No malware found
In code review (v1.106.102)
Our reviewer read version 1.106.102 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.
68 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
What our analysis found
Opus Web Recorder, used by 2,000 people, showed no malicious code in Extension Auditor's review. Its permissions mean it can read and change data on all websites and allows unsafe code evaluation. It comes from a publisher with 5 extensions and was last updated in March 2024.
Analyst notes
Opus Web Recorder is a legitimate B2B workflow documentation tool by Epilogue Systems ([domain withheld]). All permissions are directly exercised for the core recording function: desktopCapture and tabs capture screenshots and page context during user-initiated sessions, <all_urls> content scripts monitor user interactions on whichever pages the user chooses to document, and are used only for debug diagnostics. Every API call (screenshot upload, HTML capture, step events, auth token management) resolves to publisher-owned subdomains (*.[domain withheld], *.[domain withheld], *.[domain withheld]; [domain withheld] in prod. is likely a brand of the same company). The CWS-disclosed data categories (PII, authentication info, web history, user activity, website content) match the extension's actual behavior exactly. The ML score of 1.00 and the 100% permhash cluster are systematic false positives: the permission set is intrinsically high-risk for any recorder, and the 29 cluster versions most likely represent the same extension across its 6-year version history repeatedly flagged by the same model. No obfuscation, hidden payloads, third-party exfiltration, or malicious code patterns were found.
Opus Web Recorder Chrome extension security report
ID: kgjcefhnfhpoodnfgndabophdflbngej
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- opuseps
- Privacy
- Privacy Policy
- Country
- US
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- Yes
- Mailbox exists
- Yes
- Address
- 259 North Radnor Chester Road Radnor, PA 19087 US
- Website
- Visit
Screenshots & videos
Install growth
68 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
About this extension
Document websites within chrome
Read the publisher’s full description
Create documentation for your Web Application by simply clicking through your workflows. Review your steps captured prior to editing your new document. The Opus Web Recorder requires several Chrome permissions in order to accurately capture user interactions with a web application. Please review these permissions carefully as well as our Privacy Policy: https://www.epiloguesystems.com/legal/terms-conditions Requested Permissions: tabs Required to access to the url and title properties of your tabs during recording. The chrome.tabsTab to get tab information when use chrome.tabs methods activeTab Allows temporary access to the currently active tab when the user invokes the extension. We require this to record the current tab when starting a recording. <all_urls> Grants the extension access to all hosts. This permission is required for Opus to seamlessly record any chrome tab that a user may switch to as part of recording their application workflow, including applications with embedded iframes that have a different origin than the host site. storage Allows Opus to temporarily store information about your recording such as the elements clicked on and the images captured for each action. unlimitedStorage This provides storage for HTML data captured during recording to accurately detect what control a user interacted with and to better identify web page uniqueness within an application workflow. alarms This allows for timed actions within the extension for uploading recording data, logs, and checking for pending recordings. desktopCapture This permission is required to capture an image of your screen in situations where the normal tabCapture method cannot return an accurate image such as in the case of native browser dialogs. notifications Required to notify users when they have recording pending and as steps are captured during a recording session. system.memory When debug logging is enabled from the extension settings, we use this permission to gather system memory information for Epilogue Support. system.cpu When debug logging is enabled from the extension settings, we use this permission to gather system cpu information for Epilogue Support. system.display When debug logging is enabled from the extension settings, we use this permission to gather information about your display for Epilogue Support.
User reviews
Extension files
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
68 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
Code Diff
Compare extension code between any two versions.
0 changed files detected
No comparable text files found between these versions.
Gain full insight into all external connections.
Upgrade for full visibility.