Is "charifree - לקנות טוב" on Chrome Web Store Safe to Install?

[email protected] · chrome · v2.3

תוסף לקנות טוב מבית ChariFree הדרך שלכם לעזור לקהילה ולתרום לעמותות האהובות עליכם. התקינו את התוסף בלחיצה פשוטה, ובכל קנייה שתבצעו ברשת, החנות תתרום עמלה קטנה לעמותה שתבחרו בעת התקנת התוסף. פשוט וקל, בלי טריקים ובלי שטיקים, זו הדרך שלכם לעזור לעם ישראל בלי להוציא כסף. עם מי אנחנו עובדים? כרגע אנחנו תומכים ברוב החנויות הגדולות, בארץ ובעולם – Amazon, Ksp, Ebay, AliExpress, Gearbest, Ivory ועוד, כשאנחנו מתרחבים כל העת לחנויות ושירותים חדשים. (לפרטים נוספים יש לבקר באתר), או לשלוח לנו מייל לכתובת [email protected]

Risk Assessment

Analyzed
64.95
out of 100
MEDIUM

326 security findings detected across all analyzers

Chrome extension requesting 3 permissions

Severity Breakdown

0
Critical
67
High
258
Medium
1
Low
0
Info

Finding Categories

67
Malware Signatures
2
Network
255
IoC Indicators

YARA Rules Matched

11 rules(67 hits)
LocalStorageShouldNotBeUsed postinstall registry modification postinstall environment access postinstall crypto operations postinstall obfuscation postinstall file manipulation postinstall file download postinstall system command postinstall network communication credential env files UsingCommandLineArguments

Requested Permissions

3 permissions
<all_urls>

Access and modify data on every website you visit

Dangerous
identity

Access your identity and sign-in tokens

High
identity.email
Low

About This Extension

תוסף לקנות טוב מבית ChariFree הדרך שלכם לעזור לקהילה ולתרום לעמותות האהובות עליכם. התקינו את התוסף בלחיצה פשוטה, ובכל קנייה שתבצעו ברשת, החנות תתרום עמלה קטנה לעמותה שתבחרו בעת התקנת התוסף. פשוט וקל, בלי טריקים ובלי שטיקים, זו הדרך שלכם לעזור לעם ישראל בלי להוציא כסף. עם מי אנחנו עובדים? כרגע אנחנו תומכים ברוב החנויות הגדולות, בארץ ובעולם – Amazon, Ksp, Ebay, AliExpress, Gearbest, Ivory ועוד, כשאנחנו מתרחבים כל העת לחנויות ושירותים חדשים. (לפרטים נוספים יש לבקר באתר), או לשלוח לנו מייל לכתובת [email protected]

Detailed Findings

71 total

YARA Rule Matches

11 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

URLs
136
IP Addresses
14
Domains
98
Strings
255

All Indicators · 255

IP
detected IP: ::

XIOC detected IP: ::

extracted_from_files

Domain
detected Domain: charifree.co.il

XIOC detected Domain: charifree.co.il

extracted_from_files

Hash
detected SHA1 Hash: a3d65d3dd659a5b0937850e8609f22fffa2b5c35

XIOC detected SHA1 Hash: a3d65d3dd659a5b0937850e8609f22fffa2b5c35

extracted_from_files

Hash
detected SHA1 Hash: 0d13d01506334bb38c627d689667e7f4af8c4774

XIOC detected SHA1 Hash: 0d13d01506334bb38c627d689667e7f4af8c4774

extracted_from_files

Hash
detected SHA1 Hash: b8bc9f99ef4ad6223dfdcafd924051561c05ac75

XIOC detected SHA1 Hash: b8bc9f99ef4ad6223dfdcafd924051561c05ac75

extracted_from_files

Hash
detected SHA1 Hash: d87c1859176f55e87648fbab9d337a0d3ee17789

XIOC detected SHA1 Hash: d87c1859176f55e87648fbab9d337a0d3ee17789

extracted_from_files

Hash
detected SHA1 Hash: ec168558e95aa181fd87d37f55c32bbcb6708b84

XIOC detected SHA1 Hash: ec168558e95aa181fd87d37f55c32bbcb6708b84

extracted_from_files

Hash
detected SHA1 Hash: 49952e1044db21dbf90f6cd92bc9c9a777d415a6

XIOC detected SHA1 Hash: 49952e1044db21dbf90f6cd92bc9c9a777d415a6

extracted_from_files

Hash
detected SHA1 Hash: b4c1b9e72af966cd82c6531691115cc0409ffe2a

XIOC detected SHA1 Hash: b4c1b9e72af966cd82c6531691115cc0409ffe2a

extracted_from_files

Hash
detected SHA1 Hash: 2f0ea31ca96627d680bf2fefae7ebfa2b6453eae

XIOC detected SHA1 Hash: 2f0ea31ca96627d680bf2fefae7ebfa2b6453eae

extracted_from_files

URL
detected URL: https://registry.npmjs.org/yazl/-/yazl-2.5.1.tgz

XIOC detected URL: https://registry.npmjs.org/yazl/-/yazl-2.5.1.tgz

extracted_from_files

URL
detected URL: https://github.com/thejoshwolfe/yazl/issues

XIOC detected URL: https://github.com/thejoshwolfe/yazl/issues

extracted_from_files

URL
detected URL: https://github.com/thejoshwolfe/yazl

XIOC detected URL: https://github.com/thejoshwolfe/yazl

extracted_from_files

URL
detected URL: https://github.com/thejoshwolfe/yazl.git

XIOC detected URL: https://github.com/thejoshwolfe/yazl.git

extracted_from_files

URL
detected URL: https://charifree.co.il/

XIOC detected URL: https://charifree.co.il/

extracted_from_files

Hash
detected SHA1 Hash: 0d333e3f00eac50aa1454abd30ef8c2a5d9a7242

XIOC detected SHA1 Hash: 0d333e3f00eac50aa1454abd30ef8c2a5d9a7242

extracted_from_files

Hash
detected SHA1 Hash: c48c9b176af94f7ec65e20f21594524526d2a830

XIOC detected SHA1 Hash: c48c9b176af94f7ec65e20f21594524526d2a830

extracted_from_files

URL
detected URL: https://github.com/thejoshwolfe/yazl/pull/17)

XIOC detected URL: https://github.com/thejoshwolfe/yazl/pull/17)

extracted_from_files

URL
detected URL: https://github.com/thejoshwolfe/yazl/issues/14)

XIOC detected URL: https://github.com/thejoshwolfe/yazl/issues/14)

extracted_from_files

URL
detected URL: https://github.com/thejoshwolfe/yazl/issues/13)

XIOC detected URL: https://github.com/thejoshwolfe/yazl/issues/13)

extracted_from_files

URL
detected URL: https://github.com/thejoshwolfe/yazl/issues/12)

XIOC detected URL: https://github.com/thejoshwolfe/yazl/issues/12)

extracted_from_files

URL
detected URL: https://github.com/thejoshwolfe/yazl/pull/10)

XIOC detected URL: https://github.com/thejoshwolfe/yazl/pull/10)

extracted_from_files

URL
detected URL: https://github.com/thejoshwolfe/yazl/issues/9)

XIOC detected URL: https://github.com/thejoshwolfe/yazl/issues/9)

extracted_from_files

URL
detected URL: http://unix.stackexchange.com/questions/14705/the-zip-formats-external-file-attribute/14727#14727

XIOC detected URL: http://unix.stackexchange.com/questions/14705/the-zip-formats-external-file-attribute/14727#14727

extracted_from_files

URL
detected URL: https://github.com/thejoshwolfe/yazl/pull/43)

XIOC detected URL: https://github.com/thejoshwolfe/yazl/pull/43)

extracted_from_files

URL
detected URL: https://github.com/thejoshwolfe/yazl/pull/33)

XIOC detected URL: https://github.com/thejoshwolfe/yazl/pull/33)

extracted_from_files

URL
detected URL: https://github.com/thejoshwolfe/yazl/pull/28)

XIOC detected URL: https://github.com/thejoshwolfe/yazl/pull/28)

extracted_from_files

URL
detected URL: https://github.com/thejoshwolfe/yazl/issues/24)

XIOC detected URL: https://github.com/thejoshwolfe/yazl/issues/24)

extracted_from_files

URL
detected URL: https://github.com/thejoshwolfe/yazl/issues/6)

XIOC detected URL: https://github.com/thejoshwolfe/yazl/issues/6)

extracted_from_files

URL
detected URL: https://github.com/thejoshwolfe/yazl/pull/22)

XIOC detected URL: https://github.com/thejoshwolfe/yazl/pull/22)

extracted_from_files

URL
detected URL: https://github.com/thejoshwolfe/yazl/issues/18)

XIOC detected URL: https://github.com/thejoshwolfe/yazl/issues/18)

extracted_from_files

URL
detected URL: https://coveralls.io/repos/github/thejoshwolfe/yazl/badge.svg?branch=master)](https://coveralls.io/github/thejoshwolfe/yazl?branch=master)

XIOC detected URL: https://coveralls.io/repos/github/thejoshwolfe/yazl/badge.svg?branch=master)](https://coveralls.io/github/thejoshwolfe/yazl?branch=master)

extracted_from_files

URL
detected URL: https://github.com/thejoshwolfe/yauzl).

XIOC detected URL: https://github.com/thejoshwolfe/yauzl).

extracted_from_files

URL
detected URL: https://github.com/thejoshwolfe/yazl/issues/11).

XIOC detected URL: https://github.com/thejoshwolfe/yazl/issues/11).

extracted_from_files

URL
detected URL: http://www.zlib.net/zlib_tech.html),

XIOC detected URL: http://www.zlib.net/zlib_tech.html),

extracted_from_files

URL
detected URL: https://github.com/thejoshwolfe/yazl/issues/11)).

XIOC detected URL: https://github.com/thejoshwolfe/yazl/issues/11)).

extracted_from_files

URL
detected URL: https://github.com/thejoshwolfe/yazl/pull/49)

XIOC detected URL: https://github.com/thejoshwolfe/yazl/pull/49)

extracted_from_files

URL
detected URL: https://github.com/thejoshwolfe/yazl/pull/44)

XIOC detected URL: https://github.com/thejoshwolfe/yazl/pull/44)

extracted_from_files

URL
detected URL: https://developers.google.com/protocol-buffers/docs/encoding#optional'

XIOC detected URL: https://developers.google.com/protocol-buffers/docs/encoding#optional'

extracted_from_files

URL
detected URL: http://img.shields.io/travis/mafintosh/resolve-protobuf-schema.svg?style=flat)](http://travis-ci.org/mafintosh/resolve-protobuf-schema)

XIOC detected URL: http://img.shields.io/travis/mafintosh/resolve-protobuf-schema.svg?style=flat)](http://travis-ci.org/mafintosh/resolve-protobuf-schema)

extracted_from_files

URL
detected URL: https://registry.npmjs.org/resolve-protobuf-schema/-/resolve-protobuf-schema-2.1.0.tgz

