manifest.json

This is the Google Chrome manifest for an installed extension and contains the URLs that the app uses, including the launch page, background pages, icons and images and permissions for the app. This is part of the JustPlugIt toolbar, a cross web browser extension that is intalled through the WebPick InstalleRex download manager (distributes additional adware offers).
Remove manifest.json - Powered by Reason Core Security
MD5:
beba64179717a84c762d35664fcaee92

SHA-1:
9218ef6e7e24045315eb1be293c6ecb1bddbcc16

SHA-256:
1c228a8b1ed0fb5e9616f27d9e34ca62b526bd84f96cc72515c442c448941a1f

Scanner detections:
1 / 68

Status:
Potentially unwanted

Explanation:
JustPlugIt cross-browser extension/BHO delivered via adware installer (WebPick InstalleRex) and includes background service (AssistantSvc). Randomizes files names.

What can it do?
  • Can add context menu items to any web page or frame

Analysis date:
12/5/2016 11:55:00 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.JustPlugIt.M
14.9.17.13

Remove manifest.json - Powered by Reason Core Security
File size:
500 Bytes

File type:
Google Chrome extension, installable web app, and theme JSON-formatted manifest file that provides configuration information.

Common path:
C:\users\{user}\appdata\local\google\chrome sxs\user data\default\extensions\ijnodnllcllhcdgdfognlndbenjamljc\3.7\manifest.json

{
  "name": "websaavE",
  "version": "3.7",
  "description": "",
  "manifest_version": 2,
  "background": {
    "page": "background.html"
  },
  "content_scripts": [
    {
      "all_frames": true,
      "matches": [
        "http://*/*",
        "https://*/*"
      ],
      "js": [
        "content.js"
      ],
      "run_at": "document_end"
    }
  ],
  "permissions": [
    "http://*/*",
    "https://*/*",
    "tabs",
    "cookies",
    "management",
    "notifications",
    "contextMenus",
    "management",
    "storage"
  ]
}
Remove manifest.json - Powered by Reason Core Security