Chrome Web Store
38Versions
8Code reviewed

No malware found

In code review

Our reviewer read this extension’s code and found no malicious behaviour. Review the permissions below before installing.

What our analysis found

Screen Recorder and Screenshot Tool for Chrome, used by 1,000,000 people, showed no malicious code in Extension Auditor's review. Its permissions mean it can read and change data on all websites and can inject scripts into pages. It comes from a trusted publisher and was last updated in August 2026.

Every code path in the supplied bundle is consistent with the listed product::5820-5870 attaches chrome.debugger only to run Emulation.setDeviceMetricsOverride + Page.captureScreenshot and immediately detaches (the full-page screenshot command declared in the manifest), is a Vue button mounted into the ChatGPT composer whose only network call is axios GET of chrome.runtime.getURL(" ") and whose capture result leaves via chrome.runtime.sendMessage, and (scoped to *://) only hands the recorded blob to a file input on the publisher's own converter page. The bundled manifest matches the published CWS manifest exactly (same permissions, host_permissions and web_accessible_resources), there are zero eval() calls, zero fromCharCode, no APIs, and the only external destination anywhere is the first-party uninstall URL (:5888); grep for whatsapp/ returns nothing, so the WhatsApp-spamware label in the internal notes is unsupported by this code. Corroborating the ML flag: the permhash cluster is 89% malware-labelled, chrome-stats reports a 0.58 fingerprint match to mbibjdhgcjpfknofckoidcmheifjnepi, and the publisher is flagged malicious with a gmail contact address — but those are signals the model already consumes, and a 0.58 fingerprint match is exactly what shared Vue+axios+regenerator bundles produce. I withhold false_positive solely because this bundle is 4 of 19 JS files (~1 MB of the 9.58 MB scored, 10 of 179 files):, (document_start on <all_urls>, the source of the early-execution flag),,,, and the popup were not provided, so a delayed-malicious or analytics path in those files cannot be excluded.

Screen Recorder and Screenshot Tool for Chrome

Screen Recorder and Screenshot Tool for Chrome Chrome extension security report

ID: ijejnggjjphlenbhmjhhgcdpehhacaal

Supported Languages

🇧🇷Brazilian Portuguese
🇬🇧British English
🇪🇸Catalan
🇨🇳Chinese (Simplified)
🇹🇼Chinese (Traditional)
🇩🇰Danish
🇳🇱Dutch
🇺🇸English
🇫🇷French
🇩🇪German
🇮🇹Italian
🇯🇵Japanese
🇰🇷Korean
🇲🇽Latin American Spanish
🇳🇴Norwegian
🇵🇱Polish
🇵🇹Portuguese
🇸🇰Slovak
🇸🇮Slovenian
🇪🇸Spanish
🇹🇷Turkish
🇺🇸US English

Extension Info & Metadata

Status
Active
Version
4.3.9
Size
6.09 MB
Rating
4.7/5
Reviews
9,848
Users
1,000,000
Type
Extension
Updated
Aug 14, 2026
Category
Tools
Price
Free
Featured
Yes
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
This publisherTrack record
1extension
All still listed
Scanned by Extension Auditor — Low RiskDevelopers: embed this badge to link to this report.

Publisher Contextual Analysis

Trusted
Author
scrnli.com
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Website
Visit
Extensions
1
Active
1
Obsolete
0
Listed
1
Unlisted
0
Users
1,000,000

Screenshots & videos

Screenshot 2
Screenshot 3
Screenshot 4
Screenshot 5
Screenshot 6

Install growth

Item
Type
Severity
Description
scripting
Permission
Critical
This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
debugger
Permission
Critical
This permission grants the extension ability to debug and control other extensions and browser tabs. Rated Critical because it can access and modify other extensions' internal state, inject code, and access sensitive data from any tab.
*://*/*
Host
Critical
Broad host access — the extension can read/modify content on every website.
tabCapture
Permission
High
This permission captures content and audio from browser tabs. Rated High because it can record sensitive web content, capture form input, and monitor user interactions.
desktopCapture
Permission
High
This permission captures content from your desktop screens. Rated High because it can record sensitive information from any window, capture passwords, and monitor user activity.
offscreen
Permission
High
This permission creates hidden browser documents with full DOM access. Rated High because it can run background operations invisibly, potentially executing malicious code without user awareness.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 10% increase: Early script execution enables pre-emptive content manipulation
Broad Host Permissions
Risk Factor
High
This extension has broad host permissions allowing it to access many or all websites.
Broad Content Script Access
Risk Factor
High
This extension can inject scripts into any website.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
activeTab
Permission
Medium
This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions.
unlimitedStorage
Permission
Medium
This permission removes storage quota restrictions. Rated Medium because it can store large amounts of user data without limits, potentially impacting browser performance and storing extensive tracking data.
Early Content Script Execution
Risk Factor
Medium
This extension runs content scripts at document_start.

Each row lists a threat category the scanner evaluates. A checkmark means the review ran and found no matching issues in that category for this version.

  • Data Exfiltration

    Code review completed; no malicious patterns detected for this category.

  • Unauthorized Data Collection

    Code review completed; no malicious patterns detected for this category.

  • Network Interception

    Code review completed; no malicious patterns detected for this category.

  • Code Injection

    Code review completed; no malicious patterns detected for this category.

  • Credential Theft

    Code review completed; no malicious patterns detected for this category.

  • Obfuscation

    Code review completed; no malicious patterns detected for this category.

  • Tracking

    Code review completed; no malicious patterns detected for this category.

  • Privilege Escalation

    Code review completed; no malicious patterns detected for this category.

  • Phishing

    Code review completed; no malicious patterns detected for this category.

  • Remote Code Loading

    Code review completed; no malicious patterns detected for this category.

  • Other

    Code review completed; no malicious patterns detected for this category.

Gain full insight into all external connections.

Upgrade for full visibility.

About this extension

Screen recorder and screen capture tool, free and easy to use. Take screenshots or screen recordings, edit, download, and share.

Read the publisher’s full description

A screenshot and screen record tool with extended functionality that includes lots of features related to content creation. Scrnli also includes a screen recorder and video converter into multiple formats. The screen recorder works to create a video file with further opportunities to download or share it promptly. Easily cooperate with teammates or family by sharing video content to clearly explain materials and information. Record from your display monitor or webcam, save it and share with convenience using applications that combine as well a screenshot tool and video formats converter. Video file converter, therefore, allows changing video format to run the same video on other devices. The most common formats are available in the Scrnli video converter. Do as written: record the screen, then save it to a device for later watching or share it with friends. As well, as the option to convert files to various formats to open them on other devices. The creation of screen capture is as easy as it ever could be. Choose from the full-page or partial area and take it in a click. Then you can fully customize it by adding text, drawing lines, arrows, and shapes. Instantly share the files by a link, save them, or print them to get paper materials. The main advantage of the Scrnli Tool is that features for content creation are gathered in one place which is reached by a single click in a browser. It's an advanced service for every day working with screenshots, recording, and video file converting that can be shared, printed, or saved fast, easily, and with quality. Scrnli tool for making a full page or partial capture with further editing, download, or text adding. The #1 app to make a full webpage capture or just any part of it with an opportunity to edit, save, and download screenshots to your PC. The app is launched from a browser that saves your time. Simply click the extension icon to choose from options whole page capture or a selected part. Lots of features at your disposal allow you to: - edit and reset changes; - make one step back/forward; - add text and graphic elements like a pointer, arrow, circle, and others. The useful and friendly design of Scrnli was made to reach the required screens quickly, so you can share them with colleagues or friends during work. To avoid long descriptions in chatting just take a screenshot and send it to the address. You can use the service of any website absolutely for free using our app.

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs
48
IPv4
2

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

Gain full insight into all external connections.

Upgrade for full visibility.

Version
Size
Verdict
Findings
Permhash
4.3.9
Latest
6.09 MBNo malware found0
367cd0da46cd2df382e6e6f7a69381aa5dce826f12c3fd0f61d62a98ef10fd14
4.3.8
6.09 MBNo malware found0
367cd0da46cd2df382e6e6f7a69381aa5dce826f12c3fd0f61d62a98ef10fd14
4.3.7
6.11 MBNo malware found0
367cd0da46cd2df382e6e6f7a69381aa5dce826f12c3fd0f61d62a98ef10fd14
4.3.6
6.11 MBNo malware found0
367cd0da46cd2df382e6e6f7a69381aa5dce826f12c3fd0f61d62a98ef10fd14
4.3.5
6.10 MBNo malware found0
367cd0da46cd2df382e6e6f7a69381aa5dce826f12c3fd0f61d62a98ef10fd14
4.3.4
6.08 MBNo malware found0
367cd0da46cd2df382e6e6f7a69381aa5dce826f12c3fd0f61d62a98ef10fd14
4.3.3
6.09 MBNo malware found0
367cd0da46cd2df382e6e6f7a69381aa5dce826f12c3fd0f61d62a98ef10fd14
4.2.6
3.55 MBCaution—
367cd0da46cd2df382e6e6f7a69381aa5dce826f12c3fd0f61d62a98ef10fd14
4.2.4
3.15 MBCaution—
367cd0da46cd2df382e6e6f7a69381aa5dce826f12c3fd0f61d62a98ef10fd14
4.2.3
3.16 MBCaution—
367cd0da46cd2df382e6e6f7a69381aa5dce826f12c3fd0f61d62a98ef10fd14
Showing 1 to 10 of 40 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.