XIOC detected URL: https://registry.npmjs.org/resolve-protobuf-schema/-/resolve-protobuf-schema-2.1.0.tgz

extracted_from_files

URL
detected URL: https://github.com/mafintosh/resolve-protobuf-schema/issues

XIOC detected URL: https://github.com/mafintosh/resolve-protobuf-schema/issues

extracted_from_files

URL
detected URL: https://github.com/mafintosh/resolve-protobuf-schema

XIOC detected URL: https://github.com/mafintosh/resolve-protobuf-schema

extracted_from_files

URL
detected URL: https://github.com/mafintosh/resolve-protobuf-schema.git

XIOC detected URL: https://github.com/mafintosh/resolve-protobuf-schema.git

extracted_from_files

URL
detected URL: https://travis-ci.com/thejoshwolfe/yazl.svg?branch=master)](https://travis-ci.com/thejoshwolfe/yazl)

XIOC detected URL: https://travis-ci.com/thejoshwolfe/yazl.svg?branch=master)](https://travis-ci.com/thejoshwolfe/yazl)

extracted_from_files

URL
detected URL: http://img.shields.io/travis/mafintosh/protocol-buffers-schema.svg?style=flat)](http://travis-ci.org/mafintosh/protocol-buffers-schema)

XIOC detected URL: http://img.shields.io/travis/mafintosh/protocol-buffers-schema.svg?style=flat)](http://travis-ci.org/mafintosh/protocol-buffers-schema)

extracted_from_files

URL
detected URL: https://registry.npmjs.org/protocol-buffers-schema/-/protocol-buffers-schema-3.4.0.tgz

XIOC detected URL: https://registry.npmjs.org/protocol-buffers-schema/-/protocol-buffers-schema-3.4.0.tgz

extracted_from_files

URL
detected URL: https://github.com/mafintosh/protocol-buffers-schema/issues

XIOC detected URL: https://github.com/mafintosh/protocol-buffers-schema/issues

extracted_from_files

URL
detected URL: https://github.com/mafintosh/protocol-buffers-schema

XIOC detected URL: https://github.com/mafintosh/protocol-buffers-schema

extracted_from_files

URL
detected URL: https://github.com/mafintosh/protocol-buffers-schema.git

XIOC detected URL: https://github.com/mafintosh/protocol-buffers-schema.git

extracted_from_files

URL
detected URL: https://developers.google.com/protocol-buffers/docs/encoding#optional

XIOC detected URL: https://developers.google.com/protocol-buffers/docs/encoding#optional

extracted_from_files

URL
detected URL: https://developers.google.com/protocol-buffers/docs/proto3#specifying-field-rules

XIOC detected URL: https://developers.google.com/protocol-buffers/docs/proto3#specifying-field-rules

extracted_from_files

URL
detected URL: https://github.com/mapbox/vector-tile-js).

XIOC detected URL: https://github.com/mapbox/vector-tile-js).

extracted_from_files

URL
detected URL: https://developers.google.com/protocol-buffers/docs/proto3#maps)

XIOC detected URL: https://developers.google.com/protocol-buffers/docs/proto3#maps)

extracted_from_files

URL
detected URL: https://github.com/feross/buffer,

XIOC detected URL: https://github.com/feross/buffer,

extracted_from_files

URL
detected URL: https://registry.npmjs.org/pbf/-/pbf-3.2.1.tgz

XIOC detected URL: https://registry.npmjs.org/pbf/-/pbf-3.2.1.tgz

extracted_from_files

URL
detected URL: https://github.com/mapbox/pbf/issues

XIOC detected URL: https://github.com/mapbox/pbf/issues

extracted_from_files

URL
detected URL: https://github.com/mapbox/pbf

XIOC detected URL: https://github.com/mapbox/pbf

extracted_from_files

URL
detected URL: https://developers.google.com/protocol-buffers)

XIOC detected URL: https://developers.google.com/protocol-buffers)

extracted_from_files

URL
detected URL: https://lukeed.com)

XIOC detected URL: https://lukeed.com)

extracted_from_files

URL
detected URL: https://secure.travis-ci.org/mapbox/pbf.svg)](http://travis-ci.org/mapbox/pbf)

XIOC detected URL: https://secure.travis-ci.org/mapbox/pbf.svg)](http://travis-ci.org/mapbox/pbf)

extracted_from_files

URL
detected URL: https://coveralls.io/repos/mapbox/pbf/badge.svg)](https://coveralls.io/r/mapbox/pbf)

XIOC detected URL: https://coveralls.io/repos/mapbox/pbf/badge.svg)](https://coveralls.io/r/mapbox/pbf)

extracted_from_files

URL
detected URL: https://developers.google.com/protocol-buffers),

XIOC detected URL: https://developers.google.com/protocol-buffers),

extracted_from_files

URL
detected URL: https://github.com/mafintosh/protocol-buffers)

XIOC detected URL: https://github.com/mafintosh/protocol-buffers)

extracted_from_files

Domain
detected Domain: tidelift.com

XIOC detected Domain: tidelift.com

extracted_from_files

URL
detected URL: https://unpkg.com/[email protected]/dist/pbf.js

XIOC detected URL: https://unpkg.com/[email protected]/dist/pbf.js

extracted_from_files

URL
detected URL: https://github.com/yargs/yargs-parser).

XIOC detected URL: https://github.com/yargs/yargs-parser).

extracted_from_files

URL
detected URL: https://nodejs.org/docs/latest/api/process.html#process_process_argv)

XIOC detected URL: https://nodejs.org/docs/latest/api/process.html#process_process_argv)

extracted_from_files

URL
detected URL: https://github.com/substack/minimist/blob/master/test/parse.js#L69-L80))

XIOC detected URL: https://github.com/substack/minimist/blob/master/test/parse.js#L69-L80))

extracted_from_files

URL
detected URL: https://github.com/substack/minimist/blob/master/test/parse.js#L147-L157))

XIOC detected URL: https://github.com/substack/minimist/blob/master/test/parse.js#L147-L157))

extracted_from_files

URL
detected URL: https://github.com/substack/minimist/blob/master/test/parse.js#L180-L197))

XIOC detected URL: https://github.com/substack/minimist/blob/master/test/parse.js#L180-L197))

extracted_from_files

URL
detected URL: https://github.com/yargs/yargs-parser#requireyargs-parserdetailedargs-opts)

XIOC detected URL: https://github.com/yargs/yargs-parser#requireyargs-parserdetailedargs-opts)

extracted_from_files

URL
detected URL: https://github.com/yargs/yargs-parser#configuration)

XIOC detected URL: https://github.com/yargs/yargs-parser#configuration)

extracted_from_files

URL
detected URL: https://registry.npmjs.org/mri/-/mri-1.1.6.tgz

XIOC detected URL: https://registry.npmjs.org/mri/-/mri-1.1.6.tgz

extracted_from_files

URL
detected URL: https://lukeed.com

XIOC detected URL: https://lukeed.com

extracted_from_files

URL
detected URL: https://github.com/lukeed/mri/issues

XIOC detected URL: https://github.com/lukeed/mri/issues

extracted_from_files

URL
detected URL: https://github.com/lukeed/mri#readme

XIOC detected URL: https://github.com/lukeed/mri#readme

extracted_from_files

URL
detected URL: https://github.com/lukeed/mri.git

XIOC detected URL: https://github.com/lukeed/mri.git

extracted_from_files

URL
detected URL: https://travis-ci.org/lukeed/mri.svg?branch=master)](https://travis-ci.org/lukeed/mri)

XIOC detected URL: https://travis-ci.org/lukeed/mri.svg?branch=master)](https://travis-ci.org/lukeed/mri)

extracted_from_files

URL
detected URL: https://github.com/substack/minimist)

XIOC detected URL: https://github.com/substack/minimist)

extracted_from_files

URL
detected URL: https://saucelabs.com/u/ieee754

XIOC detected URL: https://saucelabs.com/u/ieee754

extracted_from_files

URL
detected URL: https://tidelift.com/subscription/pkg/npm-ieee754?utm_source=npm-ieee754&utm_medium=referral&utm_campaign=readme)

XIOC detected URL: https://tidelift.com/subscription/pkg/npm-ieee754?utm_source=npm-ieee754&utm_medium=referral&utm_campaign=readme)

extracted_from_files

URL
detected URL: http://en.wikipedia.org/wiki/IEEE_floating_point).

XIOC detected URL: http://en.wikipedia.org/wiki/IEEE_floating_point).

extracted_from_files

URL
detected URL: https://registry.npmjs.org/ieee754/-/ieee754-1.1.13.tgz

XIOC detected URL: https://registry.npmjs.org/ieee754/-/ieee754-1.1.13.tgz

extracted_from_files

URL
detected URL: http://feross.org

XIOC detected URL: http://feross.org

extracted_from_files

URL
detected URL: https://github.com/feross/ieee754/issues

XIOC detected URL: https://github.com/feross/ieee754/issues

extracted_from_files

URL
detected URL: https://github.com/feross/ieee754#readme

XIOC detected URL: https://github.com/feross/ieee754#readme

extracted_from_files

URL
detected URL: https://travis-ci.org/feross/ieee754

XIOC detected URL: https://travis-ci.org/feross/ieee754

extracted_from_files

URL
detected URL: https://img.shields.io/npm/v/ieee754.svg

XIOC detected URL: https://img.shields.io/npm/v/ieee754.svg

extracted_from_files

URL
detected URL: https://npmjs.org/package/ieee754

XIOC detected URL: https://npmjs.org/package/ieee754

extracted_from_files

URL
detected URL: https://img.shields.io/npm/dm/ieee754.svg

XIOC detected URL: https://img.shields.io/npm/dm/ieee754.svg

extracted_from_files

URL
detected URL: https://img.shields.io/badge/code_style-standard-brightgreen.svg

XIOC detected URL: https://img.shields.io/badge/code_style-standard-brightgreen.svg

extracted_from_files

URL
detected URL: https://standardjs.com

XIOC detected URL: https://standardjs.com

extracted_from_files

URL
detected URL: https://saucelabs.com/browser-matrix/ieee754.svg

XIOC detected URL: https://saucelabs.com/browser-matrix/ieee754.svg

extracted_from_files

URL
detected URL: http://www.google.com/update2/response

XIOC detected URL: http://www.google.com/update2/response

extracted_from_files

URL
detected URL: https://registry.npmjs.org/crx3/-/crx3-1.1.2.tgz

XIOC detected URL: https://registry.npmjs.org/crx3/-/crx3-1.1.2.tgz

extracted_from_files

URL
detected URL: https://ahwayakchih.neoni.net

XIOC detected URL: https://ahwayakchih.neoni.net

extracted_from_files

URL
detected URL: https://github.com/ahwayakchih/crx3/issues

XIOC detected URL: https://github.com/ahwayakchih/crx3/issues

extracted_from_files

URL
detected URL: https://github.com/ahwayakchih/crx3

XIOC detected URL: https://github.com/ahwayakchih/crx3

extracted_from_files

URL
detected URL: https://raw.githubusercontent.com/chromium/chromium/master/components/crx_file/crx3.proto

