Benign 38% Download

3c/fe/3cfe4a61d0782cb357b37d45367341fb52d2ada45c3d10dc78fe26cce272fff6

Upload metadata co-occurs with image/PHP pathsFile member names an image-suffixed path
SHA-2563cfe4a61d0782cb357b37d45367341fb52d2ada45c3d10dc78fe26cce272fff6
MaleculeH₂(CmF)

Evidence

Temporary-file-upload metadata field lines 1–12
1{
2 "temporaryFileUploads": [
3 {
4 "field": "form-field-file",
5 "file": {
6 "file": "/var/www/site/wp-content/uploads/bricksforge/tmp/photo.gif",
7 "url": "https://site.invalid/wp-content/uploads/bricksforge/tmp/photo.PHTML",
8 "type": "image/gif"
9 }
10 }
11 ]
12}

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.