Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PSD · PSD
…
2.36 MB
PSD · PSD
1362ef79b7b63861…
1.70 MB
PSD · PSD
db4e626d9f8d4295…
1.18 MB
PSD · PSD
5085b076c8cd5d0f…
1004.2 KB
PSD · PSD
7d3b0dc92a3d5588…
604.9 KB
PSD · PSD
41b1edd8498c202f…
581.5 KB
PSD · PSD
8b402dbfa316010e…
523.2 KB
JS · Main_HTML/160x600/gwd_preview_160x600
6961bc6215b0fa6a…
499.8 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
atob
Decodes base64 in the browser
Obfuscation6
Referenced hosts
12 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.