Top Risks

• THREAT FEED: extension ID independently confirmed malicious by TPCI chrome-mal-ids — My Search Easy [browser-hijack] + malext.io malicious_extension_sentry (+2.5, capped).
• Privacy policy points to Google's generic policy — not scoped to this extension; data collection and 3rd-party sharing admitted without context.
• Google brand impersonation: description claims 'quick access to Google' but developer is unverified third party mysearcheasy.com.
• Startup page override redirects browser to mysearcheasy.com on every launch — persistent traffic capture mechanism.
• Install URL hijack opens mysearcheasy.com/sucess.htm on install — classic monetization/tracking signal.

Evidence

• startup_page_override manifest chrome_settings_overrides.startup_pages set to https://mysearcheasy.com/start — captures all new browser sessions.
• install_url_hijack manifest install_url_hijack=true targeting https://mysearcheasy.com/sucess.htm; monetization/tracking on install.
• brand_impersonation store brand_mention.is_impersonation=true for 'google'; developer is unverified third party, not Google.
• generic_privacy_policy store Privacy policy URL is Google's own account policy; scope_extension=false, data_collection=true, third_party_sharing=true.
• stale_extension store 17 months since last update, only 4 installs, 0 ratings — minimal accountability or maintenance.
• no_verified_publisher store verified_publisher=false, is_featured_by_google=false; no accountability signal from Google.
• description_mismatch store Description 'Obtenga acceso rápido a Google' implies Google affiliation; extension is unrelated third-party startup hijacker.
• js_external_host crx External JS host: mysearcheasy.com only; no bad-host hits, but all logic is remote.
• threat_feed_membership api Extension ID listed by TPCI chrome-mal-ids — My Search Easy [browser-hijack] + malext.io malicious_extension_sentry; score 6.91 -> 9.41 (+2.5 cap 2.5).

Permissions Breakdown

• chrome_settings_overrides.startup_pages medium Forces browser startup to mysearcheasy.com; hijacks default start page behavior.

Pillar Scores

Bookkeeping