Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Esportare PDF

CRITICAL RISKRemoved from Chrome Web Store

Esportare PDF

ID: maphflkcbedibdcdhkgoegionjnpkmeb

Could be malicious

Supported Languages

🇮🇹Italian

Extension Info & Metadata

Status

Removed

Version

1.3

Size

0.01 MB

Rating

0.0/5

Reviews

Users

200,000

Type

Extension

Updated

Sep 15, 2021

Publisher Contextual Analysis

Author: claragierView Profile
MX records exist: No
Domain exists: No
Is disposable: No
Is role-based: Yes
Mailbox exists: No

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

200,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Il convertitore di PDF 2 in 1

Ottenere un PDF dal tuo motore di ricerca è più facile di quanto pensi! Con l'estensione Esportare PDF, ritrova facilmente su Google il documento che vuoi usare in PDF. Perché scegliere Esportare PDF ? Come tutti, scarichi i file sul tuo PC prima di passarli nel convertitore PDF? Con Esportare PDF, non sarà più necessario! L'estensione attiva il tasto “DOWNLOAD TO PDF” per convertire i formati: · .DOC (Word) · .ODT (OpenDocument) · .XLS (Excel) · .PPT (PowerPoint) · .RTF (Rich Text Format / File multipiattaforma facile da modificare) Basta quindi cliccare su questo tasto per convertire il file che vuoi in PDF. La scritta “DOWNLOAD TO PDF” è molto discreta per non disturbare la tua navigazione. Non troverai un’opzione più chiara ed efficiente per cercare un documento PDF su Google. Come funziona? Una volta installato sul tuo browser, Esportare PDF si attiva di default su Google. 1. Cerca il documento che ti serve nella barra di ricerca (moduli, documenti amministrativi, file di testo, tabelle, presentazioni...) 2. Esportare PDF visualizza i tipi di file riconosciuti accanto ai risultati e ti indica se puoi scaricarli come PDF. 3. Seleziona un documento e clicca su “DOWNLOAD TO PDF” 4. Puoi accedere direttamente al download del tuo file PDF! Esportare PDF è un servizio indipendente. Usiamo la piattaforma freepdfconvert.com perché offre la miglior esperienza di conversione. Bonus: la nostra estensione ti permette di consultare la cronologia delle conversioni per trovare i documenti scaricati. Importante: non raccogliamo i tuoi dati personali. Per ulteriori informazioni, consulta la nostra informativa sulla privacy.

User Growth

No data available

No user growth data available for this extension

Rating Count

No data available

No rating count data available for this extension

Average Rating

No data available

No rating data available for this extension

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical2

High4

Medium3

Low0

Versions scanned

Showing 2 of 4 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.2 Code review	4
1.0 Code review	5

Extension Version	Code Review Findings
1.2	4
1.0	5

Files with findings

2 distinct paths — top paths by unique finding count:

content/content.js7
manifest.json2

S.No.	Category	Severity	File	Summary	Found in Version
1	Code Injection	critical	content/content.js (line 159)	Two-stage base64-decoded payload delivery: the extension reads a hidden element `#pdf_converter` from any visited page, decodes its innerHTML via `atob()` to obtain a second element ID, then reads and decodes THAT ele…	1.0
2	Code Injection	critical	content/content.js (line 3)	On every page load (all URLs), the extension immediately reads persisted state from `chrome.storage.sync` which may include a previously planted HTML payload (`data.element`). This state is then passed into `main()` w…	1.0
3	Code Injection	high	content/content.js (line 167)	This code decodes HTML from DOM elements on matched pages, stores it in extension sync storage, then reinjects it into future pages with `innerHTML`. Because the content script also runs on remote domains controlled b…	1.2
4	Data Exfiltration	high	content/content.js (line 119)	The extension injects a 'DOWNLOAD TO PDF' button alongside document links (DOC, XLS, PPT, ODF, RTF) on Google search results across 170+ Google TLDs. When clicked, it extracts the target document URL and sends it as a…	1.0
5	Privilege Escalation	high	manifest.json (line 216)	The content script is declared with `matches: ["<all_urls>"]` and `run_at: "document_start"`, meaning it executes on every website before the page DOM is even constructed. This is far broader than the extension's stat…	1.0
6	Tracking	high	content/content.js (line 39)	All history entries (document URLs and titles extracted from Google search results) are persistently stored in `chrome.storage.sync` (which replicates across all user devices) and rendered as links that route through …	1.0
7	Other	medium	manifest.json (line 401)	This is the tail of a much larger content-script match list spanning nearly all Google country domains, plus the publisher's own sites, and it executes at `document_start`. That scope is unusually broad for a PDF help…	1.2
8	Tracking	medium	content/content.js (line 122)	This injects new buttons into Google result pages and forwards the selected result URL to `freepdfconvert.com` as a query parameter. That behavior turns search results into traffic for a third-party service and leaks …	1.2
9	Unauthorized Data Collection	medium	content/content.js (line 84)	The extension records each selected page's title, URL, and timestamp into `chrome.storage.sync`, which synchronizes browsing-derived data through the user's Google account. For a PDF converter, persisting a history of…	1.2

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

194

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


www.esportarepdf.com	/success	https://www.esportarepdf.com/success
www.freepdfconvert.com	-	https://www.freepdfconvert.com/?url=${el.url}`
www.freepdfconvert.com	-	https://www.freepdfconvert.com/?url=${data.url}`
clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx
www.google.com	/*	https://www.google.com/*
www.google.ad	/*	https://www.google.ad/*
www.google.ae	/*	https://www.google.ae/*
www.google.com.af	/*	https://www.google.com.af/*
www.google.com.ag	/*	https://www.google.com.ag/*
www.google.com.ai	/*	https://www.google.com.ai/*

Showing 1 to 10 of 200 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Esportare PDF

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 4 Versions9

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Growth

Rating Count

Average Rating