As the other answer says, advertisement-injecting extension. I just want to add that on 24 December 2019 I got 50+ megabytes of traffic over 331 hits within 51 seconds from an IP address owned by "ZScaler Inc", all appearing to be Chrome 79 on Windows 10 repeatedly downloading the same page (including images) with _sm_au_
query strings added (and the genuine version of my site does not carry advertising, so it must have been an injector). Since I'd rather not see my server be brought down by that kind of thing happening more often in future, I set Apache's .htaccess
as follows:
RewriteEngine on
RewriteCond %{QUERY_STRING} ^_sm_au_=.*$
RewriteRule ^.*$ /you-have-adware.txt? [PT]
where you-have-adware.txt
contains a short message to explain the situation to them (in text rather than HTML to minimise the chances of the plugin being able to further manipulate it), and a suggestion to try Incognito mode, or upgrade to GNU/Linux.