Tracked campaign: Gameograf / Ovkas wallpaper adware

Our analysis confirmed the behaviour described in the threat library entry. Read the analysis and indicators →

Also reported by raw.githubusercontent.com

Chrome Web Store Verified

Archer Girl Live Wallpaper

by [email protected] · 15 users
56ebe5fc-1443-5519-8dee-c585ce5114ab | v1.1.2
55/ 100
MEDIUM risk
+5 since v1.1.1
Threat verdict
Do not install

Confirmed member of a tracked malicious supply-chain campaign.

Analysis record

Analysed
1 weeks ago
Version
v1.1.2
Artifact
SHA256 E00…8AF
Source
Findings (non-IoC)

Evidence ledger

Ranked by severity · findings with a source location link to the code viewer

49 detail rows

YARA Rule Matches

10 rules
SeverityRuleHitsFilesMetadata
LOWpostinstall file manipulation 14
js/createStickyNote.jsjs/googletools.jsjs/calculator.js +11 more
-
LOWpostinstall crypto operations 3
js/jquery-3.7.1.min.jsjs/script.js_metadata/verified_contents.json
-
LOWpostinstall network communication 7
js/jquery-3.7.1.min.jsjs/countdownTimer.jsjs/chatgpt.js +4 more
-
LOWpostinstall obfuscation 4
js/sidePanel.jsjs/jquery-3.7.1.min.jsnewtab.html +1 more
-
LOWpostinstall system command 1
js/jquery-3.7.1.min.js
-
LOWpostinstall file download 5
js/sidePanel.jsjs/weather.jsjs/background.js +2 more
-
LOWSQLInjection 3
js/jquery-3.7.1.min.jsjs/todo.jsjs/script.js
-
LOWNoUseWeakRandom 2
js/jquery-3.7.1.min.jsjs/createStickyNote.js
-
LOWLocalStorageShouldNotBeUsed 3
js/createStickyNote.jsjs/todo.jsjs/script.js
-
LOWpostinstall persistence mechanism 1
js/background.js
-

Publisher Evidence

Limited evidence

[email protected]

Publisher identity, store signals, distribution reach, and warning signals used for context. Treat this as supporting evidence, not a clean bill of health.

Chrome does not expose the same publisher verification data as IDE stores, so this score is deliberately conservative.

51
Noisy-finding weight
x1.00
Publisher domain
gameograf.com
Observed
Store verification signal
Limited signal
Limited
Extension portfolio
1.6K
Portfolio

11 evidence rows available.

Finding Categories

6
Network
47
IoC Indicators

YARA Rules Matched

10 rules(43 hits)
postinstall file manipulation postinstall crypto operations postinstall network communication postinstall obfuscation postinstall system command postinstall file download SQLInjection NoUseWeakRandom LocalStorageShouldNotBeUsed postinstall persistence mechanism

Requested Permissions

4 permissions
search
Low
alarms
Low
storage
Low
https://api.gameograf.com/*
Low

Security Analysis Summary

Security Analysis Overview

Archer Girl Live Wallpaper is a Chrome Web Store extension published by [email protected]. Version 1.1.2 has been analyzed by the Risky Plugins security platform, receiving a risk score of 54.98/100 (MEDIUM risk) based on 96 security findings.

Risk Assessment

This extension presents moderate security risk. Several findings were detected that may warrant attention. Users should carefully review the permissions and findings before installation.

Findings Breakdown

  • Medium: 53 finding(s)
  • Low: 43 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Archer Girl Live Wallpaper is published by [email protected] on the Chrome Web Store marketplace. The extension has approximately 15 users.

Recommendation

Exercise caution with this extension. Review the detailed findings and ensure the requested permissions align with the extension's stated functionality before installation.

Chrome version history

Risk trend by version

2 analyzed versions. Each point is the latest successful scan for that version; failed zero-score scans are hidden. Dates are based on first seen by risky plugins.

Selected
55
Change since first
+5
Change from previous
+5
Versions:
First analyzed version
1.1.1
May 1, 2026
Risk range
50 to 55
Across analyzed versions
Latest analyzed version
1.1.2
Oct 16, 2026
Selected version
medium
Version
v1.1.2
1 weeks ago
Risk score
55
Findings
96
Change vs previous
+5

Pick any point on the chart to explore that version's code below.

About This Extension

Archer Girl Live Wallpaper captivates with its stunning digital artwork showcasing a skilled female archer in various dynamic poses. Set against enchanting fantasy landscapes, this live wallpaper offers high-resolution visuals perfect for any desktop or mobile device, allowing users to immerse themselves in a world of adventure and skill. With a striking theme that celebrates archery and strength, each new tab transforms into a vibrant showcase of action and artistry. Extension Features 🎞 Archer Girl Live Wallpaper Video – Dynamic HD looped live wallpaper. 🔗 Popular Shortcuts – Quick access to YouTube, Netflix, ChatGPT, Amazon, and more. 🞞 Custom Shortcuts – Add your favorite websites for instant access. 🔍 Search Bar – Works seamlessly with your default search engine. 🕒 Clock & Date – Minimalist, always-on time & date widget. 📝 Sticky Notes – Colorful, draggable notes on your new tab. 🔔 Notifications – Get alerts about new wallpapers & features. 📧 Google Apps – One-click access to Gmail, Maps, Drive, and more. 🤖 ChatGPT Widget – Ask questions and get instant AI-powered answers. ✅ To-Do List – Organize your daily tasks directly on your new tab. 📅 Calendar Tool – Keep track of important dates. 🧮 Calculator – Perform calculations without leaving Chrome. ⏳ Timer – Built-in countdown for productivity or breaks. 🛠 More Tools – Includes privacy settings, uninstall guide, and support. About Us Gameograf.com develops premium Chrome new tab themes designed for anime, gaming, cars, celebrities, sports, and more. Enjoy visually stunning and immersive browsing experiences with every extension. 🌐 Website: https://gameograf.com 📩 Contact: https://gameograf.com/contact-us/ 🔒 Privacy Policy: https://gameograf.com/privacy-policy/ 💬 Feedback: https://gameograf.com/feedback/ 📧 Email: [email protected] Affiliate Policy Notice This extension opens a new tab at https://gameograf.com. Some links on our website including Amazon links may contain affiliate tracking. If you purchase through these links, Gameograf.com may earn a small commission, helping us maintain and improve our free extensions.

Frequently Asked Questions