Is "Reverse Image Search" on Microsoft Edge Add-ons Safe to Install?

Free Extensions · edge · v1.0.0

Do a reverse image search today once you install our software. To use this extension, right click on an image on the web and select “Search with this image” then choose the search engine you want to use.

Risk Assessment

Analyzed
100
out of 100
CRITICAL

311 security findings detected across all analyzers

Severity Breakdown

0
Critical
28
High
227
Medium
0
Low
0
Info

Finding Categories

28
Malware Signatures
226
IoC Indicators

YARA Rules Matched

9 rules(28 hits)
postinstall system command postinstall crypto operations postinstall obfuscation postinstall file download postinstall file manipulation postinstall network communication NoUseWeakRandom SQLInjection postinstall registry modification

Detailed Findings

84 total

YARA Rule Matches

9 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

URLs
17
IP Addresses
45
Domains
165
Strings
226

All Indicators · 226

Domain
detected Domain: t.next

XIOC detected Domain: t.next

extracted_from_files

Domain
detected Domain: modal-backdrop.show

XIOC detected Domain: modal-backdrop.show

extracted_from_files

Domain
detected Domain: f.setup.call

XIOC detected Domain: f.setup.call

extracted_from_files

IP
detected IP: 9::bef

XIOC detected IP: 9::bef

extracted_from_files

IP
detected IP: ::af

XIOC detected IP: ::af

extracted_from_files

URL
detected URL: https://search-image.freeonlineapps.net/addons-edge-uninstalled

XIOC detected URL: https://search-image.freeonlineapps.net/addons-edge-uninstalled

extracted_from_files

URL
detected URL: https://edge.microsoft.com/extensionwebstorebase/v1/crx

XIOC detected URL: https://edge.microsoft.com/extensionwebstorebase/v1/crx

extracted_from_files

URL
detected URL: http://image.baidu.com/n/pc_search?queryImageUrl=

XIOC detected URL: http://image.baidu.com/n/pc_search?queryImageUrl=

extracted_from_files

URL
detected URL: https://github.com/twbs/bootstrap/graphs/contributors)

XIOC detected URL: https://github.com/twbs/bootstrap/graphs/contributors)

extracted_from_files

URL
detected URL: https://popper.js.org/)

XIOC detected URL: https://popper.js.org/)

extracted_from_files

URL
detected URL: https://microsoftedge.microsoft.com/addons/detail/$

XIOC detected URL: https://microsoftedge.microsoft.com/addons/detail/$

extracted_from_files

URL
detected URL: https://search-image.freeonlineapps.net/addons-drive-feature

XIOC detected URL: https://search-image.freeonlineapps.net/addons-drive-feature

extracted_from_files

URL
detected URL: https://search-image.freeonlineapps.net/welcome-edge-addons

XIOC detected URL: https://search-image.freeonlineapps.net/welcome-edge-addons

extracted_from_files

URL
detected URL: https://fontawesome.com

XIOC detected URL: https://fontawesome.com

extracted_from_files

URL
detected URL: https://fontawesome.com/license/free

XIOC detected URL: https://fontawesome.com/license/free

extracted_from_files

URL
detected URL: http://fontawesome.io

XIOC detected URL: http://fontawesome.io

extracted_from_files

URL
detected URL: http://fontawesome.io/license

XIOC detected URL: http://fontawesome.io/license

extracted_from_files

URL
detected URL: http://www.google.com/searchbyimage?image_url=

XIOC detected URL: http://www.google.com/searchbyimage?image_url=

extracted_from_files

URL
detected URL: http://www.bing.com/images/searchbyimage?FORM=IRSBIQ&cbir=sbi&imgurl=

