Chrome Web Store
50Versions
1Code reviewed

No malware found

In code review

Our reviewer read this extension’s code and found no malicious behaviour. An automated risk flag was reviewed and overturned.

What our analysis found

IE Tab, used by 4,000,000 people, showed no malicious code in Extension Auditor's review. Its permissions mean it can read and change data on all websites and can observe network requests. It comes from a trusted publisher and was last updated in July 2026.

IE Tab is a widely-used (4M users) extension that requires broad permissions (webRequest, nativeMessaging, cookies, etc.) to emulate Internet Explorer within Chrome. All permissions and network communications serve the stated purpose: redirecting auto URLs to IE Tab, syncing cookies, communicating with the native helper, and validating licenses via the publisher's own domain (). The ML risk score (0.00) is low; the flagged patterns (e.g., innerHTML, appendChild, base64) are typical of the bundled Myrtille RDP client and normal DOM operations, not obfuscation. There is no evidence of data exfiltration to third parties, unauthorized tracking, remote code injection, or credential theft. The published manifest matches the bundled manifest. The CWS-disclosed data collection as 'none' is inconsistent with the license ping, but that ping goes to the publisher's own privacy-policy domain for license verification, which is a legitimate business purpose and would be covered by the external privacy policy. The extension is a legitimate productivity tool, not malware.

IE Tab

IE Tab Chrome extension security report

ID: hehijbfgiekmjfkfjpbkbammjbdenadd

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status
Active
Version
19.3.5.1
Size
0.91 MB
Rating
4.3/5
Reviews
19,090
Users
4,000,000
Type
Extension
Updated
Jul 11, 2026
Category
Tools
Price
Paid
Featured
Yes
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
This publisherTrack record
2extensions
All still listed
Scanned by Extension Auditor — Low RiskDevelopers: embed this badge to link to this report.

Publisher Contextual Analysis

Trusted
Author
Blackfish Software, LLC
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
Yes
Mailbox exists
Yes
Website
Visit
Extensions
2
Active
2
Obsolete
0
Listed
2
Unlisted
0
Users
6,134,838

Screenshots & videos

Screenshot 1
Screenshot 2
Screenshot 3

Install growth

Item
Type
Severity
Description
webRequest
Permission
Critical
This permission enables the extension to monitor and analyze all web requests made by the browser. Rated Critical because it can observe all network traffic including sensitive data, track browsing behavior, and gather authentication tokens.
webRequestBlocking
Permission
Critical
This permission allows the extension to intercept, modify, or block any web request in real-time before it reaches its destination. Rated Critical because it can modify sensitive data (like passwords, credit cards) before encryption, redirect traffic to malicious sites, or block security updates.
declarativeNetRequestWithHostAccess
Permission
Critical
This permission combines network request modification with host permissions. Rated Critical because it can modify requests for specific domains, potentially targeting sensitive websites with precise attack rules.
<all_urls>
Host
Critical
Broad host access — the extension can read/modify content on every website.
Dangerous Permission Combination
Risk Factor
Critical
This extension can intercept, modify, and block web requests in real-time.
nativeMessaging
Permission
High
This permission enables communication with applications installed on your computer. Rated High because it can exchange data with native programs, potentially exposing system-level information and local files.
cookies
Permission
High
This permission provides full access to read and modify browser cookies. Rated High because it can steal session tokens, modify authentication cookies, and compromise accounts across websites.
offscreen
Permission
High
This permission creates hidden browser documents with full DOM access. Rated High because it can run background operations invisibly, potentially executing malicious code without user awareness.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 10% increase: Early script execution enables pre-emptive content manipulation
Broad Host Permissions
Risk Factor
High
This extension has broad host permissions allowing it to access many or all websites.
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
Early Content Script Execution
Risk Factor
Medium
This extension runs content scripts at document_start.
contextMenus
Permission
Low
This permission adds items to browser context menus. Rated Medium because it only modifies right-click menus without access to page content.
alarms
Permission
Low
This permission schedules periodic tasks. Rated Low because it can only trigger events at specified times without access to sensitive data.

Each row lists a threat category the scanner evaluates. A checkmark means the review ran and found no matching issues in that category for this version.

  • Data Exfiltration

    Code review completed; no malicious patterns detected for this category.

  • Unauthorized Data Collection

    Code review completed; no malicious patterns detected for this category.

  • Network Interception

    Code review completed; no malicious patterns detected for this category.

