Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
ZIP · Main_HTML
…
6.28 MB
PSD · Main_PSD
46db0403a03b37dc…
1.04 MB
PSD · Main_PSD
44e513b9613fc4e7…
1.02 MB
PSD · Main_PSD
4f4455be4322893a…
1018.7 KB
PSD · Main_PSD
67962f699d271f6d…
895.5 KB
PSD · Main_PSD
8bf1404f615efdfc…
812.9 KB
PSD · Main_PSD
a8c642acf1732eed…
651.4 KB
JS · Main_HTML/160x600/gwd_preview_160x600
22b031872e5979f2…
521.0 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
atob
Decodes base64 in the browser
Obfuscation6
Referenced hosts
9 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.