Malwarebytes Browser Guar Chrome extension icon

Malwarebytes Browser Guar

🔍 Security Report Available
👥 11M+ users
📦 v3.1.3
💾 33.94MiB
📅 2026-02-08
View on Chrome Web Store

Chrome will indicate if you already have this installed.

Blocks malware, scams, phishing and trackers to bring safer, faster browsing for all users, letting you enjoy a more secure online experience without interruptions. Benefits most are individuals who frequently visit vulnerable websites or engage in high-risk activities online, such as banking or shopping.

Overview

Malwarebytes Browser Guard: browse faster, safer, and smarter

Tired of ads, scams, and trackers slowing you down? Malwarebytes Browser Guard blocks malicious sites, phishing scams, and creepy trackers—so you can enjoy a faster, cleaner, and safer web.

Why Malwarebytes Browser Guard?
• Block ads and speed up browsing
Say goodbye to annoying ads and load pages quicker.
• Stop scams before they reach you
Automatically blocks phishing, hijackers, and malware sites.
• Protect your privacy
Keeps trackers from following your every move online.
• Simple setup
Just install and browse with confidence—no hassle needed.

Key features
• Ad and tracker blocking
Remove third-party ads and trackers.
• Advanced scam protection
Defends against phishing, tech support scams, and hijackers.
• CryptoMiner blocker
Stops hidden cryptocurrency miners from stealing your CPU.
• GDPR cookie consent control
Automatically declines cookie pop-ups.

Take control of your browsing. Download Malwarebytes Browser Guard today!

Tags

Make Chrome Yours/privacy privacy make chrome yours/privacy

Privacy Practices

Not being sold to third parties, outside of the approved use cases
Not being used or transferred for purposes that are unrelated to the item's core functionality
Not being used or transferred to determine creditworthiness or for lending purposes
✅ Version v3.1.4 was recently scanned.
v3.1.4 Info Scanned Mar 5, 2026

Security Analysis — Malwarebytes Browser Guar

Analyzed v3.1.4 · Mar 5, 2026 · 56 JS files · 8551 KB scanned

Permissions

alarms downloads storage tabs declarativeNetRequest declarativeNetRequestFeedback unlimitedStorage webRequest contextMenus nativeMessaging activeTab scripting clipboardRead clipboardWrite <all_urls>

Code Patterns Detected

Function constructor used — dynamic code execution innerHTML assignment — potential XSS vector String.fromCharCode (obfuscation) charCodeAt (obfuscation) Uses Fetch API Creates script elements dynamically Reads clipboard content Writes to clipboard Monitors form inputs Runs on ALL websites Broad host permissions Can block/modify network requests Manages downloads Uses postMessage for cross-origin comms Sets up event listeners

External Connections

www.w3.org github.com www.malwarebytes.com react.dev bugs.chromium.org bugs.webkit.org reactrouter.com myaccount.google.com malwarebytes.com bugzilla.mozilla.org www.example.com x.com +8 more

