Is "Listen to the world" on Chrome Web Store Safe to Install?

[email protected] · chrome · v1.0.1

简约的音乐播放器,包括各大音乐平台,QQ,网易云等,用户可以直接搜索喜爱的歌曲,并随时进行播放

Risk Assessment

Analyzed
64.97
out of 100
MEDIUM

491 security findings detected across all analyzers

Chrome extension requesting 8 permissions

Severity Breakdown

0
Critical
52
High
439
Medium
0
Low
0
Info

Finding Categories

52
Malware Signatures
1
Obfuscation
8
Network
428
IoC Indicators

YARA Rules Matched

11 rules(52 hits)
postinstall network communication postinstall file manipulation postinstall crypto operations NoUseWeakRandom postinstall obfuscation SQLInjection postinstall system command LocalStorageShouldNotBeUsed postinstall file download postinstall environment access OriginsNotVerified

Requested Permissions

8 permissions
webRequest

Intercept, modify, and block all network requests

High
webRequestBlocking

Block network requests before they complete

High
storage
Low
*://music.163.com/*
Low
*://*.qq.com/*
Low
*://itunes.apple.com/*
Low
http://*/
Low
https://*/
Low

About This Extension

简约的音乐播放器,包括各大音乐平台,QQ,网易云等,用户可以直接搜索喜爱的歌曲,并随时进行播放

Detailed Findings

61 total

YARA Rule Matches

11 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

URLs
44
IP Addresses
4
Domains
383
Strings
428

All Indicators · 428

Domain
detected Domain: b.data

XIOC detected Domain: b.data

extracted_from_files

Domain
detected Domain: d.to

XIOC detected Domain: d.to

extracted_from_files

Domain
detected Domain: t.style

XIOC detected Domain: t.style

extracted_from_files

Domain
detected Domain: 64k.mp

XIOC detected Domain: 64k.mp

extracted_from_files

Domain
detected Domain: indexeddb.open

XIOC detected Domain: indexeddb.open

extracted_from_files

Domain
detected Domain: search.bilibili.com

XIOC detected Domain: search.bilibili.com

extracted_from_files

Domain
detected Domain: www.youtube.com

XIOC detected Domain: www.youtube.com

extracted_from_files

Domain
detected Domain: music.163.com

XIOC detected Domain: music.163.com

extracted_from_files

Domain
detected Domain: lemmon.cn

XIOC detected Domain: lemmon.cn

extracted_from_files

Domain
detected Domain: lhttp.qingting.fm

XIOC detected Domain: lhttp.qingting.fm

extracted_from_files

Domain
detected Domain: s.likelist.map

XIOC detected Domain: s.likelist.map

extracted_from_files

Domain
detected Domain: player.play

XIOC detected Domain: player.play

extracted_from_files

Domain
detected Domain: r.play

XIOC detected Domain: r.play

extracted_from_files

Domain
detected Domain: d.play

XIOC detected Domain: d.play

extracted_from_files

Domain
detected Domain: n.play

XIOC detected Domain: n.play

extracted_from_files

Domain
detected Domain: o.play

XIOC detected Domain: o.play

extracted_from_files

Domain
detected Domain: t.play

XIOC detected Domain: t.play

extracted_from_files

Domain
detected Domain: imgcache.qq.com

XIOC detected Domain: imgcache.qq.com

extracted_from_files

Domain
detected Domain: music.qq.com

XIOC detected Domain: music.qq.com

extracted_from_files

Domain
detected Domain: qqmusic.qq.com

XIOC detected Domain: qqmusic.qq.com

extracted_from_files

Domain
detected Domain: y.qq.com

XIOC detected Domain: y.qq.com

extracted_from_files

Domain
detected Domain: m.xiami.com

XIOC detected Domain: m.xiami.com

extracted_from_files

Domain
detected Domain: xiami.com

XIOC detected Domain: xiami.com

extracted_from_files

Domain
detected Domain: s.play

XIOC detected Domain: s.play

extracted_from_files

Domain
detected Domain: songgroup.youtube.song

XIOC detected Domain: songgroup.youtube.song

extracted_from_files

Domain
detected Domain: e.radio

XIOC detected Domain: e.radio

extracted_from_files

Domain
detected Domain: e.id

XIOC detected Domain: e.id

extracted_from_files

Domain
detected Domain: e.name

XIOC detected Domain: e.name

extracted_from_files

Domain
detected Domain: m.music.migu.cn

XIOC detected Domain: m.music.migu.cn

extracted_from_files

Domain
detected Domain: music.migu.cn

XIOC detected Domain: music.migu.cn

extracted_from_files

Domain
detected Domain: migu.cn

XIOC detected Domain: migu.cn

extracted_from_files

Domain
detected Domain: span.open

XIOC detected Domain: span.open

extracted_from_files

Domain
detected Domain: article.search

XIOC detected Domain: article.search

extracted_from_files

Domain
detected Domain: a.show

XIOC detected Domain: a.show

extracted_from_files

Domain
detected Domain: www.xiami.com

XIOC detected Domain: www.xiami.com

extracted_from_files

Domain
detected Domain: window.open

XIOC detected Domain: window.open

extracted_from_files

Domain
detected Domain: e.play

XIOC detected Domain: e.play

extracted_from_files

Domain
detected Domain: qq.com

XIOC detected Domain: qq.com

extracted_from_files

Domain
detected Domain: battery-1.top

XIOC detected Domain: battery-1.top

extracted_from_files

Domain
detected Domain: radio-add-input.radio

XIOC detected Domain: radio-add-input.radio

extracted_from_files

Domain
detected Domain: favourite.select

XIOC detected Domain: favourite.select

extracted_from_files

Domain
detected Domain: p.request.show

XIOC detected Domain: p.request.show

extracted_from_files

Domain
detected Domain: alert.show

XIOC detected Domain: alert.show

extracted_from_files

Domain
detected Domain: li.youtube

XIOC detected Domain: li.youtube

extracted_from_files

Domain
detected Domain: ul.search

XIOC detected Domain: ul.search

extracted_from_files

Domain
detected Domain: e.song

XIOC detected Domain: e.song

extracted_from_files

Domain
detected Domain: t.id

XIOC detected Domain: t.id

extracted_from_files

Domain
detected Domain: regindata.data.map

XIOC detected Domain: regindata.data.map

extracted_from_files

Domain
detected Domain: e.subscribe.map

XIOC detected Domain: e.subscribe.map

extracted_from_files

Domain
detected Domain: rapi.qingting.fm

XIOC detected Domain: rapi.qingting.fm

extracted_from_files

Domain
detected Domain: www.w3.org

XIOC detected Domain: www.w3.org

extracted_from_files

Domain
detected Domain: battery-3.top

XIOC detected Domain: battery-3.top

extracted_from_files

Domain
detected Domain: e.page

XIOC detected Domain: e.page

extracted_from_files

Domain
detected Domain: t.data.map

