Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
ZIP · Main_HTML
…
4.56 MB
PSD · Main_PSD
e38228b157e3c356…
1.32 MB
PSD · Main_PSD
8ed52c8b75da8e63…
1.29 MB
PSD · Main_PSD
032945576541c06f…
1.28 MB
PSD · Main_PSD
4f2f36fb6bd9900c…
1.26 MB
PSD · Main_PSD
84d5246b86a99317…
1.26 MB
PSD · Main_PSD
171bfef4da791586…
1.18 MB
JS · Main_HTML/160x600/gwd_preview_160x600
22b031872e5979f2…
521.0 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
atob
Decodes base64 in the browser
Obfuscation6
Referenced hosts
10 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.