GRAYBYTE

----------- SCAN REPORT ----------- TimeStamp: Wed, 22 Apr 2026 20:47:29 -0400 (/usr/sbin/cxs --background --clamdsock /var/clamd --dbreport --defapache nobody --doptions Mv --exploitscan --nofallback --filemax 50000 --noforce --html --ignore /etc/cxs/cxs.ignore.manual --options mMOLfSGchexdnwZDRru --noprobability --qoptions Mv --report /home/bravetechrwanda/scanreport-bravetechrwanda-Apr_22_2026_20h47m.txt --sizemax 1000000 --ssl --summary --sversionscan --timemax 30 --unofficial --user bravetechrwanda --virusscan --vmrssmax 2000000 --waitscan 0 --xtra /etc/cxs/cxs.xtra.manual) Scanning /home/bravetechrwanda: '/home/bravetechrwanda/www' # Symlink to [/rsyncd-munged/public_html] '/home/bravetechrwanda/.acme.sh/wp-site/admin.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]] '/home/bravetechrwanda/.analytic/wp-site/admin.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]] '/home/bravetechrwanda/.caldav/wp-site/admin.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]] '/home/bravetechrwanda/.cl.selector/wp-site/admin.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]] '/home/bravetechrwanda/.clwpos/wp-site/admin.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]] '/home/bravetechrwanda/.config/dbus/gs-dbus' # Linux Binary/Executable [application/x-executable] '/home/bravetechrwanda/.cpanel/live-engine-connector-1BpE9zPlme.sock' # Socket '/home/bravetechrwanda/.cpanel/live-engine-connector-AO3RSh3FD3.sock' # Socket '/home/bravetechrwanda/.cpanel/live-engine-connector-QlMZdL1GA1.sock' # Socket '/home/bravetechrwanda/.cpanel/live-engine-connector-m1Ky32an79.sock' # Socket '/home/bravetechrwanda/.cpanel/wp-site/admin.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]] '/home/bravetechrwanda/.cphorde/wp-site/admin.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]] '/home/bravetechrwanda/.htpasswds/wp-site/admin.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]] '/home/bravetechrwanda/.nc_plugin/hidden' # World writeable directory '/home/bravetechrwanda/.softaculous/wp-site/admin.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]] '/home/bravetechrwanda/.spamassassin/wp-site/admin.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]] '/home/bravetechrwanda/.ssh/wp-site/admin.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]] '/home/bravetechrwanda/.subaccounts/wp-site/admin.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]] '/home/bravetechrwanda/.trash/nnglobalfamilysuccour.org/index.php' # ClamAV detected virus = [{HEX}php.generic.malware.501.UNOFFICIAL] '/home/bravetechrwanda/.trash/solidactfoundation.org/wp-content/cache/min/1/wp-content/requests/index.php' # ClamAV detected virus = [TO-33761.WEBSHEL.nc_upfile_nocomment_php.MD5-cd0156806c1de32e2d8e198b0b54ecfc.size-478.UNOFFICIAL] '/home/bravetechrwanda/cepurhuye.rw/076be9/DUVzTTavlOw' # World writeable directory '/home/bravetechrwanda/cepurhuye.rw/076be9/DUVzTTavlOw/distributor' # World writeable directory '/home/bravetechrwanda/cepurhuye.rw/076be9/DUVzTTavlOw/inc' # World writeable directory '/home/bravetechrwanda/cepurhuye.rw/076be9/DUVzTTavlOw/inc/vendor' # World writeable directory '/home/bravetechrwanda/cepurhuye.rw/076be9/DUVzTTavlOw/inc/vendor/composer' # World writeable directory '/home/bravetechrwanda/cepurhuye.rw/076be9/DUVzTTavlOw/inc/vendor/phpmailer' # World writeable directory '/home/bravetechrwanda/cepurhuye.rw/076be9/DUVzTTavlOw/inc/vendor/phpmailer/phpmailer' # World writeable directory '/home/bravetechrwanda/cepurhuye.rw/076be9/DUVzTTavlOw/inc/vendor/phpmailer/phpmailer/language' # World writeable directory '/home/bravetechrwanda/cepurhuye.rw/076be9/DUVzTTavlOw/inc/vendor/phpmailer/phpmailer/src' # World writeable directory '/home/bravetechrwanda/cepurhuye.rw/076be9/DUVzTTavlOw/media' # World writeable directory '/home/bravetechrwanda/cepurhuye.rw/076be9/DUVzTTavlOw/media/css' # World writeable directory '/home/bravetechrwanda/cepurhuye.rw/076be9/DUVzTTavlOw/media/imgs' # World writeable directory '/home/bravetechrwanda/cepurhuye.rw/076be9/DUVzTTavlOw/media/js' # World writeable directory '/home/bravetechrwanda/cepurhuye.rw/076be9/DUVzTTavlOw/media/sass' # World writeable directory '/home/bravetechrwanda/cepurhuye.rw/076be9/DUVzTTavlOw/upload' # World writeable directory '/home/bravetechrwanda/cepurhuye.rw/076be9/assets' # World writeable directory '/home/bravetechrwanda/cepurhuye.rw/076be9/assets/css' # World writeable directory '/home/bravetechrwanda/cepurhuye.rw/076be9/assets/images' # World writeable directory '/home/bravetechrwanda/cepurhuye.rw/076be9/assets/js' # World writeable directory '/home/bravetechrwanda/cepurhuye.rw/076be9/assets/sass' # World writeable directory '/home/bravetechrwanda/cepurhuye.rw/076be9/assets/sass/helpers' # World writeable directory '/home/bravetechrwanda/cepurhuye.rw/076be9/inc' # World writeable directory '/home/bravetechrwanda/cepurhuye.rw/076be9/panel' # World writeable directory '/home/bravetechrwanda/cepurhuye.rw/076be9/panel/assets' # World writeable directory '/home/bravetechrwanda/cepurhuye.rw/076be9/panel/assets/css' # World writeable directory '/home/bravetechrwanda/cepurhuye.rw/076be9/panel/assets/images' # World writeable directory '/home/bravetechrwanda/cepurhuye.rw/076be9/panel/assets/js' # World writeable directory '/home/bravetechrwanda/cepurhuye.rw/076be9/panel/assets/sass' # World writeable directory '/home/bravetechrwanda/cepurhuye.rw/076be9/panel/assets/sass/helpers' # World writeable directory '/home/bravetechrwanda/cepurhuye.rw/076be9/panel/inc' # World writeable directory '/home/bravetechrwanda/cepurhuye.rw/076be9/panel/inc/queries' # World writeable directory '/home/bravetechrwanda/cepurhuye.rw/076be9/panel/upload' # World writeable directory '/home/bravetechrwanda/cepurhuye.rw/abraham-portfolio/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/allan-draft/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/alonzo-legacy-v1/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/alonzo-random/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/ambrose-poc/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/asa-random/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/august-latest/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/bernard-crap/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/chester-ops-test/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/clarence-making/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/corneliu-maintenance/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/dennis-v2/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/elias-simulator/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/ellis-pipeline-test/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/emerson-legacy-v2/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/emery-dryrun/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/emery-rc/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/enos-assets-temp/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/enos-temp-branch/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/erasmus-testbench/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/felix-new/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/frederic-local-site/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/frederic-temp-branch/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/freeman-debug/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/george-clone-site/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/gideon-wip/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/harrison-mirrored/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/isaac-log-test/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/jason-sidebuild/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/job-local/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/joel-log-test/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/joseph-audit/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/laurence-broken/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/laurence-release/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/leroy-local-site/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/luther-scratchpad/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/marshall-audit-mode/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/monroe-test123/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/morris-feature-test/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/nathan-wp-demo/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/nelson-tools-test/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/obadiah-cache-dev/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/obadiah-experiments/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/oscar-portfolio/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/paul-audit-mode/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/randolph-custom-plugin/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/solomon-tools-test/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/solomon-trialrun/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/stephen-edge-case/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/stephen-log-test/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/sylveste-node-test/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/thaddeus-testing-ground/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/theodore-throwaway/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/uriah-server-test/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/valentin-test/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-content/themes/.logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/ID3/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/ID3/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/ID3/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/ID3/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/IXR/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/IXR/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/IXR/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/IXR/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/Requests/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/Requests/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/Requests/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/Requests/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/SimplePie/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/SimplePie/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/SimplePie/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/SimplePie/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/Text/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/Text/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/Text/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/Text/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/abilities-api/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/abilities-api/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/abilities-api/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/abilities-api/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/assets/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/assets/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/assets/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/assets/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/block-bindings/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/block-bindings/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/block-bindings/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/block-bindings/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/block-patterns/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/block-patterns/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/block-patterns/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/block-patterns/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/block-supports/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/block-supports/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/block-supports/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/block-supports/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/certificates/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/certificates/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/certificates/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/certificates/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/css/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/css/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/css/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/css/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/customize/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/customize/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/customize/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/customize/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/fonts/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/fonts/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/fonts/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/fonts/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/html-api/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/html-api/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/html-api/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/html-api/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/images/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/images/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/images/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/images/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/js/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/js/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/js/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/js/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/l10n/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/l10n/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/l10n/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/l10n/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/php-compat/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/php-compat/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/php-compat/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/php-compat/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/pomo/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/pomo/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/pomo/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/pomo/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/rest-api/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/rest-api/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/rest-api/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/rest-api/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/sitemaps/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/sitemaps/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/sitemaps/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/sitemaps/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/sodium_compat/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/sodium_compat/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/sodium_compat/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/sodium_compat/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/style-engine/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/style-engine/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/style-engine/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/style-engine/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/theme-compat/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/theme-compat/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/theme-compat/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/theme-compat/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/widgets/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/widgets/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/widgets/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/widgets/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/wk/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/wk/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/wk/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/wk/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/cepurhuye.rw/wp-includes/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/admin.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]] '/home/bravetechrwanda/dantho.rw/wp-content/plugins/royal-elementor-addons/admin/plugin-options.php' # Universal decode regex match = [universal decoder] '/home/bravetechrwanda/dantho.rw/wp-content/themes/.logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-content/themes/royal-elementor-kit/inc/admin/menu/rek-admin-menu.php' # Universal decode regex match = [universal decoder] '/home/bravetechrwanda/dantho.rw/wp-includes/ID3/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/ID3/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/ID3/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/ID3/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/IXR/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/IXR/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/IXR/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/IXR/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/PHPMailer/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/PHPMailer/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/PHPMailer/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/PHPMailer/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/Requests/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/Requests/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/Requests/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/Requests/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/SimplePie/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/SimplePie/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/SimplePie/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/SimplePie/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/Text/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/Text/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/Text/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/Text/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/abilities-api/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/abilities-api/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/abilities-api/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/abilities-api/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/assets/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/assets/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/assets/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/assets/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/block-bindings/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/block-bindings/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/block-bindings/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/block-bindings/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/block-patterns/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/block-patterns/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/block-patterns/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/block-patterns/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/block-supports/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/block-supports/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/block-supports/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/block-supports/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/certificates/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/certificates/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/certificates/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/certificates/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/customize/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/customize/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/customize/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/customize/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/fonts/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/fonts/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/fonts/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/fonts/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/html-api/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/html-api/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/html-api/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/html-api/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/images/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/images/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/images/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/images/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/js/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/js/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/js/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/js/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/l10n/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/l10n/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/l10n/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/l10n/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/php-compat/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/php-compat/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/php-compat/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/php-compat/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/rest-api/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/rest-api/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/rest-api/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/rest-api/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/sitemaps/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/sitemaps/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/sitemaps/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/sitemaps/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/sodium_compat/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/sodium_compat/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/sodium_compat/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/sodium_compat/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/style-engine/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/style-engine/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/style-engine/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/style-engine/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/theme-compat/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/theme-compat/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/theme-compat/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/theme-compat/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/widgets/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/widgets/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/widgets/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/widgets/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/wk/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/wk/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/wk/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/wk/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/dantho.rw/wp-includes/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/etc/africamentoringinitiative.org/admin.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]] '/home/bravetechrwanda/etc/africamentoringinitiative.org/index.php' # ClamAV detected virus = [{HEX}php.generic.malware.501.UNOFFICIAL] '/home/bravetechrwanda/etc/wp-site/admin.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]] '/home/bravetechrwanda/growmaxafrica.com/.logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-admin/css/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-admin/css/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-admin/css/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-admin/css/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-content/plugins/royal-elementor-addons/admin/plugin-options.php' # Universal decode regex match = [universal decoder] '/home/bravetechrwanda/growmaxafrica.com/wp-content/themes/royal-elementor-kit/inc/admin/menu/rek-admin-menu.php' # Universal decode regex match = [universal decoder] '/home/bravetechrwanda/growmaxafrica.com/wp-content/themes/twentytwentyfive/assets/fonts/ysabeau-office/ysabeau-office/sqWCkILUtvTFnHxAMz.jpg' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-content/uploads/content.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]] '/home/bravetechrwanda/growmaxafrica.com/wp-content/uploads/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-content/uploads/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-content/uploads/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-content/uploads/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/ID3/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/ID3/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/ID3/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/ID3/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/IXR/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/IXR/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/IXR/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/IXR/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/Requests/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/Requests/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/Requests/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/Requests/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/SimplePie/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/SimplePie/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/SimplePie/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/SimplePie/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/Text/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/Text/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/Text/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/Text/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/abilities-api/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/abilities-api/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/abilities-api/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/abilities-api/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/assets/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/assets/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/assets/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/assets/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/block-bindings/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/block-bindings/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/block-bindings/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/block-bindings/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/block-patterns/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/block-patterns/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/block-patterns/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/block-patterns/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/block-supports/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/block-supports/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/block-supports/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/block-supports/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/certificates/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/certificates/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/certificates/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/certificates/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/css/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/css/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/css/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/css/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/customize/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/customize/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/customize/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/customize/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/fonts/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/fonts/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/fonts/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/fonts/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/html-api/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/html-api/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/html-api/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/html-api/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/images/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/images/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/images/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/images/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/js/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/js/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/js/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/js/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/l10n/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/l10n/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/l10n/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/l10n/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/php-compat/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/php-compat/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/php-compat/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/php-compat/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/pomo/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/pomo/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/pomo/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/pomo/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/rest-api/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/rest-api/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/rest-api/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/rest-api/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/sitemaps/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/sitemaps/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/sitemaps/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/sitemaps/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/sodium_compat/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/sodium_compat/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/sodium_compat/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/sodium_compat/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/style-engine/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/style-engine/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/style-engine/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/style-engine/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/theme-compat/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/theme-compat/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/theme-compat/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/theme-compat/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/widgets/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/widgets/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/widgets/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/widgets/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/growmaxafrica.com/wp-includes/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/abel-crap/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/abraham-legacy-v1/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/albert-branch-test/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/alonzo-lab/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/alonzo-new/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/alonzo-new/.cached-logo3.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/ambrose-feature-dev/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/amos-throwaway/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/anderson-integration/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/anson-broken/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/anson-dev/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/anson-dev/.cached-logo3.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/archie-latest/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/byron-devops-test/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/byron-devops-test/.cached-logo3.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/charles-holding/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/clarence-tools-test/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/clarence-tools-test/.cached-logo3.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/clinton-clone-site/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/clinton-obsolete/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/clinton-obsolete/.cached-logo3.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/cyrus-portfolio/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/david-feature/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/elbert-random/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/elijah-_old/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/elisha-preprod/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/ellis-feature-test/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/ellis-feature-test/.cached-logo3.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/ellis-internal-use-only/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/ellis-internal-use-only/.cached-logo3.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/emanuel-feature-dev/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/emanuel-feature-dev/.cached-logo3.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/enoch-module-temp/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/enos-wp-staging/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/ezekiel-snapshot-test/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/ezra-bugfix/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/ezra-bugfix/.cached-logo3.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/ezra-v1/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/felix-experiments/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/felix-latest/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/felix-latest/.cached-logo3.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/felix-test123/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/felix-test123/.cached-logo3.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/ferdinan-my-theme/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/francis-beta/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/francis-beta/.cached-logo3.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/frederic-stuff/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/frederic-stuff/.cached-logo3.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/hamilton-debugging/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/hamilton-debugging/.cached-logo3.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/hamilton-legacy/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/hamilton-release/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/harry-audit/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/harry-bench-dev/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/homer-mirrored/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/ira-stage1/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/jacob-whatever/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/jacob-whatever/.cached-logo3.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/jeremiah-local/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/josuah-mirrored/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/josuah-mirrored/.cached-logo3.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/juan-tools-test/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/julius-legacy/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/julius-legacy-v1/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/leander-wp-demo/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/leonard-bench/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/leonidas-dev/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/loren-develop/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/loren-develop/.cached-logo3.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/malcolm-custom-plugin/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/malcolm-custom-plugin/.cached-logo3.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/malcolm-my-theme/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/marion-labtest/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/martin-previous/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/monroe-snapshot-test/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/monroe-snapshot-test/.cached-logo3.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/morgan-review-site/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/nicholas-tempdir/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/oliver-unmerged/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/oscar-integration/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/otis-tempdir/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/preston-ci-temp/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/preston-trialrun/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/reuben-backup/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/robert-simulator/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/robert-simulator/.cached-logo3.