XIOC detected Domain: t.data.map

extracted_from_files

Domain
detected Domain: a.map

XIOC detected Domain: a.map

extracted_from_files

Domain
detected Domain: t.likelist.map

XIOC detected Domain: t.likelist.map

extracted_from_files

Domain
detected Domain: s.id

XIOC detected Domain: s.id

extracted_from_files

Domain
detected Domain: s.name

XIOC detected Domain: s.name

extracted_from_files

Domain
detected Domain: s.map

XIOC detected Domain: s.map

extracted_from_files

Domain
detected Domain: t.name

XIOC detected Domain: t.name

extracted_from_files

Domain
detected Domain: s.data

XIOC detected Domain: s.data

extracted_from_files

Domain
detected Domain: hklist.map

XIOC detected Domain: hklist.map

extracted_from_files

Domain
detected Domain: t.map

XIOC detected Domain: t.map

extracted_from_files

Domain
detected Domain: t.target

XIOC detected Domain: t.target

extracted_from_files

Domain
detected Domain: s.target

XIOC detected Domain: s.target

extracted_from_files

Domain
detected Domain: chrome.runtime.id

XIOC detected Domain: chrome.runtime.id

extracted_from_files

Domain
detected Domain: e.album.name

XIOC detected Domain: e.album.name

extracted_from_files

Domain
detected Domain: e.artists.map

XIOC detected Domain: e.artists.map

extracted_from_files

Domain
detected Domain: result.songs.map

XIOC detected Domain: result.songs.map

extracted_from_files

Domain
detected Domain: e.mp

XIOC detected Domain: e.mp

extracted_from_files

Domain
detected Domain: e.musics.map

XIOC detected Domain: e.musics.map

extracted_from_files

Domain
detected Domain: app.c.nf.migu.cn

XIOC detected Domain: app.c.nf.migu.cn

extracted_from_files

Domain
detected Domain: itunes.apple.com

XIOC detected Domain: itunes.apple.com

extracted_from_files

Domain
detected Domain: t.page

XIOC detected Domain: t.page

extracted_from_files

Domain
detected Domain: e.date

XIOC detected Domain: e.date

extracted_from_files

Domain
detected Domain: n.click

XIOC detected Domain: n.click

extracted_from_files

Domain
detected Domain: n.download

XIOC detected Domain: n.download

extracted_from_files

Domain
detected Domain: e.ar.map

XIOC detected Domain: e.ar.map

extracted_from_files

Domain
detected Domain: r.tracks.map

XIOC detected Domain: r.tracks.map

extracted_from_files

Domain
detected Domain: netconfig.br

XIOC detected Domain: netconfig.br

extracted_from_files

Domain
detected Domain: txt.yqq.center

XIOC detected Domain: txt.yqq.center

extracted_from_files

Domain
detected Domain: u.y.qq.com

XIOC detected Domain: u.y.qq.com

extracted_from_files

Domain
detected Domain: c.y.qq.com

XIOC detected Domain: c.y.qq.com

extracted_from_files

Domain
detected Domain: pod.subscribe.map

XIOC detected Domain: pod.subscribe.map

extracted_from_files

Domain
detected Domain: e.target

XIOC detected Domain: e.target

extracted_from_files

Domain
detected Domain: itunes.search

XIOC detected Domain: itunes.search

extracted_from_files

Domain
detected Domain: d.search

XIOC detected Domain: d.search

extracted_from_files

Domain
detected Domain: 929.mp

XIOC detected Domain: 929.mp

extracted_from_files

Domain
detected Domain: fm971.cityfm.tw

XIOC detected Domain: fm971.cityfm.tw

extracted_from_files

Domain
detected Domain: fm929.cityfm.tw

XIOC detected Domain: fm929.cityfm.tw

extracted_from_files

Domain
detected Domain: stm.rthk.hk

XIOC detected Domain: stm.rthk.hk

extracted_from_files

Domain
detected Domain: e.singer.map

XIOC detected Domain: e.singer.map

extracted_from_files

Domain
detected Domain: t.song.list.map

XIOC detected Domain: t.song.list.map

extracted_from_files

Domain
detected Domain: e.data

XIOC detected Domain: e.data

extracted_from_files

Domain
detected Domain: i.songs.map

XIOC detected Domain: i.songs.map

extracted_from_files

Domain
detected Domain: result.data

XIOC detected Domain: result.data

extracted_from_files

Domain
detected Domain: a.result.data

XIOC detected Domain: a.result.data

extracted_from_files

Domain
detected Domain: emumo.xiami.com

XIOC detected Domain: emumo.xiami.com

extracted_from_files

Domain
detected Domain: api.xiami.com

XIOC detected Domain: api.xiami.com

extracted_from_files

Domain
detected Domain: www.881903.com

XIOC detected Domain: www.881903.com

extracted_from_files

Domain
detected Domain: 971.mp

XIOC detected Domain: 971.mp

extracted_from_files

Domain
detected Domain: n.name

XIOC detected Domain: n.name

extracted_from_files

Domain
detected Domain: c.call

XIOC detected Domain: c.call

extracted_from_files

Domain
detected Domain: y.pid

XIOC detected Domain: y.pid

extracted_from_files

Domain
detected Domain: i.top

XIOC detected Domain: i.top

extracted_from_files

Domain
detected Domain: github.com

XIOC detected Domain: github.com

extracted_from_files

Domain
detected Domain: www.googleapis.com

XIOC detected Domain: www.googleapis.com

extracted_from_files

Domain
detected Domain: e.store

XIOC detected Domain: e.store

extracted_from_files

Domain
detected Domain: tostring.call

XIOC detected Domain: tostring.call

extracted_from_files

Domain
detected Domain: o.name

XIOC detected Domain: o.name

extracted_from_files

Domain
detected Domain: t.group

XIOC detected Domain: t.group

extracted_from_files

Domain
detected Domain: o.options.group.name

XIOC detected Domain: o.options.group.name

extracted_from_files

Domain
detected Domain: o.style

XIOC detected Domain: o.style

extracted_from_files

Domain
detected Domain: o.top

XIOC detected Domain: o.top

extracted_from_files

Domain
detected Domain: u.group

XIOC detected Domain: u.group

extracted_from_files

Domain
detected Domain: u.call

XIOC detected Domain: u.call

extracted_from_files

Domain
detected Domain: t.call

XIOC detected Domain: t.call

extracted_from_files

Domain
detected Domain: h.call

XIOC detected Domain: h.call

extracted_from_files

Domain
detected Domain: s.to

XIOC detected Domain: s.to

extracted_from_files

Domain
detected Domain: t.top-o.top

XIOC detected Domain: t.top-o.top

extracted_from_files

Domain
detected Domain: a.clienty-c.top

XIOC detected Domain: a.clienty-c.top

extracted_from_files

Domain
detected Domain: c.bottom-c.top

XIOC detected Domain: c.bottom-c.top

extracted_from_files

Domain
detected Domain: m.top

XIOC detected Domain: m.top

extracted_from_files

Domain
detected Domain: a.target

XIOC detected Domain: a.target

extracted_from_files

Domain
detected Domain: d.group

XIOC detected Domain: d.group

extracted_from_files

Domain
detected Domain: l.setdata.call

XIOC detected Domain: l.setdata.call

extracted_from_files

Domain
detected Domain: www.leemon.com

XIOC detected Domain: www.leemon.com

extracted_from_files

Domain
detected Domain: this.name

XIOC detected Domain: this.name

extracted_from_files

Domain
detected Domain: www.requirejs.org

XIOC detected Domain: www.requirejs.org

extracted_from_files

Domain
detected Domain: ixti.net

XIOC detected Domain: ixti.net

extracted_from_files

Domain
detected Domain: array.prototype.foreach.call

XIOC detected Domain: array.prototype.foreach.call

extracted_from_files

Domain
detected Domain: this.options.store

XIOC detected Domain: this.options.store

extracted_from_files

Domain
detected Domain: this.save

XIOC detected Domain: this.save

extracted_from_files

Domain
detected Domain: has-warning.radio

XIOC detected Domain: has-warning.radio

extracted_from_files

Domain
detected Domain: has-success.radio

XIOC detected Domain: has-success.radio

extracted_from_files

Domain
detected Domain: th.info

XIOC detected Domain: th.info

extracted_from_files

Domain
detected Domain: td.info

XIOC detected Domain: td.info

extracted_from_files

Domain
detected Domain: tr.info

XIOC detected Domain: tr.info

extracted_from_files

Domain
detected Domain: a.bg

XIOC detected Domain: a.bg

extracted_from_files

Domain
detected Domain: getbootstrap.com

XIOC detected Domain: getbootstrap.com

extracted_from_files

Domain
detected Domain: btn-group.open

XIOC detected Domain: btn-group.open

extracted_from_files

Domain
detected Domain: tbody.collapse.in

XIOC detected Domain: tbody.collapse.in

extracted_from_files

Domain
detected Domain: tr.collapse.in

XIOC detected Domain: tr.collapse.in

extracted_from_files

Domain
detected Domain: collapse.in

XIOC detected Domain: collapse.in

extracted_from_files

Domain
detected Domain: fade.in

XIOC detected Domain: fade.in

extracted_from_files

Domain
detected Domain: label.sr

XIOC detected Domain: label.sr

extracted_from_files

Domain
detected Domain: has-error.radio

XIOC detected Domain: has-error.radio

extracted_from_files

Domain
detected Domain: item.next

XIOC detected Domain: item.next

extracted_from_files

Domain
detected Domain: popover.top

XIOC detected Domain: popover.top

extracted_from_files

IP
detected Domain: tooltip.top

XIOC detected Domain: tooltip.top

extracted_from_files

IP
detected Domain: tooltip.in

XIOC detected Domain: tooltip.in

extracted_from_files

Domain
detected Domain: modal-backdrop.in

XIOC detected Domain: modal-backdrop.in

extracted_from_files

Domain
detected Domain: modal.in

XIOC detected Domain: modal.in

extracted_from_files

Domain
detected Domain: navbar-collapse.in

XIOC detected Domain: navbar-collapse.in

extracted_from_files

Domain
detected Domain: d.data

XIOC detected Domain: d.data

extracted_from_files

Domain
detected Domain: click.bs.alert.data

XIOC detected Domain: click.bs.alert.data

extracted_from_files

Domain
detected Domain: g.one

XIOC detected Domain: g.one

extracted_from_files

Domain
detected Domain: c.data

XIOC detected Domain: c.data

extracted_from_files

Domain
detected Domain: b.target

XIOC detected Domain: b.target

extracted_from_files

Domain
detected Domain: a.style

XIOC detected Domain: a.style

extracted_from_files

Domain
detected Domain: bootstrap.min.css.map

XIOC detected Domain: bootstrap.min.css.map

extracted_from_files

Domain
detected Domain: e.to

XIOC detected Domain: e.to

extracted_from_files

Domain
detected Domain: blur.bs.button.data

XIOC detected Domain: blur.bs.button.data

extracted_from_files

Domain
detected Domain: focus.bs.button.data

XIOC detected Domain: focus.bs.button.data

extracted_from_files

Domain
detected Domain: b.call

XIOC detected Domain: b.call

extracted_from_files

Domain
detected Domain: c.target

XIOC detected Domain: c.target

extracted_from_files

Domain
detected Domain: click.bs.button.data

XIOC detected Domain: click.bs.button.data

extracted_from_files

Domain
detected Domain: d.is

XIOC detected Domain: d.is

extracted_from_files

Domain
detected Domain: f.data

XIOC detected Domain: f.data

extracted_from_files

Domain
detected Domain: e.one

XIOC detected Domain: e.one

extracted_from_files

Domain
detected Domain: c.prototype.next

XIOC detected Domain: c.prototype.next

extracted_from_files

Domain
detected Domain: b.to

XIOC detected Domain: b.to

extracted_from_files

Domain
detected Domain: element.one

XIOC detected Domain: element.one

extracted_from_files

Domain
detected Domain: c.prototype.to

XIOC detected Domain: c.prototype.to

extracted_from_files

Domain
detected Domain: this.next

XIOC detected Domain: this.next

extracted_from_files

Domain
detected Domain: click.bs.dropdown.data

XIOC detected Domain: click.bs.dropdown.data

extracted_from_files

Domain
detected Domain: e.is

XIOC detected Domain: e.is

extracted_from_files

Domain
detected Domain: click.bs.collapse.data

XIOC detected Domain: click.bs.collapse.data

extracted_from_files

Domain
detected Domain: e.call

XIOC detected Domain: e.call

extracted_from_files

Domain
detected Domain: d.prototype.show

XIOC detected Domain: d.prototype.show

extracted_from_files

Domain
detected Domain: b.id

XIOC detected Domain: b.id

extracted_from_files

Domain
detected Domain: click.bs.carousel.data

XIOC detected Domain: click.bs.carousel.data

extracted_from_files

Domain
detected Domain: dialog.one

XIOC detected Domain: dialog.one

extracted_from_files

Domain
detected Domain: element.show

XIOC detected Domain: element.show

extracted_from_files

Domain
detected Domain: c.prototype.show

XIOC detected Domain: c.prototype.show

extracted_from_files

Domain
detected Domain: this.show

XIOC detected Domain: this.show

extracted_from_files

Domain
detected Domain: f.show

XIOC detected Domain: f.show

extracted_from_files

Domain
detected Domain: g.show

XIOC detected Domain: g.show

extracted_from_files

Domain
detected Domain: keydown.bs.dropdown.data

XIOC detected Domain: keydown.bs.dropdown.data

extracted_from_files

Domain
detected Domain: element.data

XIOC detected Domain: element.data

extracted_from_files

Domain
detected Domain: this.options.viewport.call

XIOC detected Domain: this.options.viewport.call

extracted_from_files

Domain
detected Domain: f.one

XIOC detected Domain: f.one

extracted_from_files

Domain
detected Domain: click.bs.modal.data

XIOC detected Domain: click.bs.modal.data

extracted_from_files

Domain
detected Domain: backdrop.one

XIOC detected Domain: backdrop.one

extracted_from_files

Domain
detected Domain: element.off

XIOC detected Domain: element.off

extracted_from_files

Domain
detected Domain: dialog.off

XIOC detected Domain: dialog.off

extracted_from_files

Domain
detected Domain: shown.bs

XIOC detected Domain: shown.bs

extracted_from_files

Domain
detected Domain: k.top

XIOC detected Domain: k.top

extracted_from_files

Domain
detected Domain: inserted.bs

XIOC detected Domain: inserted.bs

extracted_from_files

Domain
detected Domain: this.options.placement.call

XIOC detected Domain: this.options.placement.call

extracted_from_files

Domain
detected Domain: show.bs

XIOC detected Domain: show.bs

extracted_from_files

Domain
detected Domain: c.show

XIOC detected Domain: c.show

extracted_from_files

Domain
detected Domain: c.options.delay.show

XIOC detected Domain: c.options.delay.show

extracted_from_files

Domain
detected Domain: e.top

XIOC detected Domain: e.top

extracted_from_files

Domain
detected Domain: g.top

XIOC detected Domain: g.top

extracted_from_files

Domain
detected Domain: e.bottom-e.top

XIOC detected Domain: e.bottom-e.top

extracted_from_files

Domain
detected Domain: hide.bs

XIOC detected Domain: hide.bs

extracted_from_files

Domain
detected Domain: hidden.bs

XIOC detected Domain: hidden.bs

extracted_from_files

Domain
detected Domain: a.top

XIOC detected Domain: a.top

extracted_from_files

Domain
detected Domain: b.top

XIOC detected Domain: b.top

extracted_from_files

Domain
detected Domain: load.bs.scrollspy.data

XIOC detected Domain: load.bs.scrollspy.data

extracted_from_files

Domain
detected Domain: f.is

XIOC detected Domain: f.is

extracted_from_files

Domain
detected Domain: r.errortypes.media

XIOC detected Domain: r.errortypes.media

extracted_from_files

Domain
detected Domain: this.options.target

XIOC detected Domain: this.options.target

extracted_from_files

Domain
detected Domain: b.content.call

XIOC detected Domain: b.content.call

extracted_from_files

Domain
detected Domain: c.instate.click

XIOC detected Domain: c.instate.click

extracted_from_files

Domain
detected Domain: c.title.call

XIOC detected Domain: c.title.call

extracted_from_files

Domain
detected Domain: click.bs.tab.data

XIOC detected Domain: click.bs.tab.data

extracted_from_files

Domain
detected Domain: a.fn.tab

XIOC detected Domain: a.fn.tab

extracted_from_files

Domain
detected Domain: shown.bs.tab

XIOC detected Domain: shown.bs.tab

extracted_from_files

Domain
detected Domain: hidden.bs.tab

XIOC detected Domain: hidden.bs.tab

extracted_from_files

Domain
detected Domain: show.bs.tab

XIOC detected Domain: show.bs.tab

extracted_from_files

Domain
detected Domain: hide.bs.tab

XIOC detected Domain: hide.bs.tab

extracted_from_files

Domain
detected Domain: bs.tab

XIOC detected Domain: bs.tab

extracted_from_files

Domain
detected Domain: jquery.org

XIOC detected Domain: jquery.org

extracted_from_files

Domain
detected Domain: d.offset.top

XIOC detected Domain: d.offset.top

extracted_from_files

Domain
detected Domain: d.top

XIOC detected Domain: d.top

extracted_from_files

Domain
detected Domain: element.is

XIOC detected Domain: element.is

extracted_from_files

Domain
detected Domain: f.top

XIOC detected Domain: f.top

extracted_from_files

Domain
detected Domain: click.bs.affix.data

XIOC detected Domain: click.bs.affix.data

extracted_from_files

Domain
detected Domain: scroll.bs.affix.data

XIOC detected Domain: scroll.bs.affix.data

extracted_from_files

Domain
detected Domain: f.call

XIOC detected Domain: f.call

extracted_from_files

Domain
detected Domain: a.eval.call

XIOC detected Domain: a.eval.call

extracted_from_files

Domain
detected Domain: i.call

XIOC detected Domain: i.call

extracted_from_files

Domain
detected Domain: j.call

XIOC detected Domain: j.call

extracted_from_files

Domain
detected Domain: a.call

XIOC detected Domain: a.call

extracted_from_files

Domain
detected Domain: m.map

XIOC detected Domain: m.map

extracted_from_files

Domain
detected Domain: d.call

XIOC detected Domain: d.call

extracted_from_files

Domain
detected Domain: ga.select

XIOC detected Domain: ga.select

extracted_from_files

Domain
detected Domain: s.call

XIOC detected Domain: s.call

extracted_from_files

Domain
detected Domain: d.filter.id

XIOC detected Domain: d.filter.id

extracted_from_files

Domain
detected Domain: d.find.id

XIOC detected Domain: d.find.id

extracted_from_files

Domain
detected Domain: ga.support

XIOC detected Domain: ga.support

extracted_from_files

Domain
detected Domain: h.id

XIOC detected Domain: h.id

extracted_from_files

Domain
detected Domain: g.call

XIOC detected Domain: g.call

extracted_from_files

Domain
detected Domain: j.setup.call

XIOC detected Domain: j.setup.call

extracted_from_files

Domain
detected Domain: r.events

XIOC detected Domain: r.events

extracted_from_files

Domain
detected Domain: f.empty.fire

XIOC detected Domain: f.empty.fire

extracted_from_files

Domain
detected Domain: g.data

XIOC detected Domain: g.data

extracted_from_files

Domain
detected Domain: m.data

XIOC detected Domain: m.data

extracted_from_files

Domain
detected Domain: c.style

XIOC detected Domain: c.style

extracted_from_files

Domain
detected Domain: d.id

XIOC detected Domain: d.id

extracted_from_files

Domain
detected Domain: a.data

XIOC detected Domain: a.data

extracted_from_files

Domain
detected Domain: m.event.handlers.call

XIOC detected Domain: m.event.handlers.call

extracted_from_files

Domain
detected Domain: k.predispatch.call

XIOC detected Domain: k.predispatch.call

extracted_from_files

Domain
detected Domain: l.teardown.call

XIOC detected Domain: l.teardown.call

extracted_from_files

Domain
detected Domain: l.remove.call

XIOC detected Domain: l.remove.call

extracted_from_files

Domain
detected Domain: m.event.global

XIOC detected Domain: m.event.global

extracted_from_files

Domain
detected Domain: j.add.call

XIOC detected Domain: j.add.call

extracted_from_files

Domain
detected Domain: ra.td

XIOC detected Domain: ra.td

extracted_from_files

Domain
detected Domain: ra.th

XIOC detected Domain: ra.th

extracted_from_files

Domain
detected Domain: this.off

XIOC detected Domain: this.off

extracted_from_files

Domain
detected Domain: m.now

XIOC detected Domain: m.now

extracted_from_files

Domain
detected Domain: m.event.dispatch.call

XIOC detected Domain: m.event.dispatch.call

extracted_from_files

Domain
detected Domain: this.click

XIOC detected Domain: this.click

extracted_from_files

Domain
detected Domain: k.postdispatch.call

XIOC detected Domain: k.postdispatch.call

extracted_from_files

Domain
detected Domain: d.style

XIOC detected Domain: d.style

extracted_from_files

Domain
detected Domain: m.style

XIOC detected Domain: m.style

extracted_from_files

Domain
detected Domain: p.call

XIOC detected Domain: p.call

extracted_from_files

Domain
detected Domain: this.map

XIOC detected Domain: this.map

extracted_from_files

Domain
detected Domain: e.events

XIOC detected Domain: e.events

extracted_from_files

Domain
detected Domain: g.events

XIOC detected Domain: g.events

extracted_from_files

Domain
detected Domain: f.events

XIOC detected Domain: f.events

extracted_from_files

Domain
detected Domain: j.opts.fail

XIOC detected Domain: j.opts.fail

extracted_from_files

Domain
detected Domain: j.opts.start.call

XIOC detected Domain: j.opts.start.call

extracted_from_files

Domain
detected Domain: h.empty.fire

XIOC detected Domain: h.empty.fire

extracted_from_files

Domain
detected Domain: a.now

XIOC detected Domain: a.now

extracted_from_files

Domain
detected Domain: a.elem.style

XIOC detected Domain: a.elem.style

extracted_from_files

Domain
detected Domain: this.options.step.call

XIOC detected Domain: this.options.step.call

extracted_from_files

Domain
detected Domain: this.now

XIOC detected Domain: this.now

extracted_from_files

Domain
detected Domain: ob.name

XIOC detected Domain: ob.name

extracted_from_files

Domain
detected Domain: ob.id

XIOC detected Domain: ob.id

extracted_from_files

Domain
detected Domain: k.style

XIOC detected Domain: k.style

extracted_from_files

Domain
detected Domain: finish.call

XIOC detected Domain: finish.call

extracted_from_files

Domain
detected Domain: e.stop.call

XIOC detected Domain: e.stop.call

extracted_from_files

Domain
detected Domain: d.old.call

XIOC detected Domain: d.old.call

extracted_from_files

Domain
detected Domain: m.fx.off

XIOC detected Domain: m.fx.off

extracted_from_files

Domain
detected Domain: b.map

XIOC detected Domain: b.map

extracted_from_files

Domain
detected Domain: u.data

XIOC detected Domain: u.data

extracted_from_files

Domain
detected Domain: k.beforesend.call

XIOC detected Domain: k.beforesend.call

extracted_from_files

Domain
detected Domain: k.global

XIOC detected Domain: k.global

extracted_from_files

Domain
detected Domain: k.data

XIOC detected Domain: k.data

extracted_from_files

Domain
detected Domain: v.fail

XIOC detected Domain: v.fail

extracted_from_files

Domain
detected Domain: m.attrhooks.style

XIOC detected Domain: m.attrhooks.style

extracted_from_files

Domain
detected Domain: c.top

XIOC detected Domain: c.top

extracted_from_files

Domain
detected Domain: b.using.call

XIOC detected Domain: b.using.call

extracted_from_files

Domain
detected Domain: b.top-h.top

XIOC detected Domain: b.top-h.top

extracted_from_files

Domain
detected Domain: n.top

XIOC detected Domain: n.top

extracted_from_files

Domain
detected Domain: a.global

XIOC detected Domain: a.global

extracted_from_files

Domain
detected Domain: f.open

XIOC detected Domain: f.open

extracted_from_files

Domain
detected Domain: b.name

XIOC detected Domain: b.name

extracted_from_files

Domain
detected Domain: this.options.onstatechange.call

XIOC detected Domain: this.options.onstatechange.call

extracted_from_files

Domain
detected Domain: this.options.to

XIOC detected Domain: this.options.to

extracted_from_files

Domain
detected Domain: this.options.onbarclicked.call

XIOC detected Domain: this.options.onbarclicked.call

extracted_from_files

Domain
detected Domain: this.options.ondragend.call

XIOC detected Domain: this.options.ondragend.call

extracted_from_files

Domain
detected Domain: this.clickablebar.click

XIOC detected Domain: this.clickablebar.click

extracted_from_files

Domain
detected Domain: this.bar

XIOC detected Domain: this.bar

extracted_from_files

Domain
detected Domain: jquery.min.map

XIOC detected Domain: jquery.min.map

extracted_from_files

Domain
detected Domain: this.media

XIOC detected Domain: this.media

extracted_from_files

Domain
detected Domain: s.default.prototype.destroy.call

XIOC detected Domain: s.default.prototype.destroy.call

extracted_from_files

Domain
detected Domain: e.default.media

XIOC detected Domain: e.default.media

extracted_from_files

Domain
detected Domain: n.media

XIOC detected Domain: n.media

extracted_from_files

Domain
detected Domain: performance.now

XIOC detected Domain: performance.now

extracted_from_files

Domain
detected Domain: a.default.prototype.destroy.call

XIOC detected Domain: a.default.prototype.destroy.call

extracted_from_files

Domain
detected Domain: array.prototype.slice.call

XIOC detected Domain: array.prototype.slice.call

extracted_from_files

Domain
detected Domain: e.media

XIOC detected Domain: e.media

extracted_from_files

Domain
detected Domain: i.default.media

XIOC detected Domain: i.default.media

extracted_from_files

Domain
detected Domain: o.data

XIOC detected Domain: o.data

extracted_from_files

URL
detected URL: https://github.com/h5bp/html5-boilerplate/blob/master/src/css/main.css

XIOC detected URL: https://github.com/h5bp/html5-boilerplate/blob/master/src/css/main.css

extracted_from_files

URL
detected URL: http://y.qq.com/

XIOC detected URL: http://y.qq.com/

extracted_from_files

URL
detected URL: http://music.163.com/

XIOC detected URL: http://music.163.com/

extracted_from_files

Domain
detected Domain: r.media

XIOC detected Domain: r.media

extracted_from_files

Domain
detected Domain: a.live

XIOC detected Domain: a.live

extracted_from_files

Domain
detected Domain: l.default.prototype.destroy.call

XIOC detected Domain: l.default.prototype.destroy.call

extracted_from_files

Domain
detected Domain: r.default.media

XIOC detected Domain: r.default.media

extracted_from_files

Domain
detected Domain: e.details.live

XIOC detected Domain: e.details.live

extracted_from_files

Domain
detected Domain: i.details.live

XIOC detected Domain: i.details.live

extracted_from_files

Domain
detected Domain: n.details.live

XIOC detected Domain: n.details.live

extracted_from_files

Domain
detected Domain: e.errortypes.media

XIOC detected Domain: e.errortypes.media

extracted_from_files

Domain
detected Domain: n.frag.sn

XIOC detected Domain: n.frag.sn

extracted_from_files

Domain
detected Domain: i.live

XIOC detected Domain: i.live

extracted_from_files

Domain
detected Domain: t.media

XIOC detected Domain: t.media

extracted_from_files

Domain
detected Domain: i.errortypes.media

XIOC detected Domain: i.errortypes.media

extracted_from_files

Domain
detected Domain: p.default.search

XIOC detected Domain: p.default.search

extracted_from_files

Domain
detected Domain: n.sn

XIOC detected Domain: n.sn

extracted_from_files

Domain
detected Domain: v.sn

XIOC detected Domain: v.sn

extracted_from_files

Domain
detected Domain: n.default.prototype.destroy.call

XIOC detected Domain: n.default.prototype.destroy.call

extracted_from_files

Domain
detected Domain: a.sn

XIOC detected Domain: a.sn

extracted_from_files

Domain
detected Domain: date.now

XIOC detected Domain: date.now

extracted_from_files

Domain
detected Domain: n.video

XIOC detected Domain: n.video

extracted_from_files

Domain
detected Domain: n.audio

XIOC detected Domain: n.audio

extracted_from_files

Domain
detected Domain: i.cc

XIOC detected Domain: i.cc

extracted_from_files

Domain
detected Domain: i.sn

XIOC detected Domain: i.sn

extracted_from_files

Domain
detected Domain: t.data

XIOC detected Domain: t.data

extracted_from_files

Domain
detected Domain: e.sn

XIOC detected Domain: e.sn

extracted_from_files

Domain
detected Domain: e.cc

XIOC detected Domain: e.cc

extracted_from_files

Domain
detected Domain: t.off

XIOC detected Domain: t.off

extracted_from_files

Domain
detected Domain: n.errortypes.media

XIOC detected Domain: n.errortypes.media

extracted_from_files

Domain
detected Domain: this.typesupported.mp

XIOC detected Domain: this.typesupported.mp

extracted_from_files

Domain
detected Domain: this.observer

XIOC detected Domain: this.observer

extracted_from_files

Domain
detected Domain: this.constructor.name

XIOC detected Domain: this.constructor.name

extracted_from_files

Domain
detected Domain: this.hls.off

XIOC detected Domain: this.hls.off

extracted_from_files

Domain
detected Domain: r.data

XIOC detected Domain: r.data

extracted_from_files

Domain
detected Domain: id3track.id

XIOC detected Domain: id3track.id

extracted_from_files

Domain
detected Domain: aactrack.id

XIOC detected Domain: aactrack.id

extracted_from_files

Domain
detected Domain: avctrack.id

XIOC detected Domain: avctrack.id

extracted_from_files

Domain
detected Domain: this.data

XIOC detected Domain: this.data

extracted_from_files

Domain
detected Domain: this.id

XIOC detected Domain: this.id

extracted_from_files

Domain
detected Domain: t.errortypes.network

XIOC detected Domain: t.errortypes.network

extracted_from_files

Domain
detected Domain: i.off

XIOC detected Domain: i.off

extracted_from_files

Domain
detected Domain: r.sn

XIOC detected Domain: r.sn

extracted_from_files

Domain
detected Domain: t.sn

XIOC detected Domain: t.sn

extracted_from_files

Domain
detected Domain: s.sn

XIOC detected Domain: s.sn

extracted_from_files

Domain
detected Domain: o.cc-n.cc

XIOC detected Domain: o.cc-n.cc

extracted_from_files

Domain
detected Domain: this.mp

XIOC detected Domain: this.mp

extracted_from_files

Domain
detected Domain: r.id

XIOC detected Domain: r.id

extracted_from_files

Domain
detected Domain: i.id

XIOC detected Domain: i.id

extracted_from_files

Domain
detected Domain: e.types.mp

XIOC detected Domain: e.types.mp

extracted_from_files

Domain
detected Domain: e.box

XIOC detected Domain: e.box

extracted_from_files

Domain
detected Domain: e.errortypes.network

XIOC detected Domain: e.errortypes.network

extracted_from_files

Domain
detected Domain: r.name

XIOC detected Domain: r.name

extracted_from_files

Domain
detected Domain: e.open

XIOC detected Domain: e.open

extracted_from_files

Domain
detected Domain: t.next

XIOC detected Domain: t.next

extracted_from_files

Domain
detected Domain: i.tracks.audio

XIOC detected Domain: i.tracks.audio

extracted_from_files

Domain
detected Domain: i.tracks.video

XIOC detected Domain: i.tracks.video

extracted_from_files

Domain
detected Domain: s.errortypes.media

XIOC detected Domain: s.errortypes.media

extracted_from_files

Domain
detected Domain: l.video

XIOC detected Domain: l.video

extracted_from_files

Domain
detected Domain: l.audio

XIOC detected Domain: l.audio

extracted_from_files

URL
detected URL: http://lemmon.cn/sounds/$

XIOC detected URL: http://lemmon.cn/sounds/$

extracted_from_files

URL
detected URL: http://lhttp.qingting.fm/live/$

XIOC detected URL: http://lhttp.qingting.fm/live/$

extracted_from_files

Domain
detected Domain: s.ytimg.com

XIOC detected Domain: s.ytimg.com

extracted_from_files

Domain
detected Domain: clients2.google.com

XIOC detected Domain: clients2.google.com

extracted_from_files

Domain
detected Domain: base.music.qq.com

XIOC detected Domain: base.music.qq.com

extracted_from_files

Domain
detected Domain: i.y.qq.com

XIOC detected Domain: i.y.qq.com

extracted_from_files

Domain
detected Domain: this.play

XIOC detected Domain: this.play

extracted_from_files

URL
detected URL: http://www.w3.org/2000/svg

XIOC detected URL: http://www.w3.org/2000/svg

extracted_from_files

URL
detected URL: http://lemmon.cn/sps

XIOC detected URL: http://lemmon.cn/sps

extracted_from_files

URL
detected URL: https://music.163.com/#/song?id=$

XIOC detected URL: https://music.163.com/#/song?id=$

extracted_from_files

URL
detected URL: https://search.bilibili.com/all?keyword=$

XIOC detected URL: https://search.bilibili.com/all?keyword=$

extracted_from_files

URL
detected URL: https://www.youtube.com/results?search_query=$

XIOC detected URL: https://www.youtube.com/results?search_query=$

extracted_from_files

URL
detected URL: https://www.youtube.com/watch?v=$

XIOC detected URL: https://www.youtube.com/watch?v=$

extracted_from_files

URL
detected URL: http://music.163.com/api/search/pc

XIOC detected URL: http://music.163.com/api/search/pc

extracted_from_files

URL
detected URL: http://app.c.nf.migu.cn/MIGUM2.0/v2.0/content/listen-url

XIOC detected URL: http://app.c.nf.migu.cn/MIGUM2.0/v2.0/content/listen-url

extracted_from_files

URL
detected URL: https://m.music.migu.cn/migu/remoting/scr_search_tag?rows=$

XIOC detected URL: https://m.music.migu.cn/migu/remoting/scr_search_tag?rows=$

extracted_from_files

URL
detected URL: https://itunes.apple.com/search?media=podcast&term=$

XIOC detected URL: https://itunes.apple.com/search?media=podcast&term=$

extracted_from_files

URL
detected URL: https://www.xiami.com/search?key=song

XIOC detected URL: https://www.xiami.com/search?key=song

extracted_from_files

URL
detected URL: http://rapi.qingting.fm/categories/$

XIOC detected URL: http://rapi.qingting.fm/categories/$

extracted_from_files

URL
detected URL: http://www.w3.org/1999/xlink

XIOC detected URL: http://www.w3.org/1999/xlink

extracted_from_files

URL
detected URL: http://stm.rthk.hk/radio1

XIOC detected URL: http://stm.rthk.hk/radio1

extracted_from_files

URL
detected URL: https://c.y.qq.com/lyric/fcgi-bin/fcg_query_lyric.fcg?g_tk=5381&uin=0&format=jsonp&jsonpCallback=lyricCallback&inCharset=utf-8&outCharset=utf-8&notice=0&platform=h5&needNewCode=1&nobase64=1&musicid=$

