Tracked campaign: Gameograf / Ovkas wallpaper adware

Our analysis confirmed the behaviour described in the threat library entry. Read the analysis and indicators →

Also reported by raw.githubusercontent.com

Chrome Web Store

Naruto: Dino Runner

ac1feb1c-83cf-5b54-90e6-9578ef6aacae | v1.2.0
37/ 100
LOW risk
Threat verdict
Do not install

Confirmed member of a tracked malicious supply-chain campaign.

Analysis record

Analysed
5 days ago
Version
v1.2.0
Artifact
SHA256 420…749
Source
Findings (non-IoC)

Evidence ledger

Ranked by severity · findings with a source location link to the code viewer

12 detail rows

YARA Rule Matches

7 rules
SeverityRuleHitsFilesMetadata
LOWLocalStorageShouldNotBeUsed 1
game.js
-
LOWNoUseWeakRandom 1
game.js
-
LOWpostinstall crypto operations 1
_metadata/verified_contents.json
-
LOWpostinstall environment access 3
popup.jsgame.jsREADME.txt
-
LOWpostinstall obfuscation 1
game.js
-
LOWpostinstall network communication 3
popup.jsgame.jscontent.js
-
LOWpostinstall system command 2
popup.htmlgame.js
-

Network Indicators

Concrete URLs, domains, IPs, emails, and hashes extracted from the analyzed artifact.

20 total

Loading network indicators

IoC detail rows are loaded outside the initial page render.

Publisher Evidence

Limited evidence

[email protected]

Publisher identity, store signals, distribution reach, and warning signals used for context. Treat this as supporting evidence, not a clean bill of health.

Chrome does not expose the same publisher verification data as IDE stores, so this score is deliberately conservative.

35
Noisy-finding weight
x1.00
Publisher domain
No domain
Missing
Store verification signal
Limited signal
Limited
Extension portfolio
22
Portfolio

12 evidence rows available.

Finding Categories

20
IoC Indicators

YARA Rules Matched

7 rules(12 hits)
LocalStorageShouldNotBeUsed NoUseWeakRandom postinstall crypto operations postinstall environment access postinstall obfuscation postinstall network communication postinstall system command

Requested Permissions

1 permission
storage
Low

Security Analysis Summary

Security Analysis Overview

Naruto: Dino Runner is a Chrome Web Store extension published by [email protected]. Version 1.2.0 has been analyzed by the Risky Plugins security platform, receiving a risk score of 37.11/100 (LOW risk) based on 32 security findings.

Risk Assessment

This extension presents low security risk. Some minor findings were detected, but nothing that would prevent typical usage. Reviewing the detailed findings below is recommended before use in sensitive environments.

Findings Breakdown

  • Medium: 20 finding(s)
  • Low: 12 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Naruto: Dino Runner is published by [email protected] on the Chrome Web Store marketplace.

Recommendation

Exercise caution with this extension. Review the detailed findings and ensure the requested permissions align with the extension's stated functionality before installation.

About This Extension

Naruto: Dino Runner!!! Get ready for a fun pixel-style running adventure with Naruto: Dino Runner! Play an exciting endless runner directly at the bottom of your Google homepage while keeping your familiar search experience. Run, jump over obstacles, escape the chasing red dinosaur, collect hearts, and challenge yourself to beat your highest score. As the game speeds up, your reflexes and timing become more important with every run! 🎮 Game Features 🕹️ Pixel-Style Running Adventure Enjoy classic arcade-inspired gameplay featuring Naruto, pixel-style visuals, obstacles, and a chasing dinosaur. 🏠 Google Homepage Integration Play directly at the bottom of the Google homepage without replacing the familiar search interface. ❤️ Three-Life System Start with three lives and do your best to survive. Collect hearts during gameplay to restore lost lives, up to a maximum of three. 🏆 Score Tracking and High Scores Watch your current score, beat your personal best, and check your saved results in the high-score leaderboard. ⏸️ Pause and Resume Pause the game whenever you need a break and resume when you're ready. 🎮 Easy Controls Click to jump, hold the mouse button to jump higher, or use the Space bar and Up Arrow key. Press P or use the in-game pause button to pause or resume. 🔌 Convenient Game Controls Click the extension icon in your Chrome toolbar to open the popup. Turn the game on or off whenever you want. Your preference is saved and applied to future Google homepage tabs. 🚀 How to Play Install the extension and open a new tab. Wait for the Google homepage to load. Start playing at the bottom of the page. Jump over obstacles, avoid the chasing dinosaur, collect hearts, and aim for a new high score! 🔒 Privacy and Score Storage Your game score history is stored locally in your browser. Your saved scores are not synchronized to the cloud. 🌐 Website Promotion This extension opens the gameograf.com website in a new tab when first installed and may open it again when the extension is uninstalled.

Frequently Asked Questions