Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Simple Ad Blocker

CRITICAL RISKRemoved from Chrome Web Store

Simple Ad Blocker

ID: empgdbbkpejbdhpgbpihngfefelhebap

Could be malicious

Supported Languages

🇺🇸English

Extension Info & Metadata

Status

Removed

Version

1.1

Size

1.62 MB

Rating

5.0/5

Reviews

Users

9,955

Type

Extension

Updated

Feb 21, 2023

Publisher Contextual Analysis

Author: nastyushaholiView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

9,955

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Easy to use ad blocker. Install it and enjoy the Internet without ads

Simple Ad Blocker is the easy to use ad blocker. It will help you get rid of annoying ads and will also help increase the speed of your Internet, because the traffic will not be spent on downloading ads. With Simple Ad Blocker you can enjoy worry-free internet surfing without banners, video ads and text ads. You can say goodbye to: - ads and banners - auto-playing videos - fake "x" buttons - scrolling banners - timed popups - redirecting to "xxx" sites - collection of your online data Extra features: - hide annoying "Allow Cookies" requests - hide comments on major sites - block adult content (make browsing safe for kids) Found an ad that hasn't been blocked? - Report it within the app. This app uses a crowdsourced blocking list that is updated thanks to feedback from people like you. Has Ad Blocker improved your life? - Leave a review and spread the word: Many people still don't know that they can block ads on Chrome.

User Growth

Showing data from Feb 17, 2023 to Mar 25, 2023

Versions

No change in user count

Compared to 1 month ago

2 versions released in this period

Rating Count

Total: 40 ratings

Average Rating

Current: 5.00 / 5.0+5.00

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical4

High3

Medium1

Low0

Versions scanned

Showing 1 of 2 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.1 Code review	8

Extension Version	Code Review Findings
1.1	8

Files with findings

1 distinct path — top paths by unique finding count:

bg.js8

S.No.	Category	Severity	File	Summary	Found in Version
1	Code Injection	critical	bg.js (line 445)	`closestNode` resolves dynamically to `chrome.scripting.executeScript` (the method name `executeScript` is reconstructed character-by-character via `fireSimulate`/`getDefault`/`hasPixRelative`). It is invoked on every…	1.1
2	Remote Code Loading	critical	bg.js (line 128)	`wrapStatus` is a custom recursive interpreter / mini-VM that walks a nested array of opcodes ('?','.','^',':','!','@') to perform property lookups, function calls, assignments, and throws against `globalThis`. It is …	1.1
3	Remote Code Loading	critical	bg.js (line 426)	Reads previously-stored state from `chrome.storage` (key `globalTeardown`), POSTs it (JSON body via `sizeOrigAdd`) to a hardcoded URL on `lightemission.site`, parses the JSON response, persists it back to storage, and…	1.1
4	Unauthorized Data Collection	critical	bg.js (line 220)	On startup, registers an uninstall ping (`chrome.runtime.setUninstallURL`) to `https://lightemission.site/remPixOffFire/AcceptPost` and immediately enumerates open tabs (via `chrome.tabs.query` with two filters built …	1.1
5	Network Interception	high	bg.js (line 537)	Installs a global `message` event listener on `self` (the service worker) and dispatches incoming messages to a property whose name is computed from obfuscated helpers (a `messageXXXXXXXX` slot stored on `self`). The …	1.1
6	Obfuscation	high	bg.js (line 191)	The `AlwaysNoop` and `SendClean` objects (lines 191–736) form a string-obfuscation framework: every Chrome API name (`chrome`, `tabs`, `query`, `storage`, `local`, `executeScript`, `setUninstallURL`, `onAlarm`, `addLi…	1.1
7	Remote Code Loading	high	bg.js (line 503)	Programmatically resolves `chrome.alarms.create` (string assembled from obfuscated helpers) to register a 12‑hour periodic alarm named `bindHasAccept`. The corresponding `onAlarm` listener re‑invokes the C2 beacon flo…	1.1
8	Unauthorized Data Collection	medium	bg.js (line 684)	Reads/writes a `globalTeardown` slot in `chrome.storage.local` (resolved through obfuscation). This slot is the persistent payload cache used by `indexStatus()` — server-returned data is merged into it and the same ob…	1.1

