Is "Puzzle" on Firefox Add-ons Safe to Install?

mr_JSm1th · firefox · v1.0.0.10resigned1

Well-known game since childhood is in your browser. The goal is quite simple: you need to collect an image from separate fragments. The game has 3 levels of difficulty: from simple to advanced. Choose the level and move the fragments of the picture by mouse. There is a clue about what should happen, in the field to the right. The game is considered complete when each fragment is in its place.

Risk Assessment

Analyzed
64.88
out of 100
MEDIUM

401 security findings detected across all analyzers

Firefox extension requesting 1 permission

Severity Breakdown

0
Critical
18
High
383
Medium
0
Low
0
Info

Finding Categories

18
Malware Signatures
1
Obfuscation
3
Network
379
IoC Indicators

YARA Rules Matched

8 rules(18 hits)
postinstall obfuscation SQLInjection postinstall file manipulation postinstall network communication postinstall file download postinstall system command postinstall crypto operations NoUseWeakRandom

Requested Permissions

1 permission
*://*/*
Dangerous

About This Extension

Well-known game since childhood is in your browser. The goal is quite simple: you need to collect an image from separate fragments. The game has 3 levels of difficulty: from simple to advanced. Choose the level and move the fragments of the picture by mouse. There is a clue about what should happen, in the field to the right. The game is considered complete when each fragment is in its place.

Detailed Findings

22 total

YARA Rule Matches

8 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

URLs
53
IP Addresses
9
Domains
319
Strings
379

All Indicators · 379

Domain
detected Domain: array.prototype.slice.call

XIOC detected Domain: array.prototype.slice.call

extracted_from_files

Domain
detected Domain: o.events

XIOC detected Domain: o.events

extracted_from_files

Domain
detected Domain: this.off

XIOC detected Domain: this.off

extracted_from_files

Domain
detected Domain: factor.to

XIOC detected Domain: factor.to

extracted_from_files

Domain
detected Domain: mozilla.com

XIOC detected Domain: mozilla.com

extracted_from_files

Domain
detected Domain: signingca1.addons.mozilla.org

XIOC detected Domain: signingca1.addons.mozilla.org

extracted_from_files

IP
detected IP: 1.0.0.10

XIOC detected IP: 1.0.0.10

extracted_from_files

IP
detected IP: d::

XIOC detected IP: d::

extracted_from_files

IP
detected IP: ::5

XIOC detected IP: ::5

extracted_from_files

IP
detected IP: ::c

XIOC detected IP: ::c

extracted_from_files

IP
detected IP: ::

XIOC detected IP: ::

extracted_from_files

Domain
detected Domain: o荧.aq

XIOC detected Domain: o荧.aq

extracted_from_files

Domain
detected Domain: i.pt

XIOC detected Domain: i.pt

extracted_from_files

Domain
detected Domain: s.mg

XIOC detected Domain: s.mg

extracted_from_files

Domain
detected Domain: g.gq

XIOC detected Domain: g.gq

extracted_from_files

Domain
detected Domain: t0c50df6652b2c6c6c701a5c6bf5fdc4d.ff339f84d16136672a8e36769282ff7a.addons.mozilla.org

XIOC detected Domain: t0c50df6652b2c6c6c701a5c6bf5fdc4d.ff339f84d16136672a8e36769282ff7a.addons.mozilla.org

extracted_from_files

Domain
detected Domain: content-signature.mozilla.org

XIOC detected Domain: content-signature.mozilla.org

extracted_from_files

Domain
detected Domain: addons.mozilla.org

XIOC detected Domain: addons.mozilla.org

extracted_from_files

Domain
detected Domain: 9.uy

XIOC detected Domain: 9.uy

extracted_from_files

Domain
detected Domain: 3x.ai

XIOC detected Domain: 3x.ai

extracted_from_files

Domain
detected Domain: 骸.kz

XIOC detected Domain: 骸.kz

extracted_from_files

Domain
detected Domain: sq.vi

XIOC detected Domain: sq.vi

extracted_from_files

Domain
detected Domain: y.bb

XIOC detected Domain: y.bb

extracted_from_files

Domain
detected Domain: e.cr

XIOC detected Domain: e.cr

extracted_from_files

Domain
detected Domain: d.mr

XIOC detected Domain: d.mr

extracted_from_files

Domain
detected Domain: y.gr

XIOC detected Domain: y.gr

extracted_from_files

Domain
detected Domain: 9.hr

XIOC detected Domain: 9.hr

extracted_from_files

Domain
detected Domain: a.ca

XIOC detected Domain: a.ca

extracted_from_files

Domain
detected Domain: paint.net

XIOC detected Domain: paint.net

extracted_from_files

Domain
detected Domain: lay.au

XIOC detected Domain: lay.au

extracted_from_files

Domain
detected Domain: g.cg

XIOC detected Domain: g.cg

extracted_from_files

Domain
detected Domain: c.mm

XIOC detected Domain: c.mm

extracted_from_files

Domain
detected Domain: x.eg

XIOC detected Domain: x.eg

extracted_from_files

Domain
detected Domain: 8.my

XIOC detected Domain: 8.my

extracted_from_files

Domain
detected Domain: ua.mr

XIOC detected Domain: ua.mr

extracted_from_files

Domain
detected Domain: w.ug

XIOC detected Domain: w.ug

extracted_from_files

Domain
detected Domain: i.zm

XIOC detected Domain: i.zm

extracted_from_files

Domain
detected Domain: k8.my

XIOC detected Domain: k8.my

extracted_from_files

Domain
detected Domain: 3.cw

XIOC detected Domain: 3.cw

extracted_from_files

Domain
detected Domain: e.call

XIOC detected Domain: e.call

extracted_from_files

Domain
detected Domain: w.map

XIOC detected Domain: w.map

extracted_from_files

Domain
detected Domain: o.call

XIOC detected Domain: o.call

extracted_from_files

Domain
detected Domain: c.call

XIOC detected Domain: c.call

extracted_from_files

Domain
detected Domain: p.call

XIOC detected Domain: p.call

extracted_from_files

Domain
detected Domain: jquery.org

XIOC detected Domain: jquery.org

extracted_from_files

Domain
detected Domain: socialmoduleinstance.show

XIOC detected Domain: socialmoduleinstance.show

extracted_from_files

Domain
detected Domain: oe.support

XIOC detected Domain: oe.support

extracted_from_files

Domain
detected Domain: l.id

XIOC detected Domain: l.id

extracted_from_files

Domain
detected Domain: h.call

XIOC detected Domain: h.call

extracted_from_files

Domain
detected Domain: u.call

XIOC detected Domain: u.call

extracted_from_files

Domain
detected Domain: s.call

XIOC detected Domain: s.call

extracted_from_files

Domain
detected Domain: t.call

XIOC detected Domain: t.call

extracted_from_files

Domain
detected Domain: f.call

XIOC detected Domain: f.call

extracted_from_files

Domain
detected Domain: t.next

XIOC detected Domain: t.next

extracted_from_files

Domain
detected Domain: t.id

XIOC detected Domain: t.id

extracted_from_files

Domain
detected Domain: n.call

XIOC detected Domain: n.call

extracted_from_files

Domain
detected Domain: m.call

XIOC detected Domain: m.call

extracted_from_files

Domain
detected Domain: r.find.id

XIOC detected Domain: r.find.id

extracted_from_files

Domain
detected Domain: r.filter.id

XIOC detected Domain: r.filter.id

extracted_from_files

Domain
detected Domain: i.top

XIOC detected Domain: i.top

extracted_from_files

Domain
detected Domain: t.map

XIOC detected Domain: t.map

extracted_from_files

Domain
detected Domain: r.call

XIOC detected Domain: r.call

extracted_from_files

Domain
detected Domain: t.name

XIOC detected Domain: t.name

extracted_from_files

Domain
detected Domain: l.call

XIOC detected Domain: l.call

extracted_from_files

Domain
detected Domain: i.call

XIOC detected Domain: i.call

extracted_from_files

Domain
detected Domain: oe.select

XIOC detected Domain: oe.select

extracted_from_files

Domain
detected Domain: j.call

XIOC detected Domain: j.call

extracted_from_files

Domain
detected Domain: y.events

XIOC detected Domain: y.events

extracted_from_files

Domain
detected Domain: ge.td

XIOC detected Domain: ge.td

extracted_from_files

Domain
detected Domain: ge.th

XIOC detected Domain: ge.th

extracted_from_files

Domain
detected Domain: this.show

XIOC detected Domain: this.show

extracted_from_files

Domain
detected Domain: w.style

XIOC detected Domain: w.style

extracted_from_files

Domain
detected Domain: e.style

XIOC detected Domain: e.style

extracted_from_files

Domain
detected Domain: o.empty.fire

XIOC detected Domain: o.empty.fire

extracted_from_files

Domain
detected Domain: w.event.handlers.call

XIOC detected Domain: w.event.handlers.call

extracted_from_files

Domain
detected Domain: c.predispatch.call

XIOC detected Domain: c.predispatch.call

extracted_from_files

Domain
detected Domain: f.teardown.call

XIOC detected Domain: f.teardown.call

extracted_from_files

Domain
detected Domain: f.remove.call

XIOC detected Domain: f.remove.call

extracted_from_files

Domain
detected Domain: w.event.global

XIOC detected Domain: w.event.global

extracted_from_files

Domain
detected Domain: f.add.call

XIOC detected Domain: f.add.call

extracted_from_files

Domain
detected Domain: f.setup.call

XIOC detected Domain: f.setup.call

extracted_from_files

Domain
detected Domain: date.now

XIOC detected Domain: date.now

extracted_from_files

Domain
detected Domain: this.target

XIOC detected Domain: this.target

extracted_from_files

Domain
detected Domain: this.click

XIOC detected Domain: this.click

extracted_from_files

Domain
detected Domain: e.target

XIOC detected Domain: e.target

extracted_from_files

Domain
detected Domain: c.postdispatch.call

XIOC detected Domain: c.postdispatch.call

extracted_from_files

Domain
detected Domain: a.data

XIOC detected Domain: a.data

extracted_from_files

Domain
detected Domain: t.data

XIOC detected Domain: t.data

extracted_from_files

Domain
detected Domain: t.top

XIOC detected Domain: t.top

extracted_from_files

Domain
detected Domain: this.map

XIOC detected Domain: this.map

extracted_from_files

Domain
detected Domain: t.events

XIOC detected Domain: t.events

extracted_from_files

Domain
detected Domain: y.call

XIOC detected Domain: y.call

extracted_from_files

Domain
detected Domain: l.opts.start.call

XIOC detected Domain: l.opts.start.call

extracted_from_files

Domain
detected Domain: a.empty.fire

XIOC detected Domain: a.empty.fire

extracted_from_files

Domain
detected Domain: e.now

XIOC detected Domain: e.now

extracted_from_files

Domain
detected Domain: this.offset.click.top

XIOC detected Domain: this.offset.click.top

extracted_from_files

Domain
detected Domain: this.helper.is

XIOC detected Domain: this.helper.is

extracted_from_files

Domain
detected Domain: obj.top

XIOC detected Domain: obj.top

extracted_from_files

Domain
detected Domain: e.elem.style

XIOC detected Domain: e.elem.style

extracted_from_files

Domain
detected Domain: this.options.step.call

XIOC detected Domain: this.options.step.call

extracted_from_files

Domain
detected Domain: this.now

XIOC detected Domain: this.now

extracted_from_files

Domain
detected Domain: c.style

XIOC detected Domain: c.style

extracted_from_files

Domain
detected Domain: this.name

XIOC detected Domain: this.name

extracted_from_files

Domain
detected Domain: t.target

XIOC detected Domain: t.target

extracted_from_files

Domain
detected Domain: finish.call

XIOC detected Domain: finish.call

extracted_from_files

Domain
detected Domain: i.stop.call

XIOC detected Domain: i.stop.call

extracted_from_files

Domain
detected Domain: r.old.call

XIOC detected Domain: r.old.call

extracted_from_files

Domain
detected Domain: w.fx.off

XIOC detected Domain: w.fx.off

extracted_from_files

Domain
detected Domain: l.opts.fail

XIOC detected Domain: l.opts.fail

extracted_from_files

Domain
detected Domain: b.data

XIOC detected Domain: b.data

extracted_from_files

Domain
detected Domain: e.fail

XIOC detected Domain: e.fail

extracted_from_files

Domain
detected Domain: h.beforesend.call

XIOC detected Domain: h.beforesend.call

extracted_from_files

Domain
detected Domain: h.global

XIOC detected Domain: h.global

extracted_from_files

Domain
detected Domain: h.data

XIOC detected Domain: h.data

extracted_from_files

Domain
detected Domain: l.host

XIOC detected Domain: l.host

extracted_from_files

Domain
detected Domain: bt.host

XIOC detected Domain: bt.host

extracted_from_files

Domain
detected Domain: api.jqueryui.com

XIOC detected Domain: api.jqueryui.com

extracted_from_files

Domain
detected Domain: jqueryui.com

XIOC detected Domain: jqueryui.com

extracted_from_files

Domain
detected Domain: w.now

XIOC detected Domain: w.now

extracted_from_files

Domain
detected Domain: t.using.call

XIOC detected Domain: t.using.call

extracted_from_files

Domain
detected Domain: t.top-s.top

XIOC detected Domain: t.top-s.top

extracted_from_files

Domain
detected Domain: p.top

XIOC detected Domain: p.top

extracted_from_files

Domain
detected Domain: s.open

XIOC detected Domain: s.open

extracted_from_files

Domain
detected Domain: www.robertpenner.com

XIOC detected Domain: www.robertpenner.com

extracted_from_files

Domain
detected Domain: bugzilla.mozilla.org

XIOC detected Domain: bugzilla.mozilla.org

extracted_from_files

Domain
detected Domain: code.google.com

XIOC detected Domain: code.google.com

extracted_from_files

Domain
detected Domain: github.com

XIOC detected Domain: github.com

extracted_from_files

Domain
detected Domain: bugs.webkit.org

XIOC detected Domain: bugs.webkit.org

extracted_from_files

Domain
detected Domain: bugs.jqueryui.com

XIOC detected Domain: bugs.jqueryui.com

extracted_from_files

Domain
detected Domain: bugs.jquery.com

XIOC detected Domain: bugs.jquery.com

extracted_from_files

Domain
detected Domain: event.target

XIOC detected Domain: event.target

extracted_from_files

Domain
detected Domain: slice.call

XIOC detected Domain: slice.call

extracted_from_files

Domain
detected Domain: fn.call

XIOC detected Domain: fn.call

extracted_from_files

Domain
detected Domain: ui.ie

XIOC detected Domain: ui.ie

extracted_from_files

Domain
detected Domain: removedata.call

XIOC detected Domain: removedata.call

extracted_from_files

Domain
detected Domain: map.name

XIOC detected Domain: map.name

extracted_from_files

Domain
detected Domain: this.id

XIOC detected Domain: this.id

extracted_from_files

Domain
detected Domain: offsets.at

XIOC detected Domain: offsets.at

