Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
ZIP · Main_HTML
…
2.16 MB
PSD · Main_PSD
c344458d4856c267…
1.46 MB
PSD · Main_PSD
caae73c692894c4d…
1.40 MB
PSD · Main_PSD
90b45243af07415c…
1.33 MB
PSD · Main_PSD
cb22ad6ef011c506…
1.28 MB
PSD · Main_PSD
0ad924155981f036…
1.27 MB
PSD · Main_PSD
a85055dc61937f54…
1.25 MB
JS · Main_HTML/160x600/gwd_preview_160x600
22b031872e5979f2…
521.0 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
atob
Decodes base64 in the browser
Obfuscation6
Referenced hosts
10 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.