XIOC detected URL: http://www.bing.com/images/searchbyimage?FORM=IRSBIQ&cbir=sbi&imgurl=

extracted_from_files

URL
detected URL: http://yandex.com/images/search?rpt=imageview&img_url=

XIOC detected URL: http://yandex.com/images/search?rpt=imageview&img_url=

extracted_from_files

Domain
detected Domain: t.top-u.top

XIOC detected Domain: t.top-u.top

extracted_from_files

Domain
detected Domain: t.using.call

XIOC detected Domain: t.using.call

extracted_from_files

Domain
detected Domain: w.now

XIOC detected Domain: w.now

extracted_from_files

Domain
detected Domain: search-image.freeonlineapps.net

XIOC detected Domain: search-image.freeonlineapps.net

extracted_from_files

Domain
detected Domain: chrome.runtime.id

XIOC detected Domain: chrome.runtime.id

extracted_from_files

URL
detected URL: https://getbootstrap.com/)

XIOC detected URL: https://getbootstrap.com/)

extracted_from_files

URL
detected URL: https://github.com/twbs/bootstrap/blob/master/LICENSE)

XIOC detected URL: https://github.com/twbs/bootstrap/blob/master/LICENSE)

extracted_from_files

Domain
detected Domain: n.call

XIOC detected Domain: n.call

extracted_from_files

Domain
detected Domain: t.events

XIOC detected Domain: t.events

extracted_from_files

Domain
detected Domain: this.map

XIOC detected Domain: this.map

extracted_from_files

Domain
detected Domain: t.top

XIOC detected Domain: t.top

extracted_from_files

Domain
detected Domain: c.style

XIOC detected Domain: c.style

extracted_from_files

Domain
detected Domain: this.name

XIOC detected Domain: this.name

extracted_from_files

Domain
detected Domain: d.top

XIOC detected Domain: d.top

extracted_from_files

Domain
detected Domain: this.click

XIOC detected Domain: this.click

extracted_from_files

Domain
detected Domain: this.target

XIOC detected Domain: this.target

extracted_from_files

Domain
detected Domain: date.now

XIOC detected Domain: date.now

extracted_from_files

Domain
detected Domain: this.off

XIOC detected Domain: this.off

extracted_from_files

Domain
detected Domain: o.events

XIOC detected Domain: o.events

extracted_from_files

Domain
detected Domain: a.events

XIOC detected Domain: a.events

extracted_from_files

Domain
detected Domain: v.call

XIOC detected Domain: v.call

extracted_from_files

Domain
detected Domain: w.event.global

XIOC detected Domain: w.event.global

extracted_from_files

Domain
detected Domain: f.remove.call

XIOC detected Domain: f.remove.call

extracted_from_files

Domain
detected Domain: f.teardown.call

XIOC detected Domain: f.teardown.call

extracted_from_files

Domain
detected Domain: c.predispatch.call

XIOC detected Domain: c.predispatch.call

extracted_from_files

Domain
detected Domain: w.event.handlers.call

XIOC detected Domain: w.event.handlers.call

extracted_from_files

Domain
detected Domain: a.data

XIOC detected Domain: a.data

extracted_from_files

Domain
detected Domain: c.postdispatch.call

XIOC detected Domain: c.postdispatch.call

extracted_from_files

Domain
detected Domain: e.style

XIOC detected Domain: e.style

extracted_from_files

Domain
detected Domain: w.style

XIOC detected Domain: w.style

extracted_from_files

Domain
detected Domain: ge.th

XIOC detected Domain: ge.th

extracted_from_files

Domain
detected Domain: ge.td

XIOC detected Domain: ge.td

extracted_from_files

IP
detected IP: e::

XIOC detected IP: e::