XIOC detected URL: https://c.y.qq.com/lyric/fcgi-bin/fcg_query_lyric.fcg?g_tk=5381&uin=0&format=jsonp&jsonpCallback=lyricCallback&inCharset=utf-8&outCharset=utf-8&notice=0&platform=h5&needNewCode=1&nobase64=1&musicid=$

extracted_from_files

URL
detected URL: https://u.y.qq.com/cgi-bin/musicu.fcg?loginUin=0&hostUin=0&format=json&inCharset=utf8&outCharset=utf-8&notice=0&platform=yqq.json&needNewCode=0&data=%7B%22req_0%22%3A%7B%22module%22%3A%22vkey.GetVkeyServer%22%2C%22method%22%3A%22CgiGetVkey%22%2C%22param%22%3A%7B%22guid%22%3A%2210000%22%2C%22songmid%22%3A%5B%22$

XIOC detected URL: https://u.y.qq.com/cgi-bin/musicu.fcg?loginUin=0&hostUin=0&format=json&inCharset=utf8&outCharset=utf-8&notice=0&platform=yqq.json&needNewCode=0&data=%7B%22req_0%22%3A%7B%22module%22%3A%22vkey.GetVkeyServer%22%2C%22method%22%3A%22CgiGetVkey%22%2C%22param%22%3A%7B%22guid%22%3A%2210000%22%2C%22songmid%22%3A%5B%22$

extracted_from_files

URL
detected URL: http://imgcache.qq.com/music/photo/mid_album_500/$

XIOC detected URL: http://imgcache.qq.com/music/photo/mid_album_500/$

extracted_from_files

URL
detected URL: https://c.y.qq.com/soso/fcgi-bin/client_search_cp

XIOC detected URL: https://c.y.qq.com/soso/fcgi-bin/client_search_cp

extracted_from_files

URL
detected URL: http://music.163.com/weapi/song/lyric?csrf_token=

XIOC detected URL: http://music.163.com/weapi/song/lyric?csrf_token=

extracted_from_files

URL
detected URL: https://www.youtube.com/iframe_api

XIOC detected URL: https://www.youtube.com/iframe_api

extracted_from_files

URL
detected URL: https://www.xiami.com/api/search/searchSongs?_q=

XIOC detected URL: https://www.xiami.com/api/search/searchSongs?_q=

extracted_from_files

URL
detected URL: https://www.xiami.com

XIOC detected URL: https://www.xiami.com

extracted_from_files

URL
detected URL: https://www.xiami.com/api/search/searchSongs

XIOC detected URL: https://www.xiami.com/api/search/searchSongs

extracted_from_files

URL
detected URL: http://api.xiami.com/web

XIOC detected URL: http://api.xiami.com/web

extracted_from_files

URL
detected URL: http://fm971.cityfm.tw:8080/971.mp3

XIOC detected URL: http://fm971.cityfm.tw:8080/971.mp3

extracted_from_files

URL
detected URL: http://fm929.cityfm.tw:8000/929.mp3

XIOC detected URL: http://fm929.cityfm.tw:8000/929.mp3

extracted_from_files

URL
detected URL: https://github.com/twbs/bootstrap/blob/master/LICENSE)

XIOC detected URL: https://github.com/twbs/bootstrap/blob/master/LICENSE)

extracted_from_files

URL
detected URL: http://getbootstrap.com)

XIOC detected URL: http://getbootstrap.com)

extracted_from_files

URL
detected URL: https://github.com/amdjs/amdjs-api/wiki/AMD

XIOC detected URL: https://github.com/amdjs/amdjs-api/wiki/AMD

extracted_from_files

URL
detected URL: http://www.requirejs.org/docs/api.html

XIOC detected URL: http://www.requirejs.org/docs/api.html

extracted_from_files

URL
detected URL: http://ixti.net/development/javascript/2011/11/11/base64-encodedecode-of-utf8-in-browser-with-js.html

XIOC detected URL: http://ixti.net/development/javascript/2011/11/11/base64-encodedecode-of-utf8-in-browser-with-js.html

extracted_from_files

URL
detected URL: http://lemmon.cn/static/watch?v=$

XIOC detected URL: http://lemmon.cn/static/watch?v=$

extracted_from_files

URL
detected URL: https://www.googleapis.com/youtube/v3/search

XIOC detected URL: https://www.googleapis.com/youtube/v3/search

extracted_from_files

URL
detected URL: https://clients2.google.com/service/update2/crx

XIOC detected URL: https://clients2.google.com/service/update2/crx

extracted_from_files

URL
detected URL: https://s.ytimg.com;

XIOC detected URL: https://s.ytimg.com;

extracted_from_files

URL
detected URL: https://base.music.qq.com

XIOC detected URL: https://base.music.qq.com

extracted_from_files

URL
detected URL: https://y.qq.com/

XIOC detected URL: https://y.qq.com/

extracted_from_files

URL
detected URL: https://i.y.qq.com

XIOC detected URL: https://i.y.qq.com

extracted_from_files

URL
detected URL: https://c.y.qq.com

XIOC detected URL: https://c.y.qq.com

extracted_from_files

Domain
detected Domain: e.video

XIOC detected Domain: e.video

extracted_from_files

Domain
detected Domain: e.audio

XIOC detected Domain: e.audio

extracted_from_files

Domain
detected Domain: i.data

XIOC detected Domain: i.data

extracted_from_files

IP
detected IP: ::

XIOC detected IP: ::

extracted_from_files

Security Analysis Summary

Security Analysis Overview

Listen to the world is a Chrome Web Store extension published by [email protected]. Version 1.0.1 has been analyzed by the Risky Plugins security platform, receiving a risk score of 64.97/100 (MEDIUM risk) based on 491 security findings.

Risk Assessment

This extension presents high security risk. Significant concerns were identified during analysis. It is not recommended for use in sensitive or production environments without thorough review.

Findings Breakdown

  • High: 52 finding(s)
  • Medium: 439 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Listen to the world is published by [email protected] on the Chrome Web Store marketplace. The extension has approximately 24 users.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Frequently Asked Questions