Suspicious ^85% chrome Download

bidibknpkgfcieamegddpjdioflkjkhd 1.0

Malicious embedded archive member

Assigns DOM innerHTMLBrowser storage getItem call

SHA-256156b7ce3d90ca066f1acc84d6d57cdcbe860e17ececfb1c4ee2402c134a9c157

URLhttps://clients2.google.com/service/update2/crx?response=redirect&prodversion=131.0&acceptformat=crx3&x=id%3Dbidibknpkgfcieamegddpjdioflkjkhd%26installsource%3Dondemand%26uc

MaleculeH₂(FU)

Evidence

Assigns DOM innerHTML popup.js · lines 56–58

56function displayTasks() {
57  const taskList = document.getElementById("taskList");
58  taskList.innerHTML = '';

Browser localStorage access popup.js · lines 103–107

103// Save data to localStorage
104function saveData() {
105  localStorage.setItem("score", score);
106  localStorage.setItem("level", level);
107  localStorage.setItem("coinsNeeded", coinsNeeded);

Browser storage getItem call popup.js · lines 111–115

111// Load data from localStorage
112function loadData() {
113  score = parseInt(localStorage.getItem("score")) || 0;
114  level = parseInt(localStorage.getItem("level")) || 1;
115  coinsNeeded = parseInt(localStorage.getItem("coinsNeeded")) || 10;

Extension background service worker manifest.json · lines 1–19

1{
"name": "Coin Collection Game",
"version": "1.0",
"manifest_version": 3,
"description": "Pass levels by collecting coins and complete daily tasks!",
"permissions": [
  "storage"
],
"icons": {
  "128": "icons/icon128.png"
},
"background": {
  "service_worker": "background.js"
},
"action": {
  "default_popup": "popup.html",
  "default_icon": {
    "128": "icons/icon128.png"
  },

CSS opacity zero rule styles.css · lines 105–109

  font-size: 16px;
  display: none;
  opacity: 0;
  transition: opacity 0.5s ease-in-out;
  box-shadow: 0 4px 10px rgba(0, 0, 0, 0.2);

No evidence locations were recorded for this file. Raw result