Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Enable Copy

CRITICAL RISKRemoved from Chrome Web Store

Enable Copy

ID: lmnganadkecefnhncokdlaohlkneihio

Could be malicious

Supported Languages

🇨🇳Chinese (Simplified)

Extension Info & Metadata

Status

Removed

Version

6.1

Size

0.02 MB

Rating

4.3/5

Reviews

593

Users

510,762

Type

Extension

Updated

Dec 27, 2023

Publisher Contextual Analysis

Trusted

Author: hurbarohView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

523,225

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Allow selecting, copying, pasting and right clicking in some restricted pages.

遇到限制复制粘贴和右键的网页是不是很头痛？安装这个插件后，点下插件按钮就能解决了～提示： 1. 需要解除限制时，点击Enable Copy图标，此时图标会从浅灰色变为深灰色，当前网页和该网站下的所有网页都被解除限制。 2. 再次点击图标会变回浅灰色，以后再打开该网站的网页时，将不会被自动解除限制。 *修复错误并添加分享 LinkedIn、Facebook、Twitter

User Growth

Showing data from Jan 01, 2022 to Dec 31, 2022

Versions

+0.73%(+3,718 users)

Compared to 3 months ago

2 versions released in this period

Rating Count

Total: 583 ratings

Average Rating

Current: 4.38 / 5.0-0.08

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical5

High2

Medium0

Low1

Versions scanned

Showing 1 of 5 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
3.0 Code review	8

Extension Version	Code Review Findings
3.0	8

Files with findings

3 distinct paths — top paths by unique finding count:

background.js4
content.js3
enable.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Code Injection	critical	content.js (line 1)	When triggered by a `hello` message from the background, the content script injects a `<script>` tag whose `src` points to `chrome-extension://clecplihdjnohlfophodnfmpdjicpopd/enable.js` — a hardcoded, different exten…	3.0
2	Data Exfiltration	critical	background.js (line 1)	The `Statistics` class silently hooks `chrome.webRequest.onCompleted` for ALL URLs and ALL main-frame navigations. For every page load it records the full target URL, referrer URL, a persistent user UUID, timestamps, …	3.0
3	Data Exfiltration	critical	background.js (line 1)	The background worker initialises Firebase using hardcoded credentials for the `zoocorder` project — a brand entirely unrelated to this 'Enable Copy' extension. When a `post` command is received from content.js, every…	3.0
4	Obfuscation	critical	background.js (line 1)	Browsing history payloads are AES-GCM encrypted before transmission using a hardcoded symmetric key (`8WSaSuhdXQl20xxb`) passed as a constructor argument alongside hardcoded API key `INVfX0ZCyi1QP7d1` and secret `ewpX…	3.0
5	Unauthorized Data Collection	critical	content.js (line 1)	On every Zoom webinar registration page (URLs containing `/register`), the content script scrapes the full webinar topic, description, scheduled time, timezone, registration URL, speaker names, titles, bios, and speak…	3.0
6	Phishing	high	content.js (line 1)	On Zoom webinar registration pages, the extension injects unsolicited promotional HTML elements advertising the commercial 'Zoomcorder' service, including headings, images, checkboxes, and links pointing to `https://z…	3.0
7	Tracking	high	background.js (line 1)	A UUID is generated and persistently stored in `chrome.storage.sync` (which syncs across all devices signed into the same Chrome profile). This UUID is used as the `userId` field in every browsing-history record sent …	3.0
8	Unauthorized Data Collection	low	enable.js (line 1)	For specific targeted domains, the extension sets a cookie `is_scan=1` with an expiry date of year 9999, effectively a permanent cookie. While presented as a bypass for content-restriction detection, this modifies the…	3.0

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


github.com	/uuidjs/uuid	https://github.com/uuidjs/uuid#getrandomvalues-not-supported
www.facebook.com	-	https://www.facebook.com
www.facebook.com	/ajax/bootloader-endpoint/	https://www.facebook.com/ajax/bootloader-endpoint/?modules=AdsCanvasComposerDialog.react
www.facebook.com	/api/graphql	https://www.facebook.com/api/graphql
twitter.com	/intent/tweet	https://twitter.com/intent/tweet?text=${encodeURIComponent(e.selectionText
linkedin.com	/feed	https://linkedin.com/feed?share=${encodeURIComponent(e.selectionText
developer.mozilla.org	/docs/Mozilla/Add-ons/WebExtensions/API/runtime/onMessage	https://developer.mozilla.org/docs/Mozilla/Add-ons/WebExtensions/API/runtime/onMessage
www.w3.org	/1999/02/22-rdf-syntax-ns	http://www.w3.org/1999/02/22-rdf-syntax-ns#
ns.adobe.com	/xap/1.0/	http://ns.adobe.com/xap/1.0/
ns.adobe.com	/xap/1.0/mm/	http://ns.adobe.com/xap/1.0/mm/

Showing 1 to 10 of 20 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

2.7 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

希望能把新增加的分享功能做个开关选项或者自定义功能，有的人不是很需要，也强行开启的话，影响界面的整洁美观度，谢谢~

Zai Mao (猫仔)·3 Jan 2024

希望能把新增加的分享功能做个��关选项或者自定义功能，有的人不��很需要，也��行开启的话，影��界面的整洁美观度��谢谢~

Zai Mao (猫仔)·3 Jan 2024

希望能把新增加的分享功能做个��关选项或者自定义功能，有的人不��很需要，也强行开启的话，影响界面的整洁美观度��谢谢~

Zai Mao (猫仔)·3 Jan 2024

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Enable Copy

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 5 Versions8

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating