Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Screence screen recorder

CRITICAL RISKRemoved from Chrome Web Store

Screence screen recorder

ID: flmihfcdcgigpfcfjpdcniidbfnffdcf

Could be malicious

Supported Languages

🇧🇩Bengali

🇧🇷Brazilian Portuguese

🇬🇧British English

🇧🇬Bulgarian

🇪🇸Catalan

🇨🇳Chinese (Simplified)

🇹🇼Chinese (Traditional)

🇭🇷Croatian

🇨🇿Czech

🇩🇰Danish

🇳🇱Dutch

🇺🇸English

🇪🇪Estonian

🇵🇭Filipino

🇫🇮Finnish

🇫🇷French

🇩🇪German

🇬🇷Greek

🇮🇳Gujarati

🇮🇳Hindi

🇭🇺Hungarian

🇮🇩Indonesian

🇮🇹Italian

🇯🇵Japanese

🇰🇷Korean

🇲🇽Latin American Spanish

🇱🇻Latvian

🇱🇹Lithuanian

🇲🇾Malay

🇮🇳Malayalam

🇮🇳Marathi

🇳🇴Norwegian

🇵🇱Polish

🇵🇹Portuguese

🇷🇴Romanian

🇷🇺Russian

🇷🇸Serbian

🇸🇰Slovak

🇸🇮Slovenian

🇪🇸Spanish

🇸🇪Swedish

🇮🇳Tamil

🇮🇳Telugu

🇹🇭Thai

🇹🇷Turkish

🇺🇦Ukrainian

🇺🇸US English

🇻🇳Vietnamese

Extension Info & Metadata

Status

Removed

Version

2.1.4

Size

9.04 MB

Rating

4.4/5

Reviews

Users

1,461,055

Type

Extension

Updated

Dec 4, 2022

Publisher Contextual Analysis

Trusted

Author: HicklesolTView Profile
Privacy: Privacy Policy
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

1,461,055

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Free and unlimited video screen recorder. Record desktop, single tab, or webcam. Narriate with microphone

"Screence" is a free and unlimited video screen recorder. It is super easy software to use and completely free!📲 Main features: 🖇Mix webcam, mic, desktop streams 🖇WEBM + MP4 export 🖇Record a tab or desktop 🖇Webcam video recording Be aware that MP4 exports can take a lot of time - so please be patient. Also, you can convert WebM to MP4 with desktop software.⭐️

User Growth

Showing data from Jan 01, 2022 to Dec 31, 2022

Versions

+34.3%(+373,177 users)

Compared to 3 months ago

4 versions released in this period

Rating Count

Total: 12 ratings

Average Rating

Current: 4.08 / 5.0-0.47

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High3

Medium3

Low1

Versions scanned

Showing 2 of 5 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
2.1.1 Code review	2
2.1.0 Code review	5

Extension Version	Code Review Findings
2.1.1	2
2.1.0	5

Files with findings

3 distinct paths — top paths by unique finding count:

background.js5
js/ffmpeg-core.worker.js1
manifest.json1

S.No.	Category	Severity	File	Summary	Found in Version
1	Code Injection	high	background.js (line 1)	The `stopRecording()` function calls `chrome.tabs.query({})` with no filter to enumerate ALL open browser tabs, then executes a code string on each one via `chrome.tabs.executeScript`. While the injected code snippet …	2.1.0
2	Remote Code Loading	high	background.js (line 348)	The background page initializes Google Analytics, sends a pageview, and then dynamically loads `analytics.js` from a remote server. Loading executable code from the network into an extension background context is a st…	2.1.1
3	Tracking	high	background.js (line 2)	The background page silently loads Google Analytics (UA-206071497-1) from an external server by dynamically injecting a script tag. Critically, it calls `ga("set","checkProtocolTask",null)` which deliberately disables…	2.1.0
4	Code Injection	medium	manifest.json (line 3)	The manifest Content Security Policy explicitly includes `'unsafe-eval'`, which permits JavaScript evaluation via `eval()`, `new Function()`, `setTimeout(codeString)`, and similar dynamic execution vectors. Chrome's o…	2.1.0
5	Code Injection	medium	background.js (line 1)	A second function `removeControls()` independently iterates over ALL open tabs and executes injected code strings via `chrome.tabs.executeScript`, reinforcing the pattern seen in `stopRecording()`. The extension syste…	2.1.0
6	Unauthorized Data Collection	medium	background.js (line 317)	On installation, the extension immediately enumerates media devices and requests microphone and then camera access before any recording action is started. That is an unnecessary upfront permission grab for a recorder …	2.1.1
7	Code Injection	low	js/ffmpeg-core.worker.js (line 113)	The ffmpeg worker script defines a `globalEval` function that calls `eval.call(null, x)` at global scope—equivalent to an unrestricted `eval`. While this code path is gated behind a Node.js environment check and is pa…	2.1.0

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

157

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


www.google-analytics.com	/analytics.js	https://www.google-analytics.com/analytics.js
jqueryui.com	-	http://jqueryui.com
jqueryui.com	/themeroller/	http://jqueryui.com/themeroller/?bgShadowXPos=&bgOverlayXPos=&bgErrorXPos=&bgHighlightXPos=&bgContentXPos=&bgHeaderXPos=&bgActiveXPos=&bgHoverXPos=&bgDefaultXPos=&bgShadowYPos=&bgOverlayYPos=&bgErrorYPos=&bgHighlightYPos=&bgContentYPos=&bgHeaderYPos=&bgActiveYPos=&bgHoverYPos=&bgDefaultYPos=&bgShadowRepeat=&bgOverlayRepeat=&bgErrorRepeat=&bgHighlightRepeat=&bgContentRepeat=&bgHeaderRepeat=&bgActiveRepeat=&bgHoverRepeat=&bgDefaultRepeat=&iconsHover=url(%22images%2Fui-icons_555555_256x240.png%22
www.w3.org	/2000/svg	http://www.w3.org/2000/svg
unpkg.com	/@ffmpeg/core@	https://unpkg.com/@ffmpeg/core@
localhost	/ffmpeg-core.js	http://localhost:3000/ffmpeg-core.js
localhost	/dist/ffmpeg.dev.js	http://localhost:3000/dist/ffmpeg.dev.js
github.com	/ffmpegwasm/ffmpeg.wasm.git	https://github.com/ffmpegwasm/ffmpeg.wasm.git
github.com	/ffmpegwasm/ffmpeg.wasm/issues	https://github.com/ffmpegwasm/ffmpeg.wasm/issues
github.com	/ffmpegwasm/ffmpeg.wasm	https://github.com/ffmpegwasm/ffmpeg.wasm#readme

Showing 1 to 10 of 160 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


0.0.0.0	IPv4	-
0.0.0.1	IPv4	-
2.3.3.3	IPv4	-
2.3.3.1	IPv4	-

4.5 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

i did record a video over one hour and after pressing convert idk what happened i think it crashed or idk i been waiting too long, probably its ok only for short clips?..

Rogelio Garcia·21 Apr 2023

Transcoding never finished

alekss·9 Mar 2023

I use it for taking screenshots, recording video from the screen and camera, as well as for various other purposes. In my opinion, this is the best plugin for such tasks. Recommend.

Irian Paltrow

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Screence screen recorder

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating