MAINHACK

Viewing / Editing File: scanreport-kataubyb-Feb_26_2025_10h30m.txt

File is not writable. Editing disabled.
----------- SCAN REPORT -----------
TimeStamp: Wed, 26 Feb 2025 05:30:32 -0500
(/usr/sbin/cxs --background --clamdsock /var/clamd --dbreport --defapache nobody --doptions Mv --exploitscan --nofallback --filemax 50000 --noforce --html --ignore /etc/cxs/cxs.ignore.manual --options mMOLfSGchexdnwZDRru --noprobability --qoptions Mv --report /home/kataubyb/scanreport-kataubyb-Feb_26_2025_10h30m.txt --sizemax 1000000 --ssl --summary --sversionscan --timemax 30 --unofficial --user kataubyb --virusscan --vmrssmax 2000000 --waitscan 0 --xtra /etc/cxs/cxs.xtra.manual)


Scanning /home/kataubyb:
# Scan Timeout (30 secs) while processing:
'/home/kataubyb/prelive.imhf.org.pk.zip'
# Scan Timeout (30 secs) while processing:
'/home/kataubyb/.composer/cache/files/twilio/sdk/ccae7e4647f011dca3191ea5f60447b82ac1bb2b.zip'

'/home/kataubyb/.nc_plugin/hidden'
# World writeable directory
# Scan Timeout (30 secs) while processing:
'/home/kataubyb/attandence.katashempstead.com/public/assets/admin/js/vendor.min.js'
# Scan Timeout (30 secs) while processing:
'/home/kataubyb/attandence.katashempstead.com/vendor/doctrine/persistence/lib/Doctrine/Persistence/Reflection/TypedNoDefaultRuntimePublicReflectionProperty.php'
# Scan Timeout (30 secs) while processing:
'/home/kataubyb/attandence.katashempstead.com/vendor/mercadopago/dx-php/phpDocumentor.phar'

'/home/kataubyb/attandence.katashempstead.com/vendor/mercadopago/dx-php/.phpdoc/cache/descriptors/-'
# Suspicious directory

'/home/kataubyb/attandence.katashempstead.com/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php'
# Universal decode regex match = [universal decoder]

'/home/kataubyb/attandence.katashempstead.com/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php'
# Universal decode regex match = [universal decoder]

'/home/kataubyb/attandence.katashempstead.com/vendor/symfony/console/Resources/bin/hiddeninput.exe'
# MS Windows Binary/Executable [application/x-winexec]
# Scan Timeout (30 secs) while processing:
'/home/kataubyb/gosaudigo.com/public/public.zip'

'/home/kataubyb/gosaudigo.com/public/storage'
# Symlink to [/home/kataubyb/gosaudigo.katashempstead.com/storage]

'/home/kataubyb/gosaudigo.com/vendor/symfony/console/Resources/bin/hiddeninput.exe'
# MS Windows Binary/Executable [application/x-winexec]

'/home/kataubyb/gosaudigo.com/vendor_old/aws/aws-crt-php/ext/awscrt.c'
# Suspicious file type [application/x-c]

'/home/kataubyb/gosaudigo.com/vendor_old/aws/aws-crt-php/ext/crc.c'
# Suspicious file type [application/x-c]

'/home/kataubyb/gosaudigo.com/vendor_old/aws/aws-crt-php/ext/credentials.c'
# Suspicious file type [application/x-c]

'/home/kataubyb/gosaudigo.com/vendor_old/aws/aws-crt-php/ext/crt.c'
# Suspicious file type [application/x-c]

'/home/kataubyb/gosaudigo.com/vendor_old/aws/aws-crt-php/ext/event_loop.c'
# Suspicious file type [application/x-c]

'/home/kataubyb/gosaudigo.com/vendor_old/aws/aws-crt-php/ext/http.c'
# Suspicious file type [application/x-c]

'/home/kataubyb/gosaudigo.com/vendor_old/aws/aws-crt-php/ext/logging.c'
# Suspicious file type [application/x-c]

'/home/kataubyb/gosaudigo.com/vendor_old/aws/aws-crt-php/ext/php_util.c'
# Suspicious file type [application/x-c]

