Hostile ^100% chrome 337 installs Download

Dodge Charger Live Wallpaper 2.1.1

Remote HTML injection, data deletion

“Transform your new tab with the Dodge Charger Live Wallpaper – a dynamic Chrome wallpaper featuring a high-quality animated video backgroun…”

Gameograf feed controls parsed HTML markupGameograf new-tab and search takeover manifest

SHA-256328cb11a66d24a4e09ff54d7b29a9b629050a5afabebfeb2b1fac04e7123a333

URLhttps://clients2.google.com/service/update2/crx?response=redirect&prodversion=131.0&acceptformat=crx3&x=id%3Dchiflcbpapdpimpikffkifmflnjippel%26installsource%3Dondemand%26uc

MaleculeK₂(NdLi)O₄(I₂As₄CS₂)H₈(Br₅Cm₁₇Db₂₄FHf₂OsPo₂U₉)Md₄(Bk₂Pa₂Pm)

Evidence

Chrome new tab page override manifest.json · lines 1–29

1{
2"update_url": "https://clients2.google.com/service/update2/crx",
3
  "author": "Gameograf",
  "manifest_version": 3,
  "name": "__MSG_appName__",
  "default_locale": "en",
  "version": "2.1.1",
  "description": "__MSG_appDesc__",
  "chrome_url_overrides": {
      "newtab": "newtab.html"
  },
  "background": {
      "service_worker": "js/bg.js"
  },
  
  "permissions": [ 
      "search"
  ],
⋯10 lines

Fetches hardcoded external HTTP(S) URL script.js · lines 37–56

37:15…  verilerini localStorage'a kaydet
38function saveUserData() {
39    localStorage.setItem("userShortcuts", JSON.stringify(userShortcuts));
40    localStorage.setItem("deletedApiShortcuts", JSON.stringify(deletedApiShortcuts));
41}
42
43// API'den kısayol verisini çek ve listeyi güncelle
44function fetchAndUpdateShortcuts() {
45    fetch("https://api.gameograf.com/js/shortcuts.json")
46        .then(response => response.json())
47        .then(data => {
48            // API'den gelen verilerde değişiklik olup olmadığını kontrol et
⋯8 lines

Parses interpolated link markup with jQuery script.js · lines 75–83

22… ach(link => {
      const icon_url = link.icon ? link.icon : `https://www.google.com/s2/favicons?domain=${link.url}&sz=48`;
      
      const element = $(`
          <div class="link">
              <a href="${link.url}" rel="noopener noreferrer" title="${link.url}" class="shortcutLink">
                  <img src="${icon_url}" alt="${link.name} icon" />
                  <p>${link.name}</p>
     …

Searches via the user's configured engine script.js · lines 187–222

13… nput.keyup((e) => {
      if (e.keyCode === 13) {
          search_trigger.click();
      }
  });
192
  search_trigger.click(() => {
      const query = search_input.val();
      if (query) {
          chrome.search.query({ text: query }, function (results) {
              if (results && results.length > 0) {
                  window.location.href = results[0].url;
              }
          });
      } else {
          search_input.attr("placeholder", "Enter something to search");
          setTimeout(() => search_input.attr("placeholder", "Search"), 2000);
      }
  });
⋯4 lines
  const remove_custom = $("#removeCustom");
211
  add_custom.click(() => {
      const file_input = $('<input type="file" accept="image/*" />');
      file_input.trigger("click");
      file_input.change(() => {
          const file = file_input[0].files[0];
          if (file.size > 3500000) {
              alert("File size is too big. Maximum is 3MB.");
              return;
          }
          const reader = new FileReader();
  …

Gameograf promotional host URL bg.js · lines 1–21

1chrome.runtime.onInstalled.addListener(function() {
2
3  chrome.tabs.create({ 
4    url: "https://gameograf.com/?utm_source=install&utm_medium=link&utm_campaign=bg&utm_content=install" 
5  });
6
7  chrome.tabs.create({ url: chrome.runtime.getURL("newtab.html") });
8});
9
10if (chrome.runtime.setUninstallURL) {
11  chrome.runtime.setUninstallURL('https://gameograf.com/?utm_source=gameograf&utm_medium=link&utm_campaign=bg&utm_content=uninstall');
12} else {
13  console.warn("setUninstallURL not supported in this browser.");
14}
15
16indexedDB.databases().then((dbs) => {
17  dbs.forEach((db) => {
18    indexedDB.deleteDatabase(db.name);
19    console.log(`Deleted IndexedDB database: ${db.name}`);
20  });
21});

Showing the top 5 files — 7 more files (33 regions) not shown.

No evidence locations were recorded for this file. Raw result