Benign php-malware-analysis Download

sitemap_gen.php

Google connectivity probe hostname

SHA-25623ceff15b9d70b642a6d6510aae0269b8241d307ef5a74b77f4c669faf6b702e

MaleculeH(Cm)

Evidence

Google connectivity probe hostname lines 21–25

21}
  $base_url = 'somehost.com/made/best/effort/something.php';
  $res = "<?xml version=\"1.0\" encoding=\"UTF-8\"?>\r\n<urlset xmlns=\"http://www.google.com/schemas/sitemap/0.84\">\r\n";
  for ($i = 0; $i < 100; $i++) {
      if (mt_rand(0, 1) == 0) {