Open-source atomic malware analysis

Analyze another

Stop .ru, Google Search Highlighter

CRX
Verdict: BENIGN
SHA256: 7fc89fa7524b5204ab95926a98632c11d5a2e9ea01b3cb5d1f3334da6eede075
“Marks .ru domains and results containing Russian-only Cyrillic letters (ы, э, ё) on Google Search results pages.”
Mal-ecule
H₃(CmU)Md
Size 15.7 KB download
First seen 10 days ago
Analyzed 4 days ago
Package pkg:chrome-extension/gbbbkekocchojogiicbdflikgcepbgdi
Installs 53
Ecosystem chrome
Source clients2.google.com

Loading file contents…

Loading traits…

Identity

SHA-256 7fc89fa7524b5204ab95926a98632c11d5a2e9ea01b3cb5d1f3334da6eede075
Canonical SHA-256 19143054280028f58f9ba13badd7d7f77f4db87571cae367313154bd136b2ca1
Filename gbbbkekocchojogiicbdflikgcepbgdi.crx
Package gbbbkekocchojogiicbdflikgcepbgdi
PURL pkg:chrome-extension/gbbbkekocchojogiicbdflikgcepbgdi

Origin

Source forager
Feed chromewebstore.google.com
Ecosystem chrome
Domain google.com
URL https://clients2.google.com/service/update2/crx?response=redirect&prodversion=131.0&acceptformat=crx3&x=id%3Dgbbbkekocchojogiicbdflikgcepbgdi%26installsource%3Dondemand%26uc

Timeline

First seen 26 Jul 2026 13:38 UTC
First analyzed 1 Aug 2026 22:16 UTC
Last analyzed 1 Aug 2026 22:16 UTC
Last updated 1 Aug 2026 22:16 UTC

Labeling

Label unknown
Label source forager
Traits version 0ea32