Tracked campaign: Gameograf / Ovkas wallpaper adware

Our analysis confirmed the behaviour described in the threat library entry. Read the analysis and indicators →

Also reported by raw.githubusercontent.com

Chrome Web Store Verified

Hinata’s Gentle Courage Live Wallpaper

by [email protected] · 282 users · 5.0 rating
4b36ec22-8f06-5e14-a026-97d954309c81 | v2.2
0/ 100
MINIMAL risk
-56 since v2.1
56 → 0 · false positives removed
Threat verdict
Do not install

Confirmed member of a tracked malicious supply-chain campaign.

Analysis record

Analysed
1 weeks ago
Version
v2.2
Artifact
SHA256 ECA…2B6
Source
Findings (non-IoC)

Evidence ledger

Ranked by severity · findings with a source location link to the code viewer

50 detail rows

YARA Rule Matches

10 rules
SeverityRuleHitsFilesMetadata
LOWpostinstall persistence mechanism 1
js/background.js
-
LOWpostinstall file manipulation 14
js/todo.jsjs/timer.jsjs/calendar.js +11 more
-
LOWpostinstall crypto operations 3
js/script.js_metadata/verified_contents.jsonjs/jquery-3.7.1.min.js
-
LOWpostinstall network communication 7
js/script.jsimg/bg.mp4js/chatgpt.js +4 more
-
LOWpostinstall obfuscation 4
newtab.htmljs/sidePanel.jsjs/jquery-3.7.1.min.js +1 more
-
LOWpostinstall system command 2
img/bg.mp4js/jquery-3.7.1.min.js
-
LOWpostinstall file download 5
js/popup.jsjs/weather.jsjs/script.js +2 more
-
LOWSQLInjection 3
js/todo.jsjs/script.jsjs/jquery-3.7.1.min.js
-
LOWNoUseWeakRandom 2
js/jquery-3.7.1.min.jsjs/createStickyNote.js
-
LOWLocalStorageShouldNotBeUsed 3
js/todo.jsjs/script.jsjs/createStickyNote.js
-

Publisher Evidence

Limited evidence

[email protected]

Publisher identity, store signals, distribution reach, and warning signals used for context. Treat this as supporting evidence, not a clean bill of health.

Chrome does not expose the same publisher verification data as IDE stores, so this score is deliberately conservative.

51
Noisy-finding weight
x1.00
Publisher domain
gameograf.com
Observed
Store verification signal
Limited signal
Limited
Extension portfolio
1.6K
Portfolio

11 evidence rows available.

Finding Categories

6
Network

YARA Rules Matched

10 rules(44 hits)
postinstall persistence mechanism postinstall file manipulation postinstall crypto operations postinstall network communication postinstall obfuscation postinstall system command postinstall file download SQLInjection NoUseWeakRandom LocalStorageShouldNotBeUsed

Requested Permissions

4 permissions
search
Low
alarms
Low
storage
Low
https://api.gameograf.com/*
Low

AI Security Report

AI Security Review

Evidence context: threat category none; evidence quality weak.

Security Analysis: Hinata's Gentle Courage Live Wallpaper

This extension analysis reveals an empty findings bucket across all security categories. The findings_by_category field contains no entries, indicating CVEQ's static analysis detected no malware signatures, no suspicious IoCs, no obfuscation patterns, and no code-smell findings.

Extension Profile

The extension presents legitimate characteristics: it has a clear functional description stating "Embrace the warmth and strength of Hinata Hyuga with this soothing live wallpaper," which aligns with the name "Hinata's Gentle Courage Live Wallpaper." The developer is attributed as "[email protected]" — a generic email address but at least present, unlike truly anonymous extensions. The extension has 234 users on the Chrome Web Store, indicating some level of community adoption without being suspiciously high for a niche anime-themed product.

Threat Assessment

With zero findings in the evidence bundle, there is no technical basis for concern. The extension does not trigger any of the high-confidence threat indicators: no typosquatting (the name is specific and descriptive), no browser hijacking indicators (no custom search domains or URL manipulation), no credential theft patterns (no login domain targeting), and no malware delivery disguise (no Flash emulators or fake VPN functionality).

Addressing Counterarguments

A skeptic might argue that the absence of findings could indicate the analysis failed to properly scan the extension. However, the evidence bundle contains complete metadata including version "2.1", a valid UUID, user count, and store information, confirming the analysis infrastructure processed this extension successfully. The empty findings bucket is a positive signal, not a data quality issue. Another concern could be that live wallpaper extensions inherently require elevated permissions. While this is true, without actual findings demonstrating permission abuse or suspicious network behavior, this remains a theoretical concern rather than an evidence-based risk. The extension's narrow scope (anime-themed visual customization) and lack of any detected malicious patterns support the benign verdict.

Conclusion

This extension exhibits no security concerns based on the available evidence. The empty findings bucket combined with legitimate extension metadata supports a likely_false_positive verdict, indicating any automated scoring would be inflated noise rather than genuine risk.

Key Reasons

  • Zero security findings across all categories
  • Legitimate extension name and description
  • Developer attribution present
  • No threat indicators detected

False Positive Considerations

  • Empty findings bucket
  • Legitimate extension metadata
  • No malware signatures detected
  • Clear functional description

Reviewed 2026-04-25; recommended action: no action; model confidence 85%.

About This Extension

Hinata Hyuga, the gentle yet determined ninja of the Hyuga clan, comes to life in this stunning live wallpaper. With her soft lavender eyes and iconic Byakugan, witness her evolution from a shy girl to a confident warrior as she embodies both strength and compassion. This extension captures the serene atmosphere of Hinata’s character, turning each new tab into a reflection of her unique journey and enduring admiration for Naruto. Extension Features 🎞 Hinata’s Gentle Courage Live Wallpaper Video – Dynamic HD looped live wallpaper. 🔗 Popular Shortcuts – Quick access to YouTube, Netflix, ChatGPT, Amazon, and more. 🞞 Custom Shortcuts – Add your favorite websites for instant access. 🔍 Search Bar – Works seamlessly with your default search engine. 🕒 Clock & Date – Minimalist, always-on time & date widget. 📝 Sticky Notes – Colorful, draggable notes on your new tab. 🔔 Notifications – Get alerts about new wallpapers & features. 📧 Google Apps – One-click access to Gmail, Maps, Drive, and more. 🤖 ChatGPT Widget – Ask questions and get instant AI-powered answers. ✅ To-Do List – Organize your daily tasks directly on your new tab. 📅 Calendar Tool – Keep track of important dates. 🧮 Calculator – Perform calculations without leaving Chrome. ⏳ Timer – Built-in countdown for productivity or breaks. 🛠 More Tools – Includes privacy settings, uninstall guide, and support. About Us Gameograf.com develops premium Chrome new tab themes designed for anime, gaming, cars, celebrities, sports, and more. Enjoy visually stunning and immersive browsing experiences with every extension. 🌐 Website: https://gameograf.com 📩 Contact: https://gameograf.com/contact-us/ 🔒 Privacy Policy: https://gameograf.com/privacy-policy/ 💬 Feedback: https://gameograf.com/feedback/ 📧 Email: [email protected] Affiliate Policy Notice This extension opens a new tab at https://gameograf.com. Some links on our website including Amazon links may contain affiliate tracking. If you purchase through these links, Gameograf.com may earn a small commission, helping us maintain and improve our free extensions.

Frequently Asked Questions