Our analysis confirmed the behaviour described in the threat library entry. Read the analysis and indicators →
Also reported by raw.githubusercontent.com
Guts Berserk Eclipse Grave Live Wallpaper
Marketplace listing not found
Our last marketplace check could not find this listing in Chrome Web Store. It may have been removed or delisted. Existing installs may still run, but verify the publisher and package source before installing or updating.
Confirmed member of a tracked malicious supply-chain campaign.
Analysis record
- Analysed
- 4 months ago
- Version
- v14.4.1
- Artifact
- SHA256 DBC…A67
- Source
- Findings (non-IoC)
Network indicator detail is shown below
585 aggregate findings were counted. 585 network indicators contributed to the aggregate finding count.
Network Indicators
Concrete URLs, domains, IPs, emails, and hashes extracted from the analyzed artifact.
Loading network indicators
IoC detail rows are loaded outside the initial page render.
Publisher Evidence
Limited evidencePublisher identity, store signals, distribution reach, and warning signals used for context. Treat this as supporting evidence, not a clean bill of health.
Chrome does not expose the same publisher verification data as IDE stores, so this score is deliberately conservative.
12 evidence rows available.
Finding Categories
Requested Permissions
1 permissionAI Security Report
AI Security Review
Evidence context: threat category none; evidence quality moderate.
The extension 'Guts Berserk Eclipse Grave Live Wallpaper' has been analyzed, and the findings suggest that it is likely a false positive. The majority of the findings are IoC detections, which are medium severity and related to domain detections. However, upon closer inspection, these domains appear to be benign and do not pose a significant threat. For example, the finding 'XIOC-DOMAIN-b.sn' detects the domain 'b.sn', which is a legitimate domain. Similarly, other findings such as 'XIOC-DOMAIN-0.mu' and 'XIOC-DOMAIN-re.bz' also detect benign domains. The absence of any malware signatures, obfuscation, or other high-severity findings further supports the conclusion that this extension is likely a false positive. One potential counterargument to this verdict could be that the extension's developer, '[email protected]', is unknown and may be attempting to hide malicious intent. However, without further evidence of malicious behavior, it is reasonable to conclude that this extension is likely a false positive. The extension's description and functionality also suggest that it is a legitimate live wallpaper extension, which further supports this conclusion.
Key Reasons
- Benign IoC detections
- No malware signatures
- No obfuscation or other high-severity findings
False Positive Considerations
- IoC extractor garbage
- XIOC extractor false positives
Reviewed 2026-06-06; recommended action: suppress false positive; model confidence 80%.
Source Code Not Available
Source code is not available for this version of the extension.
About This Extension
Frequently Asked Questions
Similar Extensions
Related extensions from the same publisher or marketplace
Floating Water Live Wallpaper
[email protected]
XXXTentacion Live Wallpaper
[email protected]
Zzz Starlight Billy Live Wallpaper
[email protected]
Senrai Maidens X War Thunder Live Wallpaper
[email protected]
Spider Man Minimalist HD Live Wallpaper
[email protected]
Zenitsu Yellow Demon Slayer Live Wallpaper Vsrexport
[email protected]