Is "Gramlab" on Chrome Web Store Safe to Install?

[email protected] · chrome · v1.0.2

More story views, More Sales 💰 Unlock Instagram's full potential by automatically adding "Close Friends" list. Get 5-10x more story views, drive engagement, and grow your sales. Data Collection By syncing your account to Gramlab, we collect cookies and certain data to connect your account to Gramlab and to add users to your "Close Friends" list. The following information may be collected: - Instagram profile data (name, user ID, profile picture) - Cookies data for account connection and Close Friends functionality Transparency and Control We respect your privacy. You can access, modify, or delete your data at any time on app.gramlab.io. For more details, please refer to our privacy policy.

Risk Assessment

Analyzed
64.98
out of 100
MEDIUM

295 security findings detected across all analyzers

Chrome extension requesting 7 permissions

Severity Breakdown

0
Critical
27
High
267
Medium
1
Low
0
Info

Finding Categories

27
Malware Signatures
3
Network
260
IoC Indicators

YARA Rules Matched

9 rules(27 hits)
postinstall crypto operations DebuggerStatementsShouldNotBeUsed postinstall file download postinstall system command postinstall persistence mechanism postinstall network communication postinstall registry modification postinstall obfuscation postinstall file manipulation

Requested Permissions

7 permissions
cookies

Read and modify cookies on all sites

High
tabs
Medium
*://*.vercel.app/
Low
*://*.gramlab.io/
Low
https://*.instagram.com/*
Low
https://*.gramlab.io/*
Low
https://app.gramlab.io/*
Low

About This Extension

More story views, More Sales 💰 Unlock Instagram's full potential by automatically adding "Close Friends" list. Get 5-10x more story views, drive engagement, and grow your sales. Data Collection By syncing your account to Gramlab, we collect cookies and certain data to connect your account to Gramlab and to add users to your "Close Friends" list. The following information may be collected: - Instagram profile data (name, user ID, profile picture) - Cookies data for account connection and Close Friends functionality Transparency and Control We respect your privacy. You can access, modify, or delete your data at any time on app.gramlab.io. For more details, please refer to our privacy policy.

Detailed Findings

32 total

YARA Rule Matches

9 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

URLs
154
IP Addresses
16
Domains
98
Strings
260

All Indicators · 260

URL
detected URL: https://developer.chrome.com/docs/extensions/reference/contentSettings/#resource-identifiers).

XIOC detected URL: https://developer.chrome.com/docs/extensions/reference/contentSettings/#resource-identifiers).

extracted_from_files

Domain
detected Domain: chromiumapp.org

XIOC detected Domain: chromiumapp.org

extracted_from_files

IP
detected IP: ::af

XIOC detected IP: ::af

extracted_from_files

IP
detected IP: ::bef

XIOC detected IP: ::bef

extracted_from_files

IP
detected IP: ::53

XIOC detected IP: ::53

extracted_from_files

IP
detected IP: c4::

XIOC detected IP: c4::

extracted_from_files

IP
detected IP: ::

XIOC detected IP: ::

