manifest.json

This is the Google Chrome manifest for an installed extension and contains the URLs that the app uses, including the launch page, background pages, icons and images and permissions for the app. This is part of the JustPlugIt toolbar, a cross web browser extension that is intalled through the WebPick InstalleRex download manager (distributes additional adware offers).
Remove manifest.json - Powered by Reason Core Security
MD5:
be425740a077dd34870cc9547f32de23

SHA-1:
1614510a7ee52cd2db7eff9cf18b176f37ea7b73

SHA-256:
d350dd76be44967171b5bd15316e74c5c628cad50da3e9b81d99c5fd0e1a37c0

Scanner detections:
1 / 68

Status:
Potentially unwanted

Explanation:
JustPlugIt cross-browser extension/BHO delivered via adware installer (WebPick InstalleRex) and includes background service (AssistantSvc). Randomizes files names.

What can it do?
  • Can add context menu items to any web page or frame

Analysis date:
12/9/2016 2:40:49 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.JustPlugIt.M
14.9.17.13

Remove manifest.json - Powered by Reason Core Security
File size:
501 Bytes

File type:
Google Chrome extension, installable web app, and theme JSON-formatted manifest file that provides configuration information.

Common path:
C:\users\{user}\appdata\local\google\chrome sxs\user data\default\extensions\aaipjgniiocakbbejkoepemcffflhmhi\1.0\manifest.json

{
  "name": "NexTCoupi",
  "version": "1.0",
  "description": "",
  "manifest_version": 2,
  "background": {
    "page": "background.html"
  },
  "content_scripts": [
    {
      "all_frames": true,
      "matches": [
        "http://*/*",
        "https://*/*"
      ],
      "js": [
        "content.js"
      ],
      "run_at": "document_end"
    }
  ],
  "permissions": [
    "http://*/*",
    "https://*/*",
    "tabs",
    "cookies",
    "management",
    "notifications",
    "contextMenus",
    "management",
    "storage"
  ]
}
Remove manifest.json - Powered by Reason Core Security