'/home/kataubyb/gosaudigo.com/vendor_old/aws/aws-crt-php/ext/signing.c'
# Suspicious file type [application/x-c]

'/home/kataubyb/gosaudigo.com/vendor_old/aws/aws-crt-php/ext/stream.c'
# Suspicious file type [application/x-c]

'/home/kataubyb/gosaudigo.com/vendor_old/symfony/console/Resources/bin/hiddeninput.exe'
# MS Windows Binary/Executable [application/x-winexec]
# Scan Timeout (30 secs) while processing:
'/home/kataubyb/imhf.org.pk/prelive.imhf.org.pk.zip'

'/home/kataubyb/imhf.org.pk/wp-content/plugins/elementor/elementor.php'
# Script version check [OLD] [Elementor v3.25.9 < v3.26.5]

'/home/kataubyb/imhf.org.pk/wp-content/plugins/litespeed-cache/litespeed-cache.php'
# Script version check [OLD] [LiteSpeed Cache v6.5.2 < v6.5.4]

'/home/kataubyb/imhf.org.pk/wp-content/plugins/loginizer/loginizer.php'
# Script version check [OLD] [Loginizer v1.9.4 < v1.9.6]

'/home/kataubyb/imhf.org.pk/wp-content/plugins/wpforms-lite/wpforms.php'
# Script version check [OLD] [WPForms Lite v1.9.2.2 < v1.9.3.1]

'/home/kataubyb/imhf.org.pk/wp-content/themes/astra/admin/includes/class-astra-menu.php'
# Universal decode regex match = [universal decoder]
# Scan Timeout (30 secs) while processing:
'/home/kataubyb/katashempstead.com/kafey/public/assets/admin/vendor.zip'

'/home/kataubyb/katashempstead.com/kafey/vendor/mercadopago/dx-php/.phpdoc/cache/descriptors/-'
# Suspicious directory

'/home/kataubyb/payanytimes.com/node_modules/.bin/sha.js'
# Regular expression match = [;if\(nds.===undefined\)]

'/home/kataubyb/payanytimes.com/node_modules/@babel/core/node_modules/semver/bin/semver.js'
# Regular expression match = [;if\(nds.===undefined\)]

'/home/kataubyb/payanytimes.com/node_modules/@babel/helper-compilation-targets/node_modules/semver/bin/semver.js'
# Regular expression match = [;if\(nds.===undefined\)]

'/home/kataubyb/payanytimes.com/node_modules/@babel/helper-define-polyfill-provider/node_modules/semver/bin/semver.js'
# Regular expression match = [;if\(nds.===undefined\)]

'/home/kataubyb/payanytimes.com/node_modules/@babel/parser/bin/babel-parser.js'
# Regular expression match = [;if\(nds.===undefined\)]

'/home/kataubyb/payanytimes.com/node_modules/@babel/plugin-transform-runtime/node_modules/semver/bin/semver.js'
# Regular expression match = [;if\(nds.===undefined\)]

'/home/kataubyb/payanytimes.com/node_modules/@babel/preset-env/node_modules/semver/bin/semver.js'
# Regular expression match = [;if\(nds.===undefined\)]

'/home/kataubyb/payanytimes.com/node_modules/babel-plugin-polyfill-corejs2/node_modules/semver/bin/semver.js'
# Regular expression match = [;if\(nds.===undefined\)]

'/home/kataubyb/payanytimes.com/node_modules/browserslist/cli.js'
# Regular expression match = [;if\(nds.===undefined\)]

'/home/kataubyb/payanytimes.com/node_modules/buffer/bin/download-node-tests.js'
# Regular expression match = [;if\(nds.===undefined\)]

'/home/kataubyb/payanytimes.com/node_modules/buffer/bin/test.js'
# Regular expression match = [;if\(nds.===undefined\)]

'/home/kataubyb/payanytimes.com/node_modules/core-js-compat/node_modules/semver/bin/semver.js'
# Regular expression match = [;if\(nds.===undefined\)]

'/home/kataubyb/payanytimes.com/node_modules/envinfo/dist/cli.js'
# Regular expression match = [;if\(nds.===undefined\)]

'/home/kataubyb/payanytimes.com/node_modules/import-local/fixtures/cli.js'
# Regular expression match = [;if\(nds.===undefined\)]

