Chrome Web Store Verified

Total WebShield: Chrome Antivirus Protection

by [email protected] · 100.0K users · 3.5 rating
936ac806-fd15-51f1-b4be-e530e914634d | v3.3.0
55/ 100
MEDIUM risk
Risk verdict
Review before use

Score-based assessment (medium risk, 55/100). No analyst review available.

Analysis record

Analysed
1 months ago
Version
v3.3.0
Artifact
SHA256 28D…B63
Source
Findings (non-IoC)

Evidence ledger

Ranked by severity · findings with a source location link to the code viewer

254 detail rows

YARA Rule Matches

18 rules
SeverityRuleHitsFilesMetadata
LOWNoUseEval 3
web-accessible-resources/redirects.ymlapp/vendor/vendor.min.jsweb-accessible-resources/redirects/noeval.js
-
LOWNoUseWeakRandom 12
app/continuous_protection_listener/continuous_protection_listener.min.jsassets/js/external.min.jsapp/onboarding/onboarding.min.js +9 more
-
LOWpostinstall file download 30
assets/js/external.min.jsrulesets/filter_3.binapp/vendor/vendor.min.js +27 more
-
LOWUntrustedContentShouldNotBeIncluded 1
app/vendor/vendor.min.js
-
LOWSQLInjection 3
assets/js/external.min.jsapp/continuous_protection_listener/continuous_protection_listener.min.jsapp/adblock_content/adblock_content.min.js
-
LOWLocalStorageShouldNotBeUsed 2
app/vendor/vendor.min.jsapp/adblock_content/adblock_content.min.js
-
LOWcredential env files 4
rulesets/filter_3.txtrulesets/declarative/ruleset_3/ruleset_3.jsonapp/vendor/vendor.min.js +1 more
-
LOWCerberus 3
rulesets/filter_3.txtrulesets/declarative/ruleset_3/ruleset_3.jsonrulesets/filter_3.bin
-
LOWcredential skype data 3
rulesets/filter_3.txtrulesets/declarative/ruleset_3/ruleset_3.jsonrulesets/filter_3.bin
-
LOWpostinstall persistence mechanism 7
app/background/background.min.js_locales/it/messages.jsonapp/shared/shared.min.js +4 more
-
LOWpostinstall crypto operations 30
web-accessible-resources/redirects.ymlapp/vendor/vendor.min.js_locales/no/messages.json +27 more
-
LOWOriginsNotVerified 2
app/background/background.min.jsassets/js/external.min.js
-
LOWpostinstall file manipulation 45
web-accessible-resources/redirects.ymlrulesets/filter_3.binweb-accessible-resources/redirects/prevent-bab.js +42 more
-
LOWpostinstall network communication 40
web-accessible-resources/redirects/prebid.jsweb-accessible-resources/redirects.ymlapp/adblock_content/adblock_content.min.js +37 more
-
LOWpostinstall registry modification 7
web-accessible-resources/redirects.ymlrulesets/filter_3.txtweb-accessible-resources/redirects/google-ima3.js +4 more
-
LOWpostinstall obfuscation 22
web-accessible-resources/redirects.ymlrulesets/declarative/ruleset_3/ruleset_3.jsonmeta/licenses.json +19 more
-
LOWpostinstall system command 36
web-accessible-resources/redirects.yml_locales/no/messages.jsonapp/lander/lander.min.js +33 more
-
LOWcredential steam data 3
rulesets/filter_3.txtrulesets/declarative/ruleset_3/ruleset_3.jsonrulesets/filter_3.bin
-

Network Indicators

Concrete URLs, domains, IPs, emails, and hashes extracted from the analyzed artifact.

176,417 total

Loading network indicators

IoC detail rows are loaded outside the initial page render.

Publisher Evidence

Limited evidence

[email protected]

Publisher identity, store signals, distribution reach, and warning signals used for context. Treat this as supporting evidence, not a clean bill of health.

Chrome does not expose the same publisher verification data as IDE stores, so this score is deliberately conservative.

62
Noisy-finding weight
x1.00
Publisher domain
totalav.com
Observed
Store verification signal
Limited signal
Limited
Extension portfolio
7
Portfolio

12 evidence rows available.

Finding Categories

176,417
IoC Indicators

YARA Rules Matched

18 rules(253 hits)
NoUseEval NoUseWeakRandom postinstall file download UntrustedContentShouldNotBeIncluded SQLInjection LocalStorageShouldNotBeUsed credential env files Cerberus credential skype data postinstall persistence mechanism postinstall crypto operations OriginsNotVerified postinstall file manipulation postinstall network communication postinstall registry modification postinstall obfuscation +2 more

Requested Permissions

14 permissions
<all_urls>

Access and modify data on every website you visit

Dangerous
cookies

Read and modify cookies on all sites

High
webRequest

Intercept, modify, and block all network requests

High
downloads

Manage, modify, and monitor downloads

High
tabs
Medium
alarms
Low
scripting
Low
contentSettings
Low
notifications
Low
privacy
Low
storage
Low
unlimitedStorage
Low
declarativeNetRequest
Low
webNavigation
Low

Security Analysis Summary

Security Analysis Overview

Total WebShield: Chrome Antivirus Protection is a Chrome Web Store extension published by [email protected]. Version 3.3.0 has been analyzed by the Risky Plugins security platform, receiving a risk score of 55.12/100 (MEDIUM risk) based on 176671 security findings.

Risk Assessment

This extension presents moderate security risk. Several findings were detected that may warrant attention. Users should carefully review the permissions and findings before installation.

Findings Breakdown

  • Medium: 176418 finding(s)
  • Low: 253 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Total WebShield: Chrome Antivirus Protection is published by [email protected] on the Chrome Web Store marketplace. The extension has approximately 100K users.

Recommendation

Exercise caution with this extension. Review the detailed findings and ensure the requested permissions align with the extension's stated functionality before installation.

About This Extension

Total WebShield is modern web browsing antivirus protection for Chrome. Using cloud-based technology, Total WebShield is an advanced first line of defence against online malware, phishing and other harmful websites. Combined with a suite of privacy protection tools, Total WebShield provides a clean browsing experience whilst quietly protecting your computer from online threats in the background. Total WebShield blocks access to websites which could harm your device or put your identity at risk. This eliminates the chances of falling for online scams and socially engineered tricks, and perhaps most importantly, suffering viruses or malware. Total WebShield utilises the most up to date block lists to ensure your safety online. Powered by AI, threat research and crowd-sourced reports, Total WebShield is able to untangle and uncover networks of dangerous websites and put blocks in place at source. Key Features: - Protects against online threats - First line of defence for blocking malicious, phishing and scam websites that could result in computer damage, identity theft or financial fraud. - Suspicious website warnings - Notifications when visiting websites which show signs of suspicious behaviour or having suffered a data breach. - Stop Nuisance Browser Notifications - Prevent the annoyance of websites asking you to subscribe to notifications, quickly access and manage previously subscribed notifications and experience cleaner browsing. - Dark Web Monitoring - Stay on top of, and react quickly, to any data breaches which expose private data such as account passwords. - Tracking and Online Privacy Protection - Prevent being stalked or tracked around the web, keep your private data private and see a less biased picture of the online world. Get back in the driving seat today and take full control of your browsing experience with Total WebShield for Chrome 7-day free trial, no credit card required. The trial license provides complimentary access to our premium service. Upon expiration you have the ability to continue to use some security features free of charge but will require a premium license if you wish to remain protected against dangerous websites. Premium licenses also include free access to our Security Suite of features at TotalAV. Industry certified antivirus software with real-time protection for Windows, MacOS, iOS and Android. We collect your IP address on initial installation in order to allocate your free trial access without requiring any personal information. You will only be required to provide personal details such as your name, email address & payment credentials should you wish to activate a premium subscription. Further details of both our terms & privacy policies can be found below: Transparency Statement: https://www.totalwebshield.com/transparency-statement Website Terms: https://www.totalwebshield.com/terms Website Privacy: https://www.totalwebshield.com/privacy Further details can be found on on pricing page https://www.totalwebshield.com/pricing Total WebShield will not store or log your data, your privacy is our priority. This service is sold by Protected.net Group Limited.

Frequently Asked Questions