Benign chrome Download

obkfdmodhnpoennanbmkokcgcadbcnbh

Legitimate game extension code

Renders animated canvas graphicsBrowser storage getItem call

SHA-2568ef4813ab529b2dc86a47552194aaf118cb14e68df7ec2a96f30dc3838eba9bd

URLhttps://clients2.google.com/service/update2/crx?response=redirect&prodversion=131.0&acceptformat=crx3&x=id%3Dobkfdmodhnpoennanbmkokcgcadbcnbh%26installsource%3Dondemand%26uc

MaleculeH₂(FU)

Evidence

Renders animated canvas graphics popup.js · lines 1–5

1document.addEventListener('DOMContentLoaded', () => {
  const canvas = document.getElementById('gameCanvas');
  const ctx = canvas.getContext('2d');

    // Game state

Browser localStorage access popup.js · lines 147–151

  // Load highscore from local storage
  function loadHighscore() {
      const savedHighscore = localStorage.getItem('highscore');
      if (savedHighscore) {
          highscore = parseInt(savedHighscore, 10);

Persists data in browser storage popup.js · lines 156–165

  // Save highscore to local storage
  function saveHighscore() {
      localStorage.setItem('highscore', highscore);
  }

⋯5 lines

Chrome extension store metadata quality manifest.json · lines 1–2

1{
2"update_url": "https://clients2.google.com/service/update2/crx",

Chrome extension has basic metadata manifest.json · lines 4–16

"manifest_version": 3,
"name": "Quick Blitz",
"version": "1.1",
"description": "Offline game to play when bored",
"icons": {
  "48": "logo.png",
  "128": "logo.png"
},
"action": {
  "default_popup": "index.html",
  "default_icon": {
    "48": "logo.png"
  }

No evidence locations were recorded for this file. Raw result