Web Threat ShieldSecurity Analysis

Extension intercepts network traffic and sends data externally — potential man-in-the-middle behavior.

Extension has access to all sites and captures keyboard input — behavior consistent with a keylogger.

Manages other extensions, could disable security tools or install malware.

Listens for keyboard events, a common technique used by keyloggers.

Sends messages via Chrome runtime, could communicate with external services.

Uses XMLHttpRequest to make network calls.

Decodes base64 data, commonly used to hide malicious payloads.

Modifies window.location to redirect the user, potentially to phishing or malicious pages.

Line exceeds 5000 characters (entropy: 5.464970511823799)

Reads or writes to localStorage, which may contain sensitive site data.

String with entropy 5.81 bits — may be encoded/encrypted data

object-src is not set to 'none'. Plugins like Flash can be embedded, which may allow code execution.

Extension accepts messages from 1 external pattern(s). Verify these are trusted origins.