manifest.json

Lucky Savings

This is the Google Chrome manifest for the extension named 'Lucky Savings' and contains the URLs that the app uses, including the launch page, background pages, icons and images and permissions for the app. It is built using the Crossrider cross-browser extension toolkit. While the file utilizes the Crossrider framework and delivery services, it is not owned by Crossrider. This is part of the CrossRider toolbar platform which may inject various forms af advertising in the user's Chrome browser.
Remove manifest.json - Powered by Reason Core Security
MD5:
eed564ddfb33931e87f16d76d61640d1

SHA-1:
2940f755002c1207c5f4f0e7d9142bc022e02beb

SHA-256:
84b455677c813c71352392caa20e21037d4dbb36617b5687bdcc7a2009369e51

Scanner detections:
1 / 68

Status:
Potentially unwanted

Explanation:
The software may change the browser's home page and search provider settings as well as display advertisements.

What can it do?
  • Can add context menu items to any web page or frame
  • Observes and analyzes traffic and has the ability to intercept, block, or modify requests

Analysis date:
12/9/2016 8:50:13 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Crossrider.ChromePlugin.M
14.9.17.13

Remove manifest.json - Powered by Reason Core Security
File size:
1.1 KB (1,086 bytes)

File type:
Google Chrome extension, installable web app, and theme JSON-formatted manifest file that provides configuration information.

Common path:
C:\users\{user}\appdata\local\google\chrome\user data\default\extensions\anmphbplcihjjkljdofccokpafageioj\1.22.69_0\manifest.json

Google Chrome Extension
ID:
anmphbplcihjjkljdofccokpafageioj

Version:
1.22.69

Display name:
Lucky Savings

Description:
Lucky Savings

Update URL:
https://crossrider.cotssl.net/plugin/chrome/update/12759.xml


{
  "background_page": "background.html",
  "content_scripts": [
    {
      "all_frames": true,
      "js": [
        "js/lib/logging.js",
        "js/lib/reports.js",
        "js/lib/xhr.js",
        "js/api/cookie.js",
        "js/api/message.js",
        "js/lib/async_api.js",
        "js/lib/app_api.js"
      ],
      "matches": [
        "http://*/*",
        "https://*/*"
      ],
      "run_at": "document_start"
    }
  ],
  "description": "Lucky Savings",
  "icons": {
    "128": "icons/icon128.png",
    "16": "icons/icon16.png",
    "48": "icons/icon48.png"
  },
  "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDoqPP+iOjLUUQQMgUbuc/OTSSpKlXx+2eio7pT6qwv3HklulrwGehBddXNXR3xWGIYps+3kCZV4K7a1G+jb61ZSYIJAKPbXrGWrNc6Rf8rY90voxJMq8kEbw7QJHMcwabcH5JobEX7dnyAqTPfyuVpGVbEm5wzYd54NTHuz/BcawIDAQAB",
  "manifest_version": 1,
  "name": "Lucky Savings",
  "permissions": [
    "http://*/*",
    "https://*/*",
    "tabs",
    "cookies",
    "notifications",
    "contextMenus",
    "webNavigation",
    "webRequest",
    "webRequestBlocking",
    "unlimitedStorage"
  ],
  "update_url": "https://crossrider.cotssl.net/plugin/chrome/update/12759.xml",
  "version": "1.22.69"
}
Remove manifest.json - Powered by Reason Core Security