Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: PC application for Instagram

CRITICAL RISKRemoved from Chrome Web Store

PC application for Instagram

ID: kpaiogodlnhejgpcnilabeilmgkeecne

Could be malicious

Supported Languages

🇧🇩Bengali

🇧🇷Brazilian Portuguese

🇧🇬Bulgarian

🇪🇸Catalan

🇨🇳Chinese (Simplified)

🇹🇼Chinese (Traditional)

🇭🇷Croatian

🇨🇿Czech

🇩🇰Danish

🇳🇱Dutch

🇺🇸English

🇪🇪Estonian

🇵🇭Filipino

🇫🇮Finnish

🇫🇷French

🇩🇪German

🇬🇷Greek

🇮🇳Gujarati

🇮🇳Hindi

🇭🇺Hungarian

🇮🇩Indonesian

🇮🇹Italian

🇯🇵Japanese

🇰🇷Korean

🇱🇻Latvian

🇱🇹Lithuanian

🇲🇾Malay

🇮🇳Malayalam

🇮🇳Marathi

🇳🇴Norwegian

🇵🇱Polish

🇵🇹Portuguese

🇷🇴Romanian

🇷🇺Russian

🇷🇸Serbian

🇸🇰Slovak

🇸🇮Slovenian

🇪🇸Spanish

🇸🇪Swedish

🇮🇳Tamil

🇮🇳Telugu

🇹🇭Thai

🇹🇷Turkish

🇺🇦Ukrainian

🇻🇳Vietnamese

Extension Info & Metadata

Status

Removed

Version

2.0.22

Size

0.71 MB

Rating

4.3/5

Reviews

285

Users

69,827

Type

Extension

Updated

Jun 13, 2021

Publisher Contextual Analysis

Author: igo2009z6View Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

69,827

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Manage Instagram on PC: browse, upload and download photos

Now you can use Instagram on your computer! Just install this Google Chrome extension into your browser. It is high time to get your Instagram experience on desktop. With this extension you can: - add new posts - check stories and comments of your friends - follow your friends activity with Instagram notifications - leave comments - edit your profile - and more! The extension will send you notifications in real time so that you do not miss anything important that happens in your account. Try this extension and leave feedback - it is important for us to know what you think about the product. ================= Instagram™ is a trademark of Instagram Inc., registered in the U.S. and other countries. This is an independent project developed by independent developer and has no relationship to Instagram™ or Instagram Inc. Permissions required: - storage - to store extension settings - tabs - show and control extension UI in separate window, replace tabs with the Instagram website to extension window - <all_urls> - change links to the Instagram website to extension window - webRequest, webRequestBlocking - to fix some bugs on the Instagram page (by changing headers)

User Growth

No data available

No user growth data available for this extension

Rating Count

No data available

No rating count data available for this extension

Average Rating

No data available

No rating data available for this extension

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical3

High2

Medium0

Low0

Versions scanned

Showing 1 of 7 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
2.0.16 Code review	5

Extension Version	Code Review Findings
2.0.16	5

Files with findings

2 distinct paths — top paths by unique finding count:

js/background.js4
manifest.json1

S.No.	Category	Severity	File	Summary	Found in Version
1	Network Interception	critical	js/background.js (line 35)	After 30 days from install (controlled by the `n` flag set when `Date.now() - installDay > 2592e5`), this blocking webRequest listener intercepts all main-frame navigations. For hostnames containing 'expres' or 'oking…	2.0.16
2	Remote Code Loading	critical	js/background.js (line 364)	Every 15 minutes the extension reports a persistent UUID, cumulative usage time, and extension ID to `extoutdoor.xyz/api/json/`. The server response is merged wholesale into `this.config` with no validation, enabling …	2.0.16
3	Tracking	critical	js/background.js (line 46)	When the user navigates to a site whose second-level domain contains 'orn' or 'xvi' (matching adult content sites such as pornographic or xvideos-type domains), the extension silently opens a new tab pointing at `http…	2.0.16
4	Other	high	manifest.json (line 46)	The bundled manifest does not include the `cookies` permission, but the published CWS manifest summary shows `cookies` as a standard (non-optional) permission. A permissions mismatch between the ZIP and the store list…	2.0.16
5	Unauthorized Data Collection	high	js/background.js (line 411)	The extension receives a list of extension IDs (`envCids`) from its C2 server and silently probes whether each is installed by opening a hidden tab to `chrome-extension://<id>/manifest.json` and attempting CSS injecti…	2.0.16

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


chrome.google.com	/webstore/detail/kpaiogodlnhejgpcnilabeilmgkeecne	https://chrome.google.com/webstore/detail/kpaiogodlnhejgpcnilabeilmgkeecne
www.instagram.com	-	https://www.instagram.com/
www.instagram.com	-	https://www.instagram.com
www.w3.org	/2000/svg	http://www.w3.org/2000/svg
ssl.google-analytics.com	/ga.js	https://ssl.google-analytics.com/ga.js
www.instagram.com	/tv/upload/	https://www.instagram.com/tv/upload/
www.w3.org	/1999/xlink	http://www.w3.org/1999/xlink
www.w3.org	/1999/xhtml	http://www.w3.org/1999/xhtml
www.w3.org	/1999/02/22-rdf-syntax-ns	http://www.w3.org/1999/02/22-rdf-syntax-ns#
ns.adobe.com	/xap/1.0/	http://ns.adobe.com/xap/1.0/

Showing 1 to 10 of 30 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


1.3.132.0	IPv4	-
1.101.3.4	IPv4	-

5.0 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

DevontRichie Channel·24 Jun 2021

super

Emma D·23 Jun 2021

Супер!

Docent 1945·22 Jun 2021

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

PC application for Instagram

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 7 Versions5

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Growth

Rating Count

Average Rating

User Reviews