Is "Acrolinx for Microsoft Edge" on Microsoft Edge Add-ons Safe to Install?

Acrolinx · edge · v1.2.0.249

Acrolinx is an AI-powered platform that eliminates content chaos and delivers strategy-aligned content

Risk Assessment

Analyzed
84.46
out of 100
HIGH

238 security findings detected across all analyzers

Severity Breakdown

0
Critical
24
High
197
Medium
0
Low
0
Info

Finding Categories

24
Malware Signatures
3
Network
194
IoC Indicators

YARA Rules Matched

10 rules(24 hits)
postinstall system command postinstall obfuscation postinstall file download postinstall file manipulation postinstall network communication LocalStorageShouldNotBeUsed credential metamask extension postinstall crypto operations NoUseWeakRandom credential env files

Detailed Findings

44 total

YARA Rule Matches

10 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

URLs
32
IP Addresses
7
Domains
159
Strings
194

All Indicators · 194

Domain
detected Domain: h.prototype.run

XIOC detected Domain: h.prototype.run

extracted_from_files

Domain
detected Domain: pr.rest

XIOC detected Domain: pr.rest

extracted_from_files

URL
detected URL: https://acrolinx-sidebar-classic.s3.amazonaws.com;

XIOC detected URL: https://acrolinx-sidebar-classic.s3.amazonaws.com;

extracted_from_files

URL
detected URL: https://mths.be/platform

XIOC detected URL: https://mths.be/platform

extracted_from_files

URL
detected URL: https://raw.githubusercontent.com/stefanpenner/es6-promise/master/LICENSE

XIOC detected URL: https://raw.githubusercontent.com/stefanpenner/es6-promise/master/LICENSE

extracted_from_files

URL
detected URL: https://docs.acrolinx.com/doc/en

XIOC detected URL: https://docs.acrolinx.com/doc/en

extracted_from_files

URL
detected URL: https://docs.acrolinx.com/coreplatform/latest/en/the-sidebar/connect-your-sidebar-to-acrolinx

XIOC detected URL: https://docs.acrolinx.com/coreplatform/latest/en/the-sidebar/connect-your-sidebar-to-acrolinx

extracted_from_files

URL
detected URL: https://getfirebug.com/releases/lite/1.3/firebug-lite.js#startOpened=true

XIOC detected URL: https://getfirebug.com/releases/lite/1.3/firebug-lite.js#startOpened=true

extracted_from_files

URL
detected URL: https://docs.acrolinx.com/doc/en',

XIOC detected URL: https://docs.acrolinx.com/doc/en',

extracted_from_files

URL
detected URL: https://docs.acrolinx.com/doc/en'

XIOC detected URL: https://docs.acrolinx.com/doc/en'

extracted_from_files

URL
detected URL: https://docs.acrolinx.com/coreplatform/latest/en/the-sidebar/connect-your-sidebar-to-acrolinx',

XIOC detected URL: https://docs.acrolinx.com/coreplatform/latest/en/the-sidebar/connect-your-sidebar-to-acrolinx',

extracted_from_files

Domain
detected Domain: messageopts.name

XIOC detected Domain: messageopts.name

extracted_from_files

URL
detected URL: https://lodash.com/

XIOC detected URL: https://lodash.com/

extracted_from_files

URL
detected URL: https://js.foundation/

XIOC detected URL: https://js.foundation/

extracted_from_files

URL
detected URL: https://lodash.com/license

XIOC detected URL: https://lodash.com/license

extracted_from_files

URL
detected URL: http://underscorejs.org/LICENSE

XIOC detected URL: http://underscorejs.org/LICENSE

extracted_from_files

URL
detected URL: https://npms.io/search?q=ponyfill.

XIOC detected URL: https://npms.io/search?q=ponyfill.

extracted_from_files

URL
detected URL: http://www.apache.org/licenses/LICENSE-2.0

XIOC detected URL: http://www.apache.org/licenses/LICENSE-2.0

extracted_from_files

Domain
detected Domain: parse.call

XIOC detected Domain: parse.call

extracted_from_files

Domain
detected Domain: data.name

XIOC detected Domain: data.name

extracted_from_files

Domain
detected Domain: this.family

XIOC detected Domain: this.family

extracted_from_files

Domain
detected Domain: os.family

XIOC detected Domain: os.family

extracted_from_files

Domain
detected Domain: platform.ua

XIOC detected Domain: platform.ua

extracted_from_files

Domain
detected Domain: this.data

XIOC detected Domain: this.data

extracted_from_files

Domain
detected Domain: safari.self.tab

XIOC detected Domain: safari.self.tab

extracted_from_files

Domain
detected Domain: www.opera.com

XIOC detected Domain: www.opera.com

extracted_from_files

Domain
detected Domain: stackoverflow.com

XIOC detected Domain: stackoverflow.com

extracted_from_files

Domain
detected Domain: requirejs.org

XIOC detected Domain: requirejs.org

extracted_from_files

Domain
detected Domain: freeglobal.global

XIOC detected Domain: freeglobal.global

extracted_from_files

Domain
detected Domain: hasownproperty.call

XIOC detected Domain: hasownproperty.call

extracted_from_files

Domain
detected Domain: context.java

XIOC detected Domain: context.java

extracted_from_files

Domain
detected Domain: os.name

XIOC detected Domain: os.name

extracted_from_files

Domain
detected Domain: allyoucanleet.com

XIOC detected Domain: allyoucanleet.com

extracted_from_files

Domain
detected Domain: people.mozilla.org

XIOC detected Domain: people.mozilla.org

extracted_from_files

Domain
detected Domain: msdn.microsoft.com

XIOC detected Domain: msdn.microsoft.com

extracted_from_files

Domain
detected Domain: web.archive.org

XIOC detected Domain: web.archive.org

extracted_from_files

Domain
detected Domain: www.howtocreate.co.uk

XIOC detected Domain: www.howtocreate.co.uk

extracted_from_files

URL
detected URL: https://extensionwebstorebase.edgesv.net/v1/crx

XIOC detected URL: https://extensionwebstorebase.edgesv.net/v1/crx

extracted_from_files

URL
detected URL: https://zslabs.com/articles/svg-background-fill

XIOC detected URL: https://zslabs.com/articles/svg-background-fill

extracted_from_files

URL
detected URL: http://docs.blackberry.com/en/developers/deliverables/18169/HTTP_headers_sent_by_BB_Browser_1234911_11.jsp

XIOC detected URL: http://docs.blackberry.com/en/developers/deliverables/18169/HTTP_headers_sent_by_BB_Browser_1234911_11.jsp

extracted_from_files

Domain
detected Domain: 0.cc

XIOC detected Domain: 0.cc

extracted_from_files

Domain
detected Domain: q.cx

XIOC detected Domain: q.cx

extracted_from_files

Domain
detected Domain: extensionwebstorebase.edgesv.net

XIOC detected Domain: extensionwebstorebase.edgesv.net

extracted_from_files

Domain
detected Domain: acrolinx-sidebar-classic.s3.amazonaws.com

XIOC detected Domain: acrolinx-sidebar-classic.s3.amazonaws.com

extracted_from_files

Domain
detected Domain: mths.be

XIOC detected Domain: mths.be

extracted_from_files

Domain
detected Domain: bnjmnt4n.now.sh

XIOC detected Domain: bnjmnt4n.now.sh

extracted_from_files

Domain
detected Domain: exports.fr

XIOC detected Domain: exports.fr

extracted_from_files

Domain
detected Domain: exports.sv

XIOC detected Domain: exports.sv

extracted_from_files

Domain
detected Domain: zslabs.com

XIOC detected Domain: zslabs.com

extracted_from_files

URL
detected URL: http://www.opera.com/support/kb/view/843/

XIOC detected URL: http://www.opera.com/support/kb/view/843/

extracted_from_files

Domain
detected Domain: platform.name

XIOC detected Domain: platform.name

extracted_from_files

Domain
detected Domain: window.top

XIOC detected Domain: window.top

extracted_from_files

URL
detected URL: https://bnjmnt4n.now.sh/

XIOC detected URL: https://bnjmnt4n.now.sh/

extracted_from_files

Domain
detected Domain: exports.help

XIOC detected Domain: exports.help

extracted_from_files

Domain
detected Domain: div.id

XIOC detected Domain: div.id

extracted_from_files

Domain
detected Domain: messageevent.data

XIOC detected Domain: messageevent.data

extracted_from_files

Domain
detected Domain: proxyacrolinxplugin.prototype.download

XIOC detected Domain: proxyacrolinxplugin.prototype.download

extracted_from_files

Domain
detected Domain: exports.dev

XIOC detected Domain: exports.dev

extracted_from_files

Domain
detected Domain: el.style

XIOC detected Domain: el.style

extracted_from_files

Domain
detected Domain: exports.de

XIOC detected Domain: exports.de

extracted_from_files

Domain
detected Domain: m.call

XIOC detected Domain: m.call

extracted_from_files

Domain
detected Domain: super.call

XIOC detected Domain: super.call

extracted_from_files

Domain
detected Domain: sidebarcontentwindow.document.open

XIOC detected Domain: sidebarcontentwindow.document.open

extracted_from_files

Domain
detected Domain: 1.open

XIOC detected Domain: 1.open

extracted_from_files

Domain
detected Domain: component.id

XIOC detected Domain: component.id

extracted_from_files

Domain
detected Domain: component.name

XIOC detected Domain: component.name

extracted_from_files

Domain
detected Domain: allcomponentssorted.map

XIOC detected Domain: allcomponentssorted.map

extracted_from_files

Domain
detected Domain: p.pa

XIOC detected Domain: p.pa

extracted_from_files

Domain
detected Domain: x.re

XIOC detected Domain: x.re

extracted_from_files

Domain
detected Domain: node.style

XIOC detected Domain: node.style

extracted_from_files

Domain
detected Domain: component.call

XIOC detected Domain: component.call

extracted_from_files

Domain
detected Domain: generator.next

XIOC detected Domain: generator.next

extracted_from_files

Domain
detected Domain: y.next

XIOC detected Domain: y.next

extracted_from_files

Domain
detected Domain: body.call

XIOC detected Domain: body.call

extracted_from_files

Domain
detected Domain: this.props.acrolinxplugin.download

XIOC detected Domain: this.props.acrolinxplugin.download

extracted_from_files

Domain
detected Domain: r.dev

XIOC detected Domain: r.dev

extracted_from_files

Domain
detected Domain: r.de

XIOC detected Domain: r.de

extracted_from_files

Domain
detected Domain: r.fr

XIOC detected Domain: r.fr

extracted_from_files

Domain
detected Domain: r.sv

XIOC detected Domain: r.sv

extracted_from_files

Domain
detected Domain: e.prototype.scrolltocurrentselection.call

XIOC detected Domain: e.prototype.scrolltocurrentselection.call

extracted_from_files

Domain
detected Domain: version.properties

XIOC detected Domain: version.properties

extracted_from_files

Domain
detected Domain: e.style

XIOC detected Domain: e.style

extracted_from_files

Domain
detected Domain: n.next

XIOC detected Domain: n.next

extracted_from_files

Domain
detected Domain: o.open

XIOC detected Domain: o.open

extracted_from_files

Domain
detected Domain: r.help

XIOC detected Domain: r.help

extracted_from_files

URL
detected Domain: urls.de

XIOC detected Domain: urls.de

extracted_from_files

Domain
detected Domain: n.id

XIOC detected Domain: n.id

extracted_from_files

Domain
detected Domain: e.prototype.download

XIOC detected Domain: e.prototype.download

extracted_from_files

Domain
detected Domain: e.prototype.replaceranges.call

XIOC detected Domain: e.prototype.replaceranges.call

extracted_from_files

Domain
detected Domain: object.prototype.tostring.call

XIOC detected Domain: object.prototype.tostring.call

extracted_from_files

Domain
detected Domain: docs.blackberry.com

XIOC detected Domain: docs.blackberry.com

extracted_from_files

URL
detected URL: https://getfirebug.com/releases/lite/1.3/firebug-lite.js#startOpened=true');

XIOC detected URL: https://getfirebug.com/releases/lite/1.3/firebug-lite.js#startOpened=true');

extracted_from_files

IP
detected IP: ::bef

XIOC detected IP: ::bef

extracted_from_files

Domain
detected Domain: t.work

XIOC detected Domain: t.work

extracted_from_files

Domain
detected Domain: slice.call

XIOC detected Domain: slice.call

extracted_from_files

Domain
detected Domain: o.top-t.top

XIOC detected Domain: o.top-t.top

extracted_from_files

Domain
detected Domain: this.fun

XIOC detected Domain: this.fun

extracted_from_files

Domain
detected Domain: dev.opera.com

XIOC detected Domain: dev.opera.com

extracted_from_files

IP
detected Domain: quip.com

XIOC detected Domain: quip.com

extracted_from_files

Domain
detected Domain: e.data

XIOC detected Domain: e.data

extracted_from_files

Domain
detected Domain: activetab.id

XIOC detected Domain: activetab.id

extracted_from_files

Domain
detected Domain: e.prototype.selectranges.call

XIOC detected Domain: e.prototype.selectranges.call

extracted_from_files

Domain
detected Domain: o.top

XIOC detected Domain: o.top

extracted_from_files

Domain
detected Domain: n.top

XIOC detected Domain: n.top

extracted_from_files

Domain
detected Domain: n.document.open

XIOC detected Domain: n.document.open

extracted_from_files

Domain
detected Domain: window.open

XIOC detected Domain: window.open

extracted_from_files

Domain
detected Domain: t.browser.name

XIOC detected Domain: t.browser.name

extracted_from_files

Domain
detected Domain: document.body.style

XIOC detected Domain: document.body.style

extracted_from_files

Domain
detected Domain: t.top

XIOC detected Domain: t.top

extracted_from_files

Domain
detected Domain: i.new

XIOC detected Domain: i.new

extracted_from_files

Domain
detected Domain: t.new

XIOC detected Domain: t.new

extracted_from_files

Domain
detected Domain: t.auto

XIOC detected Domain: t.auto

extracted_from_files

Domain
detected Domain: t.is

XIOC detected Domain: t.is

extracted_from_files

Domain
detected Domain: pos.top

XIOC detected Domain: pos.top

extracted_from_files

Domain
detected Domain: e.top

XIOC detected Domain: e.top

extracted_from_files

Domain
detected Domain: c.style.top

XIOC detected Domain: c.style.top

extracted_from_files

Domain
detected Domain: n.map

XIOC detected Domain: n.map

extracted_from_files

Domain
detected Domain: v.map

XIOC detected Domain: v.map

extracted_from_files

Domain
detected Domain: console.info

XIOC detected Domain: console.info

extracted_from_files

Domain
detected Domain: e.id

XIOC detected Domain: e.id

extracted_from_files

Domain
detected Domain: this.adapters.map

XIOC detected Domain: this.adapters.map

extracted_from_files

Domain
detected Domain: c.id

XIOC detected Domain: c.id

extracted_from_files

Domain
detected Domain: r.map

XIOC detected Domain: r.map

extracted_from_files

Domain
detected Domain: object.hasownproperty.call

XIOC detected Domain: object.hasownproperty.call

extracted_from_files

Domain
detected Domain: t.host

XIOC detected Domain: t.host

extracted_from_files

Domain
detected Domain: date.now

XIOC detected Domain: date.now

extracted_from_files

Domain
detected Domain: n.open

XIOC detected Domain: n.open

extracted_from_files

Domain
detected Domain: location.host

XIOC detected Domain: location.host

extracted_from_files

Domain
detected Domain: e.map

XIOC detected Domain: e.map

extracted_from_files

Domain
detected Domain: r.call

XIOC detected Domain: r.call

extracted_from_files

Domain
detected Domain: pr.prototype.at

XIOC detected Domain: pr.prototype.at

extracted_from_files

Domain
detected Domain: pr.prototype.next