XIOC detected URL: https://raw.githubusercontent.com/chromium/chromium/master/components/crx_file/crx3.proto

extracted_from_files

URL
detected URL: https://img.shields.io/travis/feross/ieee754/master.svg

XIOC detected URL: https://img.shields.io/travis/feross/ieee754/master.svg

extracted_from_files

URL
detected URL: https://nodejs.org/api/crypto.html

XIOC detected URL: https://nodejs.org/api/crypto.html

extracted_from_files

URL
detected URL: https://nodejs.org/api/crypto.html#crypto_class_keyobject

XIOC detected URL: https://nodejs.org/api/crypto.html#crypto_class_keyobject

extracted_from_files

URL
detected URL: https://nodejs.org/api/stream.html

XIOC detected URL: https://nodejs.org/api/stream.html

extracted_from_files

URL
detected URL: https://nodejs.org/api/stream.html#stream_class_stream_readable

XIOC detected URL: https://nodejs.org/api/stream.html#stream_class_stream_readable

extracted_from_files

URL
detected URL: https://chromium.googlesource.com/chromium/src.git/+/b8bc9f99ef4ad6223dfdcafd924051561c05ac75

XIOC detected URL: https://chromium.googlesource.com/chromium/src.git/+/b8bc9f99ef4ad6223dfdcafd924051561c05ac75

extracted_from_files

URL
detected URL: https://chromium.googlesource.com/chromium/src/+/b8bc9f99ef4ad6223dfdcafd924051561c05ac75/chrome/VERSION

XIOC detected URL: https://chromium.googlesource.com/chromium/src/+/b8bc9f99ef4ad6223dfdcafd924051561c05ac75/chrome/VERSION

extracted_from_files

URL
detected URL: https://en.wikipedia.org/wiki/Google_Chrome_version_history

XIOC detected URL: https://en.wikipedia.org/wiki/Google_Chrome_version_history

extracted_from_files

URL
detected URL: https://github.com/oncletom/crx).

XIOC detected URL: https://github.com/oncletom/crx).

extracted_from_files

URL
detected URL: https://developer.chrome.com/extensions/linux_hosting#update_manifest

XIOC detected URL: https://developer.chrome.com/extensions/linux_hosting#update_manifest

extracted_from_files

URL
detected URL: https://stackoverflow.com/a/2050916/6352710

XIOC detected URL: https://stackoverflow.com/a/2050916/6352710

extracted_from_files

URL
detected URL: https://nodejs.org/api/crypto.html#crypto_class_sign

XIOC detected URL: https://nodejs.org/api/crypto.html#crypto_class_sign

extracted_from_files

URL
detected URL: https://nodejs.org/api/fs.html

XIOC detected URL: https://nodejs.org/api/fs.html

extracted_from_files

URL
detected URL: https://nodejs.org/api/fs.html#fs_class_fs_dirent

XIOC detected URL: https://nodejs.org/api/fs.html#fs_class_fs_dirent

extracted_from_files

URL
detected URL: https://nodejs.org/api/fs.html#fs_class_fs_stats

XIOC detected URL: https://nodejs.org/api/fs.html#fs_class_fs_stats

extracted_from_files

URL
detected URL: https://github.com/mozilla/web-ext

XIOC detected URL: https://github.com/mozilla/web-ext

extracted_from_files

URL
detected URL: https://www.qemu.org/),

XIOC detected URL: https://www.qemu.org/),

extracted_from_files

URL
detected URL: https://podman.io/)

XIOC detected URL: https://podman.io/)

extracted_from_files

URL
detected URL: https://www.docker.com/).

XIOC detected URL: https://www.docker.com/).

extracted_from_files

URL
detected URL: https://nodejs.org/api/fs.html#fs_class_fs_writestream

XIOC detected URL: https://nodejs.org/api/fs.html#fs_class_fs_writestream

extracted_from_files

URL
detected URL: https://github.com/chromium/chromium/blob/0d13d01506334bb38c627d689667e7f4af8c4774/components/crx_file/crx_creator.cc#L21

XIOC detected URL: https://github.com/chromium/chromium/blob/0d13d01506334bb38c627d689667e7f4af8c4774/components/crx_file/crx_creator.cc#L21

extracted_from_files

URL
detected URL: https://github.com/chromium/chromium/blob/master/components/crx_file/crx3.proto

XIOC detected URL: https://github.com/chromium/chromium/blob/master/components/crx_file/crx3.proto

extracted_from_files

URL
detected URL: https://developer.chrome.com/extensions/linux_hosting#update_url),

XIOC detected URL: https://developer.chrome.com/extensions/linux_hosting#update_url),

extracted_from_files

URL
detected URL: https://developer.chrome.com/extensions/linux_hosting#hosting).

XIOC detected URL: https://developer.chrome.com/extensions/linux_hosting#hosting).

extracted_from_files

URL
detected URL: https://developer.chrome.com/extensions/hosting_changes).

XIOC detected URL: https://developer.chrome.com/extensions/hosting_changes).

extracted_from_files

URL
detected URL: https://www.chromium.org/administrators/configuring-policy-for-extensions,

XIOC detected URL: https://www.chromium.org/administrators/configuring-policy-for-extensions,

extracted_from_files

URL
detected URL: https://www.chromium.org/administrators/policy-list-3.

