HT Menu Pro – WordPress Mega Menu Builder for Elementor
File type
ZIP archive
File size
4.78 MB (5,013,295 bytes)
Uncompressed size
8.17 MB
Oldest file
2025-04-16 16:00
Newest file
2025-04-18 07:38
Archive contents
Contained entries
185
Files
155
Directories
30
Distinct types
15
Analysis history
Last analysis
Sep 08, 2026, 08:05 AM UTC
Engine
ClamAV 1.5.4
Signature database
v28115
Product ID
#139505
Archive contents
185 entries · 15 types
Directories16.2%30
CSS20.5%38
PNG17.3%32
PHP9.7%18
JPEG8.6%16
JavaScript7%13
SVG3.8%7
WOFF3.8%7
TTF3.8%7
EOT3.8%7
WOFF22.7%5
OTF1.1%2
JSON0.5%1
POT0.5%1
GIF0.5%1
Largest files
Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
SVG · assets/lib/font-awesome/webfonts
86aaeb99b7856305…
833.8 KB
SVG · assets/lib/font-awesome/webfonts
4413a1f98ac2794d…
695.5 KB
SVG · assets/lib/font-awesome/fonts
fc378232f9dad500…
436.6 KB
SVG · include/admin/assets/fonts
fc378232f9dad500…
436.6 KB
JPG · include/admin/assets/images
b6fe7e88bf936036…
313.0 KB
JPG · include/admin/assets/images
efec7c9d6abbc263…
285.6 KB
JPG · include/admin/assets/images
c8cf07c5cc0653ef…
260.0 KB
JPG · include/admin/assets/images
e74e564e68bcce37…
218.8 KB
Code signals
4 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
unserialize
Unsafe when given untrusted input
Deserialization5
curl_exec
Makes an outbound HTTP request
Remote request2
create_function
Removed in PHP 8; builds a function from a string
Code execution1
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.