Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JPG · assets/images
550ceba2f5436ae2…
233.5 KB
PHP · inc
d28ce12c138c3f8a…
86.2 KB
POT · languages
554cf4565ac99b90…
31.3 KB
PHP · inc/admin-screens
2bac4ad79afd0a27…
31.2 KB
PHP · inc/patcher
11b7b209abe9d3ec…
17.8 KB
PHP · inc/admin-screens
8e60ce713d69da1c…
17.8 KB
CSS · assets/css
1c37c9bd6680df32…
17.1 KB
PHP · inc/admin-screens
900ca9127979d611…
16.4 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation2
Referenced hosts
8 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.