Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
ZIP · Main_HTML
…
2.10 MB
PSD · Main_PSD
664966f65daca4fd…
1.68 MB
PSD · Main_PSD
841748393b470daa…
1.51 MB
PSD · Main_PSD
457b1abe437ed08c…
1.50 MB
PSD · Main_PSD
a001744c2b243db1…
1.46 MB
PSD · Main_PSD
b2f5cc451d7ea3b5…
1.43 MB
PSD · Main_PSD
65e1ce0d63888ab0…
1.37 MB
JS · Main_HTML/160x600/gwd_preview_160x600
22b031872e5979f2…
521.0 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
atob
Decodes base64 in the browser
Obfuscation6
Referenced hosts
10 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.