Is 页面伪装者 (保护隐私) malware?

页面伪装者 (保护隐私) shows significant security concerns with a undefined risk rating (NaN/100). While not confirmed malware, undefined high severity issues were detected. Use with caution.

What security issues does 页面伪装者 (保护隐私) have?

Our analysis found undefined security indicators: undefined critical, undefined high, undefined medium severity. Key issues include: Malware Signature, Malware Signature, Malware Signature.

Should I uninstall 页面伪装者 (保护隐私)?

Consider uninstalling 页面伪装者 (保护隐私) or finding a safer alternative. The extension has undefined high severity security issues that warrant concern. Review the detailed findings before continuing to use it.

HIGH RISK NaN/100

页面伪装者 (保护隐私)

Unknown developer · 2 users at risk

Threat Summary

Risk Level

Critical Issues

High Issues

Total Findings

Key Security Threats

HIGH Malware Signature

YARA rule match: -postinstall_obfuscation

/tmp/extract-719ba482d1eed8c1e7649e21fa3bcb60a00e5dbc53a29c0aea5a1bb3d56673e4-483069253/background.js

HIGH Malware Signature

YARA rule match: -postinstall_persistence_mechanism

/tmp/extract-719ba482d1eed8c1e7649e21fa3bcb60a00e5dbc53a29c0aea5a1bb3d56673e4-483069253/background.js

HIGH Malware Signature

YARA rule match: -postinstall_system_command

/tmp/extract-719ba482d1eed8c1e7649e21fa3bcb60a00e5dbc53a29c0aea5a1bb3d56673e4-483069253/background.js

HIGH Malware Signature

YARA rule match: -postinstall_file_download

/tmp/extract-719ba482d1eed8c1e7649e21fa3bcb60a00e5dbc53a29c0aea5a1bb3d56673e4-483069253/background.js

HIGH Malware Signature

YARA rule match: -postinstall_network_communication

/tmp/extract-719ba482d1eed8c1e7649e21fa3bcb60a00e5dbc53a29c0aea5a1bb3d56673e4-483069253/background.js

All Findings (33)

View all 33 security findings

Malware Signature

YARA rule match: -postinstall_obfuscation

Malware Signature

YARA rule match: -postinstall_persistence_mechanism

Malware Signature

YARA rule match: -postinstall_system_command

Malware Signature

YARA rule match: -postinstall_file_download

Malware Signature

YARA rule match: -postinstall_network_communication

Malware Signature

YARA rule match: -postinstall_file_manipulation

Malware Signature

YARA rule match: -postinstall_crypto_operations

Malware Signature

YARA rule match: -postinstall_file_manipulation

Malware Signature

YARA rule match: -postinstall_system_command

Malware Signature

YARA rule match: -postinstall_file_manipulation

Malware Signature

YARA rule match: -postinstall_system_command

Malware Signature

YARA rule match: -postinstall_system_command

Indicator of Compromise

XIOC detected IP: ::af

Indicator of Compromise

XIOC detected Domain: clients2.google.com

Indicator of Compromise

XIOC detected Domain: toast.show

Indicator of Compromise

XIOC detected Domain: parts.map

Indicator of Compromise

XIOC detected URL: https://www.baidu.com/';

Indicator of Compromise

XIOC detected IP: ::bef

Indicator of Compromise

XIOC detected Domain: www.baidu.com

Indicator of Compromise

XIOC detected Domain: tab.id

Indicator of Compromise

XIOC detected Domain: iframe.id

Indicator of Compromise

XIOC detected Domain: date.now

Indicator of Compromise

XIOC detected Domain: fakeicon.id

Indicator of Compromise

XIOC detected Domain: sender.tab

Indicator of Compromise

XIOC detected Domain: e.target

Indicator of Compromise

XIOC detected Domain: apple.com

Indicator of Compromise

XIOC detected Domain: sender.tab.id

Indicator of Compromise

XIOC detected URL: https://URL.',

Indicator of Compromise

XIOC detected URL: https://URL.

Indicator of Compromise

XIOC detected URL: https://clients2.google.com/service/update2/crx

manifest-analysis

Potentially sensitive permission 'tabs' declared in manifest.

Suspicious Network Activity

Network call of type 'fetch' detected.

Suspicious Network Activity

Network call of type 'fetch' detected.

Recommended Action

This extension has significant security concerns that warrant careful review. Consider uninstalling or finding a safer alternative. If you must use it, limit the permissions and monitor for suspicious activity.

View Full Security Report Find Safer Alternatives