Suspicious ^85% chrome Download

cjkogieodfhbjknfojllgdpnhjceilka 1.0

Staged loader detected in archive

Browser clipboard write API+= string concatenation via charAt

SHA-256af5520cc556ff0a208c016e4b15502e619579d37387ece7aefbc6d9d536d093f

URLhttps://clients2.google.com/service/update2/crx?response=redirect&prodversion=131.0&acceptformat=crx3&x=id%3Dcjkogieodfhbjknfojllgdpnhjceilka%26installsource%3Dondemand%26uc

MaleculeO(C)H(Os)

Evidence

getElementById/querySelector DOM lookup lines 1–3

1const display = document.getElementById('password-display');
2const slider = document.getElementById('length-slider');
3const lenVal = document.getElementById('len-val');

Reads .value property of a DOM element lines 7–9

7slider.addEventListener('input', () => {
8  lenVal.textContent = slider.value;
9});

+= string concatenation via charAt lines 11–18

11function generatePassword() {
const length = slider.value;
const charset = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789!@#$%^&*()_+";
let retVal = "";
for (let i = 0; i < length; ++i) {
  retVal += charset.charAt(Math.floor(Math.random() * charset.length));
}
display.textContent = retVal;

Browser clipboard write API lines 24–31

const text = display.textContent;
if (text !== "Click Generate") {
  navigator.clipboard.writeText(text).then(() => {
    const originalText = copyBtn.textContent;
    copyBtn.textContent = "Copied!";
    setTimeout(() => { copyBtn.textContent = originalText; }, 1500);
  });
}

No evidence locations were recorded for this file. Raw result