Is Dynatrace Real User Monitoring safe to use?

Dynatrace Real User Monitoring has a security risk score of 100/100 (CRITICAL risk). Our security analysis detected 165 findings. Review the detailed security assessment below to understand the specific risks before installation.

What are the security risks of Dynatrace Real User Monitoring?

Based on our automated security analysis, Dynatrace Real User Monitoring presents critical risk level. The extension is analyzed for malware patterns, secret exposure, network communications, permissions, and supply chain vulnerabilities.

How is the security score calculated?

Risky Plugins calculates security scores using weighted categories: severity of findings (25 points max), malware detections (35 points), secret exposure (28 points), network communications (10 points), and obfuscation (10 points). Scores range from 0-100, with higher scores indicating greater risk.

What does CRITICAL, HIGH, MEDIUM, LOW, MINIMAL risk mean?

CRITICAL (80-100): Severe security issues like malware. HIGH (60-79): Significant vulnerabilities. MEDIUM (40-59): Moderate security concerns. LOW (20-39): Minor issues. MINIMAL (0-19): Very low risk. Always review findings before installing any extension.

Is "Dynatrace Real User Monitoring" on Microsoft Edge Add-ons Safe to Install?

Name: Dynatrace Real User Monitoring
Availability: InStock
Author: Dynatrace LLC

Dynatrace LLC · edge · v1.6.2

If you’re already a Dynatrace customer, you can use the Dynatrace Real User Monitoring extension right away. If you’re new to Dynatrace, you can start your free trial at www.dynatrace.com/trial.

Risk Assessment

Analyzed

100

out of 100

CRITICAL

165 security findings detected across all analyzers

Severity Breakdown

Critical

High

Medium

Low

Info

Finding Categories

Malware Signatures

Network

IoC Indicators

YARA Rules Matched

8 rules(48 hits)

postinstall file manipulation postinstall network communication postinstall file download LocalStorageShouldNotBeUsed postinstall obfuscation postinstall crypto operations postinstall environment access postinstall system command

Detailed Findings

87 total

YARA Rule Matches

8 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

URLs

IP Addresses

Domains

Strings

All Indicators · 78

Hash

detected MD5 Hash: D4F9E66F302C11E99D9685A070736C67

XIOC detected MD5 Hash: D4F9E66F302C11E99D9685A070736C67

extracted_from_files

Domain

detected Domain: expandable.is

XIOC detected Domain: expandable.is

extracted_from_files

Hash

detected MD5 Hash: 23534E41302D11E99D9685A070736C67

XIOC detected MD5 Hash: 23534E41302D11E99D9685A070736C67

extracted_from_files

Hash

detected MD5 Hash: 23534E43302D11E99D9685A070736C67

XIOC detected MD5 Hash: 23534E43302D11E99D9685A070736C67

extracted_from_files

Hash

detected MD5 Hash: D4F9E670302C11E99D9685A070736C67

XIOC detected MD5 Hash: D4F9E670302C11E99D9685A070736C67

extracted_from_files

Hash

detected MD5 Hash: D4F9E66D302C11E99D9685A070736C67

XIOC detected MD5 Hash: D4F9E66D302C11E99D9685A070736C67

extracted_from_files

Hash

detected MD5 Hash: D4F9E66E302C11E99D9685A070736C67

XIOC detected MD5 Hash: D4F9E66E302C11E99D9685A070736C67

extracted_from_files

URL

detected URL: https://www.dynatrace.com

XIOC detected URL: https://www.dynatrace.com

extracted_from_files

URL

detected URL: https://js-cdn.dynatracelabs.com/jstag/14c129c054c/gmg80500/1481757a8c2f5436_complete.js

XIOC detected URL: https://js-cdn.dynatracelabs.com/jstag/14c129c054c/gmg80500/1481757a8c2f5436_complete.js

extracted_from_files

Hash

detected MD5 Hash: 1EB23183B81711E382589565544F7ED0

XIOC detected MD5 Hash: 1EB23183B81711E382589565544F7ED0

extracted_from_files

Hash

detected MD5 Hash: 1EB23184B81711E382589565544F7ED0

XIOC detected MD5 Hash: 1EB23184B81711E382589565544F7ED0

extracted_from_files

Hash

detected MD5 Hash: 1EB23181B81711E382589565544F7ED0

XIOC detected MD5 Hash: 1EB23181B81711E382589565544F7ED0

extracted_from_files

Hash

detected MD5 Hash: 1EB23182B81711E382589565544F7ED0

XIOC detected MD5 Hash: 1EB23182B81711E382589565544F7ED0

extracted_from_files

Hash

detected MD5 Hash: 23534E42302D11E99D9685A070736C67

XIOC detected MD5 Hash: 23534E42302D11E99D9685A070736C67

extracted_from_files

URL

detected URL: https://assets.dynatrace.com/groundhog/v2.1.3/assets/images/icons/Icons_file_003_Checkmark_disabled.svg);

