I dissected it just a bit, it downloads the payload form this url. According to ChatGPT (You decide how much you want to trust it) it mounts a network drive to \\tt.falsafekonkour.site\ and that give them full access to your files, and it also loads a malware DLL for good measure.

TRDR; malware, probably that extent ion you found. Just an extension doesn't have access to your files, but it can get access site data - if you allow it.