packs: Update unwanted-chrome-extensions.conf (#4332)

osquery · May 1, 2018 · 5e1a923 · 5e1a923
1 parent 97dae5a
commit 5e1a923
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/packs/unwanted-chrome-extensions.conf b/packs/unwanted-chrome-extensions.conf
@@ -50,6 +50,11 @@
       "query": "SELECT * FROM users JOIN chrome_extensions USING (uid) WHERE identifier='emeokgokialpjadjaoeiplmnkjoaegng';",
       "interval": 3600,
       "description": "(https://www.bleepingcomputer.com/news/security/eight-chrome-extensions-hijacked-to-deliver-malicious-code-to-4-8-million-users/)"
+    },
+    "MacOSInstallCore": {
+      "query": "SELECT * FROM users JOIN chrome_extensions USING (uid) WHERE identifier='hinehnlkkmckjblijjpbpamhljokoohh';",
+      "interval": 3600,
+      "description": "(https://www.virustotal.com/#/file/5cab0821f597100dc1170bfef704d8cebaf67743e9d509e83b0b208eb630d992/detection)"
     }
   }
 }