Hostile 100% chrome Download

ExploreMyCrema 0.0.1

Search hijack, data exfiltration

“ExploreMyCrema gives you direct, one-click access to high-authority coffee domains, ensuring your next cup is your best one yet. Quick Acc…”

Extension couples external webpage messaging with default search hijackingSearch hijacker uploads host and search telemetry
SHA-2561305d0b9999902504d71f76be2d7e03a9a2086839a2ca94b0b3608d3a54d2384
URLhttps://clients2.google.com/service/update2/crx?response=redirect&prodversion=131.0&acceptformat=crx3&x=id%3Dlnggbclicfphhejijcdnfmaaklmioomg%26installsource%3Dondemand%26uc
MaleculeO₄(CoSDyI)H₆(Br₆Cm₁₀Db₁₁FOsPo₂)Md₃(PaPm₄)

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.