extracted_from_files

Domain
detected Domain: github.com

XIOC detected Domain: github.com

extracted_from_files

Domain
detected Domain: support.google.com

XIOC detected Domain: support.google.com

extracted_from_files

Domain
detected Domain: developer.chrome.com

XIOC detected Domain: developer.chrome.com

extracted_from_files

Domain
detected Domain: www.apache.org

XIOC detected Domain: www.apache.org

extracted_from_files

Domain
detected Domain: instagram.com

XIOC detected Domain: instagram.com

extracted_from_files

Domain
detected Domain: gramlab.io

XIOC detected Domain: gramlab.io

extracted_from_files

Domain
detected Domain: vercel.app

XIOC detected Domain: vercel.app

extracted_from_files

Domain
detected Domain: abc.рф

XIOC detected Domain: abc.рф

extracted_from_files

Domain
detected Domain: www.w3.org

XIOC detected Domain: www.w3.org

extracted_from_files

Domain
detected Domain: developer.mozilla.org

XIOC detected Domain: developer.mozilla.org

extracted_from_files

Domain
detected Domain: tools.ietf.org

XIOC detected Domain: tools.ietf.org

extracted_from_files

Domain
detected Domain: wiki.greasespot.net

XIOC detected Domain: wiki.greasespot.net

extracted_from_files

Domain
detected Domain: developer.bluetooth.org

XIOC detected Domain: developer.bluetooth.org

extracted_from_files

Domain
detected Domain: www.bluetooth.org

XIOC detected Domain: www.bluetooth.org

extracted_from_files

Domain
detected Domain: console.cloud.google.com

XIOC detected Domain: console.cloud.google.com

extracted_from_files

Domain
detected Domain: firebase.google.com

XIOC detected Domain: firebase.google.com

extracted_from_files

IP
detected Domain: en.wikipedia.org

XIOC detected Domain: en.wikipedia.org

extracted_from_files

Domain
detected Domain: publicsuffix.org

XIOC detected Domain: publicsuffix.org

extracted_from_files

Domain
detected Domain: developers.google.com

XIOC detected Domain: developers.google.com

extracted_from_files

Domain
detected Domain: w3c.github.io

XIOC detected Domain: w3c.github.io

extracted_from_files

Domain
detected Domain: abc.xn--p1ai

XIOC detected Domain: abc.xn--p1ai

extracted_from_files

Domain
detected Domain: chromeenterprise.google

XIOC detected Domain: chromeenterprise.google

extracted_from_files

Domain
detected Domain: chromium.org

XIOC detected Domain: chromium.org

extracted_from_files

Domain
detected Domain: example.com

XIOC detected Domain: example.com

extracted_from_files

Domain
detected Domain: chromium.googlesource.com

XIOC detected Domain: chromium.googlesource.com

extracted_from_files

Domain
detected Domain: code.google.com

XIOC detected Domain: code.google.com

extracted_from_files

Domain
detected Domain: <app-id>.chromiumapp.org

XIOC detected Domain: <app-id>.chromiumapp.org

extracted_from_files

Domain
detected Domain: src.chromium.org

XIOC detected Domain: src.chromium.org

extracted_from_files

Domain
detected Domain: tabs.tab

XIOC detected Domain: tabs.tab

extracted_from_files

Domain
detected Domain: accessibilityfeatures.read

XIOC detected Domain: accessibilityfeatures.read

extracted_from_files

Domain
detected Domain: www.bar.com

XIOC detected Domain: www.bar.com

extracted_from_files

Domain
detected Domain: www.foo.com

XIOC detected Domain: www.foo.com

extracted_from_files

Domain
detected Domain: dev.w3.org

XIOC detected Domain: dev.w3.org

extracted_from_files

Domain
detected Domain: goo.gl

XIOC detected Domain: goo.gl

extracted_from_files

Domain
detected Domain: www.iana.org

XIOC detected Domain: www.iana.org

extracted_from_files

Domain
detected Domain: tabs.tab.id

XIOC detected Domain: tabs.tab.id

extracted_from_files

Domain
detected Domain: a.example.com

XIOC detected Domain: a.example.com

extracted_from_files

Domain
detected Domain: www.google.com

XIOC detected Domain: www.google.com

extracted_from_files

Domain
detected Domain: chrome.audio

XIOC detected Domain: chrome.audio

extracted_from_files

Domain
detected Domain: createdwindow.contentwindow.foo

XIOC detected Domain: createdwindow.contentwindow.foo

extracted_from_files

Domain
detected Domain: api.cc

XIOC detected Domain: api.cc

extracted_from_files

Domain
detected Domain: date.now

XIOC detected Domain: date.now

extracted_from_files

Domain
detected Domain: downloads.open

XIOC detected Domain: downloads.open

extracted_from_files

Domain
detected Domain: chrome.downloads.search

XIOC detected Domain: chrome.downloads.search

extracted_from_files

Domain
detected Domain: optiontype.int

XIOC detected Domain: optiontype.int

extracted_from_files

Domain
detected Domain: schema.md

XIOC detected Domain: schema.md

extracted_from_files

Domain
detected Domain: schema.userflow.md

XIOC detected Domain: schema.userflow.md

extracted_from_files

Domain
detected Domain: devtools.network

XIOC detected Domain: devtools.network

extracted_from_files

Domain
detected Domain: chrome.devtools.network

XIOC detected Domain: chrome.devtools.network

extracted_from_files

Domain
detected Domain: drive.google.com

XIOC detected Domain: drive.google.com

extracted_from_files

Domain
detected Domain: appspot.com

XIOC detected Domain: appspot.com

extracted_from_files

Domain
detected Domain: google.com

XIOC detected Domain: google.com

extracted_from_files

Domain
detected Domain: implicit.is

XIOC detected Domain: implicit.is

extracted_from_files

Domain
detected Domain: foo.com

XIOC detected Domain: foo.com

extracted_from_files

Domain
detected Domain: www.foobar.com

XIOC detected Domain: www.foobar.com

extracted_from_files

Domain
detected Domain: chrome.events

XIOC detected Domain: chrome.events

extracted_from_files

Domain
detected Domain: proxylocation.host

XIOC detected Domain: proxylocation.host

extracted_from_files

Domain
detected Domain: spec.md

XIOC detected Domain: spec.md

extracted_from_files

Domain
detected Domain: app.gramlab.io

XIOC detected Domain: app.gramlab.io

extracted_from_files

Domain
detected Domain: clients2.google.com

XIOC detected Domain: clients2.google.com

extracted_from_files

Domain
detected Domain: identity.email

XIOC detected Domain: identity.email

extracted_from_files

Domain
detected Domain: languages.cc

XIOC detected Domain: languages.cc

extracted_from_files

Domain
detected Domain: history.search

XIOC detected Domain: history.search

extracted_from_files

Domain
detected Domain: chrome.search

