Is "Plugins" on Chrome Web Store Safe to Install?

[email protected] · chrome · v6.0.0.0

When installed, it will add "Plugins" button to your apps list (on the "New Tab" page and in the Chrome App Launcher). Click the icon and you'll open the "plugins" menu. Here you can access the internal extension manager (to remove, enable and disable extensions, apps and themes), the "shortcuts" manager (where you can set quick shortcuts for the installed plugins) and the “components” page (which replaced the original plugins page some time ago) is also accessible here. In the latest versions we added a quick link to the internal Chrome cleaner: useful history eraser where you can clean history, cache and other browsing data. In addition, we integrated the app with our History On/Off extension and now you can stop history recording (and resume it again) with single click. The ability to pause history is not available in Chrome out-of-the-box, that’s why separate history on/off extension is needed if you want this function too work. Note that this app is also available as extension, which will add the menu to the Chrome toolbar and comes with more features -- with the plugins extension you can control flash player on "per site" basis (allow and block flash on current site). The extension version is not only about controlling adobe flash player -- it adds a shortcut to all the content settings for the current site where you can turn on and of location, camera, microphone, notifications, javascript, flash, images, popups, MIDI devices etc. Download the Plugins Menu extension here: https://chrome.google.com/webstore/detail/plugins/mmcblfncjaclajmegihojiekebofjcen

Risk Assessment

Analyzed
39.98
out of 100
LOW

76 security findings detected across all analyzers

Severity Breakdown

0
Critical
7
High
69
Medium
0
Low
0
Info

Finding Categories

7
Malware Signatures
67
IoC Indicators

YARA Rules Matched

4 rules(7 hits)
postinstall crypto operations postinstall obfuscation postinstall file manipulation postinstall network communication

About This Extension

When installed, it will add "Plugins" button to your apps list (on the "New Tab" page and in the Chrome App Launcher). Click the icon and you'll open the "plugins" menu. Here you can access the internal extension manager (to remove, enable and disable extensions, apps and themes), the "shortcuts" manager (where you can set quick shortcuts for the installed plugins) and the “components” page (which replaced the original plugins page some time ago) is also accessible here. In the latest versions we added a quick link to the internal Chrome cleaner: useful history eraser where you can clean history, cache and other browsing data. In addition, we integrated the app with our History On/Off extension and now you can stop history recording (and resume it again) with single click. The ability to pause history is not available in Chrome out-of-the-box, that’s why separate history on/off extension is needed if you want this function too work. Note that this app is also available as extension, which will add the menu to the Chrome toolbar and comes with more features -- with the plugins extension you can control flash player on "per site" basis (allow and block flash on current site). The extension version is not only about controlling adobe flash player -- it adds a shortcut to all the content settings for the current site where you can turn on and of location, camera, microphone, notifications, javascript, flash, images, popups, MIDI devices etc. Download the Plugins Menu extension here: https://chrome.google.com/webstore/detail/plugins/mmcblfncjaclajmegihojiekebofjcen

Detailed Findings

7 total

YARA Rule Matches

4 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

URLs
19
IP Addresses
3
Domains
10
Strings
67

All Indicators · 67

URL
detected URL: https://singleclickapps.com/plugins-button/cleaner-help.html

XIOC detected URL: https://singleclickapps.com/plugins-button/cleaner-help.html

extracted_from_files

IP
detected IP: ::

XIOC detected IP: ::

extracted_from_files

Hash
detected MD5 Hash: 993068DA45D711EB82B7866D9FA4BF1F

XIOC detected MD5 Hash: 993068DA45D711EB82B7866D9FA4BF1F

extracted_from_files

Hash
detected MD5 Hash: 40414B3ED6C411E78E9DAC1F1976EE7F

XIOC detected MD5 Hash: 40414B3ED6C411E78E9DAC1F1976EE7F

extracted_from_files

Hash
detected MD5 Hash: 2C55A01DCD5F11E7AB0EE56FC570E128

XIOC detected MD5 Hash: 2C55A01DCD5F11E7AB0EE56FC570E128

extracted_from_files

Hash
detected MD5 Hash: 2C55A01CCD5F11E7AB0EE56FC570E128

XIOC detected MD5 Hash: 2C55A01CCD5F11E7AB0EE56FC570E128

extracted_from_files

Hash
detected MD5 Hash: BCFA1ABEA7CCE71193C28E924D055180

XIOC detected MD5 Hash: BCFA1ABEA7CCE71193C28E924D055180

extracted_from_files

Hash
detected MD5 Hash: 57152AC4D4F011E7BD76FCEB022C00F3

XIOC detected MD5 Hash: 57152AC4D4F011E7BD76FCEB022C00F3

extracted_from_files

Hash
detected MD5 Hash: 57152AC5D4F011E7BD76FCEB022C00F3

XIOC detected MD5 Hash: 57152AC5D4F011E7BD76FCEB022C00F3

extracted_from_files

Hash
detected MD5 Hash: 57152AC2D4F011E7BD76FCEB022C00F3

XIOC detected MD5 Hash: 57152AC2D4F011E7BD76FCEB022C00F3

extracted_from_files

Hash
detected MD5 Hash: 78230142CC2C11E7910EAC00839F68E1

XIOC detected MD5 Hash: 78230142CC2C11E7910EAC00839F68E1

extracted_from_files

Hash
detected MD5 Hash: 78230143CC2C11E7910EAC00839F68E1

XIOC detected MD5 Hash: 78230143CC2C11E7910EAC00839F68E1

extracted_from_files

Hash
detected MD5 Hash: 78230140CC2C11E7910EAC00839F68E1

XIOC detected MD5 Hash: 78230140CC2C11E7910EAC00839F68E1

extracted_from_files

Hash
detected MD5 Hash: 78230141CC2C11E7910EAC00839F68E1

XIOC detected MD5 Hash: 78230141CC2C11E7910EAC00839F68E1

extracted_from_files

Hash
detected MD5 Hash: 40414B3FD6C411E78E9DAC1F1976EE7F

XIOC detected MD5 Hash: 40414B3FD6C411E78E9DAC1F1976EE7F

extracted_from_files

Hash
detected MD5 Hash: 40414B40D6C411E78E9DAC1F1976EE7F

XIOC detected MD5 Hash: 40414B40D6C411E78E9DAC1F1976EE7F

extracted_from_files

Hash
detected MD5 Hash: 40414B3DD6C411E78E9DAC1F1976EE7F

XIOC detected MD5 Hash: 40414B3DD6C411E78E9DAC1F1976EE7F

extracted_from_files

Hash
detected MD5 Hash: 0CE26270D66D11E781B3AC4A857F7647

XIOC detected MD5 Hash: 0CE26270D66D11E781B3AC4A857F7647

extracted_from_files

Domain
detected Domain: www.w3.org

XIOC detected Domain: www.w3.org

extracted_from_files

Hash
detected MD5 Hash: BBFA1ABEA7CCE71193C28E924D055180

XIOC detected MD5 Hash: BBFA1ABEA7CCE71193C28E924D055180

extracted_from_files

Hash
detected MD5 Hash: 2E8A6464CC2E11E787BEEFC24A5B1277

XIOC detected MD5 Hash: 2E8A6464CC2E11E787BEEFC24A5B1277

extracted_from_files

Hash
detected MD5 Hash: 2E8A6465CC2E11E787BEEFC24A5B1277

XIOC detected MD5 Hash: 2E8A6465CC2E11E787BEEFC24A5B1277

extracted_from_files

Hash
detected MD5 Hash: 2E8A6462CC2E11E787BEEFC24A5B1277

XIOC detected MD5 Hash: 2E8A6462CC2E11E787BEEFC24A5B1277

extracted_from_files

Hash
detected MD5 Hash: 2E8A6463CC2E11E787BEEFC24A5B1277

XIOC detected MD5 Hash: 2E8A6463CC2E11E787BEEFC24A5B1277

extracted_from_files

Hash
detected MD5 Hash: 6CDCBEBF454611E3B0D8BFC449D91BC8

XIOC detected MD5 Hash: 6CDCBEBF454611E3B0D8BFC449D91BC8

extracted_from_files

Hash
detected MD5 Hash: 10C6D9BA4445E311B89FF4FFC92A37A0

XIOC detected MD5 Hash: 10C6D9BA4445E311B89FF4FFC92A37A0

extracted_from_files

Hash
detected MD5 Hash: 82C34C28454611E39100CE87D59846A4

XIOC detected MD5 Hash: 82C34C28454611E39100CE87D59846A4

extracted_from_files

Hash
detected MD5 Hash: 82C34C27454611E39100CE87D59846A4

XIOC detected MD5 Hash: 82C34C27454611E39100CE87D59846A4

extracted_from_files

Hash
detected MD5 Hash: 8D916A99454611E3B799D85BB8558514

XIOC detected MD5 Hash: 8D916A99454611E3B799D85BB8558514

extracted_from_files

Hash
detected MD5 Hash: 8D916A98454611E3B799D85BB8558514

XIOC detected MD5 Hash: 8D916A98454611E3B799D85BB8558514

extracted_from_files

Hash
detected MD5 Hash: 39C7FD0069CBE71185A8F3F2D43ECD23

XIOC detected MD5 Hash: 39C7FD0069CBE71185A8F3F2D43ECD23

extracted_from_files

URL
detected URL: https://chrome.google.com/webstore/detail/plugins/mmcblfncjaclajmegihojiekebofjcen

XIOC detected URL: https://chrome.google.com/webstore/detail/plugins/mmcblfncjaclajmegihojiekebofjcen

extracted_from_files

URL
detected URL: https://singleclickapps.com/plugins-app/help.html

XIOC detected URL: https://singleclickapps.com/plugins-app/help.html

extracted_from_files

Hash
detected MD5 Hash: 993068DC45D711EB82B7866D9FA4BF1F

XIOC detected MD5 Hash: 993068DC45D711EB82B7866D9FA4BF1F

extracted_from_files

URL
detected URL: https://bugs.webkit.org/show_bug.cgi?id=63367

XIOC detected URL: https://bugs.webkit.org/show_bug.cgi?id=63367

extracted_from_files

URL
detected URL: http://crbug.com/112091

XIOC detected URL: http://crbug.com/112091

extracted_from_files

Hash
detected MD5 Hash: F77F1174072068119C12FCC73F11446E

XIOC detected MD5 Hash: F77F1174072068119C12FCC73F11446E

extracted_from_files

Hash
detected MD5 Hash: 6CDCBEC0454611E3B0D8BFC449D91BC8

XIOC detected MD5 Hash: 6CDCBEC0454611E3B0D8BFC449D91BC8

extracted_from_files

URL
detected URL: https://singleclickapps.com/history-on-off

XIOC detected URL: https://singleclickapps.com/history-on-off

extracted_from_files

URL
detected URL: http://www.w3.org/1999/02/22-rdf-syntax-ns#

XIOC detected URL: http://www.w3.org/1999/02/22-rdf-syntax-ns#

extracted_from_files

URL
detected URL: http://ns.adobe.com/xap/1.0/mm/

XIOC detected URL: http://ns.adobe.com/xap/1.0/mm/

extracted_from_files

URL
detected URL: http://ns.adobe.com/xap/1.0/sType/ResourceRef#

XIOC detected URL: http://ns.adobe.com/xap/1.0/sType/ResourceRef#

extracted_from_files

URL
detected URL: http://ns.adobe.com/xap/1.0/

XIOC detected URL: http://ns.adobe.com/xap/1.0/

extracted_from_files

URL
detected URL: https://clients2.google.com/service/update2/crx

XIOC detected URL: https://clients2.google.com/service/update2/crx

extracted_from_files

URL
detected URL: https://singleclickapps.com/plugins-app/plugins-app-update-info.html

XIOC detected URL: https://singleclickapps.com/plugins-app/plugins-app-update-info.html

extracted_from_files

URL
detected URL: https://singleclickapps.com/plugins-app

XIOC detected URL: https://singleclickapps.com/plugins-app

extracted_from_files

URL
detected URL: https://singleclickapps.com/plugins-app/removed-chrome.html

XIOC detected URL: https://singleclickapps.com/plugins-app/removed-chrome.html

extracted_from_files

URL
detected URL: https://singleclickapps.com/plugins-app/postinstall-chrome.html

XIOC detected URL: https://singleclickapps.com/plugins-app/postinstall-chrome.html

extracted_from_files

URL
detected URL: https://chrome.google.com/webstore/detail/history-onoff/ljbpakpmiimdmblcjjhhbfabbkmcgmdp

XIOC detected URL: https://chrome.google.com/webstore/detail/history-onoff/ljbpakpmiimdmblcjjhhbfabbkmcgmdp

extracted_from_files

URL
detected URL: https://singleclickapps.com/history-on-off/history-on-off-plugin.html

XIOC detected URL: https://singleclickapps.com/history-on-off/history-on-off-plugin.html

extracted_from_files

Hash
detected MD5 Hash: 0CE2626FD66D11E781B3AC4A857F7647

XIOC detected MD5 Hash: 0CE2626FD66D11E781B3AC4A857F7647

extracted_from_files

Domain
detected Domain: ns.adobe.com

XIOC detected Domain: ns.adobe.com

extracted_from_files

Domain
detected Domain: clients2.google.com

XIOC detected Domain: clients2.google.com

extracted_from_files

Domain
detected Domain: bugs.webkit.org

XIOC detected Domain: bugs.webkit.org

extracted_from_files

Domain
detected Domain: crbug.com

XIOC detected Domain: crbug.com

extracted_from_files

URL
detected URL: https://singleclickapps.com/

XIOC detected URL: https://singleclickapps.com/

extracted_from_files

URL
detected URL: https://chrome.google.com/webstore/detail/plugins/nnfehgmkbbbhbadghlfkjekjkneppdak/reviews

XIOC detected URL: https://chrome.google.com/webstore/detail/plugins/nnfehgmkbbbhbadghlfkjekjkneppdak/reviews

extracted_from_files

IP
detected IP: 6.0.0.0

XIOC detected IP: 6.0.0.0

extracted_from_files

IP
detected IP: ed::bef

XIOC detected IP: ed::bef

extracted_from_files

Domain
detected Domain: singleclickapps.com

XIOC detected Domain: singleclickapps.com

extracted_from_files

Domain
detected Domain: chrome.google.com

XIOC detected Domain: chrome.google.com

extracted_from_files

Domain
detected Domain: a.map

XIOC detected Domain: a.map

extracted_from_files

Domain
detected Domain: c.map

XIOC detected Domain: c.map

extracted_from_files

Domain
detected Domain: navigator.online

XIOC detected Domain: navigator.online

extracted_from_files

Hash
detected MD5 Hash: 993068DB45D711EB82B7866D9FA4BF1F

XIOC detected MD5 Hash: 993068DB45D711EB82B7866D9FA4BF1F

extracted_from_files

Hash
detected MD5 Hash: 57152AC3D4F011E7BD76FCEB022C00F3

XIOC detected MD5 Hash: 57152AC3D4F011E7BD76FCEB022C00F3

extracted_from_files

Hash
detected MD5 Hash: 993068D945D711EB82B7866D9FA4BF1F

XIOC detected MD5 Hash: 993068D945D711EB82B7866D9FA4BF1F

extracted_from_files

Security Analysis Summary

Security Analysis Overview

Plugins is a Chrome Web Store extension published by [email protected]. Version 6.0.0.0 has been analyzed by the Risky Plugins security platform, receiving a risk score of 39.98/100 (LOW risk) based on 76 security findings.

Risk Assessment

This extension presents low security risk. Some minor findings were detected, but nothing that would prevent typical usage. Reviewing the detailed findings below is recommended before use in sensitive environments.

Findings Breakdown

  • High: 7 finding(s)
  • Medium: 69 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Plugins is published by [email protected] on the Chrome Web Store marketplace. The extension has approximately 60K users.

Recommendation

Exercise caution with this extension. Review the detailed findings and ensure the requested permissions align with the extension's stated functionality before installation.

Frequently Asked Questions