Suspicious ^86% chrome 1,000 installs Download

Kaiser - Reign Begins Live Wallpaper 14.4.1

Promotional new-tab hijacker

“Unleash the power of your new tab with Kaiser - Reign Begins Live Wallpaper, an immersive extension that transports you into a world of str…”

Background worker holds search authority in a replacement new tab extensionGameograf new-tab and search takeover manifest

SHA-25650cff58099d34c1db75128f04f40efc0b15db345cb9bb86afb1dba7944c0cef8

URLhttps://clients2.google.com/service/update2/crx?response=redirect&prodversion=131.0&acceptformat=crx3&x=id%3Dfcibefnooppnknobnmkjflnpdifnhalh%26installsource%3Dondemand%26uc

MaleculeK₂(NdLi)O₂(As₂I)H₆(Br₃Cm₁₀Db₁₉FPo₂U₈)Md₄(Bk₂Pa₂Pm)

Evidence

URL-encoded HTTP form content type string lines 1–2

1/*! jQuery v3.7.1 | (c) OpenJS Foundation and other contributors | jquery.org/license */
2!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!= …

References nonlocal appendChild method line 2

2:695… c:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n||C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]||t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function x(e){return null==e?e+"":"object"==typeof e||"function"==typeof e?n[i.call(e)]||"object":typeof e}var t="3.7.1",l=/H …

Computed property access with addition line 2

2:1387… ae.call(this)},get:function(e){return null==e?ae.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=ce.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return ce.each(this,e)},map:function(n){return this.pushStack(ce.map(this,fu …

Constructs JavaScript regexes at multiple sites line 2

2:4178… g Function Array Date RegExp Object Error Symbol".split(" "),function(e,t){n["[object "+t+"]"]=t.toLowerCase()});var pe=oe.pop,de=oe.sort,he=oe.splice,ge="[\\x20\\t\\r\\n\\f]",ve=new RegExp("^"+ge+"+|((?:^|[^\\\\])(?:\\\\.)*)"+ge+"+$","g");ce.contains=function(e,t){var n=t&&t.parentNode;return e===n||!(!n||1!==n …

JavaScript replace call uses a variable pattern line 2

2:4639… -]/g;function p(e,t){return t?"\0"===e?"\ufffd":e.slice(0,-1)+"\\"+e.charCodeAt(e.length-1).toString(16)+" ":"\\"+e}ce.escapeSelector=function(e){return(e+"").replace(f,p)};var ye=C,me=s;!function(){var e,b,w,o,a,T,r,C,d,i,k=me,S=ce.expando,E=0,n=0,s=W(),c=W(),u=W(),h=W(),l=function(e,t){retur …

No evidence locations were recorded for this file. Raw result