Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Video Speed Control

CRITICAL RISKRemoved from Chrome Web Store

Video Speed Control

ID: bpohjellfonnebodgjjckkhnlmpkomjo

Could be malicious

Extension Info & Metadata

Status

Removed

Version

1.3

Size

0.06 MB

Rating

3.6/5

Reviews

Users

192,274

Type

Extension

Updated

Mar 17, 2021

Publisher Contextual Analysis

Author: prokhorpoznyysheevView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

192,274

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Speed controller for all video players. Simply speed up, slow down ...

Speed controller is pretty simple but useful extension for Chrome browser. It allows you to slow down, boost, advance and rewind any video you need. So if your want to manage your video speed then you should definitely check out this extension. It doesn`t weigh a lot and easy to install. Isn`t it useful to slow down or speed up a video while watching? Now you can do it fast and simply with our new Speed controller extension. This is the best tool for managing your video speed on the whole web. Join the community of user who`ve already installed this app

User Growth

No data available

No user growth data available for this extension

Rating Count

No data available

No rating count data available for this extension

Average Rating

No data available

No rating data available for this extension

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High3

Medium2

Low0

Versions scanned

Showing 1 of 4 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.0 Code review	5

Extension Version	Code Review Findings
1.0	5

Files with findings

4 distinct paths — top paths by unique finding count:

scripts/fifth-js.js2
manifest.json1
scripts/second-js.js1
second-html.htm1

S.No.	Category	Severity	File	Summary	Found in Version
1	Obfuscation	high	scripts/fifth-js.js (line 1)	The entire content script body (all ~400 lines) is wrapped inside a `chrome.runtime.sendMessage({}, callback)` call. This is a well-documented anti-analysis technique: if the background page is absent or has been disa…	1.0
2	Remote Code Loading	high	second-html.htm (line 156)	The options page loads `scripts/some_page.js`, which does not exist anywhere in the packaged extension. This dangling script reference strongly suggests that a payload file was stripped from the package prior to distr…	1.0
3	Remote Code Loading	high	manifest.json (line 43)	The manifest declares `extension/static/*.js` as a web-accessible resource, but no `extension/static/` directory exists in the package. Making JavaScript files web-accessible allows any webpage to load them via `chrom…	1.0
4	Obfuscation	medium	scripts/second-js.js (line 1)	All constants and functions across every JavaScript file are systematically renamed to opaque numeric identifiers (`triv_first_const`, `twenty_first_function`, `sixty_second_function`, etc.). This level of obfuscation…	1.0
5	Unauthorized Data Collection	medium	scripts/fifth-js.js (line 155)	The content script actively enumerates all iframes on every visited page and attempts to access their `contentDocument`. Because the manifest declares `all_frames: true` and `<all_urls>`, this gives the script read ac…	1.0

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx
plus.google.com	/hangouts/*	https://plus.google.com/hangouts/*
hangouts.google.com	/hangouts/*	https://hangouts.google.com/hangouts/*
meet.google.com	/*	https://meet.google.com/*
teamtreehouse.com	/*	https://teamtreehouse.com/*
www.hitbox.tv	/*	http://www.hitbox.tv/*

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

1.1 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

It redirects me to an unkown web and then to yahoo search engine. Not reliable.

Jorge·23 Mar 2021

Essa extensão está causando Hijacking no meu browser. Toda vez que quero pesquisar no Google, ele me redireciona para a pesquisa do Yahoo, mesmo tendo o Google como principal Search Engine.

Daniel Santos·23 Mar 2021

Essa extens��o está causando Hijacking no meu browser. Toda vez que quero pesquisar no Google, ele me redireciona para a pesquisa do Yahoo, mesmo tendo o Google como principal Search Engine.

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Video Speed Control

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 4 Versions5

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Growth

Rating Count

Average Rating

User Reviews