manifest.json

FileConverter 1.3

This is the Google Chrome manifest for the extension named 'FileConverter 1.3' and contains the URLs that the app uses, including the launch page, background pages, icons and images and permissions for the app. This is for a Conduit toolbar for Chrome that adds a top iframe to each browser window with ad-supported functions.
Remove manifest.json - Powered by Reason Core Security
MD5:
de3d87ace3ae7d80e5e2e9ef25be5e68

SHA-1:
ce7ee4d278d2b2a2a440dd16b450c74b36db253d

SHA-256:
372062985bd4e75f4df74f24c55ad46987787e14fecb4870162836f37f6c9529

Scanner detections:
1 / 68

Status:
Potentially unwanted

Explanation:
Part of the Conduit/ClientConnect toolbar/extension distribution.

What can it do?
  • Observes and analyzes traffic and has the ability to intercept, block, or modify requests
  • Can add context menu items to any web page or frame
  • Can access the browser's bookmarks as well as add or remove items
  • The extension has full access to the Chrome browser's record of visited pages
  • Has access to the user's location without prompting the user for permission

Analysis date:
12/11/2016 9:01:25 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Adware.ConduitToolbar.ChromePlugin
15.4.20.15

Remove manifest.json - Powered by Reason Core Security
File size:
3.7 KB (3,774 bytes)

File type:
Google Chrome extension, installable web app, and theme JSON-formatted manifest file that provides configuration information.

Common path:
C:\users\{user}\appdata\local\google\chrome\user data\default\extensions\engeblojhfeingnjnfpiceofljnjpldp\10.20.1.508_0\manifest.json

Google Chrome Extension
ID:
engeblojhfeingnjnfpiceofljnjpldp

Version:
10.20.1.508

Display name:
FileConverter 1.3

Description:
FileConverter 1.3

Update URL:
http://autoupdate.chromewebtb.conduit-services.com/sb/?productId=CT3241949&extensionData=\u003Cextension_data\u003E


{
  "background": {
    "page": "js/chromeBackStage.html"
  },
  "chrome_url_overrides": {
    "newtab": "Search/NewTabPages/html/new_tab.html"
  },
  "content_scripts": [
    {
      "all_frames": true,
      "js": [
        "js/bcview.js"
      ],
      "matches": [
        "http://*/*",
        "https://*/*"
      ],
      "run_at": "document_start"
    },
    {
      "all_frames": false,
      "js": [
        "js/conduitEnv.js",
        "js/compatibility.start.js",
        "js/match.js",
        "js/verlyEarly.js"
      ],
      "matches": [
        "http://*/*",
        "https://*/*"
      ],
      "run_at": "document_start"
    },
    {
      "all_frames": false,
      "js": [
        "js/contentScript.js",
        "js/compatibility.end.js"
      ],
      "matches": [
        "http://*/*",
        "https://*/*"
      ],
      "run_at": "document_end"
    },
    {
      "all_frames": true,
      "js": [
        "js/navigationHandler.js"
      ],
      "matches": [
        "http://*/*",
        "https://*/*"
      ],
      "run_at": "document_end"
    }
  ],
  "content_security_policy": "script-src 'self' 'unsafe-eval'; object-src 'self'",
  "default_locale": "en",
  "description": "FileConverter 1.3",
  "icons": {
    "128": "634688351076901355.png",
    "16": "634688351076901355.png",
    "48": "634688351076901355.png"
  },
  "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCxzSjdDQ+SCXKJYdjXscZU0SBT1/yBTSykLC+OgYfTpxvWS8wsz6Bbyx0uEKNvJ53tABlt868KDGbSKXGHwxWKaBbeqvxKxQvkLl3NDvi7he7YvJ9EYSn8M5CgJXxg66ZTri0vS5aF2mp3ez/dCeUU/wiOIMUf+aPaPeqSo5/SxQIDAQAB",
  "manifest_version": 2,
  "name": "FileConverter 1.3",
  "permissions": [
    "storage",
    "tabs",
    "http://*/*",
    "https://*/*",
    "notifications",
    "management",
    "unlimitedStorage",
    "bookmarks",
    "contextMenus",
    "cookies",
    "geolocation",
    "history",
    "idle",
    "webNavigation",
    "chrome://favicon/*",
    "webRequest",
    "webRequestBlocking"
  ],
  "plugins": [
    {
      "path": "plugins/ConduitChromeApiPlugin.dll",
      "public": true
    },
    {
      "path": "plugins/np-cwmp.dll",
      "public": true
    },
    {
      "path": "plugins/ChromeApproveTBPlugin.dll",
      "public": true
    },
    {
      "path": "search/plugins/npConduitNewTabPlugin.dll",
      "public": true
    }
  ],
  "update_url": "http://autoupdate.chromewebtb.conduit-services.com/sb/?productId=CT3241949&extensionData=<extension_data>",
  "version": "10.20.1.508",
  "web_accessible_resources": [
    "js/iframeHost.html*",
    "js/toolbarAPI/toolbarAPI.js*",
    "shouldShowTB.txt",
    "tb/al/wa/RADIO_PLAYER/embedded.html",
    "tb/al/wa/RADIO_PLAYER/bgpage.html",
    "tb/al/wa/RADIO_PLAYER/popup2.html",
    "tb/al/wa/NOTIFICICATION/bgpage.html",
    "tb/al/wa/NOTIFICATION/NotificationPopup.html*",
    "tb/al/wa/NOTIFICATION/Settings.htm*",
    "tb/al/wa/NOTI...
Remove manifest.json - Powered by Reason Core Security