extracted_from_files

Domain
detected Domain: popper.js.org

XIOC detected Domain: popper.js.org

extracted_from_files

Domain
detected Domain: tostring.call

XIOC detected Domain: tostring.call

extracted_from_files

Domain
detected Domain: l.call

XIOC detected Domain: l.call

extracted_from_files

Domain
detected Domain: a.bg

XIOC detected Domain: a.bg

extracted_from_files

Domain
detected Domain: i.call

XIOC detected Domain: i.call

extracted_from_files

Domain
detected Domain: t.name

XIOC detected Domain: t.name

extracted_from_files

Domain
detected Domain: r.call

XIOC detected Domain: r.call

extracted_from_files

Domain
detected Domain: t.map

XIOC detected Domain: t.map

extracted_from_files

Domain
detected Domain: o.empty.fire

XIOC detected Domain: o.empty.fire

extracted_from_files

Domain
detected Domain: l.id

XIOC detected Domain: l.id

extracted_from_files

Domain
detected Domain: oe.support

XIOC detected Domain: oe.support

extracted_from_files

Domain
detected Domain: i.top

XIOC detected Domain: i.top

extracted_from_files

Domain
detected Domain: r.filter.id

XIOC detected Domain: r.filter.id

extracted_from_files

Domain
detected Domain: r.find.id

XIOC detected Domain: r.find.id

extracted_from_files

Domain
detected Domain: m.call

XIOC detected Domain: m.call

extracted_from_files

Domain
detected Domain: t.id

XIOC detected Domain: t.id

extracted_from_files

Domain
detected Domain: c.call

XIOC detected Domain: c.call

extracted_from_files

Domain
detected Domain: o.call

XIOC detected Domain: o.call

extracted_from_files

Domain
detected Domain: w.map

XIOC detected Domain: w.map

extracted_from_files

Domain
detected Domain: f.call

XIOC detected Domain: f.call

extracted_from_files

Domain
detected Domain: t.call

XIOC detected Domain: t.call

extracted_from_files

Domain
detected Domain: u.call

XIOC detected Domain: u.call

extracted_from_files

Domain
detected Domain: s.call

XIOC detected Domain: s.call

extracted_from_files

Domain
detected Domain: zn.click

XIOC detected Domain: zn.click

extracted_from_files

Domain
detected Domain: t.tab

XIOC detected Domain: t.tab

extracted_from_files

Domain
detected Domain: bootstrap.min.js.map

XIOC detected Domain: bootstrap.min.js.map

extracted_from_files

Domain
detected Domain: array.prototype.slice.call

XIOC detected Domain: array.prototype.slice.call

extracted_from_files

Domain
detected Domain: e.target

XIOC detected Domain: e.target

extracted_from_files

Domain
detected Domain: jquery.org

XIOC detected Domain: jquery.org

extracted_from_files

Domain
detected Domain: d.call

XIOC detected Domain: d.call

extracted_from_files

Domain
detected Domain: e.call

XIOC detected Domain: e.call

extracted_from_files

Domain
detected Domain: config.target

XIOC detected Domain: config.target

extracted_from_files

Domain
detected Domain: bs.tab

XIOC detected Domain: bs.tab

extracted_from_files

Domain
detected Domain: g.fn.tab

XIOC detected Domain: g.fn.tab

extracted_from_files

Domain
detected Domain: on.show

XIOC detected Domain: on.show

extracted_from_files

Domain
detected Domain: on.click

XIOC detected Domain: on.click

extracted_from_files

Domain
detected Domain: zn.show

XIOC detected Domain: zn.show

extracted_from_files

Domain
detected Domain: activetrigger.click

XIOC detected Domain: activetrigger.click

extracted_from_files

Domain
detected Domain: this.constructor.event.show

XIOC detected Domain: this.constructor.event.show

extracted_from_files

Domain
detected Domain: this.constructor.name

XIOC detected Domain: this.constructor.name

extracted_from_files

Domain
detected Domain: this.config.placement.call

XIOC detected Domain: this.config.placement.call

extracted_from_files

Domain
detected Domain: this.config.title.call

XIOC detected Domain: this.config.title.call

extracted_from_files

Domain
detected Domain: i.constructor.event.click

XIOC detected Domain: i.constructor.event.click

extracted_from_files

Domain
detected Domain: e.config.delay.show

XIOC detected Domain: e.config.delay.show

extracted_from_files

Domain
detected Domain: kt.show

XIOC detected Domain: kt.show

extracted_from_files

Domain
detected Domain: kt.click

XIOC detected Domain: kt.click

extracted_from_files

Domain
detected Domain: re.show

XIOC detected Domain: re.show

extracted_from_files

Domain
detected Domain: re.click

XIOC detected Domain: re.click

extracted_from_files

Domain
detected Domain: e.show

XIOC detected Domain: e.show

extracted_from_files

Domain
detected Domain: r.one

XIOC detected Domain: r.one

extracted_from_files

Domain
detected Domain: this.constructor.data

XIOC detected Domain: this.constructor.data

extracted_from_files

Domain
detected Domain: i.data

XIOC detected Domain: i.data

extracted_from_files

Domain
detected Domain: e.id

XIOC detected Domain: e.id

extracted_from_files

Domain
detected Domain: this.show

XIOC detected Domain: this.show

extracted_from_files

Domain
detected Domain: t.show

XIOC detected Domain: t.show

extracted_from_files

Domain
detected Domain: element.style

XIOC detected Domain: element.style

extracted_from_files

Domain
detected Domain: t.click

XIOC detected Domain: t.click

extracted_from_files

Domain
detected Domain: v.events

XIOC detected Domain: v.events

extracted_from_files

Domain
detected Domain: jqueryinterface.call

XIOC detected Domain: jqueryinterface.call

extracted_from_files

Domain
detected Domain: n.data

XIOC detected Domain: n.data

extracted_from_files

Domain
detected Domain: f.add.call

XIOC detected Domain: f.add.call

extracted_from_files

Domain
detected Domain: t.to

XIOC detected Domain: t.to

extracted_from_files

Domain
detected Domain: e.to

XIOC detected Domain: e.to

extracted_from_files

Domain
detected Domain: slice.call

XIOC detected Domain: slice.call

extracted_from_files

Domain
detected Domain: q.click

XIOC detected Domain: q.click

extracted_from_files

IP
detected IP: ed::bef

XIOC detected IP: ed::bef

extracted_from_files

Domain
detected Domain: object.prototype.hasownproperty.call

XIOC detected Domain: object.prototype.hasownproperty.call

extracted_from_files

IP
detected IP: ed::

XIOC detected IP: ed::

extracted_from_files

Domain
detected Domain: t.target

XIOC detected Domain: t.target

extracted_from_files

Domain
detected Domain: t.data

XIOC detected Domain: t.data

extracted_from_files

Domain
detected Domain: h.click

XIOC detected Domain: h.click

extracted_from_files

Domain
detected Domain: k.click

XIOC detected Domain: k.click

extracted_from_files

Domain
detected Domain: n.ht

XIOC detected Domain: n.ht

extracted_from_files

Domain
detected Domain: q.za

XIOC detected Domain: q.za

extracted_from_files

Domain
detected Domain: www.bing.com

XIOC detected Domain: www.bing.com

extracted_from_files

Domain
detected Domain: yandex.com

XIOC detected Domain: yandex.com

extracted_from_files

Domain
detected Domain: image.baidu.com

XIOC detected Domain: image.baidu.com

extracted_from_files

Domain
detected Domain: window.open

XIOC detected Domain: window.open

extracted_from_files

Domain
detected Domain: event.target

XIOC detected Domain: event.target

extracted_from_files

Domain
detected Domain: dzq.uz

XIOC detected Domain: dzq.uz

extracted_from_files

Domain
detected Domain: b.bf

XIOC detected Domain: b.bf

extracted_from_files

Domain
detected Domain: g.gu

XIOC detected Domain: g.gu

extracted_from_files

Domain
detected Domain: a.tw

XIOC detected Domain: a.tw

extracted_from_files

Domain
detected Domain: w.mom

XIOC detected Domain: w.mom

extracted_from_files

Domain
detected Domain: k.aw

XIOC detected Domain: k.aw

extracted_from_files

Domain
detected Domain: nyiљ.il

XIOC detected Domain: nyiљ.il

extracted_from_files

Domain
detected Domain: yp.nf

XIOC detected Domain: yp.nf

extracted_from_files

Domain
detected Domain: t.gl

XIOC detected Domain: t.gl

extracted_from_files

Domain
detected Domain: i.gn

XIOC detected Domain: i.gn

extracted_from_files

Domain
detected Domain: k.mq

XIOC detected Domain: k.mq

extracted_from_files

Domain
detected Domain: zmx.pn

XIOC detected Domain: zmx.pn

extracted_from_files

Domain
detected Domain: t.uk

XIOC detected Domain: t.uk

extracted_from_files

Domain
detected Domain: a.ir

XIOC detected Domain: a.ir

extracted_from_files

Domain
detected Domain: 7.so

XIOC detected Domain: 7.so

extracted_from_files

Domain
detected Domain: c.pm

XIOC detected Domain: c.pm

extracted_from_files

Domain
detected Domain: ľnbⱥ.in

XIOC detected Domain: ľnbⱥ.in

extracted_from_files

Domain
detected Domain: dp.pt

XIOC detected Domain: dp.pt

extracted_from_files

Domain
detected Domain: 8.tl

XIOC detected Domain: 8.tl

extracted_from_files

Domain
detected Domain: 10.gl

XIOC detected Domain: 10.gl

extracted_from_files

Domain
detected Domain: c.lc

XIOC detected Domain: c.lc

extracted_from_files

Domain
detected Domain: p.hk

XIOC detected Domain: p.hk

extracted_from_files

Domain
detected Domain: j.az

XIOC detected Domain: j.az

extracted_from_files

Domain
detected Domain: x.ws

XIOC detected Domain: x.ws

extracted_from_files

Domain
detected Domain: l.co

XIOC detected Domain: l.co

extracted_from_files

Domain
detected Domain: a.bn

XIOC detected Domain: a.bn

extracted_from_files

Domain
detected Domain: p.bt

XIOC detected Domain: p.bt

extracted_from_files

Domain
detected Domain: lz.bd

XIOC detected Domain: lz.bd

extracted_from_files

Domain
detected Domain: fontawesome.io

XIOC detected Domain: fontawesome.io

extracted_from_files

Domain
detected Domain: a.je

XIOC detected Domain: a.je

extracted_from_files

Domain
detected Domain: or.za

XIOC detected Domain: or.za

extracted_from_files

Domain
detected Domain: z.ag

XIOC detected Domain: z.ag

extracted_from_files

Domain
detected Domain: x.kh

XIOC detected Domain: x.kh

extracted_from_files

Domain
detected Domain: b.ao

XIOC detected Domain: b.ao

extracted_from_files

IP
detected IP: ::bef

XIOC detected IP: ::bef

extracted_from_files

IP
detected IP: e::af

XIOC detected IP: e::af

extracted_from_files

IP
detected IP: e::bef

XIOC detected IP: e::bef

extracted_from_files

IP
detected Domain: tooltip.show

XIOC detected Domain: tooltip.show

extracted_from_files

Domain
detected Domain: this.next

XIOC detected Domain: this.next

extracted_from_files

Domain
detected Domain: button.bg

XIOC detected Domain: button.bg

extracted_from_files

Domain
detected Domain: bootstrap.min.css.map

XIOC detected Domain: bootstrap.min.css.map

extracted_from_files

Domain
detected Domain: fontawesome.com

XIOC detected Domain: fontawesome.com

extracted_from_files

Domain
detected Domain: form-check-input.is

XIOC detected Domain: form-check-input.is

extracted_from_files

Domain
detected Domain: custom-control-input.is

XIOC detected Domain: custom-control-input.is

extracted_from_files

Domain
detected Domain: custom-file-input.is

XIOC detected Domain: custom-file-input.is

extracted_from_files

Domain
detected Domain: dropdown-menu.show

XIOC detected Domain: dropdown-menu.show

extracted_from_files

Domain
detected Domain: nav-item.show

XIOC detected Domain: nav-item.show

extracted_from_files

Domain
detected Domain: nav-link.show

XIOC detected Domain: nav-link.show

extracted_from_files

Domain
detected Domain: toast.show

XIOC detected Domain: toast.show

extracted_from_files

IP
detected IP: 2::

XIOC detected IP: 2::

extracted_from_files

Domain
detected Domain: getbootstrap.com

XIOC detected Domain: getbootstrap.com

extracted_from_files

Domain
detected Domain: github.com

XIOC detected Domain: github.com

extracted_from_files

Domain
detected Domain: form-control.is

XIOC detected Domain: form-control.is

extracted_from_files

Domain
detected Domain: textarea.form-control.is

XIOC detected Domain: textarea.form-control.is

extracted_from_files

Domain
detected Domain: custom-select.is

XIOC detected Domain: custom-select.is

extracted_from_files

Domain
detected Domain: form-control-file.is

XIOC detected Domain: form-control-file.is

extracted_from_files

IP
detected IP: 8::

