Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Flash Video Downloader

CRITICAL RISKRemoved from Chrome Web Store

Flash Video Downloader

ID: ionpbgeeliajehajombdeflogfpgmmel

Could be malicious

Supported Languages

🇧🇩Bengali

🇧🇷Brazilian Portuguese

🇧🇬Bulgarian

🇪🇸Catalan

🇨🇳Chinese (Simplified)

🇹🇼Chinese (Traditional)

🇭🇷Croatian

🇨🇿Czech

🇩🇰Danish

🇳🇱Dutch

🇺🇸English

🇪🇪Estonian

🇫🇮Finnish

🇫🇷French

🇩🇪German

🇬🇷Greek

🇮🇳Gujarati

🇮🇳Hindi

🇭🇺Hungarian

🇮🇩Indonesian

🇮🇹Italian

🇯🇵Japanese

🇰🇷Korean

🇲🇽Latin American Spanish

🇱🇻Latvian

🇱🇹Lithuanian

🇲🇾Malay

🇮🇳Malayalam

🇮🇳Marathi

🇳🇴Norwegian

🇵🇱Polish

🇵🇹Portuguese

🇷🇴Romanian

🇷🇺Russian

🇷🇸Serbian

🇸🇰Slovak

🇸🇮Slovenian

🇪🇸Spanish

🇸🇪Swedish

🇮🇳Tamil

🇮🇳Telugu

🇹🇭Thai

🇹🇷Turkish

🇺🇦Ukrainian

🇺🇸US English

🇻🇳Vietnamese

Extension Info & Metadata

Status

Removed

Version

2.1

Size

0.54 MB

Rating

2.0/5

Reviews

Users

242,165

Type

Extension

Updated

Aug 28, 2022

Publisher Contextual Analysis

Author: brachovskitimView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

247,414

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Popular Video Downloader. Downloads most popular media formats, flash videos.

GREAT UPDATE - IT WORKS AGAIN, NOW YOU CAN ENJOY YOUR FAVOURITE VIDEOS. Popular Video Downloader. Downloads most popular media formats, flash videos. Flash Video Downloader Description: Popular Video Downloader. Downloads most popular media formats like flash, videos, audios. Due to copyright policy we can download only NOT copyrighted videos. Websites such as Twitter, TikTok, Instagram, dailymotion.com, vk.com are NOT supported. Download videos and flash videos from many websites. No special skills needed. Save any online video from any website with our new flash video downloader. Instructions: Choose a video from the list and press the download button. If the video was not detected - please try to start it and/or open it in a new tab. Our extension is one of the easiest video downloader available online. Just click the icon of the extension in the browser and within seconds you can start downloading videos from almost any website. Supported Formats: * Mp4 Videos * Mov * Fly video * Webm * Facebook Videos * And many more Videos With this amazing flash video downloader you can download any high definition video from over a 1000 websites online. You can easily download and save the videos. For us it's very important that flash video downloader is 100% free to use, and never will be paid.

User Growth

Showing data from Jan 01, 2022 to Dec 31, 2022

Versions

+8.78%(+19,536 users)

Compared to 3 months ago

3 versions released in this period

Rating Count

Total: 57 ratings

Average Rating

Current: 2.00 / 5.0-0.27

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical1

High3

Medium1

Low1

Versions scanned

Showing 1 of 7 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.2.2 Code review	6

Extension Version	Code Review Findings
1.2.2	6

Files with findings

4 distinct paths — top paths by unique finding count:

js/background.js3
js/popup.js1
js/providers/fb.js1
js/providers/tw.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Other	critical	js/background.js (line 1958)	This block monitors tab URLs and force-navigates matching pages to opaque destinations via `chrome.tabs.update` (`P(J, ...)`). The heavy obfuscation, random branching, and redirect construction are consistent with adw…	1.2.2
2	Network Interception	high	js/background.js (line 261)	The extension installs blocking webRequest hooks across all URLs, modifies Facebook response headers, and intercepts outgoing Facebook request headers. Removing `x-frame-options` weakens site protections, while hookin…	1.2.2
3	Obfuscation	high	js/background.js (line 1373)	This array stores a large set of target strings in a deliberately obfuscated form using fragmented base64-like literals and helper decoders (`j`, `H`, `S`). Hiding destination patterns this way is a common indicator o…	1.2.2
4	Unauthorized Data Collection	high	js/providers/fb.js (line 25)	This code combines a Facebook session cookie value (`c_user`) with the intercepted `fb_dtsg_ag` token to query Facebook's internal `video_data_async` endpoint. Pulling authenticated identifiers from page cookies and r…	1.2.2
5	Unauthorized Data Collection	medium	js/providers/tw.js (line 7)	The extension retrieves Twitter credential material from a developer-controlled remote endpoint (`TW_CREDENTIAL_TOKEN_URL`) and then combines it with the user's Twitter CSRF cookie (`ct0`) to perform authenticated API…	1.2.2
6	Tracking	low	js/popup.js (line 41)	When no video is found, the popup transmits the hostname of the active tab to an external analytics endpoint. It uses plain HTTP rather than HTTPS, so the browsing data is both unnecessarily disclosed and sent without…	1.2.2

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


www.w3.org	/2000/svg	http://www.w3.org/2000/svg
www.w3.org	/1999/02/22-rdf-syntax-ns	http://www.w3.org/1999/02/22-rdf-syntax-ns#
ns.adobe.com	/xap/1.0/	http://ns.adobe.com/xap/1.0/
ns.adobe.com	/xap/1.0/mm/	http://ns.adobe.com/xap/1.0/mm/
ns.adobe.com	/xap/1.0/sType/ResourceRef	http://ns.adobe.com/xap/1.0/sType/ResourceRef#
api.twitter.com	/1.1/statuses/show.json	https://api.twitter.com/1.1/statuses/show.json?id=${a}&include_profile_interstitial_type=1&include_blocking=1&include_blocked_by=1&include_followed_by=1&include_want_retweets=1&skip_status=1&cards_platform=Web-12&include_cards=1&include_ext_alt_text=true&include_reply_count=1&tweet_mode=extended&trim_user=false&include_ext_media_color=true`;
fonts.googleapis.com	/css	https://fonts.googleapis.com/css?family=Roboto:100,300,400,500,700&subset=latin,cyrillic
github.com	/facebook/react/issues/3236	https://github.com/facebook/react/issues/3236
fb.me	/react-special-props	https://fb.me/react-special-props
fb.me	/react-warning-keys	https://fb.me/react-warning-keys

Showing 1 to 10 of 40 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

1.7 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

Wasted time, can not download from jwplayer.

doe john·16 Jun 2023

2023/6/12 23:52:44;启动扫描程序;文件;C:\Users\e\AppData\Local\Google\Chrome\User Data\Default\extensions\ionpbgeeliajehajombdeflogfpgmmel\2.1_0\bg.js; JS/Chromex.Agent.CA 特洛伊木马;已通过删除清除;;;6AEE3B383817A51A1E7EA79A59D55671CEB55E9E;2023/4/4 22:59:25

于

于洋（墨漾）·12 Jun 2023

2023/6/12 23:52:44;启动扫描程序;文件;C:\Users\e\AppData\Local\Google\Chrome\User Data\Default\extensions\ionpbgeeliajehajombdeflogfpgmmel\2.1_0\bg.js; JS/Chromex.Agent.CA 特洛伊��马;已通过删除清除;;;6AEE3B383817A51A1E7EA79A59D55671CEB55E9E;2023/4/4 22:59:25

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Flash Video Downloader

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 7 Versions6

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating