Geeksend - Email Finder

Extension Purpose and Intention

The Geeksend - Email Finder extension is designed to help users locate email addresses from various websites efficiently. It offers features like email verification, lead management, and privacy protection, aiming to streamline the process of finding and managing contact information.

Code Analysis

The provided code snippet primarily handles the installation and message handling aspects of the extension. Below is a breakdown of its functionality:

Installation Handling

• Function installed(): This function sets a cookie named search_extension_version with the current version of the extension.

  chrome.cookies.set({
    name: "search_extension_version",
    url: "https://app.geeksend.com/",
    domain: ".geeksend.com",
    path: "/",
    value: chrome.runtime.getManifest().version,
    expirationDate: new Date/1e3+2592e3,
    secure: !0,
    sameSite: "lax"
  }, function(e){});
  

  • Purpose: This is likely used to track the version of the extension installed on the user's browser.

Message Handling

• Background Message Listener: Listens for messages sent from other parts of the extension.

  chrome.runtime.onMessage.addListener(function(e, n, o) {
    console.log("background");
    try {
      if (!e) return !0;
      console.log("background"), o({});
    } catch (e) {
      console.log(e, "1111111");
    }
    return !0;
  });
  

  • Purpose: This function logs messages to the console and returns a response if a message is received.

• External Message Listener: Listens for external messages, specifically checking for a "version" request.

  chrome.runtime.onMessageExternal.addListener(function(e, n, o) {
    return e && e.message && "version" == e.message && o({version: chrome.runtime.getManifest().version}), !0;
  });
  

  • Purpose: Allows external entities to query the extension's version.

Installation Event Listener

• On Installed Listener: Triggers the installed() function when the extension is installed.

  chrome.runtime.onInstalled.addListener(function(e) {
    "install" === e.reason && installed();
  });
  

  • Purpose: Ensures the installed() function is called upon installation.

Conclusion

• Network Activity: The code sets a cookie with the extension version, which is a common practice for version tracking.
• API Calls: Utilizes Chrome's runtime and cookies API to manage installation and message handling.
• No Malicious Indicators: The code does not exhibit any signs of malicious behavior such as unauthorized data exfiltration, obfuscation, or backdoors.

Malicious Probability

• Low: The analyzed code snippet shows no strong indications of malicious activity, focusing primarily on version tracking and message handling.