Package Contents 630 files · 84.3MB

📁_locales1.4MB
📁de146KB
{}messages.json146KB
📁en135KB
{}messages.json135KB
📁es144KB
{}messages.json144KB
📁fr148KB
{}messages.json148KB
📁it144KB
{}messages.json144KB
📁nl142KB
{}messages.json142KB
📁pl146KB
{}messages.json146KB
📁pt_BR144KB
{}messages.json144KB
📁pt_PT144KB
{}messages.json144KB
📁ru178KB
{}messages.json178KB
📁_metadata89KB
{}verified_contents.json89KB
📁app12.8MB
📁assets2.6MB
📁Roboto1.5MB
🔤Roboto-Black.ttf126KB
🔤Roboto-BlackItalic.ttf131KB
🔤Roboto-Bold.ttf126KB
🔤Roboto-BoldItalic.ttf129KB
🔤Roboto-Italic.ttf128KB
🔤Roboto-Light.ttf125KB
🔤Roboto-LightItalic.ttf130KB
🔤Roboto-Medium.ttf127KB
🔤Roboto-MediumItalic.ttf130KB
🔤Roboto-Regular.ttf127KB
🔤Roboto-Thin.ttf127KB
🔤Roboto-ThinItalic.ttf130KB
📁bg-icon18KB
🖼bg-favicon-16x16.png266B
🖼bg-favicon-200x200.png2KB
🖼bg-favicon-256x256.png9KB
🖼bg-favicon-32x32.png375B
🖼bg-favicon-48x48.png489B
🖼bg-favicon-512x512.png5KB
🖼bg-favicon-64x64.png595B
🖼bg-favicon-96x96.png844B
🔤NunitoSans-Light.ttf88KB
🖼account-enabled-dark.svg2KB
🖼account-enabled.svg2KB
🖼add-icon.svg399B
🖼address-bar-2.svg3KB
🖼address-bar.svg2KB
🖼ads.svg611B
🖼allow-icon.svg884B
🖼arrow-back-light.svg661B
🖼arrow-left.svg622B
🖼arrow-right.svg620B
🖼bg-fingerprint.svg14KB
🖼bg-update-dark-icon.svg2KB
🖼bg-update-icon.svg2KB
🖼bg-upsell-dark-icon.svg2KB
🖼bg-upsell-icon.svg2KB
🖼block-all.svg457B
🖼block-icon-dark.svg1KB
🖼block-icon.svg1KB
🖼block-path-bottom.svg330B
🖼block-path-top-dark.svg279B
🖼block-path-top.svg284B
🖼block-shield-big-dark.svg3KB
🖼block-shield-big.svg4KB
🖼browser-guard-logo-white.svg15KB
🖼browser-guard-logo.svg15KB
🖼browser-permission-dialog-dark.svg127KB
🖼browser-permission-dialog.svg127KB
🖼browserguard-laptop.svg2KB
🖼cancel-icon.svg536B
🖼chart-icon.svg875B
🖼check-dark-small.svg499B
🖼check-icon-dark.svg536B
🖼check-icon.svg536B
🖼check-white-small.svg505B
🖼check-white.svg265B
🖼check.svg268B
🖼checkbox-tick-white.svg548B
🖼checkmark.svg629B
🖼chevron-right-icon.svg629B
🖼close-icon.svg268B
🖼close-modal-icon.svg232B
🖼clouds-large-grey.svg3KB
🖼clouds-large.svg3KB
🖼cog-icon.svg2KB
🖼con-ctrl-non-premium-1-dark.svg717B
🖼con-ctrl-non-premium-1.svg700B
🖼con-ctrl-non-premium-2-dark.svg1KB
🖼con-ctrl-non-premium-2.svg1KB
🖼content.svg2KB
🖼credit-card-dark.svg585B
🖼credit-card.svg589B
🖼debug-download-complete-dark.svg11KB
🖼debug-download-complete.svg11KB
🖼debug-download-error-dark.svg9KB
🖼debug-download-error.svg9KB
🖼detection-history-dark.svg2KB
🖼detection-history.svg2KB
🖼device-security-installed-free-dark-icon.svg2KB
🖼device-security-installed-free-icon.svg2KB
🖼device-security-not-installed-dark-icon.svg3KB
🖼device-security-not-installed-icon.svg2KB
🖼device-security-premium-dark-icon.svg3KB
🖼device-security-premium-icon.svg2KB
🖼downloading-icon-dark.svg9KB
