It is a very simple extension. No effort to hide the malicious URL.
See the source: https://crxcavator.io/source/mabdjppmcjpjploliggpbonahnjjlgk...
The malware link: hxxp://przekierowanie2.chrome_augustow.pl/?123-Microsoft525896
See the source: https://crxcavator.io/source/mabdjppmcjpjploliggpbonahnjjlgk...
The malware link: hxxp://przekierowanie2.chrome_augustow.pl/?123-Microsoft525896
https://chrome.google.com/webstore/detail/chrome-extension-s...
If you trust it :)
https://clients2.google.com/service/update2/crx?response=red...
Where [VERSION] is your chrome version and [ID] is the extensions ID. Hope this helps ;)
for those confused about the underscore in the tld