'/home/kataubyb/payanytimes.com/node_modules/is-docker/cli.js'
# Regular expression match = [;if\(nds.===undefined\)]

'/home/kataubyb/payanytimes.com/node_modules/json5/lib/cli.js'
# Regular expression match = [;if\(nds.===undefined\)]

'/home/kataubyb/payanytimes.com/node_modules/laravel-mix/bin/cli.js'
# Regular expression match = [;if\(nds.===undefined\)]
# (decoded file [depth: 0]) Regular expression match = [;if\(nds.===undefined\)]

'/home/kataubyb/payanytimes.com/node_modules/loader-utils/node_modules/json5/lib/cli.js'
# Regular expression match = [;if\(nds.===undefined\)]

'/home/kataubyb/payanytimes.com/node_modules/make-dir/node_modules/semver/bin/semver.js'
# Regular expression match = [;if\(nds.===undefined\)]

'/home/kataubyb/payanytimes.com/node_modules/mime/cli.js'
# Regular expression match = [;if\(nds.===undefined\)]

'/home/kataubyb/payanytimes.com/node_modules/mime/src/build.js'
# Regular expression match = [;if\(nds.===undefined\)]

'/home/kataubyb/payanytimes.com/node_modules/mkdirp/bin/cmd.js'
# Regular expression match = [;if\(nds.===undefined\)]

'/home/kataubyb/payanytimes.com/node_modules/multicast-dns/cli.js'
# Regular expression match = [;if\(nds.===undefined\)]

'/home/kataubyb/payanytimes.com/node_modules/node-notifier/vendor/notifu/notifu.exe'
# MS Windows Binary/Executable [application/x-winexec]

'/home/kataubyb/payanytimes.com/node_modules/node-notifier/vendor/notifu/notifu64.exe'
# MS Windows Binary/Executable [application/x-winexec]

'/home/kataubyb/payanytimes.com/node_modules/node-notifier/vendor/snoreToast/snoretoast-x64.exe'
# MS Windows Binary/Executable [application/x-winexec]
# Scan Timeout (30 secs) while processing:
'/home/kataubyb/payanytimes.com/node_modules/node-notifier/vendor/snoreToast/snoretoast-x86.exe'

'/home/kataubyb/payanytimes.com/node_modules/rimraf/bin.js'
# Regular expression match = [;if\(nds.===undefined\)]

'/home/kataubyb/payanytimes.com/node_modules/semver/bin/semver.js'
# Regular expression match = [;if\(nds.===undefined\)]

'/home/kataubyb/payanytimes.com/node_modules/sha.js/bin.js'
# Regular expression match = [;if\(nds.===undefined\)]

'/home/kataubyb/payanytimes.com/node_modules/webpack/bin/webpack.js'
# Regular expression match = [;if\(nds.===undefined\)]
# (decoded file [depth: 0]) Regular expression match = [;if\(nds.===undefined\)]

'/home/kataubyb/payanytimes.com/node_modules/webpack-cli/bin/cli.js'
# Regular expression match = [;if\(nds.===undefined\)]

'/home/kataubyb/payanytimes.com/node_modules/webpack-dev-server/bin/webpack-dev-server.js'
# Regular expression match = [;if\(nds.===undefined\)]
# (decoded file [depth: 0]) Regular expression match = [;if\(nds.===undefined\)]
# Scan Timeout (30 secs) while processing:
'/home/kataubyb/payanytimes.com/public/storage/temp/0SIvtoi1TVu45MTyt0ywludqFqY1UtOCeWTtVJ0d.xlsx'
# Scan Timeout (30 secs) while processing:
'/home/kataubyb/payanytimes.com/public/storage/temp/4wX2wOAmORYJfGSEf9WFmVCVnhM7IqevCAXXH0x5.xlsx'
# Scan Timeout (30 secs) while processing:
'/home/kataubyb/payanytimes.com/storage/logs/laravel-25-01-2023.log'

'/home/kataubyb/payanytimes.com/vendor/maxmind-db/reader/ext/maxminddb.c'
# Suspicious file type [application/x-c]

'/home/kataubyb/payanytimes.com/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php'
# Universal decode regex match = [universal decoder]

'/home/kataubyb/payanytimes.com/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php'
# Universal decode regex match = [universal decoder]

'/home/kataubyb/payanytimes.com/vendor/symfony/console/Resources/bin/hiddeninput.exe'
# MS Windows Binary/Executable [application/x-winexec]

'/home/kataubyb/prelive.imhf.org.pk/wp-content/themes/astra/admin/includes/class-astra-menu.php'
# Universal decode regex match = [universal decoder]

'/home/kataubyb/public_html/wp-content/plugins/astra-sites/inc/classes/compatibility/beaver-builder/contenthook'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/plugins/astra-sites/inc/lib/ai-builder/inc/assets/src/components/db_create'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/plugins/astra-sites/inc/lib/gutenberg-templates/admin-assets/images/fonts/Decorator'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/plugins/astra-sites/inc/lib/gutenberg-templates/admin-assets/js/test_rs_array'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/plugins/astra-sites/inc/lib/gutenberg-templates/inc/editApplication'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/plugins/astra-sites/inc/lib/gutenberg-templates/inc/classes/view_by_sn'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/plugins/astra-sites/inc/lib/onboarding/assets/images/build-with-ai/fieldsmanagement'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/plugins/astra-sites/inc/lib/onboarding/assets/src/sqlupdate'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/plugins/astra-sites/inc/lib/onboarding/assets/src/components/font-selector/latest_item'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/plugins/astra-sites/inc/lib/onboarding/assets/src/components/util/previous-step-button/Pager_Wrapper'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/plugins/astra-sites/inc/lib/onboarding/assets/src/components/util/previous-step-link/tb_tinymce.js'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/plugins/astra-sites/inc/lib/onboarding/assets/src/steps/customize-site/customize-steps/ecommerce-selections/finalization'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/plugins/astra-sites/inc/lib/onboarding/assets/src/steps/customize-site/customize-steps/ecommerce-selections/jpgraph_ttf.inc'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/plugins/astra-sites/inc/lib/onboarding/assets/src/steps/customize-site/customize-steps/license-validation/dbaccess.class'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/plugins/astra-sites/inc/lib/onboarding/assets/src/steps/customize-site/customize-steps/site-colors-typography/admin.tpl'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/plugins/astra-sites/inc/lib/onboarding/assets/src/steps/customize-site/customize-steps/site-colors-typography/adr_battle'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/plugins/astra-sites/inc/lib/onboarding/assets/src/steps/customize-site/customize-steps/site-colors-typography/appvars_actions'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/plugins/astra-sites/inc/lib/onboarding/assets/src/steps/customize-site/customize-steps/site-colors-typography/bulgarian'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/plugins/astra-sites/inc/lib/onboarding/assets/src/steps/customize-site/customize-steps/site-colors-typography/cache_icons'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/plugins/astra-sites/inc/lib/onboarding/assets/src/steps/customize-site/customize-steps/site-colors-typography/class.language'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/plugins/astra-sites/inc/lib/onboarding/assets/src/steps/customize-site/customize-steps/site-colors-typography/courseGrades'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/plugins/astra-sites/inc/lib/onboarding/assets/src/steps/customize-site/customize-steps/site-colors-typography/courseSchedule'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/plugins/astra-sites/inc/lib/onboarding/assets/src/steps/customize-site/customize-steps/site-colors-typography/custom_fields'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/plugins/astra-sites/inc/lib/onboarding/assets/src/steps/customize-site/customize-steps/site-colors-typography/cycle_image'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/plugins/astra-sites/inc/lib/onboarding/assets/src/steps/customize-site/customize-steps/site-colors-typography/db_create'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/plugins/astra-sites/inc/lib/onboarding/assets/src/steps/customize-site/customize-steps/site-colors-typography/default1'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/plugins/astra-sites/inc/lib/onboarding/assets/src/steps/customize-site/customize-steps/site-colors-typography/functions_users'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/plugins/astra-sites/inc/lib/onboarding/assets/src/steps/customize-site/customize-steps/site-colors-typography/gacl_api.class'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/plugins/astra-sites/inc/lib/onboarding/assets/src/steps/customize-site/customize-steps/site-colors-typography/googlerequest'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/plugins/astra-sites/inc/lib/onboarding/assets/src/steps/customize-site/customize-steps/site-colors-typography/helveticai'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/plugins/astra-sites/inc/lib/onboarding/assets/src/steps/customize-site/customize-steps/site-colors-typography/instantedit'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/plugins/astra-sites/inc/lib/onboarding/assets/src/steps/customize-site/customize-steps/site-colors-typography/medals.inc'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/plugins/astra-sites/inc/lib/onboarding/assets/src/steps/customize-site/customize-steps/site-colors-typography/mod_pjmenu_ext'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/plugins/astra-sites/inc/lib/onboarding/assets/src/steps/customize-site/customize-steps/site-colors-typography/ndbcluster.lib'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/plugins/astra-sites/inc/lib/onboarding/assets/src/steps/customize-site/customize-steps/site-colors-typography/quiz_overview'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/plugins/astra-sites/inc/lib/onboarding/assets/src/steps/customize-site/customize-steps/site-colors-typography/removed_emails'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/plugins/astra-sites/inc/lib/onboarding/assets/src/steps/customize-site/customize-steps/site-colors-typography/tbl_info.inc'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/plugins/astra-sites/inc/lib/onboarding/assets/src/steps/customize-site/customize-steps/site-colors-typography/timezones'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/plugins/astra-sites/inc/lib/onboarding/assets/src/steps/customize-site/customize-steps/site-colors-typography/traderoute'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/plugins/astra-sites/inc/lib/onboarding/assets/src/steps/customize-site/customize-steps/site-colors-typography/xml_saxy_shared'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/plugins/astra-sites/inc/lib/onboarding/assets/src/steps/survey-loading/technicalStaffEN'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/plugins/astra-sites/inc/lib/starter-templates-importer/researchAreas'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/plugins/astra-sites/inc/lib/zip-ai/sidebar/notifications'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/plugins/elementor/assets/css/modules/apps/log_header.inc'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/plugins/elementor/assets/images/library-connect/fieldsmanagement'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/plugins/elementor/assets/js/technicalStaffEN'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/plugins/elementor/assets/js/packages/editor-responsive/consulta'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/plugins/elementor/assets/js/packages/icons/fieldsmanagement'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/plugins/elementor/assets/lib/animations/styles/technicalStaffEN'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/plugins/elementor/assets/lib/e-gallery/css/fieldsmanagement'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/plugins/elementor/assets/lib/font-awesome/json/default_login'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/plugins/elementor/assets/lib/jquery-numerator/technicalStaffEN'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/plugins/elementor/assets/lib/pickr/fieldsmanagement'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/plugins/elementor/core/app/modules/import-export/simpleform'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/plugins/elementor/core/common/modules/ajax/admin_bulkkats'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/plugins/elementor/core/common/modules/event-tracker/data/modredirect.inc'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/plugins/elementor/core/editor/loader/v2/templates/paginazione'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/plugins/elementor/core/page-assets/section_tree1'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/plugins/elementor/core/settings/exposicions'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/plugins/elementor/modules/apps/fieldsmanagement'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/plugins/elementor/modules/content-sanitizer/xenobe_funcs'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/plugins/elementor/modules/element-manager/Advertising'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/plugins/litespeed-cache/data/filetypes.inc'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/plugins/litespeed-cache/src/admin.newsfeeds'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/themes/astra/admin/includes/class-astra-menu.php'
# Universal decode regex match = [universal decoder]

'/home/kataubyb/public_html/wp-content/themes/twentytwentyfour/assets/fonts/class.prefs'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/themes/twentytwentytwo/assets/jpgraph_antispam'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/themes/twentytwentytwo/assets/fonts/ibm-plex/jpgraph_antispam'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/themes/twentytwentytwo/assets/fonts/source-serif-pro/jpgraph_antispam'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/upgrade/wp/mRlrJdc.php'
# (decoded file [depth: 1]) Decode regex match = [decode regex: 1]
# (decoded file [depth: 2]) Known exploit = [Fingerprint Match (fp)] [Hacker Sig Exploit [P2246]]

'/home/kataubyb/public_html/wp-content/uploads'
# World writeable directory

'/home/kataubyb/public_html/wp-content/uploads/2023'
# World writeable directory

'/home/kataubyb/public_html/wp-content/uploads/2023/10'
# World writeable directory

'/home/kataubyb/public_html/wp-content/uploads/2023/11'
# World writeable directory

'/home/kataubyb/public_html/wp-content/uploads/2023/12'
# World writeable directory

'/home/kataubyb/public_html/wp-content/uploads/2024'
# World writeable directory

'/home/kataubyb/public_html/wp-content/uploads/2024/01'
# World writeable directory

'/home/kataubyb/public_html/wp-content/uploads/2024/02'
# World writeable directory

'/home/kataubyb/public_html/wp-content/uploads/2024/03'
# World writeable directory

'/home/kataubyb/public_html/wp-content/uploads/2024/04'
# World writeable directory

'/home/kataubyb/public_html/wp-content/uploads/2024/11'
# World writeable directory

'/home/kataubyb/public_html/wp-content/uploads/2024/11/fieldsmanagement'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/uploads/2024/12'
# World writeable directory

'/home/kataubyb/public_html/wp-content/uploads/2025'
# World writeable directory

'/home/kataubyb/public_html/wp-content/uploads/2025/01'
# World writeable directory

'/home/kataubyb/public_html/wp-content/uploads/2025/02'
# World writeable directory

'/home/kataubyb/public_html/wp-content/uploads/ai-builder'
# World writeable directory

'/home/kataubyb/public_html/wp-content/uploads/ast-block-templates-json'
# World writeable directory

'/home/kataubyb/public_html/wp-content/uploads/astra-docs/cma_m_bulk'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-content/uploads/astra-sites'
# World writeable directory

'/home/kataubyb/public_html/wp-content/uploads/elementor'
# World writeable directory

'/home/kataubyb/public_html/wp-content/uploads/elementor/css'
# World writeable directory

'/home/kataubyb/public_html/wp-content/uploads/elementor/thumbs'
# World writeable directory

'/home/kataubyb/public_html/wp-content/uploads/wpforms'
# World writeable directory

'/home/kataubyb/public_html/wp-content/uploads/wpforms/cache'
# World writeable directory

'/home/kataubyb/public_html/wp-content/uploads/wpforms/themes'
# World writeable directory

'/home/kataubyb/public_html/wp-includes/SimplePie/library/SimplePie/HTTP/order_categ'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-includes/SimplePie/src/Decode/technicalStaffEN'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-includes/blocks/missing/select_lang.lib'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-includes/blocks/nextpage/delete_selected'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-includes/blocks/query-no-results/level_mod'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-includes/blocks/query-pagination-next/technicalStaffEN'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-includes/blocks/social-link/technicalStaffEN'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-includes/css/dist/edit-site/TextDecoration'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-includes/js/dist/vendor/usergroup_4'
# Linux Binary/Executable [application/x-executable]

'/home/kataubyb/public_html/wp-includes/js/jquery/bar.transfer'
# Linux Binary/Executable [application/x-executable]
# Scan Timeout (30 secs) while processing:
'/home/kataubyb/sarmayakar.katashempstead.com/sermayakar.zip'

'/home/kataubyb/sarmayakar.katashempstead.com/vendor/symfony/console/Resources/bin/hiddeninput.exe'
# MS Windows Binary/Executable [application/x-winexec]
# Scan Timeout (30 secs) while processing:
'/home/kataubyb/softaculous_backups/wp.26_30145.2025-02-19_05-50-21.tar.gz'
# Scan Timeout (30 secs) while processing:
'/home/kataubyb/softaculous_backups/wp.26_30145.2025-02-26_05-40-55.tar.gz'

----------- SCAN SUMMARY -----------
Scanned directories: 26657
Scanned files: 133850
Ignored items: 322
Suspicious matches: 172
Viruses found: 0
Fingerprint matches: 1
Data scanned: 4149.51 MB
Scan peak memory: 412692 kB
Scan time/item: 0.104 sec
Scan time: 16637.921 sec
Cancel / Back
[ MAINHACK ]

Viewing / Editing File: scanreport-kataubyb-Feb_26_2025_10h30m.txt

Server Info

System Features

User Info