XIOC detected Domain: chrome.search

extracted_from_files

Domain
detected Domain: stackoverflow.com

XIOC detected Domain: stackoverflow.com

extracted_from_files

Domain
detected Domain: wifi.security

XIOC detected Domain: wifi.security

extracted_from_files

Domain
detected Domain: networkproperties.name

XIOC detected Domain: networkproperties.name

extracted_from_files

IP
detected Domain: wifiproperties.security

XIOC detected Domain: wifiproperties.security

extracted_from_files

Domain
detected Domain: vpnproperties.host

XIOC detected Domain: vpnproperties.host

extracted_from_files

Domain
detected Domain: cellularproperties.family

XIOC detected Domain: cellularproperties.family

extracted_from_files

Domain
detected Domain: chrome.system.storage

XIOC detected Domain: chrome.system.storage

extracted_from_files

Domain
detected Domain: system.network

XIOC detected Domain: system.network

extracted_from_files

Domain
detected Domain: chrome.system.network

XIOC detected Domain: chrome.system.network

extracted_from_files

Domain
detected Domain: bounds.top

XIOC detected Domain: bounds.top

extracted_from_files

Domain
detected Domain: chrome.storage

XIOC detected Domain: chrome.storage

extracted_from_files

Domain
detected Domain: sessions.session.tab

XIOC detected Domain: sessions.session.tab

extracted_from_files

Domain
detected Domain: connectionoptions.name

XIOC detected Domain: connectionoptions.name

extracted_from_files

Domain
detected Domain: ß.ac

XIOC detected Domain: ß.ac

extracted_from_files

Domain
detected Domain: chrome.windows

XIOC detected Domain: chrome.windows

extracted_from_files

Domain
detected Domain: www.evil.com

XIOC detected Domain: www.evil.com

extracted_from_files

Domain
detected Domain: dir.md

XIOC detected Domain: dir.md

extracted_from_files

Domain
detected Domain: tabgroups.tab

XIOC detected Domain: tabgroups.tab

extracted_from_files

Domain
detected Domain: chrome.tabs.tab

XIOC detected Domain: chrome.tabs.tab

extracted_from_files

Domain
detected Domain: system.storage

XIOC detected Domain: system.storage

extracted_from_files

Domain
detected Domain: userdata.is

XIOC detected Domain: userdata.is

extracted_from_files

Domain
detected Domain: data.phone

XIOC detected Domain: data.phone

extracted_from_files

Domain
detected Domain: data.email

XIOC detected Domain: data.email

extracted_from_files

Domain
detected Domain: gramlabauthcookie.name

XIOC detected Domain: gramlabauthcookie.name

extracted_from_files

Domain
detected Domain: cookie.name

XIOC detected Domain: cookie.name

extracted_from_files

Domain
detected Domain: www.instagram.com

XIOC detected Domain: www.instagram.com

extracted_from_files

Domain
detected Domain: toast.show

XIOC detected Domain: toast.show

extracted_from_files

URL
detected URL: https://*.instagram.com/*

XIOC detected URL: https://*.instagram.com/*

extracted_from_files

URL
detected URL: https://clients2.google.com/service/update2/crx

XIOC detected URL: https://clients2.google.com/service/update2/crx

extracted_from_files

Domain
detected Domain: registry.yarnpkg.com

XIOC detected Domain: registry.yarnpkg.com

extracted_from_files

Domain
detected Domain: fonts.googleapis.com

XIOC detected Domain: fonts.googleapis.com

extracted_from_files

Domain
detected Domain: tab.id

XIOC detected Domain: tab.id

extracted_from_files

Domain
detected Domain: response.data.target

XIOC detected Domain: response.data.target

extracted_from_files

Domain
detected Domain: response.data

XIOC detected Domain: response.data

extracted_from_files

URL
detected URL: https://developer.chrome.com/docs/extensions/develop/concepts/declare-permissions#declarativeNetRequestFeedback)

XIOC detected URL: https://developer.chrome.com/docs/extensions/develop/concepts/declare-permissions#declarativeNetRequestFeedback)

extracted_from_files

URL
detected URL: https://developer.chrome.com/docs/extensions/reference/declarativeNetRequest/#setExtensionActionOptions)

XIOC detected URL: https://developer.chrome.com/docs/extensions/reference/declarativeNetRequest/#setExtensionActionOptions)

extracted_from_files

URL
detected URL: https://developer.chrome.com/docs/extensions/reference/types/#ChromeSetting)

XIOC detected URL: https://developer.chrome.com/docs/extensions/reference/types/#ChromeSetting)

extracted_from_files

URL
detected URL: http://www.apache.org/licenses/LICENSE-2.0

XIOC detected URL: http://www.apache.org/licenses/LICENSE-2.0

extracted_from_files

URL
detected URL: http://www.apache.org/licenses/

XIOC detected URL: http://www.apache.org/licenses/

extracted_from_files

URL
detected URL: https://app.gramlab.io/*

XIOC detected URL: https://app.gramlab.io/*

extracted_from_files

URL
detected URL: https://*.gramlab.io/*

XIOC detected URL: https://*.gramlab.io/*

extracted_from_files

URL
detected URL: https://developer.chrome.com/docs/apps/app_lifecycle)).

XIOC detected URL: https://developer.chrome.com/docs/apps/app_lifecycle)).

extracted_from_files

URL
detected URL: https://developer.bluetooth.org/TechnologyOverview/Pages/GATT.aspx).

XIOC detected URL: https://developer.bluetooth.org/TechnologyOverview/Pages/GATT.aspx).

extracted_from_files

URL
detected URL: http://www.bluetooth.org/en-us/specification/assigned-numbers/baseband.

XIOC detected URL: http://www.bluetooth.org/en-us/specification/assigned-numbers/baseband.

extracted_from_files

URL
detected URL: https://developer.chrome.com/docs/apps/api_other)

XIOC detected URL: https://developer.chrome.com/docs/apps/api_other)

extracted_from_files

URL
detected URL: https://github.com/GoogleChrome/chrome-app-samples/tree/master/samples/window-state)

XIOC detected URL: https://github.com/GoogleChrome/chrome-app-samples/tree/master/samples/window-state)

extracted_from_files

URL
detected URL: https://support.google.com/chrome/a/answer/3017014).

XIOC detected URL: https://support.google.com/chrome/a/answer/3017014).

extracted_from_files

URL
detected URL: https://support.google.com/chromebook/answer/3134673).

XIOC detected URL: https://support.google.com/chromebook/answer/3134673).

extracted_from_files

URL
detected URL: https://developer.chrome.com/extensions/develop/concepts/match-patterns)

XIOC detected URL: https://developer.chrome.com/extensions/develop/concepts/match-patterns)

extracted_from_files

URL
detected URL: https://developer.chrome.com/docs/extensions/reference/browserAction/#popup).

