Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Gauth - AI Homework & Study Helper

CRITICAL RISKRemoved from Chrome Web Store

Gauth - AI Homework & Study Helper

ID: aahodnigalncogkhfolddkmkklijeoap

Could be malicious

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status

Removed

Version

1.7.9

Size

6.31 MB

Rating

4.1/5

Reviews

177

Users

80,000

Type

Extension

Updated

May 15, 2025

Publisher Contextual Analysis

Trusted

Author: https://gauthmath.comView Profile
Privacy: Privacy Policy
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

80,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Solve problems, explain concepts, chat with your PDFs. Learn smartly anywhere, anytime.

🚀Gauthmath has upgraded to Gauth now! Elevate your learning with the best AI homework helper - formerly known as Gauthmath. 💡Your cutting-edge AI homework & study helper. Gauth is here to revolutionize your learning journey, magical like GPT-4. 💬 ✨Gain a deeper understanding of all-subject concepts and problems with step-by-step solutions and explanations. Let Gauth guide you toward mastery. ✨Experience the speed of learning with our innovative cropping and selecting technology. Capture your question, click search, and receive instant answers from AI. ✨Turn webpages and PDFs into interactive learning assistants. Chat, ask questions, and unlock new insights like never before. Learn smartly, anytime, anywhere. Gauth is your dedicated study companion, ready to assist you on your educational journey. Get Gauth extension now and embark on an extraordinary journey of knowledge and success. Unlock the power of AI and make every study session count! 💪📚🌟

User Growth

Showing data from Oct 19, 2022 to Oct 18, 2023

Versions

-25%(-20,000 users)

Compared to 3 months ago

6 versions released in this period

Rating Count

Total: 32 ratings+1 (3%)

Average Rating

Current: 2.56 / 5.0+2.56

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High2

Medium2

Low1

Versions scanned

Showing 1 of 45 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.0.1 Code review	5

Extension Version	Code Review Findings
1.0.1	5

Files with findings

1 distinct path — top paths by unique finding count:

assets/js/index.js5

S.No.	Category	Severity	File	Summary	Found in Version
1	Data Exfiltration	high	assets/js/index.js (line 12820)	The extension exfiltrates captured screenshot data from the browser to the gauthmath.com website by moving the image from extension storage to the website's sessionStorage. This allows the external domain to access po…	1.0.1
2	Data Exfiltration	high	assets/js/index.js (line 12581)	This function captures the content of a canvas (the screenshot) as a base64-encoded JPEG and sends it to the background script, while simultaneously opening the third-party Gauthmath website to receive the data.	1.0.1
3	Obfuscation	medium	assets/js/index.js (line 8596)	A custom decryption function used to deobfuscate URLs and tracking configuration at runtime, which is a common technique used to hide malicious endpoints from static analysis tools.	1.0.1
4	Tracking	medium	assets/js/index.js (line 8454)	The extension contains encoded tracking endpoints that resolve to ByteDance's analytics domains (e.g., mcs.snssdk.com). This is used by the integrated Tea SDK to perform extensive user and device tracking across all v…	1.0.1
5	Other	low	assets/js/index.js (line 11485)	The tracking SDK uses eval() to dynamically evaluate rules. While intended for analytics, this pattern can be abused for remote code execution if the parameters are influenced by a remote server.	1.0.1

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

435

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


${url}`}}if(options.tryconvertencoding	-	http://${url}`}}if(options.tryConvertEncoding
www.xfa.org	/schema/xci/	http://www.xfa.org/schema/xci/
www.xfa.org	/schema/xfa-connection-set/	http://www.xfa.org/schema/xfa-connection-set/
www.xfa.org	/schema/xfa-data/	http://www.xfa.org/schema/xfa-data/
www.xfa.org	/schema/xfa-form/	http://www.xfa.org/schema/xfa-form/
www.xfa.org	/schema/xfa-locale-set/	http://www.xfa.org/schema/xfa-locale-set/
ns.adobe.com	/xdp/pdf/	http://ns.adobe.com/xdp/pdf/
www.w3.org	/2000/09/xmldsig	http://www.w3.org/2000/09/xmldsig#
www.xfa.org	/schema/xfa-source-set/	http://www.xfa.org/schema/xfa-source-set/
www.w3.org	/1999/XSL/Transform	http://www.w3.org/1999/XSL/Transform

Showing 1 to 10 of 440 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


20.11.139.87	IPv4	-
201.252.193.35	IPv4	-
103.13.253.234	IPv4	-
1.2.3.4	IPv4	-
124.115.24.185	IPv4	-
1.6.8.8	IPv4	-
1.28.117.228	IPv4	-
53.26.133.6	IPv4	-
1.101.3.4	IPv4	-
1.3.132.0	IPv4	-
11.139.87.87	IPv4	-
1.252.193.35	IPv4	-
1.102.138.174	IPv4	-
9.173.177.223	IPv4	-
129.2.177.224	IPv4	-
33.127.227.62	IPv4	-
209.143.45.22	IPv4	-
47.73.82.18	IPv4	-
251.172.33.115	IPv4	-
1:2:3:4:5:6:7:8	IPv6	-

Showing 1 to 20 of 20 rows

Rows per page:

2.3 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

không mở được

ĐA

Đức Anh·6 Feb 2025

does not work lol

Junior·4 Feb 2025

Too bad

Ansh Wadhwa·23 Jan 2025

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Gauth - AI Homework & Study Helper

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 45 Versions5

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating