File Forensics

Upload threats onlyCompleted 2026-09-24 18:13:46 in 0.01 secondsResults expire after 30 minutes.
3Total findings
3Critical
0High
3Upload threats
0Sensitive exposure
0Correlated
Clear
3 findings shown
FileForensic evidenceRiskTypeModifiedActions
wp-content/uploads/2026/09/avatar.php.jpg
145 B · SHA-256 0fd32e987b4e…
Upload threat
PHP-like double extension may disguise executable content
4 matched signals
  • PHP-like double extension may disguise executable content
    uploads.double_extension
  • File uses an image extension but has no valid image header
    uploads.invalid_image
  • Detected MIME type conflicts with the image extension
    uploads.mime_mismatch
  • PHP code marker detected inside the uploaded file
    uploads.embedded_php
Critical100/100High confidencejpg
text/x-php
2026-09-24 12:51:19
wp-content/uploads/2026/09/shell_console.phtml
92 B · SHA-256 be517c8a07b6…
Upload threat
Server-executable file type found in Media uploads
2 matched signals
  • Server-executable file type found in Media uploads
    uploads.server_executable
  • PHP code marker detected inside the uploaded file
    uploads.embedded_php
Critical100/100High confidencephtml
text/x-php
2026-09-24 12:51:19
wp-content/uploads/2026/web_shell.php
300 B · SHA-256 47da41221ef6…
Upload threat
Server-executable file type found in Media uploads
2 matched signals
  • Server-executable file type found in Media uploads
    uploads.server_executable
  • PHP code marker detected inside the uploaded file
    uploads.embedded_php
Critical100/100High confidencephp
text/x-php
2026-09-24 12:51:19