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/samuel-develop/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/samuel-develop/.cached-logo3.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/silas-wp-local/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/stephen-bugfix/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/thaddeus-hotfix/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/theodore-mirror-test/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/uriah-broken/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wallace-emulator/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/walter-release-candidate/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/walter-release-candidate/.cached-logo3.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/willard-testing/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/willard-testing/.cache-logo1.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/william-alpha/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/william-worker-test/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/winfield-test123/.cache-logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-content/plugins/royal-elementor-addons/admin/plugin-options.php' # Universal decode regex match = [universal decoder] '/home/bravetechrwanda/hpgt.org/wp-content/themes/royal-elementor-kit/inc/admin/menu/rek-admin-menu.php' # Universal decode regex match = [universal decoder] '/home/bravetechrwanda/hpgt.org/wp-includes/ID3/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/ID3/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/ID3/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/ID3/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/IXR/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/IXR/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/IXR/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/IXR/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/Requests/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/Requests/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/Requests/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/Requests/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/SimplePie/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/SimplePie/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/SimplePie/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/SimplePie/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/Text/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/Text/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/Text/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/Text/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/abilities-api/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/abilities-api/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/abilities-api/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/abilities-api/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/assets/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/assets/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/assets/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/assets/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/block-bindings/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/block-bindings/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/block-bindings/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/block-bindings/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/block-patterns/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/block-patterns/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/block-patterns/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/block-patterns/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/block-supports/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/block-supports/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/block-supports/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/block-supports/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/certificates/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/certificates/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/certificates/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/certificates/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/css/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/css/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/css/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/css/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/customize/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/customize/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/customize/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/customize/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/fonts/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/fonts/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/fonts/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/fonts/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/html-api/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/html-api/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/html-api/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/html-api/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/images/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/images/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/images/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/images/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/js/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/js/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/js/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/js/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/l10n/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/l10n/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/l10n/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/l10n/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/php-compat/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/php-compat/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/php-compat/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/php-compat/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/pomo/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/pomo/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/pomo/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/pomo/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/rest-api/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/rest-api/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/rest-api/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/rest-api/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/sitemaps/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/sitemaps/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/sitemaps/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/sitemaps/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/sodium_compat/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/sodium_compat/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/sodium_compat/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/sodium_compat/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/style-engine/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/style-engine/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/style-engine/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/style-engine/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/theme-compat/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/theme-compat/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/theme-compat/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/theme-compat/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/widgets/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/widgets/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/widgets/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/widgets/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/wk/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/wk/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/wk/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/wk/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/hpgt.org/wp-includes/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-content/plugins/__litespeed-cache/tpl/crawler/cloudflare/index.php' # ClamAV detected virus = [TO-41941.WEBSHEL.nc_networks_notags_php.MD5-add085933419e1d402b7409fc184fa9a.size-103.UNOFFICIAL] '/home/bravetechrwanda/itiministry.org/wp-content/plugins/akismet/_inc/img/logo-snpqrnnrsornprqsp.png' # Suspicious image file (hidden script file) # Universal decode regex match = [universal decoder] '/home/bravetechrwanda/itiministry.org/wp-content/plugins/give/includes/misc-functions.php' # Universal decode regex match = [universal decoder] '/home/bravetechrwanda/itiministry.org/wp-content/plugins/royal-elementor-addons/admin/plugin-options.php' # Universal decode regex match = [universal decoder] '/home/bravetechrwanda/itiministry.org/wp-content/themes/.logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-content/themes/royal-elementor-kit/inc/admin/menu/rek-admin-menu.php' # Universal decode regex match = [universal decoder] '/home/bravetechrwanda/itiministry.org/wp-includes/ID3/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/ID3/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/ID3/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/ID3/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/IXR/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/IXR/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/IXR/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/IXR/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/Requests/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/Requests/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/Requests/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/Requests/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/SimplePie/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/SimplePie/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/SimplePie/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/SimplePie/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/Text/Diff/Engine/snpqrnnrsornprqsp.ttf' # Universal decode regex match = [universal decoder] '/home/bravetechrwanda/itiministry.org/wp-includes/Text/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/Text/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/Text/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/Text/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/abilities-api/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/abilities-api/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/abilities-api/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/abilities-api/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/assets/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/assets/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/assets/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/assets/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/block-bindings/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/block-bindings/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/block-bindings/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/block-bindings/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/block-patterns/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/block-patterns/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/block-patterns/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/block-patterns/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/block-supports/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/block-supports/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/block-supports/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/block-supports/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/blocks/cover/style-rel.css' # Universal decode regex match = [universal decoder] '/home/bravetechrwanda/itiministry.org/wp-includes/certificates/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/certificates/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/certificates/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/certificates/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/css/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/css/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/css/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/css/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/customize/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/customize/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/customize/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/customize/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/fonts/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/fonts/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/fonts/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/fonts/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/html-api/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/html-api/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/html-api/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/html-api/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/images/w-facdeaaefbeacedfc.gif' # Suspicious image file (hidden script file) # Universal decode regex match = [universal decoder] '/home/bravetechrwanda/itiministry.org/wp-includes/images/wpspin-1x.gif' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/images/xit-3x.gif' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/images/media/facdeaaefbeacedfc.png' # Suspicious image file (hidden script file) # Universal decode regex match = [universal decoder] '/home/bravetechrwanda/itiministry.org/wp-includes/images/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/images/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/images/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/images/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/js/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/js/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/js/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/js/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/l10n/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/l10n/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/l10n/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/l10n/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/php-compat/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/php-compat/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/php-compat/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/php-compat/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/pomo/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/pomo/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/pomo/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/pomo/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/rest-api/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/rest-api/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/rest-api/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/rest-api/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/sitemaps/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/sitemaps/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/sitemaps/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/sitemaps/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/sodium_compat/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/sodium_compat/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/sodium_compat/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/sodium_compat/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/style-engine/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/style-engine/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/style-engine/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/style-engine/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/theme-compat/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/theme-compat/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/theme-compat/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/theme-compat/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/widgets/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/widgets/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/widgets/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/widgets/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/wk/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/wk/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/wk/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/wk/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/itiministry.org/wp-includes/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-admin/includes/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-admin/includes/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-admin/includes/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-admin/includes/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-content/plugins/all-in-one-seo-pack/app/Common/Views/admin/settings-page.php' # Universal decode regex match = [universal decoder] '/home/bravetechrwanda/kigalix.com/wp-content/plugins/houzez-theme-functionality/extensions/meta-box/inc/about/about.php' # Universal decode regex match = [universal decoder] '/home/bravetechrwanda/kigalix.com/wp-content/plugins/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-content/plugins/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-content/plugins/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-content/plugins/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-content/themes/.logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-content/themes/twentytwentythree/index.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]] '/home/bravetechrwanda/kigalix.com/wp-content/themes/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-content/themes/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-content/themes/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-content/themes/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-content/upgrade/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-content/upgrade/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-content/upgrade/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-content/upgrade/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-content/uploads/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-content/uploads/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-content/uploads/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-content/uploads/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/ID3/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/ID3/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/ID3/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/ID3/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/IXR/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/IXR/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/IXR/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/IXR/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/Requests/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/Requests/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/Requests/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/Requests/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/SimplePie/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/SimplePie/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/SimplePie/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/SimplePie/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/Text/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/Text/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/Text/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/Text/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/abilities-api/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/abilities-api/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/abilities-api/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/abilities-api/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/assets/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/assets/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/assets/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/assets/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/block-bindings/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/block-bindings/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/block-bindings/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/block-bindings/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/block-patterns/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/block-patterns/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/block-patterns/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/block-patterns/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/block-supports/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/block-supports/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/block-supports/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/block-supports/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/blocks/embed/index.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]] '/home/bravetechrwanda/kigalix.com/wp-includes/certificates/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/certificates/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/certificates/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/certificates/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/css/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/css/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/css/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/css/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/customize/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/customize/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/customize/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/customize/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/fonts/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/fonts/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/fonts/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/fonts/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/html-api/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/html-api/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/html-api/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/html-api/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/images/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/images/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/images/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/images/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/js/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/js/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/js/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/js/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/l10n/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/l10n/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/l10n/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/l10n/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/php-compat/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/php-compat/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/php-compat/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/php-compat/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/pomo/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/pomo/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/pomo/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/pomo/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/rest-api/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/rest-api/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/rest-api/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/rest-api/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/sitemaps/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/sitemaps/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/sitemaps/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/sitemaps/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/sodium_compat/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/sodium_compat/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/sodium_compat/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/sodium_compat/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/style-engine/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/style-engine/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/style-engine/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/style-engine/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/theme-compat/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/theme-compat/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/theme-compat/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/theme-compat/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/widgets/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/widgets/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/widgets/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/widgets/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/wk/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/wk/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/wk/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/wk/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/wp-site/.cache-logo2.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/wp-site/mysql-dump2.sql' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/wp-site/site-backup2.zip' # Suspicious image file (hidden script file) '/home/bravetechrwanda/kigalix.com/wp-includes/wp-site/theme-update2.json' # Suspicious image file (hidden script file) '/home/bravetechrwanda/lscache/e/9/a/e9a7686ab92b0a36' # ClamAV detected virus = [{HEX}php.malware.magento.621.UNOFFICIAL] '/home/bravetechrwanda/mail/.info@bravetech_rw' # Symlink to [/rsyncd-munged/bravetech.rw/info] '/home/bravetechrwanda/mail/new' # Skipped - too many resources: 102936 ( > filemax=50000) '/home/bravetechrwanda/mail/wp-site/admin.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]] '/home/bravetechrwanda/php/wp-site/admin.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]] '/home/bravetechrwanda/public_ftp/wp-site/admin.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]] '/home/bravetechrwanda/softaculous_backups/wp-site/admin.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]] # Clamd Error for [SCAN /home/bravetechrwanda/solidactfoundation.org]: /home/bravetechrwanda/solidactfoundation.org: File path check failure: No such file or directory. ERROR '/home/bravetechrwanda/sozoagrib.com/wp-content/plugins/login-customizer/vendor/codeinwp/themeisle-sdk/class-themeisle-sdk-widget-dashboard-blog.php' # Universal decode regex match = [universal decoder] '/home/bravetechrwanda/sozoagrib.com/wp-content/plugins/royal-elementor-addons/admin/plugin-options.php' # Universal decode regex match = [universal decoder] '/home/bravetechrwanda/sozoagrib.com/wp-content/themes/.logo.png' # Suspicious image file (hidden script file) '/home/bravetechrwanda/sozoagrib.com/wp-content/themes/royal-elementor-kit/inc/admin/menu/rek-admin-menu.php' # Universal decode regex match = [universal decoder] '/home/bravetechrwanda/ssl/wp-site/admin.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]] '/home/bravetechrwanda/ssl/x/admin.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]] '/home/bravetechrwanda/ssl/x/index.php' # ClamAV detected virus = [{HEX}php.generic.malware.501.UNOFFICIAL] '/home/bravetechrwanda/tmp/wp-site/admin.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]] '/home/bravetechrwanda/tmp/x/admin.php' # Universal decode regex match = [universal decoder] # (decoded file [advanced decoder: 14 (depth: 1)]) Known exploit = [Fingerprint Match (fp)] [PHP Shell Exploit [P1295]] '/home/bravetechrwanda/tmp/x/index.php' # ClamAV detected virus = [{HEX}php.generic.malware.501.UNOFFICIAL] ----------- SCAN SUMMARY ----------- Scanned directories: 25390 Scanned files: 679562 Ignored items: 876 Suspicious matches: 979 Viruses found: 7 Fingerprint matches: 26 Data scanned: 17910.98 MB Scan peak memory: 435516 kB Scan time/item: 0.030 sec Scan time: 20974.683 sec

NAME	SIZE	LAST TOUCH	USER	CAN-I?