XIOC detected URL: https://developer.chrome.com/docs/extensions/reference/browserAction/#popup).

extracted_from_files

URL
detected URL: https://developer.chrome.com/docs/extensions/reference/browserAction/#badge),

XIOC detected URL: https://developer.chrome.com/docs/extensions/reference/browserAction/#badge),

extracted_from_files

URL
detected URL: https://developer.chrome.com/docs/extensions/reference/browserAction/#tooltip),

XIOC detected URL: https://developer.chrome.com/docs/extensions/reference/browserAction/#tooltip),

extracted_from_files

URL
detected URL: https://developer.chrome.com/docs/extensions/reference/browserAction/#icon),

XIOC detected URL: https://developer.chrome.com/docs/extensions/reference/browserAction/#icon),

extracted_from_files

URL
detected URL: https://developer.chrome.com/docs/extensions/override),

XIOC detected URL: https://developer.chrome.com/docs/extensions/override),

extracted_from_files

URL
detected URL: https://developer.chrome.com/apps/manifest/bluetooth

XIOC detected URL: https://developer.chrome.com/apps/manifest/bluetooth

extracted_from_files

URL
detected URL: https://developer.chrome.com/docs/extensions/develop/concepts/match-patterns).

XIOC detected URL: https://developer.chrome.com/docs/extensions/develop/concepts/match-patterns).

extracted_from_files

URL
detected URL: https://developer.chrome.com/docs/extensions/reference/webNavigation/#frame_ids)

XIOC detected URL: https://developer.chrome.com/docs/extensions/reference/webNavigation/#frame_ids)

extracted_from_files

URL
detected URL: https://developer.chrome.com/docs/privacy-sandbox/trust-tokens/).

XIOC detected URL: https://developer.chrome.com/docs/privacy-sandbox/trust-tokens/).

extracted_from_files

URL
detected URL: https://developer.chrome.com/docs/extensions/reference/contentSettings/#patterns).

XIOC detected URL: https://developer.chrome.com/docs/extensions/reference/contentSettings/#patterns).

extracted_from_files

URL
detected URL: https://www.iana.org/assignments/ipp-registrations/ipp-registrations.xhtml)

XIOC detected URL: https://www.iana.org/assignments/ipp-registrations/ipp-registrations.xhtml)

extracted_from_files

URL
detected URL: https://wiki.greasespot.net/Metadata_Block#.40include)

XIOC detected URL: https://wiki.greasespot.net/Metadata_Block#.40include)

extracted_from_files

URL
detected URL: https://developer.chrome.com/docs/extensions/develop/concepts/activeTab)

XIOC detected URL: https://developer.chrome.com/docs/extensions/develop/concepts/activeTab)

extracted_from_files

URL
detected URL: https://developer.chrome.com/docs/extensions/develop/concepts/declare-permissions#host-permissions),

XIOC detected URL: https://developer.chrome.com/docs/extensions/develop/concepts/declare-permissions#host-permissions),

extracted_from_files

URL
detected URL: https://developer.chrome.com/docs/extensions/develop/concepts/declare-permissions).

XIOC detected URL: https://developer.chrome.com/docs/extensions/develop/concepts/declare-permissions).

extracted_from_files

URL
detected URL: https://www.w3.org/TR/selectors4/#compound)

XIOC detected URL: https://www.w3.org/TR/selectors4/#compound)

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Web/API/ImageData](https://developer.mozilla.org/en-US/docs/Web/API/ImageData).

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/API/ImageData](https://developer.mozilla.org/en-US/docs/Web/API/ImageData).

extracted_from_files

URL
detected URL: https://developer.chrome.com/devtools/docs/debugger-protocol).

XIOC detected URL: https://developer.chrome.com/devtools/docs/debugger-protocol).

extracted_from_files

URL
detected URL: https://tools.ietf.org/html/draft-west-first-party-cookies).

XIOC detected URL: https://tools.ietf.org/html/draft-west-first-party-cookies).

extracted_from_files

URL
detected URL: https://developer.chrome.com/docs/extensions/reference/declarativeNetRequest/#global-static-rule-limit)

XIOC detected URL: https://developer.chrome.com/docs/extensions/reference/declarativeNetRequest/#global-static-rule-limit)

extracted_from_files

URL
detected URL: https://developer.chrome.com/docs/extensions/reference/declarativeNetRequest/#global-static-rule-limit).

XIOC detected URL: https://developer.chrome.com/docs/extensions/reference/declarativeNetRequest/#global-static-rule-limit).

extracted_from_files

URL
detected URL: http://abc.xn--p1ai/?q=%D1%84.

XIOC detected URL: http://abc.xn--p1ai/?q=%D1%84.

extracted_from_files

URL
detected URL: http://abc.

XIOC detected URL: http://abc.

extracted_from_files

URL
detected URL: https://github.com/google/re2/wiki/Syntax).

XIOC detected URL: https://github.com/google/re2/wiki/Syntax).

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Web/API/ImageData)

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/API/ImageData)

extracted_from_files

URL
detected URL: https://developer.chrome.com/docs/extensions/develop/concepts/declare-permissions#host-permissions).

XIOC detected URL: https://developer.chrome.com/docs/extensions/develop/concepts/declare-permissions#host-permissions).

extracted_from_files

URL
detected URL: https://developers.google.com/admin-sdk/directory/v1/guides/manage-chrome-devices),

XIOC detected URL: https://developers.google.com/admin-sdk/directory/v1/guides/manage-chrome-devices),

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Web/API/ShadowRoot](https://developer.mozilla.org/en-US/docs/Web/API/ShadowRoot)

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/API/ShadowRoot](https://developer.mozilla.org/en-US/docs/Web/API/ShadowRoot)

extracted_from_files

URL
detected URL: https://github.com/puppeteer/replay/blob/main/docs/api/modules/Schema.md#step).