XIOC detected IP: 8::

extracted_from_files

IP
detected IP: 422::695

XIOC detected IP: 422::695

extracted_from_files

IP
detected IP: 2::611:6

XIOC detected IP: 2::611:6

extracted_from_files

IP
detected IP: a5::

XIOC detected IP: a5::

extracted_from_files

IP
detected IP: 7::

XIOC detected IP: 7::

extracted_from_files

IP
detected IP: ::6

XIOC detected IP: ::6

extracted_from_files

IP
detected IP: 15::

XIOC detected IP: 15::

extracted_from_files

IP
detected IP: c::6a2

XIOC detected IP: c::6a2

extracted_from_files

IP
detected IP: ::5

XIOC detected IP: ::5

extracted_from_files

IP
detected IP: 12::

XIOC detected IP: 12::

extracted_from_files

IP
detected IP: 3::

XIOC detected IP: 3::

extracted_from_files

IP
detected IP: 4::67

XIOC detected IP: 4::67

extracted_from_files

IP
detected IP: 1::2

XIOC detected IP: 1::2

extracted_from_files

IP
detected IP: f::

XIOC detected IP: f::

extracted_from_files

IP
detected IP: 115::

XIOC detected IP: 115::

extracted_from_files

IP
detected IP: 4::844

XIOC detected IP: 4::844

extracted_from_files

IP
detected IP: 35::

XIOC detected IP: 35::

extracted_from_files

IP
detected IP: 56:6::

XIOC detected IP: 56:6::

extracted_from_files

IP
detected IP: 92::

XIOC detected IP: 92::

extracted_from_files

IP
detected IP: 1::

XIOC detected IP: 1::

extracted_from_files

IP
detected IP: 6::b

XIOC detected IP: 6::b

extracted_from_files

IP
detected IP: 26::

XIOC detected IP: 26::

extracted_from_files

IP
detected IP: ::b

XIOC detected IP: ::b

extracted_from_files

IP
detected IP: ::d

XIOC detected IP: ::d

extracted_from_files

IP
detected IP: ::f

XIOC detected IP: ::f

extracted_from_files

IP
detected IP: 6::

XIOC detected IP: 6::

extracted_from_files

IP
detected IP: 0::

XIOC detected IP: 0::

extracted_from_files

IP
detected IP: ::2

XIOC detected IP: ::2

extracted_from_files

IP
detected IP: 3::bef

XIOC detected IP: 3::bef

extracted_from_files

IP
detected IP: 1::bef

XIOC detected IP: 1::bef

extracted_from_files

IP
detected IP: 4::

XIOC detected IP: 4::

extracted_from_files

IP
detected IP: a::

XIOC detected IP: a::

extracted_from_files

IP
detected IP: 5::

XIOC detected IP: 5::

extracted_from_files

IP
detected IP: 03::f

XIOC detected IP: 03::f

extracted_from_files

IP
detected IP: 9::

XIOC detected IP: 9::

extracted_from_files

Domain
detected Domain: s.je

XIOC detected Domain: s.je

extracted_from_files

Domain
detected Domain: modal.show

XIOC detected Domain: modal.show

extracted_from_files

Domain
detected Domain: oe.select

XIOC detected Domain: oe.select

extracted_from_files

Security Analysis Summary

Security Analysis Overview

Reverse Image Search is a edge extension published by Free Extensions. Version 1.0.0 has been analyzed by the Risky Plugins security platform, receiving a risk score of 100/100 (CRITICAL risk) based on 311 security findings.

Risk Assessment

This extension presents critical security risk. Severe issues were detected, potentially including malware indicators, exposed secrets, or dangerous behaviors. Installation is strongly discouraged until these issues are addressed.

Findings Breakdown

  • High: 28 finding(s)
  • Medium: 227 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Reverse Image Search is published by Free Extensions on the edge marketplace.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Frequently Asked Questions