Benign 38% Download

e1/30/e130719833e014b73ae7bc4b107f0d438d27e9304c99bf9e3675175c4f32308c

Upload metadata co-occurs with image/PHP pathsFile member names an image-suffixed path
SHA-256e130719833e014b73ae7bc4b107f0d438d27e9304c99bf9e3675175c4f32308c
MaleculeH₂(CmF)

Evidence

Temporary-file-upload metadata field lines 1–12
1{
2 "temporaryFileUploads": [
3 {
4 "field": "form-field-file",
5 "file": {
6 "file": "/var/www/site/wp-content/uploads/bricksforge/tmp/photo.gif",
7 "url": "https://site.invalid/wp-content/uploads/bricksforge/tmp/photo.pht",
8 "type": "image/gif"
9 }
10 }
11 ]
12}

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.