Tracked campaign: Gameograf / Ovkas wallpaper adware

Our analysis confirmed the behaviour described in the threat library entry. Read the analysis and indicators →

Also reported by raw.githubusercontent.com

Chrome Web Store Verified

Demon Slayer Cursor - Custom Cursor for Chrome

by [email protected] · 280 users
8f24e0b9-a840-593c-9808-bd1a89798a93 | v1.0.1
49/ 100
MEDIUM risk
Threat verdict
Do not install

Confirmed member of a tracked malicious supply-chain campaign.

Analysis record

Analysed
3 months ago
Version
v1.0.1
Artifact
SHA256 233…C51
Source
Findings (non-IoC)

Evidence ledger

Ranked by severity · findings with a source location link to the code viewer

3 detail rows

Network Indicators

Concrete URLs, domains, IPs, emails, and hashes extracted from the analyzed artifact.

26 total

Loading network indicators

IoC detail rows are loaded outside the initial page render.

Publisher Evidence

Limited evidence

[email protected]

Publisher identity, store signals, distribution reach, and warning signals used for context. Treat this as supporting evidence, not a clean bill of health.

Chrome does not expose the same publisher verification data as IDE stores, so this score is deliberately conservative.

51
Noisy-finding weight
x1.00
Publisher domain
gameograf.com
Observed
Store verification signal
Limited signal
Limited
Extension portfolio
1.6K
Portfolio

11 evidence rows available.

Finding Categories

3
Network
26
IoC Indicators

Requested Permissions

4 permissions
*://*/*
Dangerous
storage
Low
unlimitedStorage
Low
scripting
Low

Security Analysis Summary

Security Analysis Overview

Demon Slayer Cursor - Custom Cursor for Chrome is a Chrome Web Store extension published by [email protected]. Version 1.0.1 has been analyzed by the Risky Plugins security platform, receiving a risk score of 49.08/100 (MEDIUM risk) based on 29 security findings.

Risk Assessment

This extension presents moderate security risk. Several findings were detected that may warrant attention. Users should carefully review the permissions and findings before installation.

Findings Breakdown

  • Medium: 29 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Demon Slayer Cursor - Custom Cursor for Chrome is published by [email protected] on the Chrome Web Store marketplace. The extension has approximately 280 users.

Recommendation

Exercise caution with this extension. Review the detailed findings and ensure the requested permissions align with the extension's stated functionality before installation.

About This Extension

Whether you love Tanjiro’s calm determination or Nezuko’s fierce charm, this cursor pack brings the Demon Slayer universe to life right on your screen — without slowing down your browsing. 🔹 Features: 🖱️ Custom Cursors – Unique pointer and click icons inspired by Demon Slayer characters. ⚡ Smooth Experience – Lightweight design for seamless browser performance. 🎨 HD Graphics – Crisp, high-quality visuals that look great on any screen. 🛠️ Easy Setup – Activate or deactivate with just one click. 🌐 Universal Support – Works across all Chrome tabs and most websites. About Us Gameograf.com crafts Chrome extensions to personalize your browsing with anime, manga, gaming, cars, celebrities, K-pop, and more. From live wallpapers to stylish cursors, we help you turn your browser into something uniquely yours. 🌐 https://gameograf.com 📩 https://gameograf.com/contact-us/ 🔒 https://gameograf.com/privacy-policy/ 💬 https://gameograf.com/feedback/ 📧 [email protected] Google Chrome Affiliate Policy Disclosure This extension may open https://gameograf.com in new tabs to showcase similar content. Some links may include affiliate referrals, always displayed transparently and requiring user consent.

Frequently Asked Questions