XIOC detected URL: https://github.com/puppeteer/replay/blob/main/docs/api/modules/Schema.md#step).

extracted_from_files

URL
detected URL: https://github.com/puppeteer/replay/blob/main/docs/api/interfaces/Schema.UserFlow.md).

XIOC detected URL: https://github.com/puppeteer/replay/blob/main/docs/api/interfaces/Schema.UserFlow.md).

extracted_from_files

URL
detected URL: https://w3c.github.io/mediacapture-screen-share/#dom-selfcapturepreferenceenum).

XIOC detected URL: https://w3c.github.io/mediacapture-screen-share/#dom-selfcapturepreferenceenum).

extracted_from_files

URL
detected URL: https://w3c.github.io/mediacapture-screen-share/#dom-systemaudiopreferenceenum).

XIOC detected URL: https://w3c.github.io/mediacapture-screen-share/#dom-systemaudiopreferenceenum).

extracted_from_files

URL
detected URL: https://github.com/google/re2/blob/master/doc/syntax.txt).

XIOC detected URL: https://github.com/google/re2/blob/master/doc/syntax.txt).

extracted_from_files

URL
detected URL: https://www.w3.org/TR/css3-cascade/#cascading-origins)

XIOC detected URL: https://www.w3.org/TR/css3-cascade/#cascading-origins)

extracted_from_files

URL
detected URL: http://*.appspot.com/*

XIOC detected URL: http://*.appspot.com/*

extracted_from_files

URL
detected URL: http://*.chromium.org/*

XIOC detected URL: http://*.chromium.org/*

extracted_from_files

URL
detected URL: https://publicsuffix.org/list/);

XIOC detected URL: https://publicsuffix.org/list/);

extracted_from_files

URL
detected URL: https://developer.chrome.com/docs/extensions/messaging).

XIOC detected URL: https://developer.chrome.com/docs/extensions/messaging).

extracted_from_files

URL
detected URL: https://developer.chrome.com/docs/extensions/reference/events/#filtered).

XIOC detected URL: https://developer.chrome.com/docs/extensions/reference/events/#filtered).

extracted_from_files

URL
detected URL: https://www.w3.org/TR/WebCryptoAPI/#subtlecrypto-interface)

XIOC detected URL: https://www.w3.org/TR/WebCryptoAPI/#subtlecrypto-interface)

extracted_from_files

URL
detected URL: https://developer.chrome.com/extensions/develop/ui/override-chrome-pages).

XIOC detected URL: https://developer.chrome.com/extensions/develop/ui/override-chrome-pages).

extracted_from_files

URL
detected URL: https://firebase.google.com/docs/cloud-messaging/js/client)

XIOC detected URL: https://firebase.google.com/docs/cloud-messaging/js/client)

extracted_from_files

URL
detected URL: https://console.cloud.google.com/apis/dashboard).

XIOC detected URL: https://console.cloud.google.com/apis/dashboard).

extracted_from_files

URL
detected URL: https://firebase.google.com/docs/cloud-messaging/concept-options#lifetime)

XIOC detected URL: https://firebase.google.com/docs/cloud-messaging/concept-options#lifetime)

extracted_from_files

URL
detected URL: https://firebase.google.com/docs/cloud-messaging/concept-options#collapsible_and_non-collapsible_messages)

XIOC detected URL: https://firebase.google.com/docs/cloud-messaging/concept-options#collapsible_and_non-collapsible_messages)

extracted_from_files

URL
detected URL: https://firebase.google.com/docs/cloud-messaging/)

XIOC detected URL: https://firebase.google.com/docs/cloud-messaging/)

extracted_from_files

URL
detected URL: https://en.wikipedia.org/wiki/Cross-site_scripting)

XIOC detected URL: https://en.wikipedia.org/wiki/Cross-site_scripting)

extracted_from_files

URL
detected URL: http://www.w3.org/TR/DOM-Level-3-Events/#events-KeyboardEvent

XIOC detected URL: http://www.w3.org/TR/DOM-Level-3-Events/#events-KeyboardEvent

extracted_from_files

URL
detected URL: https://

XIOC detected URL: https://

extracted_from_files

URL
detected URL: https://developer.chrome.com/docs/apps/app_identity#update_manifest).

XIOC detected URL: https://developer.chrome.com/docs/apps/app_identity#update_manifest).

extracted_from_files

URL
detected URL: https://developer.chrome.com/extensions/how-to/ui/localization-message-formats)

XIOC detected URL: https://developer.chrome.com/extensions/how-to/ui/localization-message-formats)

extracted_from_files

URL
detected URL: https://src.chromium.org/viewvc/chrome/trunk/src/third_party/cld/languages/internal/languages.cc).

