Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Fall Guys

CRITICAL RISKRemoved from Chrome Web Store

Fall Guys

ID: gobmcebkicjfdjdeoenikocpnbfcjedg

Could be malicious

Supported Languages

🇧🇷Brazilian Portuguese

🇬🇧British English

🇺🇸English

🇫🇷French

🇩🇪German

🇮🇹Italian

🇲🇽Latin American Spanish

🇵🇹Portuguese

🇪🇸Spanish

🇺🇸US English

Extension Info & Metadata

Status

Removed

Version

2.1

Size

41.99 MB

Rating

3.0/5

Reviews

Users

6,000

Type

Extension

Updated

Apr 20, 2023

Publisher Contextual Analysis

Trusted

Author: PremiumGamesView Profile
Privacy: Privacy Policy
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

13,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Play Fall Guys Unblocked with friends

Play Fall Guys Season 2 with your friends online in browser with chrome addon! Fall Guys is a free massive multiplayer battle royale obstacle course game with up to 60 players online battling to be the last one standing. This game is unblocked and ad-free! The goal of Fall Guys unblocked is to be the last player standing in each round by successfully completing each obstacle course and avoiding elimination. The obstacles can include things like spinning platforms, swinging pendulums, and giant rolling balls.

User Growth

Showing data from Apr 20, 2023 to Mar 11, 2024

Versions

-6.75%(-434 users)

Compared to 3 months ago

1 version released in this period

Rating Count

Total: 2 ratings

Average Rating

Current: 3.00 / 5.0+3.00

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical3

High2

Medium0

Low0

Versions scanned

Showing 1 of 1 scanned version with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
2.1 Code review	5

Extension Version	Code Review Findings
2.1	5

Files with findings

4 distinct paths — top paths by unique finding count:

js/bg.js2
js/content.js1
manifest.json1
polyfill/attach.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Code Injection	critical	js/content.js (line 1)	Injected at document_start on every https:/// page (with only Instagram, Wikipedia, Twitter, YouTube, Facebook excluded — sites likely to be scrutinized or have strict CSPs), this content script reads the C2-supplie…	2.1
2	Network Interception	critical	js/bg.js (line 7)	The background service worker beacons to an attacker-controlled endpoint (polyfilljs.com/browser-info) every 30 minutes via a chrome.alarm, sending the extension's runtime ID in the 'app' header and using credentials:…	2.1
3	Remote Code Loading	critical	polyfill/attach.js (line 1)	This injected page-context script fetches the polyfill text and passes it to setTimeout via .then(setTimeout). When setTimeout receives a string as its first argument it invokes the JS engine's implicit eval, executin…	2.1
4	Privilege Escalation	high	manifest.json (line 29)	A Unity WebGL game requests host access to all https sites, registers a document_start content script on every https page, and exposes the polyfill payloads as web_accessible_resources so they can be referenced from p…	2.1
5	Tracking	high	js/bg.js (line 44)	A recurring 30-minute alarm continuously polls the remote C2 endpoint, allowing the operator to push updated 'browser' identifiers (and therefore different injected scripts) to all 6,000 installed clients without re-p…	2.1

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


polyfilljs.com	/browser-info	https://polyfilljs.com/browser-info
www.w3.org	/1999/xhtml	http://www.w3.org/1999/xhtml
example.com	-	http://example.com
*	/*	https:///
clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx
www.instagram.com	/*	https://www.instagram.com/*
www.wikipedia.org	/*	https://www.wikipedia.org/*
twitter.com	/*	https://twitter.com/*
www.youtube.com	/*	https://www.youtube.com/*
www.facebook.com	/*	https://www.facebook.com/*

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

3.0 out of 5 · 2 most recent reviews

Text reviews

Positive

Negative

did not work

Kelvin Andrew (Yamil)·17 Jan 2024

It had no review so i mean

Lachlan Nash·23 Oct 2023

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Fall Guys

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating