Is "Fabasoft Folio 2020" on Chrome Web Store Safe to Install?

[email protected] · chrome · v20.3.1.24

Fabasoft Folio 2020 offers solutions for Enterprise Content Management, Collaboration, Agile Business Processes, Compliance Management and Information Governance. The web browser extension for the Fabasoft Folio Client 2019 has additional features: - Import folders and files (including large structures and files) - Open and edit documents on your workstation from Folio using local applications (e.g. Microsoft Office, LibreOffice) - Sync documents from Folio with your workstation for offline use - Copy and paste documents from Folio into local folder - Copy and paste html object links into documents and emails - Manage WebDAV connection to Folio

Risk Assessment

Analyzed
64.88
out of 100
MEDIUM

31 security findings detected across all analyzers

Chrome extension requesting 4 permissions

Severity Breakdown

0
Critical
9
High
22
Medium
0
Low
0
Info

Finding Categories

9
Malware Signatures
1
Network
18
IoC Indicators

YARA Rules Matched

5 rules(9 hits)
postinstall file manipulation postinstall system command postinstall network communication postinstall file download postinstall crypto operations

Requested Permissions

4 permissions
nativeMessaging

Exchange messages with programs outside the browser

Dangerous
<all_urls>

Access and modify data on every website you visit

Dangerous
cookies

Read and modify cookies on all sites

High
tabs
Medium

About This Extension

Fabasoft Folio 2020 offers solutions for Enterprise Content Management, Collaboration, Agile Business Processes, Compliance Management and Information Governance. The web browser extension for the Fabasoft Folio Client 2019 has additional features: - Import folders and files (including large structures and files) - Open and edit documents on your workstation from Folio using local applications (e.g. Microsoft Office, LibreOffice) - Sync documents from Folio with your workstation for offline use - Copy and paste documents from Folio into local folder - Copy and paste html object links into documents and emails - Manage WebDAV connection to Folio

Detailed Findings

13 total

YARA Rule Matches

5 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

URLs
3
IP Addresses
1
Domains
13
Strings
18

All Indicators · 18

IP
detected IP: 20.3.1.24

XIOC detected IP: 20.3.1.24

extracted_from_files

URL
detected URL: https://clients2.google.com/service/update2/crx

XIOC detected URL: https://clients2.google.com/service/update2/crx

extracted_from_files

URL
detected URL: https://www.fabasoft.com

XIOC detected URL: https://www.fabasoft.com

extracted_from_files

URL
detected URL: https://help.folio.fabasoft.com/

XIOC detected URL: https://help.folio.fabasoft.com/

extracted_from_files

Domain
detected Domain: help.folio.fabasoft.com

XIOC detected Domain: help.folio.fabasoft.com

extracted_from_files

Domain
detected Domain: ea.pm

XIOC detected Domain: ea.pm

extracted_from_files

Domain
detected Domain: activetab.id

XIOC detected Domain: activetab.id

extracted_from_files

Domain
detected Domain: contentport.sender.tab.id

XIOC detected Domain: contentport.sender.tab.id

extracted_from_files

Domain
detected Domain: cookie.name

XIOC detected Domain: cookie.name

extracted_from_files

Domain
detected Domain: xmlhttp.open

XIOC detected Domain: xmlhttp.open

extracted_from_files

Other
detected Email: [email protected]

XIOC detected Email: [email protected]

extracted_from_files

Domain
detected Domain: www.inkscape.org

XIOC detected Domain: www.inkscape.org

extracted_from_files

Domain
detected Domain: window.com

XIOC detected Domain: window.com

extracted_from_files

Domain
detected Domain: clients2.google.com

XIOC detected Domain: clients2.google.com

extracted_from_files

Domain
detected Domain: www.fabasoft.com

XIOC detected Domain: www.fabasoft.com

extracted_from_files

Domain
detected Domain: fabasoft.com

XIOC detected Domain: fabasoft.com

extracted_from_files

Domain
detected Domain: div.id

XIOC detected Domain: div.id

extracted_from_files

Domain
detected Domain: event.data

XIOC detected Domain: event.data

extracted_from_files

Security Analysis Summary

Security Analysis Overview

Fabasoft Folio 2020 is a Chrome Web Store extension published by [email protected]. Version 20.3.1.24 has been analyzed by the Risky Plugins security platform, receiving a risk score of 64.88/100 (MEDIUM risk) based on 31 security findings.

Risk Assessment

This extension presents high security risk. Significant concerns were identified during analysis. It is not recommended for use in sensitive or production environments without thorough review.

Findings Breakdown

  • High: 9 finding(s)
  • Medium: 22 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Fabasoft Folio 2020 is published by [email protected] on the Chrome Web Store marketplace.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Frequently Asked Questions

Similar Extensions

Related extensions from the same publisher or marketplace

Fabasoft Folio 2019

[email protected]

CRITICAL

Fabasoft Folio 2017

[email protected]

CRITICAL

Research Notes

[email protected]

CRITICAL 2K users

RoTrade - Roblox Trading Automated

[email protected]

CRITICAL 95 users

PubMed Citation Bar

[email protected]

CRITICAL 545 users

Cover-Letter-AI

[email protected]

CRITICAL