Trojan.Chromext

By Domesticus in Trojans

Threat Scorecard

Threat Level:	90 % (High)
Infected Computers:	4

First Seen:	December 4, 2012
Last Seen:	July 11, 2022
OS(es) Affected:	Windows

Trojan.Chromext is a Trojan that steals private details and opens a back door on the affected PC. Trojan.Chromext is distributed and installed as a Chrome browser extension. While being run, Trojan.Chromext may drop numerous harmful files from the remote server. Trojan.Chromext then aims at stealing user names and passwords entered into the Chrome browser. Trojan.Chromext also strives to steal cookies stored in the Internet browser. Trojan.Chromext also collects the affected computer owner's sensitive details and transfers it to a remote server.

File System Details

Trojan.Chromext may create the following file(s):

Expand All | Collapse All

#	File Name	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	%UserProfile%\Application Data\Google\Chrome\User Data\Default\Extensions\fmphgefonmnoadmehmejfjnbmgoolboc\[EXTENSION VERSION]\pack_extension.bat
Name: %UserProfile%\Application Data\Google\Chrome\User Data\Default\Extensions\fmphgefonmnoadmehmejfjnbmgoolboc\[EXTENSION VERSION]\pack_extension.bat Type: Batch file Group: Malware file
2.	%UserProfile%\Application Data\Google\Chrome\User Data\Default\Extensions\fmphgefonmnoadmehmejfjnbmgoolboc\[EXTENSION VERSION]\pack_extension - Copy.bat
Name: %UserProfile%\Application Data\Google\Chrome\User Data\Default\Extensions\fmphgefonmnoadmehmejfjnbmgoolboc\[EXTENSION VERSION]\pack_extension - Copy.bat Type: Batch file Group: Malware file
3.	%UserProfile%\Application Data\Google\Chrome\User Data\Default\Extensions\fmphgefonmnoadmehmejfjnbmgoolboc\[EXTENSION VERSION]\make.bat
Name: %UserProfile%\Application Data\Google\Chrome\User Data\Default\Extensions\fmphgefonmnoadmehmejfjnbmgoolboc\[EXTENSION VERSION]\make.bat Type: Batch file Group: Malware file
4.	%UserProfile%\Application Data\Google\Chrome\User Data\Default\Extensions\fmphgefonmnoadmehmejfjnbmgoolboc\[EXTENSION VERSION]\TODO
Name: %UserProfile%\Application Data\Google\Chrome\User Data\Default\Extensions\fmphgefonmnoadmehmejfjnbmgoolboc\[EXTENSION VERSION]\TODO Group: Malware file
5.	%UserProfile%\Application Data\Google\Chrome\User Data\Default\Extensions\fmphgefonmnoadmehmejfjnbmgoolboc\[EXTENSION VERSION]\Makefile
Name: %UserProfile%\Application Data\Google\Chrome\User Data\Default\Extensions\fmphgefonmnoadmehmejfjnbmgoolboc\[EXTENSION VERSION]\Makefile Group: Malware file
6.	%UserProfile%\Application Data\Google\Chrome\User Data\Default\Extensions\fmphgefonmnoadmehmejfjnbmgoolboc\[EXTENSION VERSION]\jquery.min.js
Name: %UserProfile%\Application Data\Google\Chrome\User Data\Default\Extensions\fmphgefonmnoadmehmejfjnbmgoolboc\[EXTENSION VERSION]\jquery.min.js Type: JavaScript file Group: Malware file
7.	%UserProfile%\Application Data\Google\Chrome\User Data\Default\Extensions\fmphgefonmnoadmehmejfjnbmgoolboc\[EXTENSION VERSION]\sha1_pwcrack_64.o
Name: %UserProfile%\Application Data\Google\Chrome\User Data\Default\Extensions\fmphgefonmnoadmehmejfjnbmgoolboc\[EXTENSION VERSION]\sha1_pwcrack_64.o Group: Malware file
8.	%UserProfile%\Application Data\Google\Chrome\User Data\Default\Extensions\fmphgefonmnoadmehmejfjnbmgoolboc\[EXTENSION VERSION]\background.html
Name: %UserProfile%\Application Data\Google\Chrome\User Data\Default\Extensions\fmphgefonmnoadmehmejfjnbmgoolboc\[EXTENSION VERSION]\background.html Group: Malware file
9.	%UserProfile%\Application Data\Google\Chrome\User Data\Default\Extensions\fmphgefonmnoadmehmejfjnbmgoolboc\[EXTENSION VERSION]\sha1_pwcrack_x86_32.nexe
Name: %UserProfile%\Application Data\Google\Chrome\User Data\Default\Extensions\fmphgefonmnoadmehmejfjnbmgoolboc\[EXTENSION VERSION]\sha1_pwcrack_x86_32.nexe Group: Malware file
10.	%UserProfile%\Application Data\Google\Chrome\User Data\Default\Extensions\fmphgefonmnoadmehmejfjnbmgoolboc\[EXTENSION VERSION]\sha1_pwcrack_x86_64.nexe