extracted_from_files

Domain
detected Domain: baseposition.top

XIOC detected Domain: baseposition.top

extracted_from_files

Domain
detected Domain: options.at

XIOC detected Domain: options.at

extracted_from_files

Domain
detected Domain: mousedownevent.target

XIOC detected Domain: mousedownevent.target

extracted_from_files

Domain
detected Domain: callback.call

XIOC detected Domain: callback.call

extracted_from_files

Domain
detected Domain: foo.bar

XIOC detected Domain: foo.bar

extracted_from_files

Domain
detected Domain: element.style

XIOC detected Domain: element.style

extracted_from_files

Domain
detected Domain: data.my

XIOC detected Domain: data.my

extracted_from_files

Domain
detected Domain: within.offset.top

XIOC detected Domain: within.offset.top

extracted_from_files

Domain
detected Domain: options.using.call

XIOC detected Domain: options.using.call

extracted_from_files

Domain
detected Domain: targetoffset.top

XIOC detected Domain: targetoffset.top

extracted_from_files

Domain
detected Domain: position.top

XIOC detected Domain: position.top

extracted_from_files

Domain
detected Domain: options.my

XIOC detected Domain: options.my

extracted_from_files

Domain
detected Domain: offsets.my

XIOC detected Domain: offsets.my

extracted_from_files

Domain
detected Domain: header.next

XIOC detected Domain: header.next

extracted_from_files

Domain
detected Domain: keycode.space

XIOC detected Domain: keycode.space

extracted_from_files

Domain
detected Domain: this.headers.next

XIOC detected Domain: this.headers.next

extracted_from_files

Domain
detected Domain: this.active.next

XIOC detected Domain: this.active.next

extracted_from_files

Domain
detected Domain: testelement.style

XIOC detected Domain: testelement.style

extracted_from_files

Domain
detected Domain: jquery.support

XIOC detected Domain: jquery.support

extracted_from_files

Domain
detected Domain: data.at

XIOC detected Domain: data.at

extracted_from_files

Domain
detected Domain: this.element.is

XIOC detected Domain: this.element.is

extracted_from_files

Domain
detected Domain: this.select

XIOC detected Domain: this.select

extracted_from_files

Domain
detected Domain: ui.menu

XIOC detected Domain: ui.menu

extracted_from_files

Domain
detected Domain: fx.now

XIOC detected Domain: fx.now

extracted_from_files

Domain
detected Domain: toshow.show

XIOC detected Domain: toshow.show

extracted_from_files

Domain
detected Domain: active.next

XIOC detected Domain: active.next

extracted_from_files

Domain
detected Domain: clicked.next

XIOC detected Domain: clicked.next

extracted_from_files

Domain
detected Domain: this.menu.select

XIOC detected Domain: this.menu.select

extracted_from_files

Domain
detected Domain: keycode.page

XIOC detected Domain: keycode.page

extracted_from_files

Domain
detected Domain: ui.keycode.space

XIOC detected Domain: ui.keycode.space

extracted_from_files

Domain
detected Domain: this.active.is

XIOC detected Domain: this.active.is

extracted_from_files

Domain
detected Domain: this.next

XIOC detected Domain: this.next

extracted_from_files

Domain
detected Domain: ui.keycode.page

XIOC detected Domain: ui.keycode.page

extracted_from_files

Domain
detected Domain: elem.data

XIOC detected Domain: elem.data

extracted_from_files

Domain
detected Domain: ul.show

XIOC detected Domain: ul.show

extracted_from_files

Domain
detected Domain: this.search

XIOC detected Domain: this.search

extracted_from_files

Domain
detected Domain: ui.item.data

XIOC detected Domain: ui.item.data

extracted_from_files

Domain
detected Domain: this.document.one

XIOC detected Domain: this.document.one

extracted_from_files

Domain
detected Domain: this.menu

XIOC detected Domain: this.menu

extracted_from_files

Domain
detected Domain: this.menu.element.is

XIOC detected Domain: this.menu.element.is

extracted_from_files

Domain
detected Domain: keycode.tab

XIOC detected Domain: keycode.tab

extracted_from_files

Domain
detected Domain: inst.dpdiv.show

XIOC detected Domain: inst.dpdiv.show

extracted_from_files

Domain
detected Domain: inst.trigger.click

XIOC detected Domain: inst.trigger.click

extracted_from_files

Domain
detected Domain: target.id

XIOC detected Domain: target.id

extracted_from_files

Domain
detected Domain: this.buttonelement.is

XIOC detected Domain: this.buttonelement.is

extracted_from_files

Domain
detected Domain: that.document.one

XIOC detected Domain: that.document.one

extracted_from_files

Domain
detected Domain: radio.name

XIOC detected Domain: radio.name

extracted_from_files

Domain
detected Domain: this.menu.next

XIOC detected Domain: this.menu.next

extracted_from_files

Domain
detected Domain: this.margins.top

XIOC detected Domain: this.margins.top

extracted_from_files

Domain
detected Domain: this.offset.top

XIOC detected Domain: this.offset.top

extracted_from_files

Domain
detected Domain: this.overflowoffset.top

XIOC detected Domain: this.overflowoffset.top

extracted_from_files

Domain
detected Domain: inst.input.is

XIOC detected Domain: inst.input.is

extracted_from_files

Domain
detected Domain: offset.top

XIOC detected Domain: offset.top

extracted_from_files

Domain
detected Domain: input.target

XIOC detected Domain: input.target

extracted_from_files

Domain
detected Domain: inst.dpdiv.is

XIOC detected Domain: inst.dpdiv.is

extracted_from_files

IP
detected IP: d4::

XIOC detected IP: d4::

extracted_from_files

Domain
detected Domain: el.to

XIOC detected Domain: el.to

extracted_from_files

URL
detected URL: http://api.jqueryui.com/spinner/

XIOC detected URL: http://api.jqueryui.com/spinner/

extracted_from_files

Domain
detected Domain: mouseup.call

XIOC detected Domain: mouseup.call

extracted_from_files

Domain
detected Domain: this.options.revert.call

XIOC detected Domain: this.options.revert.call

extracted_from_files

Domain
detected Domain: this.position.top

XIOC detected Domain: this.position.top

extracted_from_files

Domain
detected Domain: style.top

XIOC detected Domain: style.top

extracted_from_files

Domain
detected Domain: ui.plugin.call

XIOC detected Domain: ui.plugin.call

extracted_from_files

Domain
detected Domain: co.top

XIOC detected Domain: co.top

extracted_from_files

Domain
detected Domain: this.offset.scroll.top

XIOC detected Domain: this.offset.scroll.top

extracted_from_files

Domain
detected Domain: pos.top

XIOC detected Domain: pos.top

extracted_from_files

Domain
detected Domain: this.offset.parent.top

XIOC detected Domain: this.offset.parent.top

extracted_from_files

Domain
detected Domain: this.offset.relative.top

XIOC detected Domain: this.offset.relative.top

extracted_from_files

Domain
detected Domain: po.top

XIOC detected Domain: po.top

extracted_from_files

Domain
detected Domain: inst.offset.parent.top

XIOC detected Domain: inst.offset.parent.top

extracted_from_files

Domain
detected Domain: this.instance.offset.parent.top

XIOC detected Domain: this.instance.offset.parent.top

extracted_from_files

Domain
detected Domain: inst.offset.click.top

XIOC detected Domain: inst.offset.click.top

extracted_from_files

Domain
detected Domain: this.instance.offset.click.top

XIOC detected Domain: this.instance.offset.click.top

extracted_from_files

Domain
detected Domain: inst.offset.click

XIOC detected Domain: inst.offset.click

extracted_from_files

Domain
detected Domain: this.instance.offset.click

XIOC detected Domain: this.instance.offset.click

extracted_from_files

Domain
detected Domain: trigger.call

XIOC detected Domain: trigger.call

extracted_from_files

Domain
detected Domain: inst.options.snap.snap.call

XIOC detected Domain: inst.options.snap.snap.call

extracted_from_files

Domain
detected Domain: inst.margins.top

XIOC detected Domain: inst.margins.top

extracted_from_files

Domain
detected Domain: ui.position.top

XIOC detected Domain: ui.position.top

extracted_from_files

Domain
detected Domain: inst.options.snap.release.call

XIOC detected Domain: inst.options.snap.release.call

extracted_from_files

Domain
detected Domain: ui.offset.top

XIOC detected Domain: ui.offset.top

extracted_from_files

Domain
detected Domain: o.top

XIOC detected Domain: o.top

extracted_from_files

Domain
detected Domain: i.overflowoffset.top

XIOC detected Domain: i.overflowoffset.top

extracted_from_files

Domain
detected Domain: data.top

XIOC detected Domain: data.top

extracted_from_files

Domain
detected Domain: props.top

XIOC detected Domain: props.top

extracted_from_files

Domain
detected Domain: this.prevposition.top

XIOC detected Domain: this.prevposition.top

extracted_from_files

Domain
detected Domain: that.originalposition.top

XIOC detected Domain: that.originalposition.top

extracted_from_files

Domain
detected Domain: that.position.top

XIOC detected Domain: that.position.top

extracted_from_files

Domain
detected Domain: smp.top

XIOC detected Domain: smp.top

extracted_from_files

Domain
detected Domain: handles.show

XIOC detected Domain: handles.show

extracted_from_files

Domain
detected Domain: cop.top

XIOC detected Domain: cop.top

extracted_from_files

Domain
detected Domain: that.parentdata.top

XIOC detected Domain: that.parentdata.top

extracted_from_files

Domain
detected Domain: that.offset.top

XIOC detected Domain: that.offset.top

extracted_from_files

Domain
detected Domain: cp.top

XIOC detected Domain: cp.top

extracted_from_files

Domain
detected Domain: sp.top

XIOC detected Domain: sp.top

extracted_from_files

Domain
detected Domain: this.elementoffset.top

XIOC detected Domain: this.elementoffset.top

extracted_from_files

Domain
detected Domain: cpos.top

XIOC detected Domain: cpos.top

extracted_from_files

Domain
detected Domain: ui.keycode.tab

XIOC detected Domain: ui.keycode.tab

extracted_from_files

Domain
detected Domain: checkfocus.call

XIOC detected Domain: checkfocus.call

extracted_from_files

Domain
detected Domain: this.options.show

XIOC detected Domain: this.options.show

extracted_from_files

Domain
detected Domain: this.open

XIOC detected Domain: this.open

extracted_from_files

Domain
detected Domain: op.top

XIOC detected Domain: op.top

extracted_from_files

Domain
detected Domain: el.data

XIOC detected Domain: el.data

extracted_from_files

Domain
detected Domain: that.prevposition.top

XIOC detected Domain: that.prevposition.top

extracted_from_files

Domain
detected Domain: d.is

XIOC detected Domain: d.is

extracted_from_files

Domain
detected Domain: this.element.show

XIOC detected Domain: this.element.show

extracted_from_files

Domain
detected Domain: uidialog.is

XIOC detected Domain: uidialog.is

extracted_from_files

Domain
detected Domain: this.uidialog.show

XIOC detected Domain: this.uidialog.show

extracted_from_files

Domain
detected Domain: this.uidialog.is

XIOC detected Domain: this.uidialog.is

extracted_from_files

Domain
detected Domain: this.document.data

XIOC detected Domain: this.document.data

extracted_from_files

Domain
detected Domain: props.click

XIOC detected Domain: props.click

extracted_from_files

Domain
detected Domain: deactivate.call

XIOC detected Domain: deactivate.call

extracted_from_files

Domain
detected Domain: drop.call

XIOC detected Domain: drop.call

extracted_from_files

Domain
detected Domain: activate.call

XIOC detected Domain: activate.call

extracted_from_files

Domain
detected Domain: accept.call

XIOC detected Domain: accept.call

extracted_from_files

Domain
detected Domain: droppable.offset.top

XIOC detected Domain: droppable.offset.top

extracted_from_files

Domain
detected Domain: inst.accept.call

XIOC detected Domain: inst.accept.call

extracted_from_files

Domain
detected Domain: this.accept.call

XIOC detected Domain: this.accept.call

extracted_from_files

Domain
detected Domain: hue2rgb.as

XIOC detected Domain: hue2rgb.as

extracted_from_files

Domain
detected Domain: jquery.map

XIOC detected Domain: jquery.map

extracted_from_files

Domain
detected Domain: space.to

XIOC detected Domain: space.to

extracted_from_files

Domain
detected Domain: parser.space

XIOC detected Domain: parser.space

extracted_from_files

Domain
detected Domain: color.support

XIOC detected Domain: color.support

extracted_from_files

Domain
detected Domain: over.call

XIOC detected Domain: over.call

extracted_from_files

Domain
detected Domain: out.call

XIOC detected Domain: out.call

extracted_from_files

Domain
detected Domain: o.complete.call

XIOC detected Domain: o.complete.call

extracted_from_files

Domain
detected Domain: allanimations.map

XIOC detected Domain: allanimations.map

extracted_from_files

Domain
detected Domain: jquery.style

XIOC detected Domain: jquery.style

extracted_from_files

Domain
detected Domain: elem.style

XIOC detected Domain: elem.style

extracted_from_files

Domain
detected Domain: curelem.style

XIOC detected Domain: curelem.style

extracted_from_files

Domain
detected Domain: value.call

XIOC detected Domain: value.call

extracted_from_files

Domain
detected Domain: spaces.hsla.to

XIOC detected Domain: spaces.hsla.to

extracted_from_files

Domain
detected Domain: complete.call

XIOC detected Domain: complete.call

extracted_from_files

Domain
detected Domain: args.complete.call

XIOC detected Domain: args.complete.call

extracted_from_files

Domain
detected Domain: fx.off

XIOC detected Domain: fx.off

extracted_from_files

Domain
detected Domain: active.id

XIOC detected Domain: active.id

extracted_from_files

Domain
detected Domain: el.is

XIOC detected Domain: el.is

extracted_from_files

Domain
detected Domain: element.data

XIOC detected Domain: element.data

extracted_from_files

Domain
detected Domain: effects.animateclass.call

XIOC detected Domain: effects.animateclass.call

extracted_from_files

Domain
detected Domain: o.to

XIOC detected Domain: o.to

extracted_from_files

Domain
detected Domain: el.show

XIOC detected Domain: el.show

extracted_from_files

Domain
detected Domain: effects.save

XIOC detected Domain: effects.save

extracted_from_files

Domain
detected Domain: fn.show

XIOC detected Domain: fn.show

extracted_from_files

Hash
detected MD5 Hash: ff339f84d16136672a8e36769282ff7a

XIOC detected MD5 Hash: ff339f84d16136672a8e36769282ff7a

extracted_from_files

URL
detected URL: http://thank-you-page.com/?source_type=uninstall&lang='+

XIOC detected URL: http://thank-you-page.com/?source_type=uninstall&lang='+

extracted_from_files

URL
detected URL: http://thank-you-page.com/?lang=

XIOC detected URL: http://thank-you-page.com/?lang=

extracted_from_files

Domain
detected Domain: endposition.top

XIOC detected Domain: endposition.top

extracted_from_files

Domain
detected Domain: options.to

XIOC detected Domain: options.to

extracted_from_files

Domain
detected Domain: child.to

XIOC detected Domain: child.to

extracted_from_files

Domain
detected Domain: el.to.top

XIOC detected Domain: el.to.top

extracted_from_files

Domain
detected Domain: el.from.top

XIOC detected Domain: el.from.top

extracted_from_files

URL
detected URL: http://api.jqueryui.com/tabs/

XIOC detected URL: http://api.jqueryui.com/tabs/

extracted_from_files

URL
detected URL: http://bugs.jquery.com/ticket/11778

XIOC detected URL: http://bugs.jquery.com/ticket/11778

extracted_from_files

URL
detected URL: http://api.jqueryui.com/tooltip/

XIOC detected URL: http://api.jqueryui.com/tooltip/

extracted_from_files

Domain
detected Domain: clickoffset.top

XIOC detected Domain: clickoffset.top

extracted_from_files

Domain
detected Domain: item.data

XIOC detected Domain: item.data

extracted_from_files

Domain
detected Domain: this.button.one

XIOC detected Domain: this.button.one

extracted_from_files

Domain
detected Domain: this.ids.menu

XIOC detected Domain: this.ids.menu

extracted_from_files

Domain
detected Domain: selectee.top

XIOC detected Domain: selectee.top

extracted_from_files

Domain
detected Domain: startposition.top

XIOC detected Domain: startposition.top

extracted_from_files

Domain
detected Domain: inst.options.items.call

XIOC detected Domain: inst.options.items.call

extracted_from_files

Domain
detected Domain: this.lastpositionabs.top

XIOC detected Domain: this.lastpositionabs.top

extracted_from_files

Domain
detected Domain: item.top

XIOC detected Domain: item.top

extracted_from_files

Domain
detected Domain: this.positionabs.top

XIOC detected Domain: this.positionabs.top