..	--	22 Apr 2026 9.15 PM	root / nobody	0755
.acme.sh	--	8 May 2026 8.20 AM	bravetechrwanda / bravetechrwanda	0700
.analytic	--	8 May 2026 8.20 AM	bravetechrwanda / bravetechrwanda	0745
.cagefs	--	8 May 2026 8.20 AM	bravetechrwanda / bravetechrwanda	0771
.caldav	--	8 May 2026 8.20 AM	bravetechrwanda / bravetechrwanda	0755
.cl.selector	--	8 May 2026 8.20 AM	bravetechrwanda / bravetechrwanda	0755
.clwpos	--	8 May 2026 8.20 AM	bravetechrwanda / bravetechrwanda	0700
.config	--	8 May 2026 8.20 AM	bravetechrwanda / bravetechrwanda	0700
.cpanel	--	9 May 2026 3.16 AM	bravetechrwanda / bravetechrwanda	0700
.cphorde	--	8 May 2026 8.20 AM	bravetechrwanda / bravetechrwanda	0700
.htpasswds	--	8 May 2026 8.20 AM	bravetechrwanda / nobody	0750
.nc_plugin	--	31 Oct 2024 10.19 AM	root / root	0711
.softaculous	--	8 May 2026 8.20 AM	bravetechrwanda / bravetechrwanda	0711
.spamassassin	--	8 May 2026 8.20 AM	bravetechrwanda / bravetechrwanda	0700
.ssh	--	8 May 2026 8.20 AM	bravetechrwanda / bravetechrwanda	0700
.subaccounts	--	8 May 2026 8.20 AM	bravetechrwanda / bravetechrwanda	0700
.trash	--	8 May 2026 5.31 PM	bravetechrwanda / bravetechrwanda	0750
academy.bravetech.rw	--	9 May 2026 1.57 AM	bravetechrwanda / nobody	0750
cepurhuye.rw	--	9 May 2026 1.32 AM	bravetechrwanda / nobody	0750
dantho.rw	--	9 May 2026 2.30 AM	bravetechrwanda / nobody	0750
energicotel.com	--	8 May 2026 8.20 AM	bravetechrwanda / nobody	0750
etc	--	9 May 2026 3.15 AM	bravetechrwanda / mail	0750
gethsemane.org.rw	--	8 May 2026 8.20 AM	bravetechrwanda / nobody	0750
growmaxafrica.com	--	9 May 2026 1.31 AM	bravetechrwanda / nobody	0750
hpgt.org	--	8 May 2026 1.01 AM	bravetechrwanda / nobody	0555
itiministry.org	--	9 May 2026 1.32 AM	bravetechrwanda / nobody	0777
kigalifreshmeat.rw	--	8 May 2026 8.20 AM	bravetechrwanda / nobody	0750
kigalix.com	--	8 May 2026 8.20 AM	bravetechrwanda / nobody	0750
logs	--	8 May 2026 8.20 AM	bravetechrwanda / bravetechrwanda	0700
lscache	--	8 May 2026 8.20 AM	nobody / bravetechrwanda	2770
mail	--	9 May 2026 3.46 AM	bravetechrwanda / bravetechrwanda	0751
php	--	8 May 2026 8.20 AM	bravetechrwanda / bravetechrwanda	0755
public_ftp	--	8 May 2026 8.20 AM	bravetechrwanda / bravetechrwanda	0750
public_html	--	8 May 2026 8.20 AM	bravetechrwanda / nobody	0750
softaculous_backups	--	9 May 2026 1.57 AM	bravetechrwanda / bravetechrwanda	0711
solidactfoundation.org	--	8 May 2026 8.20 AM	bravetechrwanda / nobody	0750
sozoagrib.com	--	9 May 2026 1.32 AM	bravetechrwanda / nobody	0555
ssl	--	8 May 2026 8.20 AM	bravetechrwanda / bravetechrwanda	0755
tmp	--	8 May 2026 8.20 AM	bravetechrwanda / bravetechrwanda	0755
ubukode.com	--	8 May 2026 8.20 AM	bravetechrwanda / nobody	0750

.bash_history	0.48 KB	3 May 2026 8.07 AM	bravetechrwanda / bravetechrwanda	0664
.ftpquota	0.019 KB	4 Apr 2026 9.19 AM	bravetechrwanda / bravetechrwanda	0600
.imunify_patch_id	0.104 KB	16 Dec 2025 1.07 PM	bravetechrwanda / bravetechrwanda	0660
.last.inodes	68.527 KB	27 Apr 2026 9.52 AM	root / root	0644
.lastlogin	0.575 KB	6 May 2026 1.36 PM	bravetechrwanda / bravetechrwanda	0600
.myimunify_id	0.1 KB	16 Dec 2025 1.06 PM	bravetechrwanda / bravetechrwanda	0660
.profile	0.399 KB	4 Apr 2026 9.14 AM	bravetechrwanda / bravetechrwanda	0600
hpgt.orgArray	0.743 KB	7 May 2026 8.44 AM	bravetechrwanda / bravetechrwanda	0555
scanreport-bravetechrwanda-Apr_22_2026_20h47m.txt	119.912 KB	23 Apr 2026 6.37 AM	root / root	0644
scanreport-bravetechrwanda-Apr_24_2026_11h57m.txt	125.417 KB	24 Apr 2026 11.03 PM	root / root	0644
scanreport-bravrvjk-Apr_22_2026_16h36m.txt	40.057 KB	22 Apr 2026 9.04 PM	root / root	0644

$13 GRAYBYTE WORDPRESS FILE MANAGER $20