Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: CapCut

CRITICAL RISKRemoved from Chrome Web Store

CapCut

ID: jajamkpmjlfaoncndpleadhjeldohlbo

Could be malicious

Supported Languages

🇧🇩Bengali

🇧🇬Bulgarian

🇪🇸Catalan

🇨🇳Chinese (Simplified)

🇹🇼Chinese (Traditional)

🇭🇷Croatian

🇨🇿Czech

🇩🇰Danish

🇳🇱Dutch

🇺🇸English

🇪🇪Estonian

🇵🇭Filipino

🇫🇮Finnish

🇫🇷French

🇩🇪German

🇬🇷Greek

🇮🇳Hindi

🇭🇺Hungarian

🇮🇩Indonesian

🇮🇹Italian

🇯🇵Japanese

🇰🇷Korean

🇱🇻Latvian

🇱🇹Lithuanian

🇲🇾Malay

🇮🇳Malayalam

🇳🇴Norwegian

🇵🇱Polish

🇵🇹Portuguese

🇷🇴Romanian

🇷🇺Russian

🇷🇸Serbian

🇸🇰Slovak

🇸🇮Slovenian

🇪🇸Spanish

🇸🇪Swedish

🇮🇳Tamil

🇹🇭Thai

🇹🇷Turkish

🇺🇦Ukrainian

🇻🇳Vietnamese

Extension Info & Metadata

Status

Removed

Version

1.1

Size

0.03 MB

Rating

3.0/5

Reviews

Users

18,584

Type

Extension

Updated

Nov 28, 2022

Publisher Contextual Analysis

Trusted

Author: Great ExtensionsView Profile
Privacy: Privacy Policy
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

61,803

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

CapCut Video Editor, easy to use for Chrome.

CapCut for Chrome is a powerful extensions to edit any video.

User Growth

Showing data from Jul 21, 2022 to Jan 27, 2023

Versions

+132.3%(+10,584 users)

Compared to 3 months ago

2 versions released in this period

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High5

Medium3

Low0

Versions scanned

Showing 1 of 2 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.0 Code review	8

Extension Version	Code Review Findings
1.0	8

Files with findings

2 distinct paths — top paths by unique finding count:

cap.js7
jahy.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Network Interception	high	jahy.js (line 5)	Content script injected into ALL URLs (<all_urls>) at document_start hijacks every link click on every page, calling stopPropagation/preventDefault and rerouting the URL through the extension's background to be opened…	1.0
2	Network Interception	high	cap.js (line 183)	Installs a declarativeNetRequest session rule that overrides the User-Agent header on every request (urlFilter "*", main_frame and sub_frame) made from a target tab, impersonating a Fire TV device running an outdated …	1.0
3	Privilege Escalation	high	cap.js (line 792)	Forcibly closes an arbitrary tab and opens https://www.google.com in its place. Programmatic tab closure followed by replacement navigation is a tab-hijacking primitive — the user's current page is destroyed and repla…	1.0
4	Remote Code Loading	high	cap.js (line 836)	When the toolbar action is clicked the extension opens a bit.ly shortened URL, hiding the actual destination from review. The URL is then loaded inside a popup-type window (see accolled/clowne_ries) where the spoofed …	1.0
5	Unauthorized Data Collection	high	cap.js (line 413)	Calls chrome.tabCapture.capture with both audio:true and video:true to capture the live media of an arbitrary tab and pipe it through an AudioContext/MediaStreamSource. The manifest does not declare the tabCapture per…	1.0
6	Obfuscation	medium	cap.js (line 1)	The script is filled with semantically meaningless identifier names (sokol, jinskol, mokij, jahy, kalashnikov, mahachkala, kizliurt, lysimac_hus, choult_ries, ravigoTe, etc.), unreachable junk functions (needle_bush, …	1.0
7	Tracking	medium	cap.js (line 37)	Builds a redirect URL by appending the user's UI language as a query parameter and opens it in a controlled popup window whose tab id is then registered for User-Agent rewriting via sewrou_nd(). This combination — lan…	1.0
8	Tracking	medium	cap.js (line 1)	Selects a record from an `aspotikalo` list keyed by `ip` and persists `{ip, location.country_name}` in chrome.storage.local under key `lord`. The data shape (ip + country_name) implies the extension carries or fetches…	1.0

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


www.google.com	-	https://www.google.com
bit.ly	/3AUOzTz	https://bit.ly/3AUOzTz
wmtntk.com	-	https://wmtntk.com/
www.capcutapp.com	-	https://www.CapCutApp.com/
*	/**	http:///*
*	/**	https:///*
clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

3.2 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

Genial. It's work and looks nice

Ahsan Hoseen·24 Jan 2023

I like it

Kelsey Carter·23 Jan 2023

this did not work dont waste your time

Nugget God·20 Jan 2023

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

CapCut

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 2 Versions8

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating