Is "MediaInspector" on Firefox Add-ons Safe to Install?

vdh · firefox · v1.0.1

This is a tool for developers. The Media Inspector analyses the binary content of media files and extract as much details as possible from the container format, the codecs and the streams. Non exhaustive list of extracted data: streams & stream groups, format, duration, size, bitrate, codecs, dimensions, b frames, sample aspect ratio, display aspect ratio, chroma location, frame rate, timing data, … This is useful for developers working on publishing media online. A "Media Inspector" menu entry is added to <video> and <audio> element context menu.

Risk Assessment

Analyzed
65
out of 100
HIGH

123 security findings detected across all analyzers

Firefox extension requesting 3 permissions

Severity Breakdown

0
Critical
20
High
103
Medium
0
Low
0
Info

Finding Categories

20
Malware Signatures
1
Obfuscation
1
Network
99
IoC Indicators

YARA Rules Matched

7 rules(20 hits)
postinstall obfuscation postinstall file manipulation postinstall network communication postinstall system command postinstall persistence mechanism postinstall crypto operations postinstall file download

Requested Permissions

3 permissions
activeTab
Medium
tabs
Medium
contextMenus
Low

About This Extension

This is a tool for developers. The Media Inspector analyses the binary content of media files and extract as much details as possible from the container format, the codecs and the streams. Non exhaustive list of extracted data: streams & stream groups, format, duration, size, bitrate, codecs, dimensions, b frames, sample aspect ratio, display aspect ratio, chroma location, frame rate, timing data, … This is useful for developers working on publishing media online. A "Media Inspector" menu entry is added to <video> and <audio> element context menu.

Detailed Findings

23 total

YARA Rule Matches

7 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

URLs
7
IP Addresses
6
Domains
85
Strings
99

All Indicators · 99

IP
detected IP: ::

XIOC detected IP: ::

extracted_from_files

Domain
detected Domain: t9dc332b6994bcfdaf532ee9cd7785741.0f791db3805d26258f73763318d01220.addons.mozilla.org

XIOC detected Domain: t9dc332b6994bcfdaf532ee9cd7785741.0f791db3805d26258f73763318d01220.addons.mozilla.org

extracted_from_files

URL
detected URL: https://datatracker.ietf.org/ipr/1914/

XIOC detected URL: https://datatracker.ietf.org/ipr/1914/

extracted_from_files

URL
detected URL: https://datatracker.ietf.org/ipr/1526/

XIOC detected URL: https://datatracker.ietf.org/ipr/1526/

extracted_from_files

URL
detected URL: https://streams.videolan.org/upload/

XIOC detected URL: https://streams.videolan.org/upload/

extracted_from_files

URL
detected URL: http://www.w3.org/2001/XMLSchema-instance

XIOC detected URL: http://www.w3.org/2001/XMLSchema-instance

extracted_from_files

URL
detected URL: http://www.ffmpeg.org/schema/ffprobe

XIOC detected URL: http://www.ffmpeg.org/schema/ffprobe

extracted_from_files

Hash
detected MD5 Hash: 0f791db3805d26258f73763318d01220

XIOC detected MD5 Hash: 0f791db3805d26258f73763318d01220

extracted_from_files

Domain
detected Domain: d.cz

XIOC detected Domain: d.cz

extracted_from_files

Domain
detected Domain: w.sk

XIOC detected Domain: w.sk

extracted_from_files

Other
detected Email: [email protected]

XIOC detected Email: [email protected]

extracted_from_files

Other
detected Email: [email protected]

XIOC detected Email: [email protected]

extracted_from_files

Other
detected Email: [email protected]

XIOC detected Email: [email protected]