XIOC detected URL: https://assets.dynatrace.com/groundhog/v2.1.3/assets/images/icons/Icons_file_003_Checkmark_disabled.svg);

extracted_from_files

URL

detected URL: https://assets.dynatrace.com/groundhog/v2.1.3/assets/images/icons/icons_file_002_dropdownclosed_downwards.svg);

XIOC detected URL: https://assets.dynatrace.com/groundhog/v2.1.3/assets/images/icons/icons_file_002_dropdownclosed_downwards.svg);

extracted_from_files

URL

detected URL: https://assets.dynatrace.com/groundhog/v2.1.3/assets/images/icons/icons_file_002_dropdownopen.svg);

XIOC detected URL: https://assets.dynatrace.com/groundhog/v2.1.3/assets/images/icons/icons_file_002_dropdownopen.svg);

extracted_from_files

URL

detected URL: https://github.com/promises-aplus/promises-spec#the-promise-resolution-procedure

XIOC detected URL: https://github.com/promises-aplus/promises-spec#the-promise-resolution-procedure

extracted_from_files

URL

detected URL: https://

XIOC detected URL: https://

extracted_from_files

URL

detected URL: https://js-cdn.dynatracelabs.com;

XIOC detected URL: https://js-cdn.dynatracelabs.com;

extracted_from_files

Domain

detected Domain: tab.is

XIOC detected Domain: tab.is

extracted_from_files

URL

detected URL: https://assets.dynatrace.com/groundhog/v2.1.3/assets/images/icons/dropdown_open.svg);

XIOC detected URL: https://assets.dynatrace.com/groundhog/v2.1.3/assets/images/icons/dropdown_open.svg);

extracted_from_files

URL

detected URL: https://assets.dynatrace.com/groundhog/v2.1.3/assets/images/icons/dropdown_open-white.svg);

XIOC detected URL: https://assets.dynatrace.com/groundhog/v2.1.3/assets/images/icons/dropdown_open-white.svg);

extracted_from_files

URL

detected URL: https://assets.dynatrace.com/groundhog/v2.1.3/assets/images/icons/Icons_file_002_Search_Magnifying_glass.svg);

XIOC detected URL: https://assets.dynatrace.com/groundhog/v2.1.3/assets/images/icons/Icons_file_002_Search_Magnifying_glass.svg);

extracted_from_files

URL

detected URL: https://assets.dynatrace.com/groundhog/v2.1.3/assets/images/icons/Icons_file_001_Abort_turquoise.svg);

XIOC detected URL: https://assets.dynatrace.com/groundhog/v2.1.3/assets/images/icons/Icons_file_001_Abort_turquoise.svg);

extracted_from_files

URL

detected URL: https://assets.dynatrace.com/groundhog/v2.1.3/assets/images/icons/Icons_file_001_Abort_turquoise_700.svg);

XIOC detected URL: https://assets.dynatrace.com/groundhog/v2.1.3/assets/images/icons/Icons_file_001_Abort_turquoise_700.svg);

extracted_from_files

URL

detected URL: https://assets.dynatrace.com/groundhog/v2.1.3/assets/images/icons/Icons_file_003_Checkmark_turquoise.svg);

XIOC detected URL: https://assets.dynatrace.com/groundhog/v2.1.3/assets/images/icons/Icons_file_003_Checkmark_turquoise.svg);

extracted_from_files

URL

detected URL: https://assets.dynatrace.com/groundhog/v2.1.3/assets/images/icons/Icons_file_003_Checkmark_white.svg);

XIOC detected URL: https://assets.dynatrace.com/groundhog/v2.1.3/assets/images/icons/Icons_file_003_Checkmark_white.svg);

extracted_from_files

Domain

detected Domain: dynatrace.com

XIOC detected Domain: dynatrace.com

extracted_from_files

Domain

detected Domain: js-cdn.dynatracelabs.com

XIOC detected Domain: js-cdn.dynatracelabs.com

extracted_from_files

Domain

detected Domain: currentappconfigtext.select

XIOC detected Domain: currentappconfigtext.select

extracted_from_files

Domain

detected Domain: www.dynatrace.com

XIOC detected Domain: www.dynatrace.com

extracted_from_files

Other

detected Email: [email protected]