extracted_from_files

Domain
detected Domain: this.currentitem.show

XIOC detected Domain: this.currentitem.show

extracted_from_files

Domain
detected Domain: cur.top

XIOC detected Domain: cur.top

extracted_from_files

Domain
detected Domain: animation.top

XIOC detected Domain: animation.top

extracted_from_files

Domain
detected Domain: this.tabs.map

XIOC detected Domain: this.tabs.map

extracted_from_files

Domain
detected Domain: this.options.page

XIOC detected Domain: this.options.page

extracted_from_files

Domain
detected Domain: options.page

XIOC detected Domain: options.page

extracted_from_files

Domain
detected Domain: o.placeholder.element.call

XIOC detected Domain: o.placeholder.element.call

extracted_from_files

Domain
detected Domain: containercache.top

XIOC detected Domain: containercache.top

extracted_from_files

Domain
detected Domain: this.options.custom.refreshcontainers.call

XIOC detected Domain: this.options.custom.refreshcontainers.call

extracted_from_files

Domain
detected Domain: this.options.items.call

XIOC detected Domain: this.options.items.call

extracted_from_files

Domain
detected Domain: parent.data

XIOC detected Domain: parent.data

extracted_from_files

Domain
detected Domain: target.data

XIOC detected Domain: target.data

extracted_from_files

Domain
detected Domain: element.is

XIOC detected Domain: element.is

extracted_from_files

Domain
detected Domain: this.panels.show

XIOC detected Domain: this.panels.show

extracted_from_files

Domain
detected Domain: li.data

XIOC detected Domain: li.data

extracted_from_files

Domain
detected Domain: that.options.show

XIOC detected Domain: that.options.show

extracted_from_files

Domain
detected Domain: tab.data

XIOC detected Domain: tab.data

extracted_from_files

Domain
detected Domain: dom.id

XIOC detected Domain: dom.id

extracted_from_files

Domain
detected Domain: info.name

XIOC detected Domain: info.name

extracted_from_files

Domain
detected Domain: thank-you-page.com

XIOC detected Domain: thank-you-page.com

extracted_from_files

IP
detected Domain: tooltip.is

XIOC detected Domain: tooltip.is

extracted_from_files

Domain
detected Domain: target.is

XIOC detected Domain: target.is

extracted_from_files

Domain
detected Domain: contentoption.call

XIOC detected Domain: contentoption.call

extracted_from_files

Domain
detected Domain: blurevent.target

XIOC detected Domain: blurevent.target

extracted_from_files

URL
detected URL: http://bugs.jquery.com/ticket/9413)

XIOC detected URL: http://bugs.jquery.com/ticket/9413)

extracted_from_files

URL
detected URL: http://api.jqueryui.com/category/ui-core/

XIOC detected URL: http://api.jqueryui.com/category/ui-core/

extracted_from_files

URL
detected URL: http://jquery.org/license

XIOC detected URL: http://jquery.org/license

extracted_from_files

URL
detected URL: http://jqueryui.com

XIOC detected URL: http://jqueryui.com

extracted_from_files

URL
detected URL: http://addons.mozilla.org/ca/crl.pem0N

XIOC detected URL: http://addons.mozilla.org/ca/crl.pem0N

extracted_from_files

Domain
detected Domain: ԝ.vi

XIOC detected Domain: ԝ.vi

extracted_from_files

Domain
detected Domain: tab.id

XIOC detected Domain: tab.id

extracted_from_files

URL
detected URL: http://api.jqueryui.com/menu/

XIOC detected URL: http://api.jqueryui.com/menu/

extracted_from_files

URL
detected URL: http://api.jqueryui.com/accordion/

XIOC detected URL: http://api.jqueryui.com/accordion/

extracted_from_files

URL
detected URL: http://api.jqueryui.com/position/

XIOC detected URL: http://api.jqueryui.com/position/

extracted_from_files

URL
detected URL: http://api.jqueryui.com/mouse/

XIOC detected URL: http://api.jqueryui.com/mouse/

extracted_from_files

URL
detected URL: http://bugs.jquery.com/ticket/9413

XIOC detected URL: http://bugs.jquery.com/ticket/9413

extracted_from_files

URL
detected URL: http://bugs.jquery.com/ticket/8235

XIOC detected URL: http://bugs.jquery.com/ticket/8235

extracted_from_files

URL
detected URL: http://api.jqueryui.com/jQuery.widget/

XIOC detected URL: http://api.jqueryui.com/jQuery.widget/

extracted_from_files

URL
detected URL: http://api.jqueryui.com/dialog/

XIOC detected URL: http://api.jqueryui.com/dialog/

extracted_from_files

URL
detected URL: http://api.jqueryui.com/resizable/

XIOC detected URL: http://api.jqueryui.com/resizable/

extracted_from_files

URL
detected URL: http://api.jqueryui.com/draggable/

XIOC detected URL: http://api.jqueryui.com/draggable/

extracted_from_files

URL
detected URL: http://bugs.jqueryui.com/ticket/7552

XIOC detected URL: http://bugs.jqueryui.com/ticket/7552

extracted_from_files

URL
detected URL: http://api.jqueryui.com/datepicker/

XIOC detected URL: http://api.jqueryui.com/datepicker/

extracted_from_files

URL
detected URL: http://api.jqueryui.com/button/

XIOC detected URL: http://api.jqueryui.com/button/

extracted_from_files

URL
detected URL: http://api.jqueryui.com/autocomplete/

XIOC detected URL: http://api.jqueryui.com/autocomplete/

extracted_from_files

URL
detected URL: https://bugzilla.mozilla.org/show_bug.cgi?id=561664

XIOC detected URL: https://bugzilla.mozilla.org/show_bug.cgi?id=561664

extracted_from_files

URL
detected URL: http://bugs.jquery.com/ticket/9917

XIOC detected URL: http://bugs.jquery.com/ticket/9917

extracted_from_files

URL
detected URL: https://code.google.com/p/maashaack/source/browse/packages/graphics/trunk/src/graphics/colors/HUE2RGB.as?r=5021