  • Code Injection

    Code review completed; no malicious patterns detected for this category.

  • Credential Theft

    Code review completed; no malicious patterns detected for this category.

  • Obfuscation

    Code review completed; no malicious patterns detected for this category.

  • Tracking

    Code review completed; no malicious patterns detected for this category.

  • Privilege Escalation

    Code review completed; no malicious patterns detected for this category.

  • Phishing

    Code review completed; no malicious patterns detected for this category.

  • Remote Code Loading

    Code review completed; no malicious patterns detected for this category.

  • Other

    Code review completed; no malicious patterns detected for this category.

Gain full insight into all external connections.

Upgrade for full visibility.

About this extension

Display web pages using IE within Chrome. Use Java, Silverlight, ActiveX, Sharepoint, and more.

Read the publisher’s full description

IE Tab exactly emulates Internet Explorer, and enables you to load your web pages with different versions of IE (IE7 - IE11) FULLY SUPPORTED IN WINDOWS 11 AND AFTER INTERNET EXPLORER IS REMOVED IN FEBRUARY 2023. Please note that IE Tab for Windows does require the use of a separate executable, ietabhelper.exe. You can read more about that in the FAQ below. -- FEATURES -- * Create a list of URLs that will automatically open in IE Tab * Group Policy support for enterprise deployments * Securely use the old IE rendering engine * Edit Sharepoint documents instead of opening read-only * Use Java, Silverlight, and ActiveX in Chrome seamlessly -- FREQUENTLY ASKED QUESTIONS -- 1. Why do I have to install ietabhelper.exe? IE Tab uses the Internet Explorer rendering engine. This rendering engine can't be directly accessed from a Chrome extension, so we need a helper process to communicate between the Chrome extension and the rendering engine. 2. Did IE Tab always require this extra program? No. Chrome used to support a technology called NPAPI (the Netscape Plugin API) which allowed extensions to access local computer resources. IE Tab used to use that functionality to access the Internet Explorer rendering engine. But Chrome removed NPAPI support, so we were forced to implement a new solution, and that solution requires a separate helper executable. From a technical standpoint, the only real change is that our code moved from an NPAPI .DLL file to a helper .EXE file. 3. Is the IE Tab Helper application safe? Absolutely! IE Tab has always used native code, and we have always treated the security of our 2+ million users very seriously. So you can rest assured that this helper executable is secure and trustworthy. 4. I'm an enterprise customer, how do I deploy the IE Tab Helper automatically? We have enterprise deployment options, please contact us at support@ietab.net for details. The Privacy Policy for the IE Tab extension can be found here: http://www.ietab.net/privacy-policy

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs
57
IPv4
15

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

Gain full insight into all external connections.

Upgrade for full visibility.

Version
Size
Verdict
Findings
Permhash
19.3.5.1
Latest
0.91 MBNo malware found0
96a8928373a318f122953fa4f904e972cfbd996918f7a5ab8df8fe91452d2678
18.12.12.1
0.91 MBNot scanned—
92fb68b7509897833873755d8fbe5f35af78898fd7b63ba7d560878ecc0135f5
18.8.19.1
0.92 MBNot scanned—
96a8928373a318f122953fa4f904e972cfbd996918f7a5ab8df8fe91452d2678
18.8.6.1
0.92 MBNot scanned—
96a8928373a318f122953fa4f904e972cfbd996918f7a5ab8df8fe91452d2678
17.10.21.1
0.92 MBNot scanned—
96a8928373a318f122953fa4f904e972cfbd996918f7a5ab8df8fe91452d2678
17.8.1.1
0.92 MBNot scanned—
96a8928373a318f122953fa4f904e972cfbd996918f7a5ab8df8fe91452d2678
17.7.5.1
0.92 MBNot scanned—
96a8928373a318f122953fa4f904e972cfbd996918f7a5ab8df8fe91452d2678
17.7.3.1
0.92 MBNot scanned—
4d4683bc04ced227a44ee29c977c89eb993a40c949400ea0d9efc9e5f22a3159
17.6.25.1
0.92 MBNot scanned—
4d4683bc04ced227a44ee29c977c89eb993a40c949400ea0d9efc9e5f22a3159
17.6.17.1
0.92 MBNot scanned—
4d4683bc04ced227a44ee29c977c89eb993a40c949400ea0d9efc9e5f22a3159
Showing 1 to 10 of 50 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.

More from Blackfish Software, LLC