XIOC detected Email: [email protected]

extracted_from_files

URL

detected URL: https://assets.dynatrace.com/groundhog/v2.1.3/assets/images/icons/icons_file_002_dropdownclosed.svg);

XIOC detected URL: https://assets.dynatrace.com/groundhog/v2.1.3/assets/images/icons/icons_file_002_dropdownclosed.svg);

extracted_from_files

URL

detected URL: https://assets.dynatrace.com/groundhog/v2.1.3/assets/images/icons/icons_file_002_dropdownclosed_grey.svg);

XIOC detected URL: https://assets.dynatrace.com/groundhog/v2.1.3/assets/images/icons/icons_file_002_dropdownclosed_grey.svg);

extracted_from_files

Domain

detected Domain: el.dataset.target

XIOC detected Domain: el.dataset.target

extracted_from_files

Domain

detected Domain: trimmedresults.map

XIOC detected Domain: trimmedresults.map

extracted_from_files

Domain

detected Domain: array.prototype.indexof.call

XIOC detected Domain: array.prototype.indexof.call

extracted_from_files

Domain

detected Domain: input.name

XIOC detected Domain: input.name

extracted_from_files

Domain

detected Domain: th.map

XIOC detected Domain: th.map

extracted_from_files

Domain

detected Domain: ev.target

XIOC detected Domain: ev.target

extracted_from_files

Domain

detected Domain: button.tab

XIOC detected Domain: button.tab

extracted_from_files

Domain

detected Domain: then.call

XIOC detected Domain: then.call

extracted_from_files

Domain

detected Domain: object.prototype.tostring.call

XIOC detected Domain: object.prototype.tostring.call

extracted_from_files

Domain

detected Domain: this.map

XIOC detected Domain: this.map

extracted_from_files

Domain

detected Domain: callback.call

XIOC detected Domain: callback.call

extracted_from_files

Domain

detected Domain: body.call

XIOC detected Domain: body.call

extracted_from_files

Domain

detected Domain: xhr.open

XIOC detected Domain: xhr.open

extracted_from_files

Domain

detected Domain: array.prototype.foreach.call

XIOC detected Domain: array.prototype.foreach.call

extracted_from_files

Domain

detected Domain: bar.is

XIOC detected Domain: bar.is

extracted_from_files

Domain

detected Domain: item.is

XIOC detected Domain: item.is

extracted_from_files

Domain

detected Domain: trigger.is

XIOC detected Domain: trigger.is

extracted_from_files

Domain

detected Domain: tbody.is

XIOC detected Domain: tbody.is

extracted_from_files

Domain

detected Domain: switch.to

XIOC detected Domain: switch.to

extracted_from_files

detected IP: e::

XIOC detected IP: e::

extracted_from_files

Domain

detected Domain: github.com

XIOC detected Domain: github.com

extracted_from_files

Domain

detected Domain: ns.adobe.com

XIOC detected Domain: ns.adobe.com

extracted_from_files

Domain

detected Domain: assets.dynatrace.com

XIOC detected Domain: assets.dynatrace.com

extracted_from_files

Domain

detected Domain: layout.is

XIOC detected Domain: layout.is

extracted_from_files

Hash

detected MD5 Hash: 23534E40302D11E99D9685A070736C67

XIOC detected MD5 Hash: 23534E40302D11E99D9685A070736C67

extracted_from_files

Domain

detected Domain: expandable--separated.is

XIOC detected Domain: expandable--separated.is

extracted_from_files

Domain

detected Domain: expandable--nav.is

XIOC detected Domain: expandable--nav.is

extracted_from_files

Domain

detected Domain: expandable--subnav.is

XIOC detected Domain: expandable--subnav.is

extracted_from_files

Domain

detected Domain: span.id

XIOC detected Domain: span.id

extracted_from_files

Domain

detected Domain: window.performance.now

XIOC detected Domain: window.performance.now

extracted_from_files

Domain

detected Domain: d.id

XIOC detected Domain: d.id

extracted_from_files

Domain

detected Domain: a.target

XIOC detected Domain: a.target

extracted_from_files

Domain

detected Domain: event.data

XIOC detected Domain: event.data

extracted_from_files

Domain

detected Domain: window.top

XIOC detected Domain: window.top

extracted_from_files

Domain

detected Domain: message.data

XIOC detected Domain: message.data

extracted_from_files

detected IP: d::

XIOC detected IP: d::

extracted_from_files

detected IP: ea::

