manifest.json

FileConverter 1.3

This is the Google Chrome manifest for the extension named 'FileConverter 1.3' and contains the URLs that the app uses, including the launch page, background pages, icons and images and permissions for the app. This is for a Conduit toolbar for Chrome that adds a top iframe to each browser window with ad-supported functions.
Remove manifest.json - Powered by Reason Core Security
MD5:
8e596c833f61a10fc879d3239d7dcfb1

SHA-1:
d7c089d477259516c0b0b4e36e80dde906517fc7

SHA-256:
e683363984d6a3dfa01156817ff173f79673c9918667a89f8861f1dcefd326a4

Scanner detections:
1 / 68

Status:
Potentially unwanted

Explanation:
Part of the Conduit/ClientConnect toolbar/extension distribution.

What can it do?
  • Observes and analyzes traffic and has the ability to intercept, block, or modify requests
  • Can add context menu items to any web page or frame
  • Can access the browser's bookmarks as well as add or remove items
  • The extension has full access to the Chrome browser's record of visited pages
  • Has access to the user's location without prompting the user for permission

Analysis date:
12/8/2016 5:24:06 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Adware.ConduitToolbar.ChromePlugin
15.4.20.15

Remove manifest.json - Powered by Reason Core Security
File size:
3.6 KB (3,684 bytes)

File type:
Google Chrome extension, installable web app, and theme JSON-formatted manifest file that provides configuration information.

Common path:
C:\users\{user}\appdata\local\google\chrome\user data\default\extensions\engeblojhfeingnjnfpiceofljnjpldp\10.15.2.523_0\manifest.json

Google Chrome Extension
ID:
engeblojhfeingnjnfpiceofljnjpldp

Version:
10.15.2.523

Display name:
FileConverter 1.3

Description:
FileConverter 1.3

Update URL:
http://autoupdate.chromewebtb.conduit-services.com/sb/?productId=CT3241949&extensionData=\u003Cextension_data\u003E


{
  "background": {
    "page": "js/chromeBackStage.html"
  },
  "chrome_url_overrides": {
    "newtab": "Search/NewTabPages/html/new_tab.html"
  },
  "content_scripts": [
    {
      "all_frames": true,
      "js": [
        "js/bcview.js"
      ],
      "matches": [
        "http://*/*",
        "https://*/*"
      ],
      "run_at": "document_start"
    },
    {
      "all_frames": false,
      "js": [
        "js/conduitEnv.js",
        "js/compatibility.start.js",
        "js/match.js",
        "js/verlyEarly.js"
      ],
      "matches": [
        "http://*/*",
        "https://*/*"
      ],
      "run_at": "document_start"
    },
    {
      "all_frames": false,
      "js": [
        "js/contentScript.js",
        "js/compatibility.end.js"
      ],
      "matches": [
        "http://*/*",
        "https://*/*"
      ],
      "run_at": "document_end"
    },
    {
      "all_frames": true,
      "js": [
        "js/navigationHandler.js"
      ],
      "matches": [
        "http://*/*",
        "https://*/*"
      ],
      "run_at": "document_end"
    }
  ],
  "content_security_policy": "script-src 'self' 'unsafe-eval'; object-src 'self'",
  "default_locale": "en",
  "description": "FileConverter 1.3",
  "icons": {
    "128": "634688351076901355.png",
    "16": "634688351076901355.png",
    "48": "634688351076901355.png"
  },
  "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCxzSjdDQ+SCXKJYdjXscZU0SBT1/yBTSykLC+OgYfTpxvWS8wsz6Bbyx0uEKNvJ53tABlt868KDGbSKXGHwxWKaBbeqvxKxQvkLl3NDvi7he7YvJ9EYSn8M5CgJXxg66ZTri0vS5aF2mp3ez/dCeUU/wiOIMUf+aPaPeqSo5/SxQIDAQAB",
  "manifest_version": 2,
  "name": "FileConverter 1.3",
  "permissions": [
    "storage",
    "tabs",
    "http://*/*",
    "https://*/*",
    "notifications",
    "management",
    "unlimitedStorage",
    "bookmarks",
    "contextMenus",
    "cookies",
    "geolocation",
    "history",
    "idle",
    "webNavigation",
    "chrome://favicon/*",
    "webRequest",
    "webRequestBlocking"
  ],
  "plugins": [
    {
      "path": "plugins/ConduitChromeApiPlugin.dll",
      "public": true
    },
    {
      "path": "plugins/np-cwmp.dll",
      "public": true
    },
    {
      "path": "plugins/ChromeApproveTBPlugin.dll",
      "public": true
    }
  ],
  "update_url": "http://autoupdate.chromewebtb.conduit-services.com/sb/?productId=CT3241949&extensionData=<extension_data>",
  "version": "10.15.2.523",
  "web_accessible_resources": [
    "js/iframeHost.html*",
    "js/toolbarAPI/toolbarAPI.js*",
    "shouldShowTB.txt",
    "tb/al/wa/RADIO_PLAYER/embedded.html",
    "tb/al/wa/RADIO_PLAYER/bgpage.html",
    "tb/al/wa/RADIO_PLAYER/popup2.html",
    "tb/al/wa/NOTIFICICATION/bgpage.html",
    "tb/al/wa/NOTIFICATION/NotificationPopup.html*",
    "tb/al/wa/NOTIFICATION/Settings.htm*",
    "tb/al/wa/NOTIFICATION/Settings.html*",
    "tb/al/wa/PRICE_GONG/bgpage.html*",
    "tb/al/wa/PRICE_GONG/pg_...
Remove manifest.json - Powered by Reason Core Security