Name: %UserProfile%\Application Data\Google\Chrome\User Data\Default\Extensions\fmphgefonmnoadmehmejfjnbmgoolboc\[EXTENSION VERSION]\sha1_pwcrack_x86_64.nexe Group: Malware file
11.	%UserProfile%\Application Data\Google\Chrome\User Data\Default\Extensions\fmphgefonmnoadmehmejfjnbmgoolboc\[EXTENSION VERSION]\LICENSE
Name: %UserProfile%\Application Data\Google\Chrome\User Data\Default\Extensions\fmphgefonmnoadmehmejfjnbmgoolboc\[EXTENSION VERSION]\LICENSE Group: Malware file
12.	%UserProfile%\Application Data\Google\Chrome\User Data\Default\Extensions\fmphgefonmnoadmehmejfjnbmgoolboc\[EXTENSION VERSION]\icon.png
Name: %UserProfile%\Application Data\Google\Chrome\User Data\Default\Extensions\fmphgefonmnoadmehmejfjnbmgoolboc\[EXTENSION VERSION]\icon.png Group: Malware file
13.	%UserProfile%\Application Data\Google\Chrome\User Data\Default\Extensions\fmphgefonmnoadmehmejfjnbmgoolboc\[EXTENSION VERSION]\main.js
Name: %UserProfile%\Application Data\Google\Chrome\User Data\Default\Extensions\fmphgefonmnoadmehmejfjnbmgoolboc\[EXTENSION VERSION]\main.js Type: JavaScript file Group: Malware file
14.	%UserProfile%\Application Data\Google\Chrome\User Data\Default\Extensions\fmphgefonmnoadmehmejfjnbmgoolboc\[EXTENSION VERSION]\sha1_pwcrack.nmf
Name: %UserProfile%\Application Data\Google\Chrome\User Data\Default\Extensions\fmphgefonmnoadmehmejfjnbmgoolboc\[EXTENSION VERSION]\sha1_pwcrack.nmf Group: Malware file
15.	%UserProfile%\Application Data\Google\Chrome\User Data\Default\Extensions\fmphgefonmnoadmehmejfjnbmgoolboc\[EXTENSION VERSION]\manifest.json
Name: %UserProfile%\Application Data\Google\Chrome\User Data\Default\Extensions\fmphgefonmnoadmehmejfjnbmgoolboc\[EXTENSION VERSION]\manifest.json Group: Malware file
16.	%UserProfile%\Application Data\Google\Chrome\User Data\Default\Extensions\fmphgefonmnoadmehmejfjnbmgoolboc\[EXTENSION VERSION]\sha1_pwcrack_32.o
Name: %UserProfile%\Application Data\Google\Chrome\User Data\Default\Extensions\fmphgefonmnoadmehmejfjnbmgoolboc\[EXTENSION VERSION]\sha1_pwcrack_32.o Group: Malware file
17.	%UserProfile%\Application Data\Google\Chrome\User Data\Default\Extensions\fmphgefonmnoadmehmejfjnbmgoolboc\[EXTENSION VERSION]\sha1.c
Name: %UserProfile%\Application Data\Google\Chrome\User Data\Default\Extensions\fmphgefonmnoadmehmejfjnbmgoolboc\[EXTENSION VERSION]\sha1.c Group: Malware file
18.	%UserProfile%\Application Data\Google\Chrome\User Data\Default\Extensions\fmphgefonmnoadmehmejfjnbmgoolboc\[EXTENSION VERSION]\sha1.h
Name: %UserProfile%\Application Data\Google\Chrome\User Data\Default\Extensions\fmphgefonmnoadmehmejfjnbmgoolboc\[EXTENSION VERSION]\sha1.h Group: Malware file
19.	%UserProfile%\Application Data\Google\Chrome\User Data\Default\Extensions\fmphgefonmnoadmehmejfjnbmgoolboc\[EXTENSION VERSION]\INSTALL
Name: %UserProfile%\Application Data\Google\Chrome\User Data\Default\Extensions\fmphgefonmnoadmehmejfjnbmgoolboc\[EXTENSION VERSION]\INSTALL Group: Malware file
20.	%UserProfile%\Application Data\Google\Chrome\User Data\Default\Extensions\fmphgefonmnoadmehmejfjnbmgoolboc\[EXTENSION VERSION]\background.js
Name: %UserProfile%\Application Data\Google\Chrome\User Data\Default\Extensions\fmphgefonmnoadmehmejfjnbmgoolboc\[EXTENSION VERSION]\background.js Type: JavaScript file Group: Malware file
21.	%UserProfile%\Application Data\Google\Chrome\User Data\Default\Extensions\fmphgefonmnoadmehmejfjnbmgoolboc\[EXTENSION VERSION]\sha1_pwcrack.cc
Name: %UserProfile%\Application Data\Google\Chrome\User Data\Default\Extensions\fmphgefonmnoadmehmejfjnbmgoolboc\[EXTENSION VERSION]\sha1_pwcrack.cc Group: Malware file

Enigma Software Group Prevails Over Malwarebytes at the Ninth Circuit

Search

Change Region

Trojan.Chromext

Threat Scorecard

EnigmaSoft Threat Scorecard

File System Details

Submit Comment

Trending

Rzfu Ransomware

'YouPorn' Email Scam

Rzkd Ransomware

Most Viewed

Is Lookmovie.io Safe?

How To Fix 'Printer Driver is Unavailable' Error

Discord Shows Black Screen when Sharing Screen