XIOC detected IP: ea::

extracted_from_files

Domain

detected Domain: date.now

XIOC detected Domain: date.now

extracted_from_files

Domain

detected Domain: sender.tab

XIOC detected Domain: sender.tab

extracted_from_files

Domain

detected Domain: array.prototype.slice.call

XIOC detected Domain: array.prototype.slice.call

extracted_from_files

Domain

detected Domain: slice.call

XIOC detected Domain: slice.call

extracted_from_files

Domain

detected Domain: chrome.runtime.id

XIOC detected Domain: chrome.runtime.id

extracted_from_files

URL

detected URL: https://edge.microsoft.com/extensionwebstorebase/v1/crx

XIOC detected URL: https://edge.microsoft.com/extensionwebstorebase/v1/crx

extracted_from_files

Security Analysis Summary

Security Analysis Overview

Dynatrace Real User Monitoring is a edge extension published by Dynatrace LLC. Version 1.6.2 has been analyzed by the Risky Plugins security platform, receiving a risk score of 100/100 (CRITICAL risk) based on 165 security findings.

Risk Assessment

This extension presents critical security risk. Severe issues were detected, potentially including malware indicators, exposed secrets, or dangerous behaviors. Installation is strongly discouraged until these issues are addressed.

Findings Breakdown

High: 48 finding(s)
Medium: 84 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

Malware Detection: YARA rule matching against 2,400+ malware signatures
Secret Detection: Scanning for exposed API keys, tokens, and credentials
Static Analysis: Code-level security analysis for common vulnerability patterns
Network Analysis: Detection of suspicious network communications and endpoints
Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Dynatrace Real User Monitoring is published by Dynatrace LLC on the edge marketplace.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Source Code Viewer

Source Code Not Available

Source code is not available for this version of the extension.

Frequently Asked Questions

Similar Extensions

Related extensions from the same publisher or marketplace

Bulk Image Convert

Unknown Developer

CRITICAL

StackExchangeNotifications

Unknown Developer

CRITICAL

Navo

Unknown Developer

CRITICAL

linkit

Unknown Developer

CRITICAL

Reverse Image Search

Unknown Developer

CRITICAL

Launch for Google Meet

Unknown Developer

CRITICAL

Risk Assessment

Severity Breakdown

Finding Categories

YARA Rules Matched

Detailed Findings

NET-XMLHTTPREQUEST-css/main.js-658

NET-FETCH-background/session-replay/proxy.js-5

NET-FETCH-background/globalconfig.js-60

NET-FETCH-options/options.js-50

NET-FETCH-css/main.js-886

NET-FETCH-popup/popup.js-24

HASH-404dadd626113e54

HASH-91b1ade23dbe44a4

HASH-e23db55d9fca6c02

HASH-8607f7ccecc8cdc5

HASH-4e10f1efae208a33

HASH-b822d31bf1b5bef0

HASH-64e8867fde3f1807

HASH-72c96b27d018616e

HASH-875ad1f75e86f1fc

HASH-e31bf61ca41f53b0

HASH-2724960cf9ccef86

HASH-ecca5cbcf15c1c8a

HASH-03ae5cd8677057d0

HASH-164c05e140007417

HASH-eb1dc8fc2be6e93c

HASH-40ce2fce5147fe3d

HASH-2b5c50bb01198807

HASH-b3a144c066b80d9b

HASH-0e1e73ed6e48759e

HASH-d6cf8d6110fc9428

HASH-91de844096031f48

HASH-3b5f71a55df18822

HASH-f8b2cd34428e7cbe

HASH-e4ecf6465feb3652

HASH-5976d9dd328bc3fa

HASH-b75d0928f77b1842

HASH-48533b56718aa37b

HASH-077f25e846e44609

HASH-0d819e19d74594cc

HASH-6efa64dc4b02658c

HASH-d6605455f99104c6

HASH-c61b9cb4c0f29eb4

HASH-f419eb5e5706501a

YARA Rule Matches

postinstall file manipulation

postinstall network communication

postinstall file download

LocalStorageShouldNotBeUsed

postinstall obfuscation

postinstall crypto operations

postinstall environment access

postinstall system command

Indicators of Compromise

All Indicators · 78

Security Analysis Summary

Security Analysis Overview

Risk Assessment

Findings Breakdown

What Was Analyzed

Developer Information

Recommendation

Frequently Asked Questions

Similar Extensions

Bulk Image Convert

StackExchangeNotifications

Navo

linkit

Reverse Image Search

Launch for Google Meet