Suspicious 80% chrome Download

Chrome Web Store

Browser hijacker extension

“Add new features to your browser and personalize your browsing experience.”

Default search and homepage takeover pairSearch override brands itself as its destination
SHA-256fe9b5549ca6b72efe3371145896da043652e31f94baa63143e21add5a16dbded
URLhttps://clients2.google.com/service/update2/crx?response=redirect&prodversion=131.0&acceptformat=crx3&x=id%3Ddafaeffkjlknkjdcdalddcjggdngomih%26installsource%3Dondemand%26uc
MaleculeO₂(IS)H(Db)Md₂(Pm)

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.