Suspicious 80% chrome Download

Half Time Daily 1.0.2

Search hijacking affiliate redirect

“When Sports Mode is on, your address bar searches are directed to platforms like ESPN, The Athletic (NYT), Sports Illustrated, and USA Toda…”

Builds URL query parametersChrome Web Store signed contents manifest
SHA-256b4ae59b2b4e95f5f6cf3339e384db1735f031a103b9a67f4c5e3ff26a90c17e5
URLhttps://clients2.google.com/service/update2/crx?response=redirect&prodversion=131.0&acceptformat=crx3&x=id%3Dcldncpmlmnmkmpbnelgabeefcjhjhjll%26installsource%3Dondemand%26uc
MaleculeO₂(IS)H₅(Br₄Cm₅Db₆Po₃U₄)Md₃(PaPm₃)

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.