XIOC detected Domain: pr.prototype.next

extracted_from_files

Domain
detected Domain: r.next

XIOC detected Domain: r.next

extracted_from_files

Domain
detected Domain: o.call

XIOC detected Domain: o.call

extracted_from_files

Domain
detected Domain: t.call

XIOC detected Domain: t.call

extracted_from_files

Domain
detected Domain: n.call

XIOC detected Domain: n.call

extracted_from_files

Domain
detected Domain: i.next

XIOC detected Domain: i.next

extracted_from_files

Domain
detected Domain: pr.lt

XIOC detected Domain: pr.lt

extracted_from_files

Domain
detected Domain: pr.now

XIOC detected Domain: pr.now

extracted_from_files

Domain
detected Domain: a.call

XIOC detected Domain: a.call

extracted_from_files

Domain
detected Domain: j.call

XIOC detected Domain: j.call

extracted_from_files

Domain
detected Domain: o.global

XIOC detected Domain: o.global

extracted_from_files

Domain
detected Domain: this.map

XIOC detected Domain: this.map

extracted_from_files

Domain
detected Domain: n.name

XIOC detected Domain: n.name

extracted_from_files

Domain
detected Domain: this.store

XIOC detected Domain: this.store

extracted_from_files

IP
detected Domain: pr.zip

XIOC detected Domain: pr.zip

extracted_from_files

Domain
detected Domain: event.name

XIOC detected Domain: event.name

extracted_from_files

Domain
detected Domain: t.data

XIOC detected Domain: t.data

extracted_from_files

Domain
detected Domain: pr.at

XIOC detected Domain: pr.at

extracted_from_files

Domain
detected Domain: pr.map

XIOC detected Domain: pr.map

extracted_from_files

Domain
detected Domain: pr.property

XIOC detected Domain: pr.property

extracted_from_files

Domain
detected Domain: e.name

XIOC detected Domain: e.name

extracted_from_files

Domain
detected Domain: t.name

XIOC detected Domain: t.name

extracted_from_files

Domain
detected Domain: dr.call

XIOC detected Domain: dr.call

extracted_from_files

Domain
detected Domain: o.name

XIOC detected Domain: o.name

extracted_from_files

Domain
detected Domain: o.map

XIOC detected Domain: o.map

extracted_from_files

Domain
detected Domain: kn.call

XIOC detected Domain: kn.call

extracted_from_files

Domain
detected Domain: e.next

XIOC detected Domain: e.next

extracted_from_files

Domain
detected Domain: ct.call

XIOC detected Domain: ct.call

extracted_from_files

Domain
detected Domain: o.now

XIOC detected Domain: o.now

extracted_from_files

Domain
detected Domain: ot.date.now

XIOC detected Domain: ot.date.now

extracted_from_files

Domain
detected Domain: lt.call

XIOC detected Domain: lt.call

extracted_from_files

Domain
detected Domain: fr.call

XIOC detected Domain: fr.call

extracted_from_files

Domain
detected Domain: nt.call

XIOC detected Domain: nt.call

extracted_from_files

Domain
detected Domain: pt.call

XIOC detected Domain: pt.call

extracted_from_files

Domain
detected Domain: www.apache.org

XIOC detected Domain: www.apache.org

extracted_from_files

Domain
detected Domain: docs.acrolinx.com

XIOC detected Domain: docs.acrolinx.com

extracted_from_files

Domain
detected Domain: getfirebug.com

XIOC detected Domain: getfirebug.com

extracted_from_files

Domain
detected Domain: object.prototype.hasownproperty.call

XIOC detected Domain: object.prototype.hasownproperty.call

extracted_from_files

Domain
detected Domain: e.call

XIOC detected Domain: e.call

extracted_from_files

Domain
detected Domain: t.date

XIOC detected Domain: t.date

extracted_from_files

Domain
detected Domain: st.keys.ie

XIOC detected Domain: st.keys.ie

extracted_from_files

IP
detected IP: ::af

XIOC detected IP: ::af

extracted_from_files

IP
detected IP: 8.55.8.8

XIOC detected IP: 8.55.8.8

extracted_from_files

IP
detected IP: 1.2.0.249

XIOC detected IP: 1.2.0.249

extracted_from_files

Domain
detected Domain: lodash.com

XIOC detected Domain: lodash.com

extracted_from_files

Domain
detected Domain: js.foundation

XIOC detected Domain: js.foundation

extracted_from_files

Domain
detected Domain: underscorejs.org

XIOC detected Domain: underscorejs.org

extracted_from_files

Domain
detected Domain: npms.io

XIOC detected Domain: npms.io

extracted_from_files

Domain
detected Domain: vn.call

XIOC detected Domain: vn.call

extracted_from_files

Domain
detected Domain: pr.gt

XIOC detected Domain: pr.gt

extracted_from_files

URL
detected URL: https://docs.acrolinx.com/coreplatform/latest/de/the-sidebar/connect-your-sidebar-to-acrolinx'

XIOC detected URL: https://docs.acrolinx.com/coreplatform/latest/de/the-sidebar/connect-your-sidebar-to-acrolinx'

extracted_from_files

URL
detected URL: http://dev.opera.com/articles/view/opera-mini-web-content-authoring-guidelines/#operamini

XIOC detected URL: http://dev.opera.com/articles/view/opera-mini-web-content-authoring-guidelines/#operamini

extracted_from_files

URL
detected URL: http://www.howtocreate.co.uk/operaStuff/operaObject.html

XIOC detected URL: http://www.howtocreate.co.uk/operaStuff/operaObject.html

extracted_from_files

URL
detected URL: http://web.archive.org/web/20081122053950/http://msdn.microsoft.com/en-us/library/ms537503(VS.85).aspx

XIOC detected URL: http://web.archive.org/web/20081122053950/http://msdn.microsoft.com/en-us/library/ms537503(VS.85).aspx

extracted_from_files

URL
detected URL: http://msdn.microsoft.com/en-us/library/ms537503(VS.85).aspx

XIOC detected URL: http://msdn.microsoft.com/en-us/library/ms537503(VS.85).aspx

extracted_from_files

URL
detected URL: http://people.mozilla.org/~jorendorff/es6-draft.html#sec-tolength)

XIOC detected URL: http://people.mozilla.org/~jorendorff/es6-draft.html#sec-tolength)

extracted_from_files

URL
detected URL: https://mths.be/mit

XIOC detected URL: https://mths.be/mit

extracted_from_files

URL
detected URL: http://allyoucanleet.com/

XIOC detected URL: http://allyoucanleet.com/

extracted_from_files

URL
detected URL: http://requirejs.org/docs/errors.html#mismatch

XIOC detected URL: http://requirejs.org/docs/errors.html#mismatch

extracted_from_files

URL
detected URL: http://stackoverflow.com/questions/6768474/how-can-i-detect-which-javascript-engine-v8-or-jsc-is-used-at-runtime-in-androi

XIOC detected URL: http://stackoverflow.com/questions/6768474/how-can-i-detect-which-javascript-engine-v8-or-jsc-is-used-at-runtime-in-androi

extracted_from_files

Domain
detected Domain: tostring.call

XIOC detected Domain: tostring.call

extracted_from_files

Domain
detected Domain: y.data

XIOC detected Domain: y.data

extracted_from_files

Domain
detected Domain: o.off

XIOC detected Domain: o.off

extracted_from_files

Security Analysis Summary

Security Analysis Overview

Acrolinx for Microsoft Edge is a edge extension published by Acrolinx. Version 1.2.0.249 has been analyzed by the Risky Plugins security platform, receiving a risk score of 84.46/100 (HIGH risk) based on 238 security findings.

Risk Assessment

This extension presents critical security risk. Severe issues were detected, potentially including malware indicators, exposed secrets, or dangerous behaviors. Installation is strongly discouraged until these issues are addressed.

Findings Breakdown

  • High: 24 finding(s)
  • Medium: 197 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Acrolinx for Microsoft Edge is published by Acrolinx on the edge marketplace.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Frequently Asked Questions