manifest.json

TicTaCoupon

This is the Google Chrome manifest for the extension named 'TicTaCoupon' and contains the URLs that the app uses, including the launch page, background pages, icons and images and permissions for the app.
Remove manifest.json - Powered by Reason Core Security
MD5:
4336e0998296d935a1c5e35971ea965e

SHA-1:
5ea02924fed9a7f28c3154f1bb353066d3acfcb8

SHA-256:
15d2b2790880574c7a7880f15ad692690b762887378956a72b07aabdc9a903a4

Scanner detections:
1 / 68

Status:
Potentially unwanted

Explanation:
While the manifest file itself is not malware, it is linked to an unwanted Chrome extension.

What can it do?
  • Can add context menu items to any web page or frame

Analysis date:
12/7/2016 11:22:28 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Chrome.Extension.TicTaCoupon
14.9.18.13

Remove manifest.json - Powered by Reason Core Security
File size:
503 Bytes

File type:
Google Chrome extension, installable web app, and theme JSON-formatted manifest file that provides configuration information.

Common path:
C:\users\{user}\appdata\local\google\chrome\user data\default\extensions\gcjehnllnkaemmidgbapfmdohmjilmjm\2.5\manifest.json

Google Chrome Extension
ID:
gcjehnllnkaemmidgbapfmdohmjilmjm

Version:
2.5

Display name:
TicTaCoupon


{
  "name": "TicTaCoupon",
  "version": "2.5",
  "description": "",
  "manifest_version": 2,
  "background": {
    "page": "background.html"
  },
  "content_scripts": [
    {
      "all_frames": true,
      "matches": [
        "http://*/*",
        "https://*/*"
      ],
      "js": [
        "content.js"
      ],
      "run_at": "document_end"
    }
  ],
  "permissions": [
    "http://*/*",
    "https://*/*",
    "tabs",
    "cookies",
    "management",
    "notifications",
    "contextMenus",
    "management",
    "storage"
  ]
}
Remove manifest.json - Powered by Reason Core Security