Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PSD · PSD
3acc405b7cf0d85d…
1.86 MB
PSD · PSD
c33aff60d1679966…
1.62 MB
PSD · PSD
c50b46fd4858a632…
1.52 MB
PSD · PSD
bd2272f6c6e45242…
1.32 MB
PSD · PSD
dce6eb04cae986d2…
1.08 MB
PSD · PSD
2ffbdc9018a62f0b…
771.5 KB
JS · Main_HTML/160x600/gwd_preview_160x600
019cfc00b579a527…
530.1 KB
JS · Main_HTML/180x150/gwd_preview_180x150
019cfc00b579a527…
530.1 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
atob
Decodes base64 in the browser
Obfuscation6
Referenced hosts
10 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.