🖼downloading-icon.svg9KB
🖼ellipsis-vertical.svg574B
🖼email-sky-dark-mode.svg4KB
🖼export-dark.svg917B
🖼export-non-premium-dark.svg1KB
🖼export-non-premium.svg1KB
🖼export.svg919B
🖼globe-icon.svg2KB
🖼graph.svg360B
🖼green-tick.svg538B
🖼high-alert-level.svg963B
🖼icon-dark.png657B
🖼icon-disabled-dark.png645B
🖼icon-disabled.png806B
🖼icon.png793B
🖼import-dark.svg493B
🖼import-error-dark.svg1KB
🖼import-error.svg1KB
🖼import-icon-dark.svg1KB
🖼import-icon.svg1KB
🖼import-successful-dark.svg862B
🖼import-successful.svg862B
🖼import.svg493B
🖼info-icon-dark.svg1KB
🖼info-icon.svg1KB
🖼invalid-dark.svg2KB
🖼invalid.svg2KB
🖼level-up-illustration-dark.svg8KB
🖼level-up-illustration.svg8KB
🖼link-icon.svg884B
🖼lock.svg325B
🖼malware-protection.svg789B
🖼malware.svg2KB
🖼mb_logo_22_20.svg747B
🖼mbg-dark-mode.svg6KB
🖼mbg.svg6KB
🖼medium-alert-level.svg1021B
🖼needs_subscription_badge.svg1KB
🖼no-items-dark.svg821B
🖼no-items-light.svg819B
🖼no-results-dark.svg3KB
🖼no-results-light.svg3KB
🖼obf-illustration-1-dark.svg12KB
🖼obf-illustration-1.svg12KB
🖼obf-illustration-2-dark.svg18KB
🖼obf-illustration-2.svg18KB
🖼obf-illustration-3-dark.svg14KB
🖼obf-illustration-3.svg14KB
🖼obf-illustration-4-dark.svg8KB
🖼obf-illustration-4.svg8KB
🖼obf-illustration-5-dark.svg7KB
🖼obf-illustration-5.svg7KB
🖼onboarding-illustration-1-dark.svg32KB
🖼onboarding-illustration-1.svg33KB
🖼onboarding-illustration-2-dark.svg5KB
🖼onboarding-illustration-2.svg6KB
🖼onboarding-illustration-edge-1-dark.svg33KB
🖼onboarding-illustration-edge-1.svg33KB
🖼onboarding-illustration-ff-1-dark.svg50KB
🖼onboarding-illustration-ff-1.svg50KB
🖼pause.svg515B
🖼premium-only-dark.svg1KB
🖼premium-only.svg1KB
🖼progress-bar-complete-dark.svg255B
🖼progress-bar-complete.svg255B
🖼progress-bar-dark.svg3KB
🖼progress-bar-error-dark.svg255B
🖼progress-bar-error.svg255B
🖼progress-bar.svg3KB
🖼pup.svg2KB
🖼release-icon.svg10KB
🖼ruleset-error-msg-icon.svg1KB
🖼scams.svg817B
🖼search-icon.svg580B
🖼shield-active.svg2KB
🖼shield-check.webp446B
🖼shield.svg2KB
🖼shizzel.webp9KB
🖼spanner-gear.svg7KB
🖼suspicious-activity-protection-dark.svg3KB
🖼suspicious-activity-protection.svg3KB
🖼tooltip-black.svg511B
🖼tooltip-white.svg508B
🖼tooltip.svg511B
🖼uploading-icon-dark.svg609B
🖼uploading-icon.svg592B
🖼upsell-icon.svg3KB
🖼vpn-disabled-icon.svg1KB
🖼vpn-enabled-icon.svg1KB
🖼vpn-free-icon.svg1KB
🖼welcome-box-dark.svg9KB
🖼welcome-box.svg9KB
🖼welcome-clouds.svg1KB
🖼welcome-header-dark.svg15KB
🖼welcome-header-light.svg15KB
🖼welcome-img.svg9KB
🖼world-shield-dark.svg3KB
🖼world-shield.svg3KB
📁eventpages208KB
🌐block-content-control.html2KB
🎨block-dark.css1KB
🎨block-notification-dark.css374B
🎨block-notification.css4KB
🌐block-notification.html19KB
🎨block-responsive.css11KB
🎨block.css2KB
🎨breach-notification-dark.css456B
🎨breach-notification.css3KB
