manifest.json

BitTorrentControl_v12

This is the Google Chrome manifest for the extension named 'BitTorrentControl_v12' and contains the URLs that the app uses, including the launch page, background pages, icons and images and permissions for the app. This is for a Conduit toolbar for Chrome that adds a top iframe to each browser window with ad-supported functions.
Remove manifest.json - Powered by Reason Core Security
MD5:
25e827cdcfe96199c6c6b6fc26dc9acd

SHA-1:
4542848686cc44467049b11a8e8a56cbcb8fb95a

SHA-256:
a3e25c8cf3c0f485d340da88325891bf984ada93aa3f76cf063ba642bf86b17e

Scanner detections:
1 / 68

Status:
Potentially unwanted

Explanation:
Part of the Conduit/ClientConnect toolbar/extension distribution.

What can it do?
  • Has access to the user's location without prompting the user for permission
  • The extension has full access to the Chrome browser's record of visited pages
  • Can access the browser's bookmarks as well as add or remove items
  • Can add context menu items to any web page or frame
  • Observes and analyzes traffic and has the ability to intercept, block, or modify requests

Analysis date:
12/3/2016 2:43:42 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Adware.ConduitToolbar.ChromePlugin
15.4.20.16

Remove manifest.json - Powered by Reason Core Security
File size:
3.7 KB (3,776 bytes)

File type:
Google Chrome extension, installable web app, and theme JSON-formatted manifest file that provides configuration information.

Common path:
C:\users\{user}\appdata\local\google\chrome\user data\default\extensions\dknkjnkhedbanphkkpbpcgoblmkbfhlf\10.16.70.1_0\manifest.json

Google Chrome Extension
ID:
dknkjnkhedbanphkkpbpcgoblmkbfhlf

Version:
10.16.70.1

Display name:
BitTorrentControl_v12

Description:
BitTorrentControl_v12

Update URL:
http://autoupdate.chromewebtb.conduit-services.com/sb/?productId=CT3225826&extensionData=\u003Cextension_data>


{
  "background": {
    "page": "js/chromeBackStage.html"
  },
  "chrome_url_overrides": {
    "newtab": "Search/NewTabPages/html/new_tab.html"
  },
  "content_scripts": [
    {
      "all_frames": true,
      "js": [
        "js/bcview.js"
      ],
      "matches": [
        "http://*/*",
        "https://*/*"
      ],
      "run_at": "document_start"
    },
    {
      "all_frames": false,
      "js": [
        "js/conduitEnv.js",
        "js/compatibility.start.js",
        "js/match.js",
        "js/verlyEarly.js"
      ],
      "matches": [
        "http://*/*",
        "https://*/*"
      ],
      "run_at": "document_start"
    },
    {
      "all_frames": false,
      "js": [
        "js/contentScript.js",
        "js/compatibility.end.js"
      ],
      "matches": [
        "http://*/*",
        "https://*/*"
      ],
      "run_at": "document_end"
    },
    {
      "all_frames": true,
      "js": [
        "js/navigationHandler.js"
      ],
      "matches": [
        "http://*/*",
        "https://*/*"
      ],
      "run_at": "document_end"
    }
  ],
  "content_security_policy": "script-src 'self' 'unsafe-eval'; object-src 'self'",
  "default_locale": "en",
  "description": "BitTorrentControl_v12",
  "icons": {
    "128": "634220815653506250.png",
    "16": "634220815653506250.png",
    "48": "634220815653506250.png"
  },
  "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQClrq250Jp50wu0w1suCgzoadUOq/Bm6cdXqBtfkDkaQ07QOj0LpJ7ehtqHlgv23qhAkzyJRlBXpibwNvxV38kkgmFe2d9mjXMf5sxzBoBSFdxfU4+IjJsBOVwnq62aHMrcSaiPUvLUQJeOmEZ6Zyy10iGzSOYF4+IKO4ThvYb4IwIDAQAB",
  "manifest_version": 2,
  "name": "BitTorrentControl_v12",
  "permissions": [
    "storage",
    "tabs",
    "http://*/*",
    "https://*/*",
    "notifications",
    "management",
    "unlimitedStorage",
    "bookmarks",
    "contextMenus",
    "cookies",
    "geolocation",
    "history",
    "idle",
    "webNavigation",
    "chrome://favicon/*",
    "webRequest",
    "webRequestBlocking"
  ],
  "plugins": [
    {
      "path": "plugins/ConduitChromeApiPlugin.dll",
      "public": true
    },
    {
      "path": "plugins/np-cwmp.dll",
      "public": true
    },
    {
      "path": "plugins/ChromeApproveTBPlugin.dll",
      "public": true
    },
    {
      "path": "search/plugins/npConduitNewTabPlugin.dll",
      "public": true
    }
  ],
  "update_url": "http://autoupdate.chromewebtb.conduit-services.com/sb/?productId=CT3225826&extensionData=<extension_data>",
  "version": "10.16.70.1",
  "web_accessible_resources": [
    "js/iframeHost.html*",
    "js/toolbarAPI/toolbarAPI.js*",
    "shouldShowTB.txt",
    "tb/al/wa/RADIO_PLAYER/embedded.html",
    "tb/al/wa/RADIO_PLAYER/bgpage.html",
    "tb/al/wa/RADIO_PLAYER/popup2.html",
    "tb/al/wa/NOTIFICICATION/bgpage.html",
    "tb/al/wa/NOTIFICATION/NotificationPopup.html*",
    "tb/al/wa/NOTIFICATION/Settings.htm*",
    "tb/al/...
Remove manifest.json - Powered by Reason Core Security