Hostile 92% chrome Download

gmobncgkpjlcjmcmnajepncomfohhdjo

Excessive permissions, data exfiltration, obfuscation

All-URL capture extension with request accessEscaped Unicode codepoint in source
SHA-25614f9cb28a6419f7f049cc0ceca6f6c89665fb2be8514363dbd5fec1b527f56c0
URLhttps://clients2.google.com/service/update2/crx?response=redirect&prodversion=131.0&acceptformat=crx3&x=id%3Dgmobncgkpjlcjmcmnajepncomfohhdjo%26installsource%3Dondemand%26uc
MaleculeK(Li)O(S)H₉(Cm₂₇Db₂₃FHf₄Os₆Po₅TiU₈)Md₄(Li)

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.