Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Docsumo Free OCR Software

CRITICAL RISKRemoved from Chrome Web Store

Docsumo Free OCR Software

ID: ihmmlfacoffajllfpdfkdikgmoogbnph

Could be malicious

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status

Removed

Version

0.2.1

Size

0.03 MB

Rating

4.0/5

Reviews

153

Users

50,000

Type

Extension

Updated

Jun 3, 2024

Publisher Contextual Analysis

Trusted

Author: https://docsumo.comView Profile
Privacy: Privacy Policy
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

50,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Screenshot any webpage or a portion of a webpage and immediately convert it into editable text.

Using intelligent OCR technology, Docsumo helps you scan, extract, and analyze information from PDFs or images on a website allowing you to process data in 3 easy steps:- - Press the extension button to select area on page - Review and edit the extracted text - Copy and share text from the image Features - Extract data from images and screenshots - Translate captured data automatically - Review, edit & copy extracted data in real-time IMPORTANT Please reload the page after installing the extensions. Fair Use Only We believe that the tool should be used for fair purposes only and that’s why Docsumo’s screenshot reader limits the number of screenshots to 15 screenshots per day in order to avoid getting used for malicious purposes. We have no intention to offer a premium version of this tool with an extended limit as of now.

User Growth

Showing data from Jan 01, 2022 to Dec 31, 2022

Versions

No change in user count

Compared to 3 months ago

2 versions released in this period

Rating Count

Total: 79 ratings

Average Rating

Current: 4.58 / 5.0-0.10

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High0

Medium1

Low3

Versions scanned

Showing 1 of 10 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
0.2.1 Code review	4

Extension Version	Code Review Findings
0.2.1	4

Files with findings

3 distinct paths — top paths by unique finding count:

background.js2
content-script.js1
manifest.json1

S.No.	Category	Severity	File	Summary	Found in Version
1	Data Exfiltration	medium	content-script.js (line 389)	Screenshots of arbitrary webpages (including potentially sensitive content like banking, healthcare, or internal intranet pages the user happens to have open) are uploaded to a third-party endpoint at ocrserver.docsum…	0.2.1
2	Other	low	manifest.json (line 42)	The web_accessible_resources declaration includes the pattern `:///*`, which is not a valid extension-packaged resource path (extension resources are relative paths). This appears to be a misconfiguration rather tha…	0.2.1
3	Privilege Escalation	low	background.js (line 95)	The background service worker accepts runtime messages without validating the sender, then uses the message payload to drive chrome.scripting.executeScript injection into the target tab via registerContentScript. Comb…	0.2.1
4	Tracking	low	background.js (line 168)	On install, a persistent random userId is generated and embedded in the uninstall URL so that when the user removes the extension, their browser is forced to open a docsumo.com survey page with that userId in the frag…	0.2.1

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


docsumo.com	/surveyform	https://docsumo.com/surveyform#userid=
fonts.googleapis.com	-	https://fonts.googleapis.com
fonts.gstatic.com	-	https://fonts.gstatic.com
fonts.googleapis.com	/css2	https://fonts.googleapis.com/css2?family=Inter:[email protected]&display=swap
fonts.googleapis.com	/css2	https://fonts.googleapis.com/css2?family=Inter:[email protected]
clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx
fonts.googleapis.com;	-	https://fonts.googleapis.com;
fonts.gstatic.com;	-	https://fonts.gstatic.com;
www.docsumo.com	/free-tools/ocr-chrome-extension	https://www.docsumo.com/free-tools/ocr-chrome-extension
www.youtube.com	/watch	https://www.youtube.com/watch?v=uCu5sCsQ6qs&t=3s

Showing 1 to 10 of 20 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

3.1 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

Well it's free. Yay. Doesn't format the text from the pdf but it does give the ability to copy text from locked pdfs or documents with which selecting text to copy then pasting it into a different document isn't otherwise possible.

Teddy·4 Dec 2024

doesn't work.

liu daniel·18 Nov 2024

15 hak verip biten bir uygulamalı. Hakların bitti mi çalışmayan bir uygulama.

McMaster

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Docsumo Free OCR Software

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 10 Versions4

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating