF0.2%1
WOFF0.2%1
WOFF20.2%1
TTF0.2%1
EOT0.2%1
OTF0.2%1
BIN0.2%1
DB0.2%1
PEM0.2%1
ZIP0.2%1
Largest files
Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · js
…
2.13 MB
JSON · package root
69e4af743eaf44c9…
1.46 MB
CSS · css
9c89704d371a096b…
744.7 KB
CSS · css/demo-css
76981a99929b0033…
508.7 KB
JPG · thumbs
9db2f3530e8d5962…
507.1 KB
JPG · thumbs
f907b2dab16723fb…
453.2 KB
SVG · fonts
b821959e441b9fb0…
434.0 KB
JPG · thumbs
ad322cd38c827804…
365.3 KB
Code signals
5 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
curl_exec
Makes an outbound HTTP request
Remote request38
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation11
unserialize
Unsafe when given untrusted input
Deserialization3
eval
Executes a string as code
Code execution2
gzinflate
Decompresses a string in memory
Obfuscation1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.