XIOC detected URL: https://code.google.com/p/maashaack/source/browse/packages/graphics/trunk/src/graphics/colors/HUE2RGB.as?r=5021

extracted_from_files

URL
detected URL: https://github.com/jquery/jquery-color

XIOC detected URL: https://github.com/jquery/jquery-color

extracted_from_files

URL
detected URL: http://api.jqueryui.com/category/effects-core/

XIOC detected URL: http://api.jqueryui.com/category/effects-core/

extracted_from_files

URL
detected URL: http://api.jqueryui.com/droppable/

XIOC detected URL: http://api.jqueryui.com/droppable/

extracted_from_files

URL
detected URL: https://bugs.webkit.org/show_bug.cgi?id=47182

XIOC detected URL: https://bugs.webkit.org/show_bug.cgi?id=47182

extracted_from_files

URL
detected URL: http://api.jqueryui.com/fade-effect/

XIOC detected URL: http://api.jqueryui.com/fade-effect/

extracted_from_files

URL
detected URL: http://api.jqueryui.com/explode-effect/

XIOC detected URL: http://api.jqueryui.com/explode-effect/

extracted_from_files

URL
detected URL: http://api.jqueryui.com/drop-effect/

XIOC detected URL: http://api.jqueryui.com/drop-effect/

extracted_from_files

URL
detected URL: http://api.jqueryui.com/clip-effect/

XIOC detected URL: http://api.jqueryui.com/clip-effect/

extracted_from_files

URL
detected URL: http://api.jqueryui.com/bounce-effect/

XIOC detected URL: http://api.jqueryui.com/bounce-effect/

extracted_from_files

URL
detected URL: http://api.jqueryui.com/blind-effect/

XIOC detected URL: http://api.jqueryui.com/blind-effect/

extracted_from_files

URL
detected URL: http://www.robertpenner.com/easing)

XIOC detected URL: http://www.robertpenner.com/easing)

extracted_from_files

URL
detected URL: http://api.jqueryui.com/shake-effect/

XIOC detected URL: http://api.jqueryui.com/shake-effect/

extracted_from_files

URL
detected URL: http://api.jqueryui.com/pulsate-effect/

XIOC detected URL: http://api.jqueryui.com/pulsate-effect/

extracted_from_files

URL
detected URL: http://api.jqueryui.com/puff-effect/

XIOC detected URL: http://api.jqueryui.com/puff-effect/

extracted_from_files

URL
detected URL: http://api.jqueryui.com/scale-effect/

XIOC detected URL: http://api.jqueryui.com/scale-effect/

extracted_from_files

URL
detected URL: http://api.jqueryui.com/size-effect/

XIOC detected URL: http://api.jqueryui.com/size-effect/

extracted_from_files

URL
detected URL: http://api.jqueryui.com/highlight-effect/

XIOC detected URL: http://api.jqueryui.com/highlight-effect/

extracted_from_files

URL
detected URL: http://api.jqueryui.com/fold-effect/

XIOC detected URL: http://api.jqueryui.com/fold-effect/

extracted_from_files

URL
detected URL: http://api.jqueryui.com/sortable/

XIOC detected URL: http://api.jqueryui.com/sortable/

extracted_from_files

URL
detected URL: http://api.jqueryui.com/slider/

XIOC detected URL: http://api.jqueryui.com/slider/

extracted_from_files

URL
detected URL: http://api.jqueryui.com/selectmenu

XIOC detected URL: http://api.jqueryui.com/selectmenu

extracted_from_files

URL
detected URL: http://api.jqueryui.com/selectable/

XIOC detected URL: http://api.jqueryui.com/selectable/

extracted_from_files

URL
detected URL: http://api.jqueryui.com/progressbar/

XIOC detected URL: http://api.jqueryui.com/progressbar/

extracted_from_files

URL
detected URL: http://api.jqueryui.com/transfer-effect/

XIOC detected URL: http://api.jqueryui.com/transfer-effect/

extracted_from_files

URL
detected URL: http://api.jqueryui.com/slide-effect/

XIOC detected URL: http://api.jqueryui.com/slide-effect/

extracted_from_files

Domain
detected Domain: this.effect.call

XIOC detected Domain: this.effect.call

extracted_from_files

Domain
detected Domain: effectmethod.call

XIOC detected Domain: effectmethod.call

extracted_from_files

Domain
detected Domain: a.events

XIOC detected Domain: a.events

extracted_from_files

Domain
detected Domain: elem.is

XIOC detected Domain: elem.is

extracted_from_files

Security Analysis Summary

Security Analysis Overview

Puzzle is a Firefox Add-ons extension published by mr_JSm1th. Version 1.0.0.10resigned1 has been analyzed by the Risky Plugins security platform, receiving a risk score of 64.88/100 (MEDIUM risk) based on 401 security findings.

Risk Assessment

This extension presents high security risk. Significant concerns were identified during analysis. It is not recommended for use in sensitive or production environments without thorough review.

Findings Breakdown

  • High: 18 finding(s)
  • Medium: 383 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Puzzle is published by mr_JSm1th on the Firefox Add-ons marketplace. The extension has approximately 57 users.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Frequently Asked Questions