Motors Pro Plugin – Car Dealer, Classifieds & Listing Pro
File type
ZIP archive
File size
6.10 MB (6,400,351 bytes)
Uncompressed size
26.65 MB
Oldest file
2016-08-06 20:24
Newest file
2026-10-08 11:04
Archive contents
Contained entries
2189
Files
1822
Directories
367
Distinct types
26
Analysis history
Last analysis
Oct 08, 2026, 01:51 PM UTC
Engine
ClamAV 1.5.4
Signature database
v28115
Product ID
#175914
Archive contents
2189 entries · 26 types
Directories16.8%367
PHP64.4%1409
CSS5.6%123
PNG2.4%52
JavaScript2.3%50
Markdown2%44
SVG1.6%36
JSON1.2%27
No Ext1.1%23
MO0.6%13
JPEG0.4%9
WebP0.4%9
Text0.3%6
XML0.2%4
POT0.1%2
WOFF0.1%2
TTF0.1%2
EOT0.1%2
NEON0.1%2
YAML0%1
ASC0%1
CNF0%1
DIST0%1
Lock0%1
PUBKEY0%1
Shell0%1
Largest files
Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · vendor/composer
…
6.40 MB
PHP · vendor/composer
…
6.07 MB
PHP · freemius/includes
cb7063cffd6330d5…
997.2 KB
PNG · addons/VinDecoder/assets/img
baa106c8104a99fd…
503.4 KB
POT · languages
e24842ebced3a38c…
321.9 KB
JS · freemius/assets/js/pricing
da69c6bfc9e23323…
292.6 KB
PHP · vendor/phpseclib/phpseclib/phpseclib/Net
48f36d11d38ed092…
198.5 KB
PNG · assets/images/custom_field_skins
630cc7aa41e4fab4…
177.5 KB
Code signals
9 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
eval
Executes a string as code
Code execution14
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation13
exec / system
Runs an operating-system command
System command13
shell_exec
Runs an operating-system command
System command3
unserialize
Unsafe when given untrusted input
Deserialization3
gzinflate
Decompresses a string in memory
Obfuscation2
curl_exec
Makes an outbound HTTP request
Remote request2
new Function()
Builds a function from a string
Code execution1
assert
Can execute a string as code on old PHP
Code execution1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.