General

  • Target

    lmjnegcaeklhafolokijcfjliaokphfk-8.1.6.0.crx

  • Size

    885KB

  • MD5

    fa157c09211ea42d54f268d86757a9a7

  • SHA1

    f00cc20e1226c07ef361f2c3a27964089c9fc73f

  • SHA256

    106102fb95aba79656aaab964dfefcdeea10177caf800e31e4f0a9d30113376c

  • SHA512

    734def39450c1ce0a9e0e9290b529dc3d39d9ec86ef2427197bd88c49d501975c6c8790474302acd4ef8702a30438da2b19128f588761ad1464bc296057f72c0

  • SSDEEP

    12288:zneY5d8dwELSXYDWmQ8W3+gykbpHRcccX3c7XRQ75VKwfen1ZNtbxOFDmmnskQSo:ThPtmkgUuXOhQlaRRxUmmshV

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in qr code identified

    Detects presence of HTTP links in QR codes.

Files

  • lmjnegcaeklhafolokijcfjliaokphfk-8.1.6.0.crx
    .zip
  • _locales/bg/messages.json
  • _locales/ca/messages.json
  • _locales/co/messages.json
  • _locales/cs/messages.json
  • _locales/da/messages.json
  • _locales/de/messages.json
  • _locales/dsb/messages.json
  • _locales/el/messages.json
  • _locales/en_US/messages.json
  • _locales/es/messages.json
  • _locales/fr/messages.json
  • _locales/hsb/messages.json
  • _locales/hu/messages.json
  • _locales/id/messages.json
  • _locales/is/messages.json
  • _locales/it/messages.json
  • _locales/ja/messages.json
  • _locales/ko/messages.json
  • _locales/nb/messages.json
  • _locales/nl/messages.json
  • _locales/pl/messages.json
  • _locales/pt_BR/messages.json
  • _locales/ro/messages.json
  • _locales/ru/messages.json
  • _locales/sk/messages.json
  • _locales/sl/messages.json
  • _locales/sv/messages.json
  • _locales/tr/messages.json
  • _locales/uk/messages.json
  • _locales/zh_CN/messages.json
  • _locales/zh_TW/messages.json
  • _metadata/verified_contents.json
  • background/main.js
    .js
  • content/about.html
    .html
  • content/about.js
    .js
  • content/alert.html
    .html
  • content/alert.js
    .js
  • content/blacklist-edit.html
    .html
  • content/blacklist-edit.js
    .js
  • content/blacklist-embed.html
    .html
  • content/blacklist-embed.js
    .js
  • content/coapp-shell.html
    .html
  • content/coapp-shell.js
  • content/content-libs.css
  • content/content-libs.js
    .js
  • content/convoutput.html
    .html
  • content/convoutput.js
    .js
  • content/convrules-edit.html
    .html
  • content/convrules-edit.js
    .js
  • content/copy-button.js
    .js
  • content/details.html
    .html
  • content/details.js
    .js
  • content/dlconv-embed.html
    .html
  • content/dlconv-embed.js
    .js
  • content/explain-qr.html
    .html
  • content/explain-qr.js
    .js
  • content/file-dialog.html
    .html
  • content/file-dialog.js
    .js
  • content/funding-content.js
    .js
  • content/funding.html
    .html
  • content/images/folder.png
    .png
  • content/images/icon-128-off.png
    .png
  • content/images/icon-128.png
    .png
  • content/images/icon-32-off.png
    .png
  • content/images/icon-32.png
    .png
  • content/images/icon-36-off.png
    .png
  • content/images/icon-36.png
    .png
  • content/images/icon-3dots-64.png
    .png
  • content/images/icon-40-off.png
    .png
  • content/images/icon-40.png
    .png
  • content/images/icon-48-off.png
    .png
  • content/images/icon-48.png
    .png
  • content/images/icon-about-64.png
    .png
  • content/images/icon-action-abort-64.png
    .png
  • content/images/icon-action-avplay-64.png
    .png
  • content/images/icon-action-blacklist-64.png
    .png
  • content/images/icon-action-convert-b-64.png
    .png
  • content/images/icon-action-copy-link-64.png
    .png
  • content/images/icon-action-delete-64.png
    .png
  • content/images/icon-action-details-64.png
    .png
  • content/images/icon-action-download-64.png
    .png
  • content/images/icon-action-download-convert-64.png
    .png
  • content/images/icon-action-open-dir-64.png
    .png
  • content/images/icon-action-pin-64.png
    .png
  • content/images/icon-action-play-64.png
    .png
  • content/images/icon-action-quick-download-64.png
    .png
  • content/images/icon-action-quick-download2-64.png
    .png
  • content/images/icon-action-quick-side-download-64.png
    .png
  • content/images/icon-action-side-download-64.png
    .png
  • content/images/icon-action-side-download-convert-64.png
    .png
  • content/images/icon-action-stoprecord-64.png
    .png
  • content/images/icon-chevron-left-64.png
    .png
  • content/images/icon-gototab-64.png
    .png
  • content/images/icon-lock-64.png
    .png
  • content/images/icon-merger-64.png
    .png
  • content/images/icon-photo-64.png
    .png
  • content/images/icon-settings-64.png
    .png
  • content/images/icon-sites-list-64.png
    .png
  • content/images/qr-video.png
    .png
    • http://goo.gl/ORrDGw

  • content/images/tbvws.png
    .png
  • content/info-panels.js
    .js
  • content/logdetails-embed.html
    .html
  • content/logdetails-embed.js
    .js
  • content/mp2t-worker.js
    .js
  • content/popup.html
    .html
  • content/popup.js
    .js
  • content/settings.html
    .html
  • content/settings.js
    .js
  • content/smartname-define.html
    .html
  • content/smartname-define.js
    .js
  • content/smartname-edit.html
    .html
  • content/smartname-edit.js
    .js
  • content/styles.css
  • content/translation.html
    .html
  • content/translation.js
    .js
  • content/variants-edit.html
    .html
  • content/variants-edit.js
    .js
  • content/workerfactory-inner.js
    .js
  • content/workerfactory.html
    .html
  • injected/downloadhelper.net.js
    .js
  • injected/gallery.js
    .js
  • injected/pagedata.js
    .js
  • injected/smartname.js
    .js
  • injected/tbvws-bulk.js
    .js
  • injected/tbvws.js
    .js
  • manifest.json