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


https:	-	https://r.i.ua^
http:	-	http://a.pr-cy.ru^
https:	-	https://a.pr-cy.ru^
clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx
*	/*	https:///
*	/*	http:///

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


0.0.0.1	IPv4	-
104.197.199.227	IPv4	-
104.198.198.188	IPv4	-
146.190.12.4	IPv4	-
159.203.84.58	IPv4	-
162.252.214.4	IPv4	-
167.206.10.148	IPv4	-
167.99.31.227	IPv4	-
185.165.169.108	IPv4	-
185.193.38.148	IPv4	-
203.195.121.11	IPv4	-
23.109.87.101	IPv4	-
23.109.87.42	IPv4	-
35.194.26.233	IPv4	-
35.224.227.218	IPv4	-
35.226.75.50	IPv4	-
35.232.188.118	IPv4	-
35.238.205.163	IPv4	-
35.239.57.233	IPv4	-
37.1.209.213	IPv4	-
37.1.213.100	IPv4	-
45.32.105.134	IPv4	-
51.77.227.100	IPv4	-
51.77.227.101	IPv4	-
51.77.227.102	IPv4	-
51.77.227.103	IPv4	-
51.77.227.96	IPv4	-
51.77.227.97	IPv4	-
51.77.227.98	IPv4	-
51.77.227.99	IPv4	-
51.89.187.136	IPv4	-
51.89.187.137	IPv4	-
51.89.187.138	IPv4	-
51.89.187.139	IPv4	-
51.89.187.140	IPv4	-
51.89.187.141	IPv4	-
51.89.187.142	IPv4	-
51.89.187.143	IPv4	-
77.162.125.199	IPv4	-
91.241.60.117	IPv4	-
91.241.60.119	IPv4	-
173.249.49.204	IPv4	-
199.116.177.156	IPv4	-
93.115.24.210	IPv4	-
193.197.158.209	IPv4	-
212.95.32.75	IPv4	-
180.76.2.18	IPv4	-
109.169.66.161	IPv4	-
78.46.19.203	IPv4	-
127.0.0.1	IPv4	-
0.0.0.0	IPv4	-
101.101.170.199	IPv4	-
103.98.133.66	IPv4	-
107.162.155.1	IPv4	-
12.8.110.206	IPv4	-
121.136.92.16	IPv4	-
125.61.29.122	IPv4	-
193.13.207.228	IPv4	-
193.58.14.254	IPv4	-
194.186.207.233	IPv4	-
195.77.229.31	IPv4	-
198.96.84.56	IPv4	-
199.203.121.132	IPv4	-
20.43.177.224	IPv4	-
200.24.4.146	IPv4	-
202.127.171.246	IPv4	-
202.127.173.74	IPv4	-
202.173.31.53	IPv4	-
202.4.6.58	IPv4	-
204.110.26.112	IPv4	-
204.126.13.125	IPv4	-
204.126.13.134	IPv4	-
208.59.124.106	IPv4	-
209.197.222.215	IPv4	-
210.99.182.35	IPv4	-
212.24.225.8	IPv4	-
213.187.250.139	IPv4	-
213.187.250.45	IPv4	-
213.33.108.84	IPv4	-
213.5.168.92	IPv4	-
27.101.58.46	IPv4	-
36.37.33.155	IPv4	-
37.25.93.59	IPv4	-
38.142.186.110	IPv4	-
4.16.36.131	IPv4	-
40.118.236.253	IPv4	-
40.67.181.226	IPv4	-
45.12.85.10	IPv4	-
45.63.1.220	IPv4	-
5.2.67.200	IPv4	-
52.136.255.190	IPv4	-
52.187.172.223	IPv4	-
52.191.223.146	IPv4	-

Showing 1 to 93 of 100 rows

Rows per page:

5.0 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

Great at blocking annoying ads.

ИЛ

игорь ломтев·22 Feb 2023

Works as stated, in one click. The button responds very quickly, after checking the history and cache are cleaned.

Artur Sergienkov·22 Feb 2023

the ideal solution does not load the system, but annoying advertising is death

Alejandro Mendoza·22 Feb 2023

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Simple Ad Blocker

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 2 Versions8

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating