Is "Fabasoft Folio 2017" on Chrome Web Store Safe to Install?

[email protected] · chrome · v17.4.7.119

Fabasoft Folio 2017 bietet Lösungen für Enterprise Content Management, Zusammenarbeit, agile Geschäftsprozesse, Compliance-Management und Information-Governance. Diese Applikation installiert die Webbrowser-Erweiterung „Fabasoft Folio“ im Microsoft Edge-Browser für den Fabasoft Folio Client, um folgende zusätzliche Funktionen zu ermöglichen: • Importieren von Ordnern und Dateien (einschließlich großer Strukturen und Dateien) • Öffnen und Bearbeiten von Dokumenten auf Ihrem Endgerät aus Fabasoft Folio mit lokalen Anwendungen (z. B.: Microsoft Office, LibreOffice) • Synchronisieren von Dokumenten aus Fabasoft Folio mit Ihrem Endgerät zur offline Verwendung • Kopieren und Einfügen von Dokumenten aus Fabasoft Folio in einen lokalen Ordner • Kopieren und Einfügen von Links aus Fabasoft Folio in Dokumente und E-Mails • Verwalten der WebDAV-Verbindung zu Fabasoft Folio

Risk Assessment

Analyzed
61.75
out of 100
MEDIUM

29 security findings detected across all analyzers

Chrome extension requesting 3 permissions

Severity Breakdown

0
Critical
9
High
20
Medium
0
Low
0
Info

Finding Categories

9
Malware Signatures
1
Network
17
IoC Indicators

YARA Rules Matched

5 rules(9 hits)
postinstall file manipulation postinstall system command postinstall crypto operations postinstall network communication postinstall file download

Requested Permissions

3 permissions
nativeMessaging

Exchange messages with programs outside the browser

Dangerous
<all_urls>

Access and modify data on every website you visit

Dangerous
cookies

Read and modify cookies on all sites

High

About This Extension

Fabasoft Folio 2017 bietet Lösungen für Enterprise Content Management, Zusammenarbeit, agile Geschäftsprozesse, Compliance-Management und Information-Governance. Diese Applikation installiert die Webbrowser-Erweiterung „Fabasoft Folio“ im Microsoft Edge-Browser für den Fabasoft Folio Client, um folgende zusätzliche Funktionen zu ermöglichen: • Importieren von Ordnern und Dateien (einschließlich großer Strukturen und Dateien) • Öffnen und Bearbeiten von Dokumenten auf Ihrem Endgerät aus Fabasoft Folio mit lokalen Anwendungen (z. B.: Microsoft Office, LibreOffice) • Synchronisieren von Dokumenten aus Fabasoft Folio mit Ihrem Endgerät zur offline Verwendung • Kopieren und Einfügen von Dokumenten aus Fabasoft Folio in einen lokalen Ordner • Kopieren und Einfügen von Links aus Fabasoft Folio in Dokumente und E-Mails • Verwalten der WebDAV-Verbindung zu Fabasoft Folio

Detailed Findings

12 total

YARA Rule Matches

5 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

URLs
3
IP Addresses
1
Domains
12
Strings
17

All Indicators · 17

IP
detected IP: 17.4.7.119

XIOC detected IP: 17.4.7.119

extracted_from_files

URL
detected URL: https://www.fabasoft.com

XIOC detected URL: https://www.fabasoft.com

extracted_from_files

URL
detected URL: https://help.folio.fabasoft.com/

XIOC detected URL: https://help.folio.fabasoft.com/

extracted_from_files

Domain
detected Domain: help.folio.fabasoft.com

XIOC detected Domain: help.folio.fabasoft.com

extracted_from_files

Domain
detected Domain: ea.pm

XIOC detected Domain: ea.pm

extracted_from_files

Domain
detected Domain: contentport.sender.tab.id

XIOC detected Domain: contentport.sender.tab.id

extracted_from_files

Domain
detected Domain: cookie.name

XIOC detected Domain: cookie.name

extracted_from_files

Domain
detected Domain: xmlhttp.open

XIOC detected Domain: xmlhttp.open

extracted_from_files

Other
detected Email: [email protected]

XIOC detected Email: [email protected]

extracted_from_files

URL
detected URL: https://clients2.google.com/service/update2/crx

XIOC detected URL: https://clients2.google.com/service/update2/crx

extracted_from_files

Domain
detected Domain: www.inkscape.org

XIOC detected Domain: www.inkscape.org

extracted_from_files

Domain
detected Domain: window.com

XIOC detected Domain: window.com

extracted_from_files

Domain
detected Domain: clients2.google.com

XIOC detected Domain: clients2.google.com

extracted_from_files

Domain
detected Domain: www.fabasoft.com

XIOC detected Domain: www.fabasoft.com

extracted_from_files

Domain
detected Domain: fabasoft.com

XIOC detected Domain: fabasoft.com

extracted_from_files

Domain
detected Domain: div.id

XIOC detected Domain: div.id

extracted_from_files

Domain
detected Domain: event.data

XIOC detected Domain: event.data

extracted_from_files

Security Analysis Summary

Security Analysis Overview

Fabasoft Folio 2017 is a Chrome Web Store extension published by [email protected]. Version 17.4.7.119 has been analyzed by the Risky Plugins security platform, receiving a risk score of 61.75/100 (MEDIUM risk) based on 29 security findings.

Risk Assessment

This extension presents high security risk. Significant concerns were identified during analysis. It is not recommended for use in sensitive or production environments without thorough review.

Findings Breakdown

  • High: 9 finding(s)
  • Medium: 20 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Fabasoft Folio 2017 is published by [email protected] on the Chrome Web Store marketplace.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Frequently Asked Questions