manifest.json

wxDownload

This is the Google Chrome manifest for the extension named 'wxDownload' and contains the URLs that the app uses, including the launch page, background pages, icons and images and permissions for the app.
Remove manifest.json - Powered by Reason Core Security
MD5:
4b8e90380e2552e589a1262c8670a3ce

SHA-1:
141dfcaffc104683dd34e042c337e9caca6c55ca

SHA-256:
d36dba8a4b1debe867910c34a60df465a0431708e41ebe165891417c2e5c75e3

Scanner detections:
1 / 68

Status:
Potentially unwanted

Explanation:
While the manifest file itself is not malware, it is linked to an unwanted Chrome extension.

What can it do?
  • Can add context menu items to any web page or frame

Analysis date:
12/11/2016 7:10:07 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.wxDownload.ChromePlugin.M
14.9.17.13

Remove manifest.json - Powered by Reason Core Security
File size:
698 Bytes

File type:
Google Chrome extension, installable web app, and theme JSON-formatted manifest file that provides configuration information.

Common path:
C:\users\{user}\appdata\local\google\chrome\user data\default\extensions\abpgoepgjjnfkdbokkpnljcgfldnobfj\4_0\manifest.json

Google Chrome Extension
ID:
abpgoepgjjnfkdbokkpnljcgfldnobfj

Version:
4

Display name:
wxDownload


{
  "background": {
    "page": "background.html"
  },
  "content_scripts": [
    {
      "all_frames": true,
      "js": [
        "content.js"
      ],
      "matches": [
        "http://*/*",
        "https://*/*"
      ],
      "run_at": "document_end"
    }
  ],
  "description": "",
  "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDHFRMLcU4iZFLbSr1x5CiMv1JX8m36eg7RGXjBr5lPkLtcEtNXf7na8zN/RQbbCJpftlZjBeZobsF+ehUWjTVuaG5ShD0p/uGGd3Jcs56fp9Qj9wkck3HEaYwvRaM2AqFMn5BRy272Fm0U81Rg7QgP/5RRGWG628RigK14ccO+WwIDAQAB",
  "manifest_version": 2,
  "name": "wxDownload",
  "permissions": [
    "http://*/*",
    "https://*/*",
    "tabs",
    "cookies",
    "management",
    "notifications",
    "contextMenus",
    "storage"
  ],
  "version": "4"
}
Remove manifest.json - Powered by Reason Core Security