Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: HP Smart Print

CRITICAL RISKRemoved from Chrome Web Store

HP Smart Print

ID: gmpaiomihcebnclahoknbodeiaiohcdi

Could be malicious

Extension Info & Metadata

Status

Removed

Version

2.7.0.238

Size

0.39 MB

Rating

3.4/5

Reviews

430

Users

660,024

Type

Extension

Updated

Nov 19, 2014

Publisher Contextual Analysis

Author: HP Smart PrintView Profile

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

660,024

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Save ink. Save paper. Print only the web content you need.

Save ink and paper by using the Smart Print application. Check out the before and after scenario, and you will find that Smart Print allows you to remove headers/footers, ads, etc. and leaves you with the content you want to print. Print Selection Only want to print a particular section of a website and not the whole thing? HP Smart Print makes it simple by selecting the area of the website it thinks you want to print. You just need to hit print! Edit Selection Did HP Smart Print miss something you wanted to print? Or did it grab too much? HP Smart Print provides a couple of different ways to edit the selection 1. Resize the selected area by dragging the control points, or 2. Highlight an area to add/remove using your mouse

User Growth

No data available

No user growth data available for this extension

Rating Count

No data available

No rating count data available for this extension

Average Rating

No data available

No rating data available for this extension

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High1

Medium3

Low2

Versions scanned

Showing 1 of 1 scanned version with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
2.7.0.238 Code review	6

Extension Version	Code Review Findings
2.7.0.238	6

Files with findings

2 distinct paths — top paths by unique finding count:

espresso.js5
loadBookmarklet.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Data Exfiltration	high	espresso.js (line 8155)	The sendData() function uses the easyXDM library to establish a cross-domain RPC channel and POST collected user data to http://spdata.hplcloud.net/SmartPrint_DataCollector/fileUpload. easyXDM is specifically designed…	2.7.0.238
2	Code Injection	medium	loadBookmarklet.js (line 111)	The extension programmatically injects three extension scripts (configure.js, localizedStrings.js, and the 9,800+ line espresso.js) directly into the <head> of every active tab's DOM via dynamically created <script> e…	2.7.0.238
3	Code Injection	medium	espresso.js (line 8221)	The loadHTML() function fetches an arbitrary URL via XMLHttpRequest and sets the raw xhr.responseText directly as innerHTML on a DOM element before injecting it into the active page with target.innerHTML. Assigning un…	2.7.0.238
4	Tracking	medium	espresso.js (line 2582)	The postData() function collects the current page URL (document.URL), full user-agent string, browser language, behavioral timing metrics, and XPath paths of selected/deselected DOM nodes. This constitutes URL-level b…	2.7.0.238
5	Code Injection	low	espresso.js (line 3297)	A new <script> element is dynamically created and its innerHTML is set to a JavaScript code string before being injected into the active page's <head>. While the injected string here is benign, writing JavaScript code…	2.7.0.238
6	Obfuscation	low	espresso.js (line 2619)	The collected payload (containing the page URL, user agent, and XPath selections) is run through a custom-implemented base64 encoder followed by encodeURIComponent before transmission. Embedding a manual base64 implem…	2.7.0.238

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


threedubmedia.com	-	http://threedubmedia.com
threedubmedia.com	/code/license	http://threedubmedia.com/code/license
jquery.com	-	http://jquery.com/
jquery.org	/license	http://jquery.org/license
sizzlejs.com	-	http://sizzlejs.com/
www.json.org	/json2.js	http://www.JSON.org/json2.js
www.json.org	/js.html	http://www.JSON.org/js.html
javascript.crockford.com	/jsmin.html	http://javascript.crockford.com/jsmin.html
clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx
h30434.www3.hp.com	/t5/HP-Print-Apps-Mobile-and-Web/bd-p/Webprint	http://h30434.www3.hp.com/t5/HP-Print-Apps-Mobile-and-Web/bd-p/Webprint

Showing 1 to 10 of 30 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


2.2.0.237	IPv4	-
2.7.0.238	IPv4	-
2.4.15.118	IPv4	-

2.8 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

coull

Tounkara Joi·9 Sept 2020

Great in theory, useless in reality.

Sandra Underwood·2 Sept 2020

not working

1234nydia·16 Aug 2020

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

HP Smart Print

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 1 Version6

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating