Chrome Web Store
4Versions
1Code reviewed

No malware found

In code review

Our reviewer read this extensionโ€™s code and found no malicious behaviour. An automated risk flag was reviewed and overturned.

What our analysis found

Microsoft Purview Extension, used by 10,000,000 people, showed no malicious code in Extension Auditor's review. Its permissions mean it can read and change data on all websites and can observe network requests. It comes from a trusted publisher and was last updated in May 2026.

The extension is a legitimate enterprise Data Loss Prevention (DLP) tool from Microsoft Corporation. All data flows (URLs, file metadata, download information) are sent exclusively via native messaging to a local Microsoft-owned native host (first-party) for policy enforcement. No network requests to third-party servers, no obfuscation, no remote code loading. The broad permissions (webRequest, tabs, downloads, <all_urls>) are necessary for its DLP functionality. The ML model likely overfitted on permission combinations; the risk-engine flags reflect the permissions' inherent risk, not malicious code.

Microsoft Purview Extension

Microsoft Purview Extension

ID: echcggldkblhodogklpincgchnpgcdco

Supported Languages

๐Ÿ‡ธ๐Ÿ‡ฆArabic
๐Ÿ‡ง๐Ÿ‡ทBrazilian Portuguese
๐Ÿ‡ง๐Ÿ‡ฌBulgarian
๐Ÿ‡จ๐Ÿ‡ณChinese (Simplified)
๐Ÿ‡น๐Ÿ‡ผChinese (Traditional)
๐Ÿ‡ญ๐Ÿ‡ทCroatian
๐Ÿ‡จ๐Ÿ‡ฟCzech
๐Ÿ‡ฉ๐Ÿ‡ฐDanish
๐Ÿ‡ณ๐Ÿ‡ฑDutch
๐Ÿ‡บ๐Ÿ‡ธEnglish
๐Ÿ‡ช๐Ÿ‡ชEstonian
๐Ÿ‡ซ๐Ÿ‡ฎFinnish
๐Ÿ‡ซ๐Ÿ‡ทFrench
๐Ÿ‡ฉ๐Ÿ‡ชGerman
๐Ÿ‡ฌ๐Ÿ‡ทGreek
๐Ÿ‡ฎ๐Ÿ‡ฑHebrew
๐Ÿ‡ญ๐Ÿ‡บHungarian
๐Ÿ‡ฎ๐Ÿ‡ฉIndonesian
๐Ÿ‡ฎ๐Ÿ‡นItalian
๐Ÿ‡ฏ๐Ÿ‡ตJapanese
๐Ÿ‡ฐ๐Ÿ‡ทKorean
๐Ÿ‡ฑ๐Ÿ‡ปLatvian
๐Ÿ‡ฑ๐Ÿ‡นLithuanian
๐Ÿ‡ณ๐Ÿ‡ดNorwegian
๐Ÿ‡ต๐Ÿ‡ฑPolish
๐Ÿ‡ต๐Ÿ‡นPortuguese
๐Ÿ‡ท๐Ÿ‡ดRomanian
๐Ÿ‡ท๐Ÿ‡บRussian
๐Ÿ‡ท๐Ÿ‡ธSerbian
๐Ÿ‡ธ๐Ÿ‡ฐSlovak
๐Ÿ‡ธ๐Ÿ‡ฎSlovenian
๐Ÿ‡ช๐Ÿ‡ธSpanish
๐Ÿ‡ธ๐Ÿ‡ชSwedish
๐Ÿ‡น๐Ÿ‡ญThai
๐Ÿ‡น๐Ÿ‡ทTurkish
๐Ÿ‡บ๐Ÿ‡ฆUkrainian
๐Ÿ‡ป๐Ÿ‡ณVietnamese

Extension Info & Metadata

Status
Active
Version
3.0.2604.200
Size
0.28 MB
Rating
1.6/5
Reviews
24
Users
10,000,000
Type
Extension
Updated
May 20, 2026
Category
Workflow & planning
Price
Free
Featured
No
Visibility
Unlisted
Mature
No
By Google
No
Trusted
Yes
This publisherTrack record
877extensions
30 no longer listed
Scanned by Extension Auditor โ€” Low RiskDevelopers: embed this badge to link to this report.

Publisher Contextual Analysis

Trusted
Author
Microsoft CorporationView Profile
Country
US
Address
One Microsoft Way Redmond, WA 98052 US
Website
Visit
Extensions
877
Active
831
Obsolete
30
Listed
859
Unlisted
18
Users
1,165,957,481

Screenshots & videos

Screenshot 1

Install growth

Item
Type
Severity
Description
webRequest
Permission
Critical
This permission enables the extension to monitor and analyze all web requests made by the browser. Rated Critical because it can observe all network traffic including sensitive data, track browsing behavior, and gather authentication tokens.
<all_urls>
Host
Critical
Broad host access โ€” the extension can read/modify content on every website.
nativeMessaging
Permission
High
This permission enables communication with applications installed on your computer. Rated High because it can exchange data with native programs, potentially exposing system-level information and local files.
downloads
Permission
High
This permission controls file downloads and accesses download history. Rated High because it can download malicious files, access sensitive downloaded documents, and track user download patterns.
Broad Host Permissions
Risk Factor
High
This extension has broad host permissions allowing it to access many or all websites.
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.

Each row lists a threat category the scanner evaluates. A checkmark means the review ran and found no matching issues in that category for this version.

  • Data Exfiltration

    Code review completed; no malicious patterns detected for this category.

  • Unauthorized Data Collection

    Code review completed; no malicious patterns detected for this category.

  • Network Interception

    Code review completed; no malicious patterns detected for this category.

  • Code Injection

    Code review completed; no malicious patterns detected for this category.

  • Credential Theft

    Code review completed; no malicious patterns detected for this category.

  • Obfuscation

    Code review completed; no malicious patterns detected for this category.

  • Tracking

    Code review completed; no malicious patterns detected for this category.

  • Privilege Escalation

    Code review completed; no malicious patterns detected for this category.

  • Phishing

    Code review completed; no malicious patterns detected for this category.

  • Remote Code Loading

    Code review completed; no malicious patterns detected for this category.

  • Other

    Code review completed; no malicious patterns detected for this category.

Gain full insight into all external connections.

Upgrade for full visibility.

About this extension

Protect your organization against sensitive data leaks.

Read the publisherโ€™s full description

Microsoft Purview is a comprehensive set of solutions that help you govern, protect, and manage your entire data estate. As part of the Microsoft Purview launch, Microsoft Compliance Extension will now be called Microsoft Purview extension. The Microsoft Purview extension enables enterprise organizations to enforce Microsoft Purview Data Loss Prevention (DLP) policies on sensitive files that are accessed through the Chrome browser. With this extension, organizations can configure endpoint DLP policies to protect sensitive information from risky or unauthorized sharing, transfer or use. The DLP policies can be configured in flexible modes, including โ€ข Audit mode: Records policy violation events without impacting end user activity. โ€ข Block with Override mode: Records and blocks the activity but allows the user to override when they have a legitimate business need. โ€ข Block mode: Records and blocks the activity without the ability to override. Policies supported by the extension address use cases such as the upload of sensitive files to restricted service domains, printing a sensitive document, saving sensitive files to a network share or removeable storage device, and copying sensitive content to the clipboard. Signals gathered by DLP for endpoints via the extension may also be consumed by our Microsoft Purview Insider Risk Management solution. Learn more here (https://docs.microsoft.com/en-us/microsoft-365/compliance/dlp-chrome-get-started?view=o365-worldwide).

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

No network indicators were extracted from this version.

Version
Size
Verdict
Findings
Permhash
3.0.2604.200
Latest
0.28 MBNo malware found0
3.0.2601.400
0.27 MBNot scannedโ€”
2.0.0.232
0.28 MBNot scannedโ€”
3.0.0.239
0.27 MBNot scannedโ€”
Showing 1 to 4 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.

More from Microsoft Corporation