extracted_from_files

URL
detected URL: http://addons.mozilla.org/ca/crl.pem0N

XIOC detected URL: http://addons.mozilla.org/ca/crl.pem0N

extracted_from_files

URL
detected URL: https://datatracker.ietf.org/ipr/1524/

XIOC detected URL: https://datatracker.ietf.org/ipr/1524/

extracted_from_files

Domain
detected Domain: midbuf.ch

XIOC detected Domain: midbuf.ch

extracted_from_files

Domain
detected Domain: out.ch

XIOC detected Domain: out.ch

extracted_from_files

Domain
detected Domain: vnd.ms

XIOC detected Domain: vnd.ms

extracted_from_files

Domain
detected Domain: acelp.net

XIOC detected Domain: acelp.net

extracted_from_files

Domain
detected Domain: outcfg.channel

XIOC detected Domain: outcfg.channel

extracted_from_files

Domain
detected Domain: incfg.channel

XIOC detected Domain: incfg.channel

extracted_from_files

Domain
detected Domain: h6v.np

XIOC detected Domain: h6v.np

extracted_from_files

Domain
detected Domain: self.name

XIOC detected Domain: self.name

extracted_from_files

Domain
detected Domain: streams.videolan.org

XIOC detected Domain: streams.videolan.org

extracted_from_files

Domain
detected Domain: node.id

XIOC detected Domain: node.id

extracted_from_files

Domain
detected Domain: www.ffmpeg.org

XIOC detected Domain: www.ffmpeg.org

extracted_from_files

Domain
detected Domain: ffmpeg.org

XIOC detected Domain: ffmpeg.org

extracted_from_files

Domain
detected Domain: a.fr

XIOC detected Domain: a.fr

extracted_from_files

Domain
detected Domain: dither.noise.ch

XIOC detected Domain: dither.noise.ch

extracted_from_files

Domain
detected Domain: outframe.data

XIOC detected Domain: outframe.data

extracted_from_files

Domain
detected Domain: id.data

XIOC detected Domain: id.data

extracted_from_files

Domain
detected Domain: frame.channel

XIOC detected Domain: frame.channel

extracted_from_files

Domain
detected Domain: frame.data

XIOC detected Domain: frame.data

extracted_from_files

Domain
detected Domain: crop.top

XIOC detected Domain: crop.top

extracted_from_files

Domain
detected Domain: packet.data

XIOC detected Domain: packet.data

extracted_from_files

Domain
detected Domain: elem.data

XIOC detected Domain: elem.data

extracted_from_files

Domain
detected Domain: f.node.stream

XIOC detected Domain: f.node.stream

extracted_from_files

Domain
detected Domain: opts.open

XIOC detected Domain: opts.open

extracted_from_files

Domain
detected Domain: inpacket.stream

XIOC detected Domain: inpacket.stream

extracted_from_files

Domain
detected Domain: input.channel

XIOC detected Domain: input.channel

extracted_from_files

Domain
detected Domain: output.channel

XIOC detected Domain: output.channel

extracted_from_files

Domain
detected Domain: config.map

XIOC detected Domain: config.map

extracted_from_files

Domain
detected Domain: inframes.map

XIOC detected Domain: inframes.map

extracted_from_files

Domain
detected Domain: this.stream

XIOC detected Domain: this.stream

extracted_from_files

Domain
detected Domain: stream.node.name

XIOC detected Domain: stream.node.name

extracted_from_files

Domain
detected Domain: module.free

XIOC detected Domain: module.free

extracted_from_files

Domain
detected Domain: caccessors.free

XIOC detected Domain: caccessors.free

extracted_from_files

Domain
detected Domain: module.open

XIOC detected Domain: module.open

extracted_from_files

Domain
detected Domain: caccessors.open

XIOC detected Domain: caccessors.open

extracted_from_files

Domain
detected Domain: ex.name

XIOC detected Domain: ex.name

extracted_from_files

Domain
detected Domain: lookup.node.id

XIOC detected Domain: lookup.node.id

extracted_from_files

Domain
detected Domain: child.id

XIOC detected Domain: child.id

extracted_from_files

Domain
detected Domain: performance.now

XIOC detected Domain: performance.now

extracted_from_files

Domain
detected Domain: date.tm

XIOC detected Domain: date.tm

extracted_from_files

Domain
detected Domain: 7-date.tm

XIOC detected Domain: 7-date.tm

extracted_from_files

Domain
detected Domain: 371-date.tm

XIOC detected Domain: 371-date.tm

extracted_from_files

Domain
detected Domain: this.id

XIOC detected Domain: this.id

extracted_from_files

Domain
detected Domain: fs.read

XIOC detected Domain: fs.read

extracted_from_files

Domain
detected Domain: ret.name

XIOC detected Domain: ret.name

extracted_from_files

Domain
detected Domain: lookup.node.name

XIOC detected Domain: lookup.node.name

extracted_from_files

Domain
detected Domain: obj.link

XIOC detected Domain: obj.link

extracted_from_files

Domain
detected Domain: stat.dev

XIOC detected Domain: stat.dev

extracted_from_files

Domain
detected Domain: e.name

XIOC detected Domain: e.name

extracted_from_files

Domain
detected Domain: stream.node.id

XIOC detected Domain: stream.node.id

extracted_from_files

Domain
detected Domain: node.parent.id

XIOC detected Domain: node.parent.id

extracted_from_files

Domain
detected Domain: current.name

XIOC detected Domain: current.name

extracted_from_files

Domain
detected Domain: parent.id

XIOC detected Domain: parent.id

extracted_from_files

Domain
detected Domain: stream.stream

XIOC detected Domain: stream.stream

extracted_from_files

Domain
detected Domain: device.stream

XIOC detected Domain: device.stream

extracted_from_files

Domain
detected Domain: ops.open

XIOC detected Domain: ops.open

extracted_from_files

Domain
detected Domain: fs.open

XIOC detected Domain: fs.open

extracted_from_files

Domain
detected Domain: table.file.stream

XIOC detected Domain: table.file.stream

extracted_from_files

Domain
detected Domain: table.link.stream

XIOC detected Domain: table.link.stream

extracted_from_files

Domain
detected Domain: table.chrdev.stream

XIOC detected Domain: table.chrdev.stream

extracted_from_files

Domain
detected Domain: attr.dev

XIOC detected Domain: attr.dev

extracted_from_files

Domain
detected Domain: www.w3.org

XIOC detected Domain: www.w3.org

extracted_from_files

Domain
detected Domain: node.name

XIOC detected Domain: node.name

extracted_from_files

Domain
detected Domain: node.link

XIOC detected Domain: node.link

extracted_from_files

Domain
detected Domain: this.name

XIOC detected Domain: this.name

extracted_from_files

Domain
detected Domain: tty.stream

XIOC detected Domain: tty.stream

extracted_from_files

Domain
detected Domain: date.now

XIOC detected Domain: date.now

extracted_from_files

Domain
detected Domain: memfs.stream

XIOC detected Domain: memfs.stream

extracted_from_files

Domain
detected Domain: ops.read

XIOC detected Domain: ops.read

extracted_from_files

Domain
detected Domain: node.stream

XIOC detected Domain: node.stream

extracted_from_files

Domain
detected Domain: table.dir.stream

XIOC detected Domain: table.dir.stream

extracted_from_files

Domain
detected Domain: libav.target

XIOC detected Domain: libav.target

extracted_from_files

Domain
detected Domain: array.prototype.slice.call

XIOC detected Domain: array.prototype.slice.call

extracted_from_files

Domain
detected Domain: e.data

XIOC detected Domain: e.data

extracted_from_files

Domain
detected Domain: datatracker.ietf.org

XIOC detected Domain: datatracker.ietf.org

extracted_from_files

Domain
detected Domain: gmx.at

XIOC detected Domain: gmx.at

extracted_from_files

IP
detected Domain: xiph.org

XIOC detected Domain: xiph.org

extracted_from_files

Domain
detected Domain: xhr.open

XIOC detected Domain: xhr.open

extracted_from_files

IP
detected IP: a::

XIOC detected IP: a::

extracted_from_files

Domain
detected Domain: signingca1.addons.mozilla.org

XIOC detected Domain: signingca1.addons.mozilla.org

extracted_from_files

Domain
detected Domain: mozilla.com

XIOC detected Domain: mozilla.com

extracted_from_files

Domain
detected Domain: addons.mozilla.org

XIOC detected Domain: addons.mozilla.org

extracted_from_files

Domain
detected Domain: content-signature.mozilla.org

XIOC detected Domain: content-signature.mozilla.org

extracted_from_files

Domain
detected Domain: amo.paulrouget.com

XIOC detected Domain: amo.paulrouget.com

extracted_from_files

Hash
detected SHA1 Hash: 047b82506d6b471873300a5e4d1e690420b582d0

XIOC detected SHA1 Hash: 047b82506d6b471873300a5e4d1e690420b582d0

extracted_from_files

Security Analysis Summary

Security Analysis Overview

MediaInspector is a Firefox Add-ons extension published by vdh. Version 1.0.1 has been analyzed by the Risky Plugins security platform, receiving a risk score of 65/100 (HIGH risk) based on 123 security findings.

Risk Assessment

This extension presents high security risk. Significant concerns were identified during analysis. It is not recommended for use in sensitive or production environments without thorough review.

Findings Breakdown

  • High: 20 finding(s)
  • Medium: 103 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

MediaInspector is published by vdh on the Firefox Add-ons marketplace. The extension has approximately 164 users.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Frequently Asked Questions