Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PSD · PSD
…
2.30 MB
PSD · PSD
bc1b117cdc3ff8dc…
1.44 MB
PSD · PSD
acf91ec2db96d05b…
1.26 MB
PSD · PSD
b3dd76fb4b17daba…
1.23 MB
PSD · PSD
332bbd64bc531e04…
687.9 KB
PSD · PSD
b04ce447b61454fe…
631.9 KB
PSD · PSD
c10e209c064fb324…
549.3 KB
JS · Main_HTML/160x600/gwd_preview_160x600
96cfc10372b9df6c…
499.4 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
atob
Decodes base64 in the browser
Obfuscation6
Referenced hosts
11 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.