XIOC detected URL: https://www.chromium.org/administrators/policy-list-3.

extracted_from_files

URL
detected URL: https://developer.chrome.com/extensions)

XIOC detected URL: https://developer.chrome.com/extensions)

extracted_from_files

Hash
detected SHA1 Hash: 9ca9a9e69cf192bbdaf1006ec1973948aa4a3758

XIOC detected SHA1 Hash: 9ca9a9e69cf192bbdaf1006ec1973948aa4a3758

extracted_from_files

URL
detected URL: https://api.cirrus-ci.com/github/ahwayakchih/crx3.svg?branch=master)](https://cirrus-ci.com/github/ahwayakchih/crx3/master

XIOC detected URL: https://api.cirrus-ci.com/github/ahwayakchih/crx3.svg?branch=master)](https://cirrus-ci.com/github/ahwayakchih/crx3/master

extracted_from_files

URL
detected URL: https://ci.appveyor.com/api/projects/status/oylw6nx8ebj5rw1e/branch/master?svg=true)](https://ci.appveyor.com/project/ahwayakchih/crx3/branch/master

XIOC detected URL: https://ci.appveyor.com/api/projects/status/oylw6nx8ebj5rw1e/branch/master?svg=true)](https://ci.appveyor.com/project/ahwayakchih/crx3/branch/master

extracted_from_files

URL
detected URL: http://127.0.0.1:8080/example-extension.crx'

XIOC detected URL: http://127.0.0.1:8080/example-extension.crx'

extracted_from_files

URL
detected URL: https://github.com/chromium/chromium/blob/c48c9b176af94f7ec65e20f21594524526d2a830/components/crx_file/crx_verifier.cc#L178

XIOC detected URL: https://github.com/chromium/chromium/blob/c48c9b176af94f7ec65e20f21594524526d2a830/components/crx_file/crx_verifier.cc#L178

extracted_from_files

URL
detected URL: https://github.com/chromium/chromium/blob/c48c9b176af94f7ec65e20f21594524526d2a830/components/crx_file/crx_verifier.cc#L134

XIOC detected URL: https://github.com/chromium/chromium/blob/c48c9b176af94f7ec65e20f21594524526d2a830/components/crx_file/crx_verifier.cc#L134

extracted_from_files

URL
detected URL: https://github.com/chromium/chromium/blob/c48c9b176af94f7ec65e20f21594524526d2a830/components/crx_file/crx_verifier.cc#L42

XIOC detected URL: https://github.com/chromium/chromium/blob/c48c9b176af94f7ec65e20f21594524526d2a830/components/crx_file/crx_verifier.cc#L42

extracted_from_files

URL
detected URL: https://github.com/ahwayakchih/crx3/issues)

XIOC detected URL: https://github.com/ahwayakchih/crx3/issues)

extracted_from_files

URL
detected URL: http://www.w3.org/TR/PNG/#D-CRCAppendix

XIOC detected URL: http://www.w3.org/TR/PNG/#D-CRCAppendix

extracted_from_files

URL
detected URL: https://github.com/alexgorbatchev/node-crc,

XIOC detected URL: https://github.com/alexgorbatchev/node-crc,

extracted_from_files

URL
detected URL: https://registry.npmjs.org/buffer-crc32/-/buffer-crc32-0.2.13.tgz

XIOC detected URL: https://registry.npmjs.org/buffer-crc32/-/buffer-crc32-0.2.13.tgz

extracted_from_files

URL
detected URL: https://github.com/brianloveswords/buffer-crc32/issues

XIOC detected URL: https://github.com/brianloveswords/buffer-crc32/issues

extracted_from_files

URL
detected URL: https://github.com/brianloveswords/buffer-crc32

XIOC detected URL: https://github.com/brianloveswords/buffer-crc32

extracted_from_files

URL
detected URL: https://github.com/brianloveswords/buffer-crc32/raw/master/LICENSE

XIOC detected URL: https://github.com/brianloveswords/buffer-crc32/raw/master/LICENSE

extracted_from_files

URL
detected URL: https://github.com/oncletom/crx)

XIOC detected URL: https://github.com/oncletom/crx)

extracted_from_files

Other
detected Email: [email protected]

XIOC detected Email: [email protected]

extracted_from_files

Other
detected Email: [email protected]

XIOC detected Email: [email protected]

extracted_from_files

URL
detected URL: http://www.pdf-tools.com_

XIOC detected URL: http://www.pdf-tools.com_

extracted_from_files

URL
detected URL: https://charifreeisrael.azurewebsites.net/api/urls/

XIOC detected URL: https://charifreeisrael.azurewebsites.net/api/urls/

extracted_from_files

URL
detected URL: https://charifree.co.il/thank_you/?id='

XIOC detected URL: https://charifree.co.il/thank_you/?id='

extracted_from_files

URL
detected URL: https://clients2.google.com/service/update2/crx

XIOC detected URL: https://clients2.google.com/service/update2/crx

extracted_from_files

URL
detected URL: https://secure.travis-ci.org/brianloveswords/buffer-crc32.png?branch=master)](http://travis-ci.org/brianloveswords/buffer-crc32)

XIOC detected URL: https://secure.travis-ci.org/brianloveswords/buffer-crc32.png?branch=master)](http://travis-ci.org/brianloveswords/buffer-crc32)

extracted_from_files

IP
detected Domain: output.zip

XIOC detected Domain: output.zip

extracted_from_files

Domain
detected Domain: unix.stackexchange.com

XIOC detected Domain: unix.stackexchange.com

extracted_from_files

Domain
detected Domain: dosdatetime.date

XIOC detected Domain: dosdatetime.date

extracted_from_files

Domain
detected Domain: transform.call

XIOC detected Domain: transform.call

extracted_from_files

Other
detected Email: [email protected]

XIOC detected Email: [email protected]

extracted_from_files

Other
detected Email: [email protected]

XIOC detected Email: [email protected]

extracted_from_files

Other
detected Email: [email protected]

XIOC detected Email: [email protected]

extracted_from_files

Domain
detected Domain: rpc.name

XIOC detected Domain: rpc.name

extracted_from_files

Domain
detected Domain: line.map

XIOC detected Domain: line.map

extracted_from_files

Domain
detected Domain: result.map

XIOC detected Domain: result.map

extracted_from_files

Domain
detected Domain: option.foo

XIOC detected Domain: option.foo

extracted_from_files

Domain
detected Domain: option.bar

XIOC detected Domain: option.bar

extracted_from_files

Domain
detected Domain: travis-ci.com

XIOC detected Domain: travis-ci.com

extracted_from_files

Domain
detected Domain: www.zlib.net

XIOC detected Domain: www.zlib.net

extracted_from_files

Domain
detected Domain: en.name

XIOC detected Domain: en.name

extracted_from_files

Domain
detected Domain: f.map.to

XIOC detected Domain: f.map.to

extracted_from_files

Domain
detected Domain: f.map

XIOC detected Domain: f.map

extracted_from_files

Domain
detected Domain: f.name

XIOC detected Domain: f.name

extracted_from_files

Domain
detected Domain: m.name

XIOC detected Domain: m.name

extracted_from_files

Domain
detected Domain: e.name

XIOC detected Domain: e.name

extracted_from_files

Domain
detected Domain: s.name

XIOC detected Domain: s.name

extracted_from_files

Domain
detected Domain: opt.name

XIOC detected Domain: opt.name

extracted_from_files

Domain
detected Domain: options.name

XIOC detected Domain: options.name

extracted_from_files

Domain
detected Domain: val.name

XIOC detected Domain: val.name

extracted_from_files

Domain
detected Domain: schema.services

XIOC detected Domain: schema.services

extracted_from_files

Domain
detected Domain: msg.name

XIOC detected Domain: msg.name

extracted_from_files

Domain
detected Domain: ext.name

XIOC detected Domain: ext.name

extracted_from_files

Domain
detected Domain: msg.extensions.to

XIOC detected Domain: msg.extensions.to

extracted_from_files

Domain
detected Domain: pbf.read

XIOC detected Domain: pbf.read

extracted_from_files

Domain
detected Domain: object.prototype.hasownproperty.call

XIOC detected Domain: object.prototype.hasownproperty.call

extracted_from_files

Domain
detected Domain: field.map.to

XIOC detected Domain: field.map.to

extracted_from_files

Domain
detected Domain: proto.name

XIOC detected Domain: proto.name

extracted_from_files

Domain
detected Domain: r.read

XIOC detected Domain: r.read

extracted_from_files

Domain
detected Domain: e.read

XIOC detected Domain: e.read

extracted_from_files

Domain
detected Domain: field.map

XIOC detected Domain: field.map

extracted_from_files

Domain
detected Domain: developers.google.com

XIOC detected Domain: developers.google.com

extracted_from_files

Domain
detected Domain: unpkg.com

XIOC detected Domain: unpkg.com

extracted_from_files

Domain
detected Domain: example.read

XIOC detected Domain: example.read

extracted_from_files

Domain
detected Domain: layer.name

XIOC detected Domain: layer.name

extracted_from_files

Domain
detected Domain: result.id

XIOC detected Domain: result.id

extracted_from_files

Domain
detected Domain: obj.name

XIOC detected Domain: obj.name

extracted_from_files

Domain
detected Domain: field.name

XIOC detected Domain: field.name

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/WebExtensions)

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/WebExtensions)

