AI
Exfiltrates WhatsApp session credentials
Local reference
Suspicious dependency
Inferred
Mal-ecule
O₂(CaEu)H₆(Cm₄Cr₂Db₆PoU₂)Md₂
Loading file contents…
Loading traits…
Identity
| SHA-256 | 227b2f0ee933296013df5db72f4053df16ac635fc211024f7a48f143fb2abf44 |
|---|---|
| Canonical SHA-256 | 030e83a63e18857a6ad0f73f25cb04b5672580ad94d3b2fdca6801ae32fc68b1 |
| Filename | kfpjopggikbnmjpgcmeokabmpdnkdajb.crx |
| Package | kfpjopggikbnmjpgcmeokabmpdnkdajb |
| PURL | pkg:chrome-extension/kfpjopggikbnmjpgcmeokabmpdnkdajb |
Origin
| Source | forager |
|---|---|
| Feed | chromewebstore.google.com |
| Ecosystem | chrome |
| Domain | google.com |
| URL | https://clients2.google.com/service/update2/crx?response=redirect&prodversion=131.0&acceptformat=crx3&x=id%3Dkfpjopggikbnmjpgcmeokabmpdnkdajb%26installsource%3Dondemand%26uc |
Timeline
| First seen | 3 Aug 2026 22:56 UTC |
|---|---|
| First analyzed | 3 Aug 2026 23:23 UTC |
| Last analyzed | 4 Aug 2026 02:18 UTC |
| Last updated | 4 Aug 2026 02:16 UTC |
Labeling
| Label | bad |
|---|---|
| Label source | cyclotron:new |
| Traits version | 95b20 |
Not seeing what you expected? Let us know