Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: SRT Viper HD Wallpapers

CRITICAL RISKRemoved from Chrome Web Store

SRT Viper HD Wallpapers

ID: mkekfpdhgpkhlickpbjfkgkeemoofcgi

Could be malicious

Supported Languages

🇧🇩Bengali

🇧🇷Brazilian Portuguese

🇧🇬Bulgarian

🇪🇸Catalan

🇨🇳Chinese (Simplified)

🇹🇼Chinese (Traditional)

🇭🇷Croatian

🇨🇿Czech

🇩🇰Danish

🇳🇱Dutch

🇺🇸English

🇪🇪Estonian

🇵🇭Filipino

🇫🇮Finnish

🇫🇷French

🇩🇪German

🇬🇷Greek

🇮🇳Hindi

🇮🇩Indonesian

🇮🇹Italian

🇯🇵Japanese

🇰🇷Korean

🇱🇻Latvian

🇱🇹Lithuanian

🇲🇾Malay

🇮🇳Malayalam

🇵🇱Polish

🇵🇹Portuguese

🇷🇴Romanian

🇷🇺Russian

🇷🇸Serbian

🇸🇰Slovak

🇸🇮Slovenian

🇪🇸Spanish

🇸🇪Swedish

🇮🇳Tamil

🇹🇭Thai

🇹🇷Turkish

🇺🇦Ukrainian

🇻🇳Vietnamese

Extension Info & Metadata

Status

Removed

Version

0.3.58

Size

2.64 MB

Rating

0.0/5

Reviews

Users

10,000

Type

Extension

Updated

Apr 6, 2022

Publisher Contextual Analysis

Author: chromenewtab.comView Profile
Privacy: Privacy Policy
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

256

Active

Obsolete

256

Listed

256

Unlisted

Total Users

2,134,841

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Give your browser a new look with SRT Viper backgrounds

Our SRT Viper background Extensions, which we specially prepared for the game SRT Viper, which is unrivaled in the category of car racing, which is among the most downloaded games in the world, are available to you for free on the Chrome Store. When you download SRT Viper Extensions, great visuals related to the game will welcome you every time you open a new tab. These HD quality visuals, in-game maps or sports cars will make you have a great time. SRT Viper Extensions features are listed below 🛺 search bar in the middle of the page 🛺 Bottom right date and time function 🛺 setting to use images as fixed or variable in every new tab opened 🛺 hotkeys of popular sites 🛺 shortcut showing popular games If you like SRT Viper Extensions, you can give us Five Stars from the Chrome Store, it has also been added to your friends, you can recommend them to use and have a pleasant time.

User Growth

Showing data from Apr 08, 2022 to Apr 12, 2022

Versions

No change in user count

Compared to 4 days ago

1 version released in this period

Rating Count

Total: 0 ratings

Average Rating

Current: 0.00 / 5.0

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical1

High2

Medium1

Low0

Versions scanned

Showing 1 of 1 scanned version with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
0.3.58 Code review	4

Extension Version	Code Review Findings
0.3.58	4

Files with findings

3 distinct paths — top paths by unique finding count:

FZpRzY/D95S4u.js2
F50RdW.html1
FZpRzY/dPXhBKM.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Network Interception	critical	FZpRzY/D95S4u.js (line 8914)	Search hijacking with delayed activation. The new-tab page initially shows a search form with action="https://www.google.com/search", but 1800 seconds (30 minutes) after install, this code rewrites the form's action a…	0.3.58
2	Phishing	high	F50RdW.html (line 224)	The new-tab search form is presented to users as a Google search form (action=https://www.google.com/search) but carries a hidden data-sp attribute listing three third-party redirect/affiliate domains (addilos, addiyo…	0.3.58
3	Tracking	high	FZpRzY/dPXhBKM.js (line 1)	Service worker stores an install timestamp ('inti') and registers an uninstall-tracking URL. The 'inti' timestamp is the gating mechanism used by the search-hijack code in D95S4u.js to delay activation by 30 minutes a…	0.3.58
4	Privilege Escalation	medium	FZpRzY/D95S4u.js (line 1)	Bouncing-redirect logic at the top of the new-tab script: when the URL ends with 'l' it redirects to the extension's HTML page with a '?b' marker, and when it ends with 'b' it redirects back to chrome://newtab. This i…	0.3.58

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


getbootstrap.com	-	https://getbootstrap.com/
github.com	/twbs/bootstrap/blob/main/LICENSE	https://github.com/twbs/bootstrap/blob/main/LICENSE
www.w3.org	/2000/svg	http://www.w3.org/2000/svg
jqueryui.com	-	http://jqueryui.com
jqueryui.com	/themeroller/	http://jqueryui.com/themeroller/?bgShadowXPos=&bgOverlayXPos=&bgErrorXPos=&bgHighlightXPos=&bgContentXPos=&bgHeaderXPos=&bgActiveXPos=&bgHoverXPos=&bgDefaultXPos=&bgShadowYPos=&bgOverlayYPos=&bgErrorYPos=&bgHighlightYPos=&bgContentYPos=&bgHeaderYPos=&bgActiveYPos=&bgHoverYPos=&bgDefaultYPos=&bgShadowRepeat=&bgOverlayRepeat=&bgErrorRepeat=&bgHighlightRepeat=&bgContentRepeat=&bgHeaderRepeat=&bgActiveRepeat=&bgHoverRepeat=&bgDefaultRepeat=&iconsHover=url(%22images%2Fui-icons_555555_256x240.png%22
ns.adobe.com	/xap/1.0/	http://ns.adobe.com/xap/1.0/
www.w3.org	/1999/02/22-rdf-syntax-ns	http://www.w3.org/1999/02/22-rdf-syntax-ns#
ns.adobe.com	/xap/1.0/	http://ns.adobe.com/xap/1.0/
ns.adobe.com	/xap/1.0/mm/	http://ns.adobe.com/xap/1.0/mm/
ns.adobe.com	/xap/1.0/sType/ResourceRef	http://ns.adobe.com/xap/1.0/sType/ResourceRef#

Showing 1 to 10 of 50 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

SRT Viper HD Wallpapers

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 1 Version4

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

Version History

Version-to-Version Code Diff

Extension Files

User Growth

Rating Count

Average Rating