extracted_from_files

Domain
detected Domain: ieee754.read

XIOC detected Domain: ieee754.read

extracted_from_files

Domain
detected Domain: exports.read

XIOC detected Domain: exports.read

extracted_from_files

Domain
detected Domain: feross.org

XIOC detected Domain: feross.org

extracted_from_files

Domain
detected Domain: rastageeks.org

XIOC detected Domain: rastageeks.org

extracted_from_files

Domain
detected Domain: lukeed.com

XIOC detected Domain: lukeed.com

extracted_from_files

Domain
detected Domain: coveralls.io

XIOC detected Domain: coveralls.io

extracted_from_files

Domain
detected Domain: process.env.app

XIOC detected Domain: process.env.app

extracted_from_files

Domain
detected Domain: raw.githubusercontent.com

XIOC detected Domain: raw.githubusercontent.com

extracted_from_files

Domain
detected Domain: ahwayakchih.neoni.net

XIOC detected Domain: ahwayakchih.neoni.net

extracted_from_files

Domain
detected Domain: img.shields.io

XIOC detected Domain: img.shields.io

extracted_from_files

Domain
detected Domain: npmjs.org

XIOC detected Domain: npmjs.org

extracted_from_files

Domain
detected Domain: standardjs.com

XIOC detected Domain: standardjs.com

extracted_from_files

Domain
detected Domain: saucelabs.com

XIOC detected Domain: saucelabs.com

extracted_from_files

Domain
detected Domain: stackoverflow.com

XIOC detected Domain: stackoverflow.com

extracted_from_files

Domain
detected Domain: creator.cc

XIOC detected Domain: creator.cc

extracted_from_files

Domain
detected Domain: stat.name

XIOC detected Domain: stat.name

extracted_from_files

Domain
detected Domain: list.map

XIOC detected Domain: list.map

extracted_from_files

Domain
detected Domain: chromium.googlesource.com

XIOC detected Domain: chromium.googlesource.com

extracted_from_files

IP
detected Domain: en.wikipedia.org

XIOC detected Domain: en.wikipedia.org

extracted_from_files

Domain
detected Domain: www.google.com

XIOC detected Domain: www.google.com

extracted_from_files

IP
detected Domain: some-other-name.zip

XIOC detected Domain: some-other-name.zip

extracted_from_files

IP
detected Domain: web-extension.zip

XIOC detected Domain: web-extension.zip

extracted_from_files

IP
detected Domain: example-extension.zip

XIOC detected Domain: example-extension.zip

extracted_from_files

Domain
detected Domain: verifier.cc

XIOC detected Domain: verifier.cc

extracted_from_files

Domain
detected Domain: this.name

XIOC detected Domain: this.name

extracted_from_files

Domain
detected Domain: readme.md

XIOC detected Domain: readme.md

extracted_from_files

Domain
detected Domain: nodejs.org

XIOC detected Domain: nodejs.org

extracted_from_files

Domain
detected Domain: developer.chrome.com

XIOC detected Domain: developer.chrome.com

extracted_from_files

Domain
detected Domain: www.chromium.org

XIOC detected Domain: www.chromium.org

extracted_from_files

Domain
detected Domain: developer.mozilla.org

XIOC detected Domain: developer.mozilla.org

extracted_from_files

Domain
detected Domain: www.qemu.org

XIOC detected Domain: www.qemu.org

extracted_from_files

Domain
detected Domain: podman.io

XIOC detected Domain: podman.io

extracted_from_files

Domain
detected Domain: www.docker.com

XIOC detected Domain: www.docker.com

extracted_from_files

Domain
detected Domain: cirrus-ci.com

XIOC detected Domain: cirrus-ci.com

extracted_from_files

Domain
detected Domain: www.w3.org

XIOC detected Domain: www.w3.org

extracted_from_files

Domain
detected Domain: github.com

XIOC detected Domain: github.com

extracted_from_files

Domain
detected Domain: travis-ci.org

XIOC detected Domain: travis-ci.org

extracted_from_files

Domain
detected Domain: registry.npmjs.org

XIOC detected Domain: registry.npmjs.org

extracted_from_files

Domain
detected Domain: gmail.com

XIOC detected Domain: gmail.com

extracted_from_files

Domain
detected Domain: api.cirrus-ci.com

XIOC detected Domain: api.cirrus-ci.com

extracted_from_files

Domain
detected Domain: ci.appveyor.com

XIOC detected Domain: ci.appveyor.com

extracted_from_files

Domain
detected Domain: xhr.open

XIOC detected Domain: xhr.open

extracted_from_files

Domain
detected Domain: event.data

XIOC detected Domain: event.data

extracted_from_files

Domain
detected Domain: js.is

XIOC detected Domain: js.is

extracted_from_files

Domain
detected Domain: www.inkscape.org

XIOC detected Domain: www.inkscape.org

extracted_from_files

Domain
detected Domain: clients2.google.com

XIOC detected Domain: clients2.google.com

extracted_from_files

Domain
detected Domain: identity.email

XIOC detected Domain: identity.email

extracted_from_files

Domain
detected Domain: secure.travis-ci.org

XIOC detected Domain: secure.travis-ci.org

extracted_from_files

Domain
detected Domain: json.name

XIOC detected Domain: json.name

extracted_from_files

Domain
detected Domain: json.id

XIOC detected Domain: json.id

extracted_from_files

Domain
detected Domain: data.id

XIOC detected Domain: data.id

extracted_from_files

Domain
detected Domain: data.name

XIOC detected Domain: data.name

extracted_from_files

Domain
detected Domain: window.open

XIOC detected Domain: window.open

extracted_from_files

Domain
detected Domain: info.id

XIOC detected Domain: info.id

extracted_from_files

Domain
detected Domain: info.email

XIOC detected Domain: info.email

extracted_from_files

IP
detected IP: 6444::

XIOC detected IP: 6444::

extracted_from_files

IP
detected IP: 0::

XIOC detected IP: 0::

extracted_from_files

IP
detected IP: 1::

XIOC detected IP: 1::

extracted_from_files

IP
detected IP: 127.0.0.1

XIOC detected IP: 127.0.0.1

extracted_from_files

Domain
detected Domain: www.pdf-tools.com

XIOC detected Domain: www.pdf-tools.com

extracted_from_files

Domain
detected Domain: charifreeisrael.azurewebsites.net

XIOC detected Domain: charifreeisrael.azurewebsites.net

extracted_from_files

URL
detected URL: https://github.com/trivago/pbf-loader)

XIOC detected URL: https://github.com/trivago/pbf-loader)

extracted_from_files

Security Analysis Summary

Security Analysis Overview

charifree - לקנות טוב is a Chrome Web Store extension published by [email protected]. Version 2.3 has been analyzed by the Risky Plugins security platform, receiving a risk score of 64.95/100 (MEDIUM risk) based on 326 security findings.

Risk Assessment

This extension presents high security risk. Significant concerns were identified during analysis. It is not recommended for use in sensitive or production environments without thorough review.

Findings Breakdown

  • High: 67 finding(s)
  • Medium: 258 finding(s)
  • Low: 1 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

charifree - לקנות טוב is published by [email protected] on the Chrome Web Store marketplace. The extension has approximately 48 users.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Frequently Asked Questions