🌐breach-notification.html24KB
🎨clipboard-notification-dark.css401B
🎨clipboard-notification.css4KB
🌐clipboard-notification.html17KB
🎨common-styles-dark.css992B
🎨common-styles.css18KB
🌐debugger.html1KB
🎨downloading-debug-logs-dark.css1KB
🎨downloading-debug-logs.css3KB
🌐downloading.html980B
🎨monthly-notification-dark.css519B
🎨monthly-notification.css5KB
🌐monthly-notification.html25KB
🎨permission-request-dark.css262B
🎨permission-request.css3KB
🌐permission-request.html2KB
🎨release-notification-dark.css764B
🎨release-notification.css6KB
🌐release-notification.html26KB
🎨ruleset-error-dark.css113B
🎨ruleset-error.css2KB
🌐ruleset-error.html5KB
🎨search-hijacking-notification-dark.css419B
🎨search-hijacking-notification.css3KB
🌐search-hijacking-notification.html17KB
🎨url-permission-request-dark.css39B
🎨url-permission-request.css524B
🌐url-permission-request.html1KB
📁popup10MB
📁assets3.3MB
📁icons764KB
📁dark-mode315KB
🖼account-avatar.svg1KB
🖼add-plus.svg497B
🖼allow-list-onboarding.svg21KB
🖼allow.svg1KB
🖼android.svg4KB
🖼announcement.svg914B
🖼arrow-left.svg653B
🖼arrow-right.svg597B
🖼back-arrow.svg638B
🖼block.svg685B
🖼blocked-eye.svg2KB
🖼blocked-window.svg2KB
🖼blocked.svg2KB
🖼browser-guard-long-logo.svg15KB
🖼browserguard-logo-short.svg10KB
🖼bug.svg1KB
🖼check-box.svg855B
🖼check-state-onboarding.svg15KB
🖼check.svg679B
🖼chevron-up.svg319B
🖼chrome.svg2KB
🖼clipboard-protection.svg7KB
🖼close.svg234B
🖼crown.svg1KB
🖼double-chevron-right.svg1KB
🖼empty-graph.svg2KB
🖼empty-page-shield.svg2KB
🖼expand-right.svg786B
🖼export-non-premium.svg16KB
🖼export.svg775B
🖼fishing-hook.svg910B
🖼folder.svg737B
🖼full-protection-premium.svg4KB
🖼full-protection-vpn.svg5KB
🖼get-premium-keys.svg16KB
🖼green-check.svg683B
🖼green-shield.svg2KB
🖼grey-link.svg878B
🖼info.svg643B
🖼ios.svg2KB
🖼kebab-menu.svg618B
🖼left-arrow.svg526B
🖼left-white-arrow.svg631B
🖼macos.svg1KB
🖼magnifier.svg556B
🖼malware.svg2KB
🖼mb-logo-blue.svg1017B
🖼mb-logo.svg10KB
🖼mb-solid-logo.svg886B
🖼megaphone.svg681B
🖼mwb-logo-clouds.svg8KB
🖼next-arrow.svg629B
🖼no-detection-cloud.svg3KB
🖼not-found.svg3KB
🖼oap-action-notice.svg15KB
🖼oap-check-done.svg594B
🖼oap-check-hollow.svg420B
🖼oap-check-skipped.svg767B
🖼oap-critical.svg1004B
🖼oap-error-item-refresh.svg1KB
🖼oap-error-item.svg1KB
🖼oap-medium.svg1KB
🖼oap-platform-android.svg4KB
🖼oap-platform-ios.svg2KB
🖼oap-platform-windows.svg434B
🖼oap-rescan.svg2KB
🖼oap-results-close.svg838B
🖼oap-scan-error.svg3KB
🖼oap-scan-tools.svg7KB
🖼oap-todo-indicator.svg605B
🖼oap.svg2KB
🖼on-off-protection.svg4KB
🖼online-account-protection-icon.svg1KB
🖼panel.svg424B
🖼pin-to-toolbar.svg37KB
🖼plus.svg340B
🖼premium-feature-onboarding.svg8KB
🖼protection-onboarding.svg13KB
🖼protection.svg3KB
🖼red-bug.svg2KB
🖼red-shield.svg2KB
🖼red-warning.svg940B
🖼red-x.svg871B
🖼right-arrow.svg468B
🖼settings.svg1KB
🖼suspicious.svg2KB
🖼warning.svg1008B
🖼welcome-illustration.svg9KB
🖼white-add.svg470B
🖼windows.svg526B
🖼yellow-gear.svg2KB
🖼yellow-lock.svg1KB
🖼yellow-shield.svg2KB
🖼yellow-warning.svg1KB
📁light-mode315KB
🖼account-avatar.svg1KB
🖼add-plus.svg493B
🖼allow-list-onboarding.svg21KB
🖼allow.svg1KB
🖼android.svg4KB
🖼announcement.svg896B
🖼arrow-left.svg613B
🖼arrow-right.svg597B
🖼back-arrow.svg656B
🖼block.svg691B
🖼blocked-eye.svg2KB
🖼blocked-window.svg2KB
🖼blocked.svg2KB
🖼browser-guard-long-logo.svg15KB
🖼browserguard-logo-short.svg10KB
🖼bug.svg1KB
🖼check-box.svg770B
🖼check-state-onboarding.svg15KB
🖼check.svg673B
🖼chevron-up.svg320B
🖼chrome.svg2KB
🖼clipboard-protection.svg7KB
🖼close.svg217B
🖼crown.svg1KB
🖼double-chevron-right.svg990B
🖼empty-graph.svg2KB
🖼empty-page-shield.svg2KB
🖼expand-right.svg765B
🖼export-non-premium.svg16KB
🖼export.svg775B
🖼fishing-hook.svg893B
🖼folder.svg737B
🖼full-protection-premium.svg5KB
🖼full-protection-vpn.svg5KB
🖼get-premium-keys.svg16KB
🖼green-check.svg683B
🖼green-shield.svg2KB
🖼grey-link.svg882B
🖼info.svg645B
🖼ios.svg2KB
🖼kebab-menu.svg601B
🖼left-arrow.svg526B
🖼left-white-arrow.svg629B
🖼macos.svg894B
🖼magnifier.svg556B
🖼malware.svg2KB
🖼mb-logo-blue.svg994B
🖼mb-logo.svg10KB
🖼mb-solid-logo.svg862B
🖼megaphone.svg666B
🖼mwb-logo-clouds.svg8KB
🖼next-arrow.svg630B
🖼no-data.svg762B
🖼no-detection-cloud.svg3KB
🖼not-found.svg3KB
🖼oap-action-notice.svg15KB
🖼oap-check-done.svg594B
🖼oap-check-hollow.svg420B
🖼oap-check-skipped.svg767B
🖼oap-critical.svg1004B
🖼oap-error-item-refresh.svg1KB
🖼oap-error-item.svg1KB
🖼oap-medium.svg1KB
🖼oap-platform-android.svg4KB
🖼oap-platform-ios.svg2KB
🖼oap-platform-windows.svg417B
🖼oap-rescan.svg2KB
🖼oap-results-close.svg822B
🖼oap-scan-error.svg3KB
🖼oap-scan-tools.svg7KB
🖼oap-todo-indicator.svg605B
🖼oap.svg954B
🖼on-off-protection.svg4KB
🖼online-account-protection-icon.svg1KB
🖼panel.svg426B
🖼pin-to-toolbar.svg37KB
🖼plus.svg342B
🖼premium-feature-onboarding.svg8KB
🖼protection-onboarding.svg13KB
🖼protection.svg3KB
🖼red-bug.svg2KB
🖼red-shield.svg2KB
🖼red-warning.svg940B
🖼red-x.svg871B
🖼right-arrow.svg468B
🖼settings.svg1KB
🖼suspicious.svg2KB
🖼warning.svg967B
🖼welcome-illustration.svg9KB
🖼white-add.svg487B
🖼windows.svg337B
🖼yellow-gear.svg2KB
🖼yellow-lock.svg1KB
🖼yellow-shield.svg2KB
🖼yellow-warning.svg1KB
📁neutral134KB
🖼account-enabled.svg2KB
🖼blocked-banner.svg1012B
🖼checked.svg734B
🖼close_.svg822B
🖼credit-card.svg593B
🖼facebook.svg1KB
🖼get-premium-keys.svg16KB
🖼google.svg1KB
🖼linkedin-round.svg17KB
🖼linkedin.svg1KB
🖼oap-notification-icon.svg10KB
🖼oap-waiting-for-auth.svg5KB
🖼onboarding-background.svg1KB
🖼onboarding-mwb-logo.svg15KB
🖼pause-button-icon.svg737B
🖼shield-bad.svg2KB
🖼shield-fair.svg2KB
🖼shield-good.svg2KB
🖼suspicious-activity-protection.svg3KB
🖼tools.svg7KB
🖼warning.svg1KB
🖼welcome-illustration.svg8KB
🖼world-shield.svg3KB
🖼x-round.svg31KB
📁roboto-static2.6MB
🔤Roboto-Black.ttf144KB
🔤Roboto-BlackItalic.ttf150KB
🔤Roboto-Bold.ttf143KB
🔤Roboto-BoldItalic.ttf150KB
🔤Roboto-ExtraBold.ttf143KB
🔤Roboto-ExtraBoldItalic.ttf150KB
🔤Roboto-ExtraLight.ttf143KB
🔤Roboto-ExtraLightItalic.ttf148KB
🔤Roboto-Italic.ttf149KB
🔤Roboto-Light.ttf143KB
🔤Roboto-LightItalic.ttf148KB
🔤Roboto-Medium.ttf143KB
🔤Roboto-MediumItalic.ttf149KB
🔤Roboto-Regular.ttf143KB
🔤Roboto-SemiBold.ttf143KB
🔤Roboto-SemiBoldItalic.ttf149KB
🔤Roboto-Thin.ttf143KB
🔤Roboto-ThinItalic.ttf148KB
🌐index.html291B
🎨popup.css78KB
📄popup.css.map69KB
📜popup.js1.4MBlarge
📄popup.js.LICENSE.txt2KB
📄popup.js.map5MB
📁safari25KB
📁tabs10KB
🌐allow-include.html4KB
🌐support-include.html3KB
🌐website-include.html3KB
🎨safari-pop.css16KB
📁scripts69KB
📁adblockers6KB
📜adb-facebook.js3KB
📜adb-youtube.js3KB
📜adblockers-utils.js288B
📁content-controls7KB
📜content-control-common.js773B
📜content-control-mv2.js3KB
📜content-control-mv3.js3KB
📜content-controls.js231B
📁detection-history2KB
📜detection-history-common.js465B
📜detection-history-mv2.js2KB
📜detection-history.js157B
📁exclusions20KB
📜exclusions-common.js1KB
📜exclusions-mv2.js9KB
📜exclusions-mv3.js8KB
📜exclusions.js1KB
📁mv313KB
📜dynamic-rule-utils.js6KB
📜lookup-cache.js502B
📜ruleset-utils.js7KB
📁ui-utils12KB
📜ui-utils.js11KB
📜ui-utils.test.js597B
📁user-blocks9KB
📜user-blocks-common.js2KB
📜user-blocks-mv2.js1KB
📜user-blocks-mv3.js5KB
📜user-blocks.js743B
🎨content-style.css2KB
📁db39.7MB
📁hashmaps4KB
📜mbgc.mv3.malware_1.js4KB
{}breaches.json582KB
{}mbgc.arw.json2B
📄mbgc.db.ads.2303KB
📄mbgc.db.ads.json.2334KB
📄mbgc.db.adware.22KB
📄mbgc.db.compromised.24KB
📄mbgc.db.easylist.2675KB
📄mbgc.db.easyprivacy.2250KB
📄mbgc.db.exploit.24KB
📄mbgc.db.featureflags.2210B
📄mbgc.db.fraud.285KB
📄mbgc.db.heuristics.json.226KB
📄mbgc.db.hijack.213KB
📄mbgc.db.malvertising.242KB
📄mbgc.db.malware.json.224KB
📄mbgc.db.malware.partial.urls.2247B
📄mbgc.db.malware.partial.urls.json.21016KB
📄mbgc.db.malware.patterns.22KB
📄mbgc.db.malware.patterns.json.26KB
📄mbgc.db.malware.urls.2196KB
📄mbgc.db.pharma.21KB
📄mbgc.db.phishing.2629KB
📄mbgc.db.ransomware.25KB
📄mbgc.db.reputation.2611KB
📄mbgc.db.riskware.22.1MB
📄mbgc.db.rulesetoverride.3.0.415B
📄mbgc.db.scams.json.2325KB
📄mbgc.db.spam.28KB
📄mbgc.db.spyware.24KB
📄mbgc.db.top1m.26.2MB
📄mbgc.db.trojan.2789KB
📄mbgc.db.whitelist.ads.2606B
📄mbgc.db.whitelist.malware.25KB
📄mbgc.db.whitelist.scams.26.2MB
📄mbgc.db.whitelist.scams.manual.226KB
📄mbgc.db.whitelist.scams.patterns.2501B
📄mbgc.db.whitelist.tracker.22KB
📄mbgc.db.worm.23KB
{}mbgc.mv3.ads_1.json8.3MB
{}mbgc.mv3.ads_2.json3.8MB
{}mbgc.mv3.always_allow_DNR.json6KB
{}mbgc.mv3.dynamicwhitelist.json3KB
{}mbgc.mv3.easylist_1.json6.7MB
{}mbgc.mv3.easyprivacy_1.json299KB
{}mbgc.mv3.easyprivacy_ff_1.json299KB
{}mbgc.mv3.malware_1.json45KB
{}mbgc.mv3.whitelist_1.json25KB
{}version.json12KB
📁utils13KB
📁databases12KB
📜bloom-filter.js830B
📜db-consts.js1KB
📜db-persistence.js8KB
📜indexed-database-file.js933B
📜indexed-database.js952B
📁sentry1KB
📜sentryInit.js1KB
🔤0f744c545bd18664e5b6.ttf148KB
🔤116fcd4fd987818c5d98.ttf143KB
🔤1bcaefbe559355f802fd.ttf143KB
🔤1cb8e1132609209853de.ttf150KB
🔤430e4278f26f3ee9f717.ttf150KB
🔤52c0fd430aaca71c6c4b.ttf143KB
🔤58345135598c1c7281f0.ttf143KB
🔤5dd918926d41224c8142.ttf143KB
🔤8f977c8591803dd0978f.ttf143KB
🔤a4e38056cca427132ea4.ttf149KB
🔤b09e218bb83bb7003cc2.ttf143KB
🔤b1cacdcefbeb5ff74e75.ttf144KB
📜background.js1.6MBlarge
📄background.js.LICENSE.txt188B
📄background.js.map3.7MB
📜block-content-control.js103KBlarge
📄block-content-control.js.map611KB
🔤c58a86b450e831fb3d3e.ttf149KB
🔤cb02a42f24299e95adb5.ttf143KB
📜content-debugging.js50KBlarge
📄content-debugging.js.LICENSE.txt388B
📄content-debugging.js.map228KB
📜content-linkedin.js27KB
📄content-linkedin.js.map174KB
📜content-oap-google.js22KB
📄content-oap-google.js.map90KB
📜content-oap-notification.js5KB
📄content-oap-notification.js.map33KB
📜content-scripts.js1.1MBlarge
📄content-scripts.js.LICENSE.txt199B
📄content-scripts.js.map1.9MB
📜content-shell-main.js7KB
📄content-shell-main.js.map40KB
🔤d07c6a215fe8b84b789f.ttf149KB
🔤db2266bf1050b0f61d78.ttf148KB
📜debugger.js1.2MBlarge
📄debugger.js.LICENSE.txt188B
📄debugger.js.map2.4MB
🔤dffdba612b2d421972f3.ttf148KB
📜downloading.js102KBlarge
📄downloading.js.map606KB
🔤f063389d98e9fa47803f.ttf150KB
📜injection-instart.js2KB
📄injection-instart.js.map5KB
📜injection-topics.js1023B
📄injection-topics.js.map1KB
📜injection-tss-mv3.js6KB
📄injection-tss-mv3.js.map38KB
📜injection-tss-notification.js852B
📄injection-tss-notification.js.map742B
📜injection-tss-skimmer.js805B
📄injection-tss-skimmer.js.map600B
📜injection-tss.js2KB
📄injection-tss.js.map9KB
{}manifest.json7KB
📜oap-action-notice.js423KBlarge
📄oap-action-notice.js.LICENSE.txt1KB
📄oap-action-notice.js.map1.7MB
📜oap-auth-loader.js409KBlarge
📄oap-auth-loader.js.LICENSE.txt1KB
📄oap-auth-loader.js.map1.6MB
📜oap-loader.js350KBlarge
📄oap-loader.js.LICENSE.txt1KB
📄oap-loader.js.map1.1MB
📜oap-notification-popup.js408KBlarge
📄oap-notification-popup.js.LICENSE.txt1KB
📄oap-notification-popup.js.map1.6MB
📜oap-results-view.js436KBlarge
📄oap-results-view.js.LICENSE.txt1KB
📄oap-results-view.js.map1.7MB
📜oap-scan-error.js410KBlarge
📄oap-scan-error.js.LICENSE.txt1KB
📄oap-scan-error.js.map1.6MB
📜permission-request.js103KBlarge
📄permission-request.js.map634KB
📜ruleset-error.js106KBlarge
📄ruleset-error.js.map644KB
📜url-permission-request.js82KBlarge
📄url-permission-request.js.map520KB

What This Extension Does

Malwarebytes Browser Guard: a browser extension that blocks malware, scams, phishing, and trackers for safer, faster browsing. It's designed to protect users from online threats and maintain their privacy.

Permissions Explained

  • alarmsexpected: Allows the extension to display notifications and alerts.
    Technical: Accesses Chrome's alarm API, enabling the extension to trigger notifications and reminders.
  • downloadsexpected: Lets the extension manage downloads from the browser.
    Technical: Provides access to Chrome's download manager, allowing the extension to intercept and modify downloads.
  • storageexpected: Allows the extension to store data locally on your device.
    Technical: Grants access to Chrome's storage API, enabling the extension to save and retrieve data such as settings and cache.
  • tabsexpected: Lets the extension interact with open tabs in your browser.
    Technical: Provides access to Chrome's tab API, allowing the extension to read and modify tab metadata.
  • declarativeNetRequestexpected: Allows the extension to block or modify network requests.
    Technical: Grants access to Chrome's declarative net request API, enabling the extension to filter and manipulate HTTP requests.
  • declarativeNetRequestFeedbackexpected: Lets the extension receive feedback on blocked network requests.
    Technical: Provides access to Chrome's declarative net request feedback API, enabling the extension to receive information about blocked requests.
  • unlimitedStorageexpected: Allows the extension to store an unlimited amount of data locally on your device.
    Technical: Grants access to Chrome's storage API with no storage quota, enabling the extension to save large amounts of data.
  • webRequestexpected: Lets the extension block or modify network requests.
    Technical: Provides access to Chrome's web request API, enabling the extension to filter and manipulate HTTP requests.
  • contextMenusexpected: Allows the extension to add custom context menu items.
    Technical: Grants access to Chrome's context menus API, enabling the extension to create and manage custom menu items.
  • nativeMessagingexpected: Lets the extension communicate with native applications on your device.
    Technical: Provides access to Chrome's native messaging API, enabling the extension to send and receive messages with native apps.
  • activeTabexpected: Allows the extension to read data from the currently active tab.
    Technical: Grants access to Chrome's active tab API, enabling the extension to read metadata and content from the current tab.
  • scriptingexpected: Lets the extension execute scripts in the context of web pages.
    Technical: Provides access to Chrome's scripting API, enabling the extension to inject and run JavaScript code on web pages.
  • clipboardReadexpected: Allows the extension to read data from your clipboard.
    Technical: Grants access to Chrome's clipboard API, enabling the extension to read and manipulate clipboard content.
  • clipboardWriteexpected: Lets the extension write data to your clipboard.
    Technical: Provides access to Chrome's clipboard API, enabling the extension to write and manipulate clipboard content.
  • <all_urls>check this: Allows the extension to access all URLs visited in your browser.
    Technical: Grants access to Chrome's URL API, enabling the extension to read and manipulate metadata from any web page. ⚠ 1

Your Data

Malwarebytes Browser Guard accesses various data on your device, including clipboard content, storage, and tab metadata. It sends data to its own servers for analysis and blocking purposes.

Technical Details

domains
  • www.w3.org
  • github.com
  • www.malwarebytes.com
  • react.dev
  • bugs.chromium.org
  • bugs.webkit.org
  • reactrouter.com
  • myaccount.google.com
  • malwarebytes.com
  • bugzilla.mozilla.org
  • www.example.com
  • x.com
protocols
  • HTTP
  • HTTPS
encryption_status
Mixed (some requests are encrypted, others are not)
data_types
  • cookies
  • tokens
  • keystrokes
  • page content

Code Findings

Dynamic Code ExecutionHigh

The extension uses the Function constructor to execute dynamic code, which can be a security risk if not properly sanitized.

Technical: The extension uses Function to create new functions dynamically, which can lead to code injection attacks if malicious code is injected into the function body.

💡 Legitimate extensions may use dynamic code execution for legitimate purposes such as content injection or script loading.

Potential XSS VectorMedium

The extension uses innerHTML assignment, which can be a potential XSS vector if not properly sanitized.

Technical: The extension assigns innerHTML to an element without proper sanitization, which can lead to cross-site scripting attacks if malicious code is injected into the HTML.

💡 Legitimate extensions may use innerHTML assignment for legitimate purposes such as content injection or script loading.

ObfuscationMedium

The extension uses String.fromCharCode and charCodeAt to obfuscate code, which can make it harder to analyze and debug.

Technical: The extension uses these functions to encode and decode strings, making it difficult to understand the intent behind the code.

💡 Legitimate extensions may use obfuscation for legitimate purposes such as protecting intellectual property or preventing reverse engineering.

Broad Host PermissionsCritical

The extension has broad host permissions, which can be a security risk if not properly managed.

Technical: The extension has access to all URLs visited in the browser, which can lead to unauthorized data exposure or manipulation.

💡 Legitimate extensions may require broad host permissions for legitimate purposes such as content injection or script loading.

Bottom Line

Malwarebytes Browser Guard is a complex extension that provides robust protection against online threats. However, its broad host permissions and dynamic code execution raise some security concerns. Users should carefully review the extension's permissions and behavior before installing it.

Urban Vpn Proxy

61M+ users
Get the best secured Free VPN access to any website, and unblock content with Urban VPN
Make Chrome Yours/privacy

Adguard Adblocker

16M+ users
Unmatched adblock extension against advertising and pop-ups. Blocks ads on Facebook, YouTube and all other websites.
Make Chrome Yours/privacy

Ublock Origin Lite

15M+ users
An efficient content blocker. Blocks ads, trackers, miners, and more immediately upon installation.
Make Chrome Yours/privacy