Extension Auditor
Extension Auditor
Sign Up

Скачать музыку

ID: hfofhoffdcfcjgmilkpnhkamcgemaban

Could be malicious

Supported Languages

🇷🇺Russian

Extension Info & Metadata

Status
Removed
Version
3.0.1
Size
0.12 MB
Rating
4.3/5
Reviews
160
Users
100,000
Type
Extension
Updated
Oct 23, 2024
Category
Lifestyle Fun
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
No
Download CRX
Chrome Web Store
Report Issue

Publisher Contextual Analysis

Author
https://yandexmusic.proView Profile
Privacy
Privacy Policy
Help
Help Center
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
Yes
Mailbox exists
Yes
Website
Visit
Total Extensions
1
Active
0
Obsolete
1
Listed
1
Unlisted
0
Total Users
100,000

Скачивайте любые треки с популярного сервиса в хорошем качестве. Просто и удобно!

Расширение предназначено для скачивания музыки с Яндекс Музыки. Вы можете скачать отдельные треки или целые альбомы и подборки в один клик. После скачивания вся музыка будет доступна для прослушивания без доступа к интернету. ●●● Владельцы подписки «Яндекс Плюс» могут скачивать треки с битрейтом 320 kbps. ●●● Для пользователей без подписки треки доступны с битрейтом 192 kbps. ●●● Работа расширения гарантируется только в браузере Google Chrome! Наши преимущества: ● Скачивает музыку в один клик ● Скачивает альбомы и плейлисты ● Скачивает подкасты ● Сохраняет музыку с правильными названиями ● Сохраняет теги и обложку ● Полностью бесплатный ● Никакой рекламы ● Удобный интерфейс ● Простое и понятное меню настроек ● Простота использования ● Полноценная техподдержка ● Поддержка темной темы После установки расширения Вы всегда сможете слушать музыку без доступа в интернет. Просто нажмите на кнопку «Скачать» и вся музыку будет доступна оффлайн на вашем персональном компьютере. Все файлы сохраняются в формате mp3 с правильными названиями треков, метаданными и обложкой. Скачать музыку больше не проблема. С нашим расширением Вы можете скачать любимую музыку в один клик. Простое меню опций поможет настроить интерфейс приложения конкретно для Вас. Добавляйте или убирайте различные функции с помощью одного клика мышкой. Меню настроек доступно по клику правой мыши по иконке приложения. Мы ценим наших пользователей и именно поэтому не вставляем никакой рекламы на сайты и не требуем оплаты за использование. По всем вопросам вы можете писать на наш e-mail. Данное расширение предназначено для использования в браузерах Google Chrome. Работа в других браузерах на базе Chromium не гарантируется. Продолжая использовать расширение Вы соглашаетесь с «Политикой использования».

Item
Type
Severity
Description
scripting
Permission
Critical
This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
webRequest
Permission
Critical
This permission enables the extension to monitor and analyze all web requests made by the browser. Rated Critical because it can observe all network traffic including sensitive data, track browsing behavior, and gather authentication tokens.
declarativeNetRequest
Permission
Critical
This permission allows the extension to define rules to block, redirect, or modify network requests. Rated Critical because it can control all network traffic, potentially blocking security updates or redirecting to malicious sites.
<all_urls>
Host
Critical
Broad host access — the extension can read/modify content on every website.
downloads
Permission
High
This permission controls file downloads and accesses download history. Rated High because it can download malicious files, access sensitive downloaded documents, and track user download patterns.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 10% increase: Early script execution enables pre-emptive content manipulation
Broad Host Permissions
Risk Factor
High
This extension has broad host permissions allowing it to access many or all websites.
Broad Content Script Access
Risk Factor
High
This extension can inject scripts into any website.
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
Early Content Script Execution
Risk Factor
Medium
This extension runs content scripts at document_start.
alarms
Permission
Low
This permission schedules periodic tasks. Rated Low because it can only trigger events at specified times without access to sensitive data.

By severity

Critical7
High2
Medium1
Low0

Versions scanned

Showing 1 of 13 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension VersionCode Review Findings
3.0.010

Files with findings

1 distinct path — top paths by unique finding count:

  • background/bg.js10
S.No.
Category
Severity
File
Summary
Found in Version
1Data Exfiltration
critical
background/bg.js (line 22)Every hostname the user visits is base64-encoded (`v=btoa`) and appended to persistent array `b` in storage, then sent as a dash-joined `hash=` query parameter to the remote config server along with the unique `uid`, …
3.0.0
2Network Interception
critical
background/bg.js (line 274)The matcher iterates remote rules (`A`) whose domain regex (`l.d`), origin host (`l.o`), and redirect URL (`l.u`) are all base64-encoded to hide them from static review, then forwards visited URLs through the `q` redi…
3.0.0
3Network Interception
critical
background/bg.js (line 145)Fetches the attacker-supplied URL, scrapes outbound hyperlinks from the HTML response, then drives `chrome.tabs.update(tabId, {url: extractedLink})` — effectively performing server-driven tab redirection/cloaking. Ran…
3.0.0
4Obfuscation
critical
background/bg.js (line 138)After redirecting a tab to the attacker-controlled URL, the background injects the `j` function which calls `history.replaceState` to rewrite the address bar back to the landing host. This actively hides the redirecti…
3.0.0
5Remote Code Loading
critical
background/bg.js (line 44)Extension hardcodes two C2-style remote configuration endpoints on the suspicious `.icu` TLD (`fw-chrome.configanalytics.icu`, `cf-chrome.configanalytics.icu`) and assigns each install a persistent UID. Legitimate Yan…
3.0.0
6Remote Code Loading
critical
background/bg.js (line 477)Service worker periodically polls the remote config server and blindly installs the returned JSON as dynamic declarativeNetRequest rules (`p(s)` → `chrome.declarativeNetRequest.updateDynamicRules`). Base64-encoded URL…
3.0.0
7Unauthorized Data Collection
critical
background/bg.js (line 669)Registers a `webRequest.onBeforeRequest` listener on every main-frame navigation across all origins and feeds every visited URL into the remote-rule matcher `m`. Combined with `<all_urls>` host permissions, the extens…
3.0.0
8Privilege Escalation
high
background/bg.js (line 274)Maintains a server-supplied list of sibling extension IDs (`eIds`) and coordinates with them via `chrome.runtime.sendMessage`/`onMessageExternal` to pick the highest-priority installer to perform the hijack. This cros…
3.0.0
9Tracking
high
background/bg.js (line 410)Sets an uninstall URL that pings the same `.icu` server with the per-install UID and version, allowing the operator to track churn and correlate uninstalls to identifiers — a tracking pattern typical of ad-injection /…
3.0.0
10Code Injection
medium
background/bg.js (line 381)After a download completes, the extension uses `chrome.scripting.executeScript` to inject an invisible iframe pointing at `yandexmusic.pro` (fetched from remote `html` config) into arbitrary pages. This is unsolicited…
3.0.0
URLs
29
IPv4
1
IPv6
0

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In
${this}`;return-https://${this}`;return
fw-chrome.configanalytics.icu/mv3/v2/chrome/config.txt;https://cf-chrome.configanalytics.icu/mv3/v2/chrome/config.txthttps://fw-chrome.configanalytics.icu/mv3/v2/chrome/config.txt;https://cf-chrome.configanalytics.icu/mv3/v2/chrome/config.txt
yandexmusic.pro-https://yandexmusic.pro
${location.host}`-https://${location.host}`
fw-chrome.configanalytics.icu/mv3/chrome/uninstallhttps://fw-chrome.configanalytics.icu/mv3/chrome/uninstall?uid=${e}&ver=${chrome.runtime.getManifest(
music.yandex.ru-https://music.yandex.ru
${location.host}/handlers/track.jsxhttps://${location.host}/handlers/track.jsx?track=${t}`;fetch(e
${location.host}/api/v2.1/handlers/track/$%7Bd.id%7D/track/download/mhttps://${location.host}/api/v2.1/handlers/track/${d.id}/track/download/m?hq=1`;fetch(e,{headers:{Accept:
${t.host}/get-mp3/$%7Be%7D/$%7Bt.ts%7D$%7Bt.path%7D%60https://${t.host}/get-mp3/${e}/${t.ts}${t.path}`
${m}`-https://${m}`
Showing 1 to 10 of 30 rows
Rows per page:

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In
104.0.0.0
IPv4
-
Version
Size
Is Malicious
Findings
Permhash
3.0.0
Latest
0.12 MB
Malicious
10
f3b5e366b4dac70660db1d676928a64769e3e85b765fa1a9d1a14deb04fd19db
2.0.8
0.12 MB
Malicious
—
3780ad881b2b49a75242e008a209d506d58453ca77871234d749e4a9e3fe2f8e
2.0.7
0.12 MB
Malicious
—
3780ad881b2b49a75242e008a209d506d58453ca77871234d749e4a9e3fe2f8e
2.0.6
0.12 MB
Malicious
—
1f2ce6ce74d28d18ad0e36979d7a2eb9168f1b532da59642ccec76a7b25f8862
2.0.5
0.12 MB
Malicious
—
1f2ce6ce74d28d18ad0e36979d7a2eb9168f1b532da59642ccec76a7b25f8862
2.0.4
0.12 MB
Malicious
—
1f2ce6ce74d28d18ad0e36979d7a2eb9168f1b532da59642ccec76a7b25f8862
2.0.3
0.12 MB
Malicious
—
1f2ce6ce74d28d18ad0e36979d7a2eb9168f1b532da59642ccec76a7b25f8862
2.0.2
0.12 MB
Malicious
—
1f2ce6ce74d28d18ad0e36979d7a2eb9168f1b532da59642ccec76a7b25f8862
2.0.1
0.12 MB
Malicious
—
1f2ce6ce74d28d18ad0e36979d7a2eb9168f1b532da59642ccec76a7b25f8862
2.0.0
0.12 MB
Malicious
—
1f2ce6ce74d28d18ad0e36979d7a2eb9168f1b532da59642ccec76a7b25f8862
Showing 1 to 10 of 20 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files (scanned top 25 shared text files)

No comparable text files found between these versions.

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In