Is "Google Calendar manager" on Chrome Web Store Safe to Install?

[email protected] · chrome · v0.0.1

Simple extension to simplify creation of events in your calendar

Risk Assessment

Analyzed
84.99
out of 100
HIGH

37 security findings detected across all analyzers

Chrome extension requesting 6 permissions

Severity Breakdown

0
Critical
11
High
26
Medium
0
Low
0
Info

Finding Categories

11
Malware Signatures
4
Network
20
IoC Indicators

YARA Rules Matched

5 rules(11 hits)
postinstall file manipulation postinstall network communication postinstall file download AlertStatementsShouldNotBeUsed postinstall crypto operations

Requested Permissions

6 permissions
identity

Access your identity and sign-in tokens

High
tabs
Medium
activeTab
Medium
storage
Low
identity.email
Low
contextMenus
Low

About This Extension

Simple extension to simplify creation of events in your calendar

Detailed Findings

16 total

YARA Rule Matches

5 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

URLs
6
IP Addresses
1
Domains
13
Strings
20

All Indicators · 20

IP
detected IP: ::

XIOC detected IP: ::

extracted_from_files

URL
detected URL: https://www.googleapis.com/calendar/v3/users/me/calendarList';

XIOC detected URL: https://www.googleapis.com/calendar/v3/users/me/calendarList';

extracted_from_files

URL
detected URL: https://www.googleapis.com/calendar/v3/calendars';

XIOC detected URL: https://www.googleapis.com/calendar/v3/calendars';

extracted_from_files

URL
detected URL: https://www.googleapis.com/calendar/v3/calendars/$

XIOC detected URL: https://www.googleapis.com/calendar/v3/calendars/$

extracted_from_files

URL
detected URL: https://clients2.google.com/service/update2/crx

XIOC detected URL: https://clients2.google.com/service/update2/crx

extracted_from_files

URL
detected URL: https://calendar.google.com/calendar

XIOC detected URL: https://calendar.google.com/calendar

extracted_from_files

Domain
detected Domain: 895890072224-ds0mb5p7uguj02obkgluui53ku28ove0.apps.googleusercontent.com

XIOC detected Domain: 895890072224-ds0mb5p7uguj02obkgluui53ku28ove0.apps.googleusercontent.com

extracted_from_files

Domain
detected Domain: calendar.google.com

XIOC detected Domain: calendar.google.com

extracted_from_files

Domain
detected Domain: event.end.date

XIOC detected Domain: event.end.date

extracted_from_files

Domain
detected Domain: a.email

XIOC detected Domain: a.email

extracted_from_files

Domain
detected Domain: res.data

XIOC detected Domain: res.data

extracted_from_files

URL
detected URL: https://www.googleapis.com/auth/calendar

XIOC detected URL: https://www.googleapis.com/auth/calendar

extracted_from_files

Domain
detected Domain: request.data

XIOC detected Domain: request.data

extracted_from_files

Domain
detected Domain: www.googleapis.com

XIOC detected Domain: www.googleapis.com

extracted_from_files

Domain
detected Domain: gccecalendar.id

XIOC detected Domain: gccecalendar.id

extracted_from_files

Domain
detected Domain: event.start.date

XIOC detected Domain: event.start.date

extracted_from_files

Domain
detected Domain: tab.id

XIOC detected Domain: tab.id

extracted_from_files

Domain
detected Domain: clients2.google.com

XIOC detected Domain: clients2.google.com

extracted_from_files

Domain
detected Domain: identity.email

XIOC detected Domain: identity.email

extracted_from_files

Domain
detected Domain: event.attendees.map

XIOC detected Domain: event.attendees.map

extracted_from_files

Security Analysis Summary

Security Analysis Overview

Google Calendar manager is a Chrome Web Store extension published by [email protected]. Version 0.0.1 has been analyzed by the Risky Plugins security platform, receiving a risk score of 84.99/100 (HIGH risk) based on 37 security findings.

Risk Assessment

This extension presents critical security risk. Severe issues were detected, potentially including malware indicators, exposed secrets, or dangerous behaviors. Installation is strongly discouraged until these issues are addressed.

Findings Breakdown

  • High: 11 finding(s)
  • Medium: 26 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Google Calendar manager is published by [email protected] on the Chrome Web Store marketplace.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Frequently Asked Questions