Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Running dinosaur Game

CRITICAL RISKRemoved from Chrome Web Store

Running dinosaur Game

ID: nihmppmidbbbkfademfpjmhhogegjbjd

Could be malicious

Extension Info & Metadata

Status

Removed

Version

1001.0.6

Size

2.05 MB

Rating

4.0/5

Reviews

137

Users

514,823

Type

Extension

Updated

Mar 2, 2021

Publisher Contextual Analysis

Author: https://agame.bestView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

522,137

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Running dinosaur is one of the most popular game, where your goal is to jump oveer all boundaries to finish.

Play google offline game ! You have to control t-rex dinosaur to get more scores and win! Running dinosaur is one of the most popular game all over the world. Many people love t-rex dinosaur because of its interesting story. Now you can play it in popup without internet and this is not all. Once you play it, you will be enticed.

User Growth

No data available

No user growth data available for this extension

Rating Count

No data available

No rating count data available for this extension

Average Rating

No data available

No rating data available for this extension

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical2

High1

Medium1

Low0

Versions scanned

Showing 2 of 6 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1001.0.5 Code review	2
1001.0.1 Code review	2

Extension Version	Code Review Findings
1001.0.5	2
1001.0.1	2

Files with findings

1 distinct path — top paths by unique finding count:

newtabpromo_bg.js4

S.No.	Category	Severity	File	Summary	Found in Version
1	Privilege Escalation	critical	newtabpromo_bg.js (line 8)	The extension exploits the `contentSettings` permission to globally block all browser push notifications from every website, then carves out exemptions for two attacker-controlled domains (`games.extapproved.space` an…	1001.0.1
2	Unauthorized Data Collection	critical	newtabpromo_bg.js (line 1)	On installation, the extension silently opens two tabs pointing to `new2acc.top` — a domain used for affiliate/click-fraud traffic monetization. These tab opens are not disclosed to the user and constitute unauthorize…	1001.0.1
3	Privilege Escalation	high	newtabpromo_bg.js (line 1)	On installation, the extension immediately opens two remote sites and then changes browser-wide notification settings for all URLs. It blocks notifications globally while explicitly allowlisting two unrelated external…	1001.0.5
4	Tracking	medium	newtabpromo_bg.js (line 29)	The background script silently contacts a remote domain and retries up to eight times, even though the response is never used for the advertised game functionality. This looks like beaconing or infrastructure reachabi…	1001.0.5

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


www.html5rocks.com	/en/tutorials/canvas/hidpi/	http://www.html5rocks.com/en/tutorials/canvas/hidpi/
jquery.com	-	https://jquery.com/
sizzlejs.com	-	https://sizzlejs.com/
jquery.org	/license	https://jquery.org/license
jquery.org	/license	http://jquery.org/license
ssl.google-analytics.com;	-	https://ssl.google-analytics.com;
clients2.google.com	/service/update2/crx	http://clients2.google.com/service/update2/crx
new2acc.top	/RrBwSLb8	https://new2acc.top/RrBwSLb8
agame.best	/*	https://agame.best/*
dino3drun.icu	/newjs/jvs.html	https://dino3drun.icu/newjs/jvs.html

Showing 1 to 10 of 20 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

3.3 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

legit tryna give me a virus

greta·15 Mar 2021

please dont get this. as much as it is a convenient way of playing when youre bored at school, it has caused lots of malwares on my laptop.

Luyao Wang·9 Mar 2021

(: very Good

Peter Vasilareas·9 Mar 2021

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Running dinosaur Game

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 6 Versions4

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Growth

Rating Count

Average Rating

User Reviews