Motors Pro Plugin – Car Dealer, Classifieds & Listing Pro
File type
ZIP archive
File size
5.73 MB (6,013,159 bytes)
Uncompressed size
24.18 MB
Oldest file
2016-08-06 20:24
Newest file
2026-06-04 07:54
Archive contents
Contained entries
2042
Files
1702
Directories
340
Distinct types
26
Analysis history
Last analysis
Aug 30, 2026, 04:46 PM UTC
Engine
ClamAV 1.5.4
Signature database
v28107
Product ID
#175914
Archive contents
2042 entries · 26 types
Directories16.7%340
PHP64.3%1314
CSS5.3%108
PNG2.5%52
JavaScript2.1%43
Markdown2.1%43
SVG1.8%36
JSON1.3%26
No Ext1.1%22
MO0.6%13
JPEG0.4%9
WebP0.4%9
Text0.3%6
XML0.2%4
POT0.1%2
WOFF0.1%2
TTF0.1%2
EOT0.1%2
NEON0.1%2
YAML0%1
ASC0%1
CNF0%1
DIST0%1
Lock0%1
PUBKEY0%1
Shell0%1
Largest files
Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · vendor/composer
…
5.82 MB
PHP · vendor/composer
…
5.51 MB
PHP · freemius/includes
c097c3acce21dfe8…
995.4 KB
PNG · addons/VinDecoder/assets/img
baa106c8104a99fd…
503.4 KB
JS · freemius/assets/js/pricing
10ad36eab47fd74f…
290.5 KB
PHP · vendor/phpseclib/phpseclib/phpseclib/Net
889bf87ee3680927…
198.6 KB
PNG · assets/images/custom_field_skins
630cc7aa41e4fab4…
177.5 KB
PHP · vendor/phpseclib/phpseclib/phpseclib/File
8c0274fc3e79428d…
140.2 KB
Code signals
9 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
eval
Executes a string as code
Code execution14
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation13
exec / system
Runs an operating-system command
System command13
shell_exec
Runs an operating-system command
System command3
unserialize
Unsafe when given untrusted input
Deserialization3
gzinflate
Decompresses a string in memory
Obfuscation2
curl_exec
Makes an outbound HTTP request
Remote request2
new Function()
Builds a function from a string
Code execution1
assert
Can execute a string as code on old PHP
Code execution1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.