XIOC detected URL: https://src.chromium.org/viewvc/chrome/trunk/src/third_party/cld/languages/internal/languages.cc).

extracted_from_files

URL
detected URL: https://developer.chrome.com/docs/extensions/reference/history/#transition_types)

XIOC detected URL: https://developer.chrome.com/docs/extensions/reference/history/#transition_types)

extracted_from_files

URL
detected URL: http://www.w3.org/TR/discovery-api/

XIOC detected URL: http://www.w3.org/TR/discovery-api/

extracted_from_files

URL
detected URL: https://developer.chrome.com/extensions/develop/concepts/permission-warnings)

XIOC detected URL: https://developer.chrome.com/extensions/develop/concepts/permission-warnings)

extracted_from_files

URL
detected URL: https://developer.chrome.com/docs/extensions/reference/manifest/icons)

XIOC detected URL: https://developer.chrome.com/docs/extensions/reference/manifest/icons)

extracted_from_files

URL
detected URL: https://developer.chrome.com/docs/extensions/reference/manifest/version#version_name)

XIOC detected URL: https://developer.chrome.com/docs/extensions/reference/manifest/version#version_name)

extracted_from_files

URL
detected URL: https://developer.chrome.com/docs/extensions/reference/manifest/version)

XIOC detected URL: https://developer.chrome.com/docs/extensions/reference/manifest/version)

extracted_from_files

URL
detected URL: https://developer.chrome.com/extensions/develop/ui/override-chrome-pages)

XIOC detected URL: https://developer.chrome.com/extensions/develop/ui/override-chrome-pages)

extracted_from_files

URL
detected URL: https://code.google.com/apis/console).

XIOC detected URL: https://code.google.com/apis/console).

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Web/API/Window/matchMedia).

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/API/Window/matchMedia).

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Web/API/Battery_Status_API).

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/API/Battery_Status_API).

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Web/API/Window/localStorage).

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/API/Window/localStorage).

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Web/API/Clipboard_API).

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/API/Clipboard_API).

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Web/API/WebRTC_API).

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/API/WebRTC_API).

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Web/API/DOMParser).

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/API/DOMParser).

extracted_from_files

URL
detected URL: https://chromium.googlesource.com/chromium/src/+/main/components/onc/docs/onc_spec.md)

XIOC detected URL: https://chromium.googlesource.com/chromium/src/+/main/components/onc/docs/onc_spec.md)

extracted_from_files

URL
detected URL: https://www.w3.org/TR/WebCryptoAPI/#SubtleCrypto-method-importKey)

XIOC detected URL: https://www.w3.org/TR/WebCryptoAPI/#SubtleCrypto-method-importKey)

extracted_from_files

URL
detected URL: https://www.w3.org/TR/WebCryptoAPI/#key-algorithm-dictionary)

XIOC detected URL: https://www.w3.org/TR/WebCryptoAPI/#key-algorithm-dictionary)

extracted_from_files

URL
detected URL: http://example.com/

XIOC detected URL: http://example.com/

extracted_from_files

URL
detected URL: https://developer.chrome.com/docs/extensions/content_scripts).

XIOC detected URL: https://developer.chrome.com/docs/extensions/content_scripts).

extracted_from_files

URL
detected URL: https://developer.chrome.com/docs/extensions/develop/concepts/content-scripts).

XIOC detected URL: https://developer.chrome.com/docs/extensions/develop/concepts/content-scripts).

extracted_from_files

Hash
detected SHA1 Hash: 84196059a0455d3c89b5621064c0cb060643704a

XIOC detected SHA1 Hash: 84196059a0455d3c89b5621064c0cb060643704a

extracted_from_files

URL
detected URL: https://registry.yarnpkg.com/chrome-types/-/chrome-types-0.1.281.tgz#99224f8169f81934c467a805f34128a388928265

XIOC detected URL: https://registry.yarnpkg.com/chrome-types/-/chrome-types-0.1.281.tgz#99224f8169f81934c467a805f34128a388928265

extracted_from_files

IP
detected IP: 0.0.0.0

XIOC detected IP: 0.0.0.0

extracted_from_files

URL
detected URL: https://chromeenterprise.google/policies/#PrintingAPIExtensionsAllowlist)

XIOC detected URL: https://chromeenterprise.google/policies/#PrintingAPIExtensionsAllowlist)

extracted_from_files

URL
detected URL: https://chromium.org/administrators/policy-list-3#DefaultPrinterSelection)

XIOC detected URL: https://chromium.org/administrators/policy-list-3#DefaultPrinterSelection)

extracted_from_files

URL
detected URL: https://developers.google.com/cloud-print/docs/cdd#cjt)

XIOC detected URL: https://developers.google.com/cloud-print/docs/cdd#cjt)

extracted_from_files

URL
detected URL: https://developers.google.com/cloud-print/docs/cdd#cdd).

XIOC detected URL: https://developers.google.com/cloud-print/docs/cdd#cdd).

extracted_from_files

URL
detected URL: https://developers.google.com/cloud-print/docs/cdd#cjt).

XIOC detected URL: https://developers.google.com/cloud-print/docs/cdd#cjt).

extracted_from_files

URL
detected URL: https://www.w3.org/TR/WebCryptoAPI/#dfn-CryptoKey)

XIOC detected URL: https://www.w3.org/TR/WebCryptoAPI/#dfn-CryptoKey)

extracted_from_files

URL
detected URL: https://support.google.com/chrome/answer/7343019).

XIOC detected URL: https://support.google.com/chrome/answer/7343019).

extracted_from_files

URL
detected URL: https://developer.chrome.com/docs/extensions/reference/api/types#type-ChromeSetting)

XIOC detected URL: https://developer.chrome.com/docs/extensions/reference/api/types#type-ChromeSetting)

extracted_from_files

URL
detected URL: https://developer.chrome.com/docs/privacy-sandbox/related-website-sets/)

XIOC detected URL: https://developer.chrome.com/docs/privacy-sandbox/related-website-sets/)

extracted_from_files

URL
detected URL: https://developer.chrome.com/docs/privacy-sandbox/private-aggregation/)

XIOC detected URL: https://developer.chrome.com/docs/privacy-sandbox/private-aggregation/)

extracted_from_files

URL
detected URL: https://developer.chrome.com/en/docs/privacy-sandbox/attribution-reporting/)

XIOC detected URL: https://developer.chrome.com/en/docs/privacy-sandbox/attribution-reporting/)

extracted_from_files

URL
detected URL: https://developer.chrome.com/docs/privacy-sandbox/fledge/)

XIOC detected URL: https://developer.chrome.com/docs/privacy-sandbox/fledge/)

extracted_from_files

URL
detected URL: https://developer.chrome.com/en/docs/privacy-sandbox/topics/)

XIOC detected URL: https://developer.chrome.com/en/docs/privacy-sandbox/topics/)

extracted_from_files

URL
detected URL: https://developer.chrome.com/docs/extensions/reference/manifest/externally-connectable).

XIOC detected URL: https://developer.chrome.com/docs/extensions/reference/manifest/externally-connectable).

extracted_from_files

URL
detected URL: https://developer.chrome.com/docs/extensions/manifest/externally_connectable).

XIOC detected URL: https://developer.chrome.com/docs/extensions/manifest/externally_connectable).

extracted_from_files

URL
detected URL: https://developer.chrome.com/docs/extensions/reference/manifest).

XIOC detected URL: https://developer.chrome.com/docs/extensions/reference/manifest).

extracted_from_files

URL
detected URL: https://developer.chrome.com/docs/extensions/develop/ui/options-page#full_page)

XIOC detected URL: https://developer.chrome.com/docs/extensions/develop/ui/options-page#full_page)

extracted_from_files

URL
detected URL: https://developer.chrome.com/docs/extensions/develop/ui/options-page#embedded_options)

XIOC detected URL: https://developer.chrome.com/docs/extensions/develop/ui/options-page#embedded_options)

extracted_from_files

URL
detected URL: https://developer.chrome.com/docs/extensions/messaging#port-lifetime)).

XIOC detected URL: https://developer.chrome.com/docs/extensions/messaging#port-lifetime)).

extracted_from_files

URL
detected URL: https://developer.chrome.com/docs/extensions/messaging#connect)

XIOC detected URL: https://developer.chrome.com/docs/extensions/messaging#connect)

extracted_from_files

URL
detected URL: http://dev.w3.org/2009/dap/file-system/file-dir-sys.html](https://dev.w3.org/2009/dap/file-system/file-dir-sys.html)).

XIOC detected URL: http://dev.w3.org/2009/dap/file-system/file-dir-sys.html](https://dev.w3.org/2009/dap/file-system/file-dir-sys.html)).

extracted_from_files

URL
detected URL: https://developer.chrome.com/docs/extensions/app_storage)

XIOC detected URL: https://developer.chrome.com/docs/extensions/app_storage)

extracted_from_files

URL
detected URL: https://developer.chrome.com/docs/extensions/reference/manifest/storage).

XIOC detected URL: https://developer.chrome.com/docs/extensions/reference/manifest/storage).

extracted_from_files

URL
detected URL: http://goo.gl/6vqbj

XIOC detected URL: http://goo.gl/6vqbj

extracted_from_files

URL
detected URL: https://developer.chrome.com/docs/extensions/reference/webNavigation/#document_ids)

XIOC detected URL: https://developer.chrome.com/docs/extensions/reference/webNavigation/#document_ids)

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Glossary/Style_origin)

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Glossary/Style_origin)

extracted_from_files

URL
detected URL: https://developer.chrome.com/extensions/develop/concepts/native-messaging)

XIOC detected URL: https://developer.chrome.com/extensions/develop/concepts/native-messaging)

extracted_from_files

URL
detected URL: https://developer.chrome.com/docs/extensions/develop/concepts/match-patterns)

XIOC detected URL: https://developer.chrome.com/docs/extensions/develop/concepts/match-patterns)

extracted_from_files

URL
detected URL: https://developer.chrome.com/docs/extensions/develop/concepts/content-scripts#programmatic)

XIOC detected URL: https://developer.chrome.com/docs/extensions/develop/concepts/content-scripts#programmatic)

extracted_from_files

URL
detected URL: https://developer.chrome.com/extensions/develop/concepts/declare-permissions)

XIOC detected URL: https://developer.chrome.com/extensions/develop/concepts/declare-permissions)

extracted_from_files

URL
detected URL: https://developer.chrome.com/docs/extensions/match_patterns).

XIOC detected URL: https://developer.chrome.com/docs/extensions/match_patterns).

extracted_from_files

URL
detected URL: http://www.google.com',

XIOC detected URL: http://www.google.com',

extracted_from_files

URL
detected URL: https://developer.chrome.com/docs/extensions/reference/windows/#current-window).

XIOC detected URL: https://developer.chrome.com/docs/extensions/reference/windows/#current-window).

extracted_from_files

URL
detected URL: https://developer.chrome.com/docs/extensions/activeTab#invoking-activeTab)

XIOC detected URL: https://developer.chrome.com/docs/extensions/activeTab#invoking-activeTab)

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/DOM/window.postMessage)

XIOC detected URL: https://developer.mozilla.org/en-US/docs/DOM/window.postMessage)

extracted_from_files

URL
detected URL: https://developer.chrome.com/docs/extensions/content_scripts)

XIOC detected URL: https://developer.chrome.com/docs/extensions/content_scripts)

extracted_from_files

URL
detected URL: https://developer.chrome.com/docs/extensions/reference/webviewTag/#usage)).

XIOC detected URL: https://developer.chrome.com/docs/extensions/reference/webviewTag/#usage)).

extracted_from_files

URL
detected URL: https://chromium.googlesource.com/chromium/src/+/main/docs/user_data_dir.md#default-location)

XIOC detected URL: https://chromium.googlesource.com/chromium/src/+/main/docs/user_data_dir.md#default-location)

extracted_from_files

URL
detected URL: https://w3c.github.io/webauthn/#dom-publickeycredential-tojson

XIOC detected URL: https://w3c.github.io/webauthn/#dom-publickeycredential-tojson

extracted_from_files

URL
detected URL: https://w3c.github.io/webauthn/#sctn-parseRequestOptionsFromJSON).

XIOC detected URL: https://w3c.github.io/webauthn/#sctn-parseRequestOptionsFromJSON).

extracted_from_files

URL
detected URL: https://w3c.github.io/webauthn/#sctn-parseCreationOptionsFromJSON).

XIOC detected URL: https://w3c.github.io/webauthn/#sctn-parseCreationOptionsFromJSON).

extracted_from_files

URL
detected URL: https://www.w3.org/TR/html51/browsers.html#unit-of-related-browsing-contexts)

XIOC detected URL: https://www.w3.org/TR/html51/browsers.html#unit-of-related-browsing-contexts)

extracted_from_files

URL
detected URL: https://developer.chrome.com/docs/extensions/reference/windows/#the_current_window).

XIOC detected URL: https://developer.chrome.com/docs/extensions/reference/windows/#the_current_window).

extracted_from_files

URL
detected URL: https://developer.chrome.com/docs/extensions/reference/webviewTag/#partition).

XIOC detected URL: https://developer.chrome.com/docs/extensions/reference/webviewTag/#partition).

extracted_from_files

URL
detected URL: http://www.foo.com/*';

XIOC detected URL: http://www.foo.com/*';

extracted_from_files

URL
detected URL: http://www.foo.com';

XIOC detected URL: http://www.foo.com';

extracted_from_files

URL
detected URL: http://www.bar.com/*'],

XIOC detected URL: http://www.bar.com/*'],

extracted_from_files

URL
detected URL: http://www.foo.com/*'],

XIOC detected URL: http://www.foo.com/*'],

extracted_from_files

URL
detected URL: https://www.instagram.com/api/v1/accounts/edit/web_form_data/

XIOC detected URL: https://www.instagram.com/api/v1/accounts/edit/web_form_data/

extracted_from_files

URL
detected URL: https://app.gramlab.io/api/sync-instagram-account

XIOC detected URL: https://app.gramlab.io/api/sync-instagram-account

extracted_from_files

URL
detected URL: https://app.gramlab.io

XIOC detected URL: https://app.gramlab.io

extracted_from_files

URL
detected URL: https://www.instagram.com/

XIOC detected URL: https://www.instagram.com/

extracted_from_files

URL
detected URL: https://github.com/GoogleChrome/chrome-types

XIOC detected URL: https://github.com/GoogleChrome/chrome-types

extracted_from_files

URL
detected URL: https://github.com/GoogleChrome/chrome-types/issues

XIOC detected URL: https://github.com/GoogleChrome/chrome-types/issues

extracted_from_files

URL
detected URL: https://github.com/GoogleChrome/chrome-types.git

XIOC detected URL: https://github.com/GoogleChrome/chrome-types.git

extracted_from_files

URL
detected URL: https://fonts.googleapis.com/css2?family=Poppins:wght@400;500;600;700&display=swap');

XIOC detected URL: https://fonts.googleapis.com/css2?family=Poppins:wght@400;500;600;700&display=swap');

extracted_from_files

URL
detected URL: https://app.gramlab.io/api/instagram-profile-picture/$

XIOC detected URL: https://app.gramlab.io/api/instagram-profile-picture/$

extracted_from_files

URL
detected URL: https://app.gramlab.io/$

XIOC detected URL: https://app.gramlab.io/$

extracted_from_files

URL
detected URL: https://www.instagram.com

XIOC detected URL: https://www.instagram.com

extracted_from_files

URL
detected URL: https://www.instagram.com/api/v1/users/web_profile_info/?username=$

XIOC detected URL: https://www.instagram.com/api/v1/users/web_profile_info/?username=$

extracted_from_files

Hash
detected SHA1 Hash: 99224f8169f81934c467a805f34128a388928265

XIOC detected SHA1 Hash: 99224f8169f81934c467a805f34128a388928265

extracted_from_files

URL
detected URL: https://developer.chrome.com/docs/extensions/develop/concepts/declare-permissions)

XIOC detected URL: https://developer.chrome.com/docs/extensions/develop/concepts/declare-permissions)

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Web/API/Navigator/geolocation).

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/API/Navigator/geolocation).

extracted_from_files

Domain
detected Domain: chrome.management

XIOC detected Domain: chrome.management

extracted_from_files

URL
detected URL: https://wiki.greasespot.net/Metadata_Block#.40exclude)

XIOC detected URL: https://wiki.greasespot.net/Metadata_Block#.40exclude)

extracted_from_files

Security Analysis Summary

Security Analysis Overview

Gramlab is a Chrome Web Store extension published by [email protected]. Version 1.0.2 has been analyzed by the Risky Plugins security platform, receiving a risk score of 64.98/100 (MEDIUM risk) based on 295 security findings.

Risk Assessment

This extension presents high security risk. Significant concerns were identified during analysis. It is not recommended for use in sensitive or production environments without thorough review.

Findings Breakdown

  • High: 27 finding(s)
  • Medium: 267 finding(s)
  • Low: 1 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Gramlab is published by [email protected] on the Chrome Web Store marketplace. The extension has approximately 957 users.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Frequently Asked Questions