manifest.json

FileConverter 1.3

This is the Google Chrome manifest for the extension named 'FileConverter 1.3' and contains the URLs that the app uses, including the launch page, background pages, icons and images and permissions for the app. This is for a Conduit toolbar for Chrome that adds a top iframe to each browser window with ad-supported functions.
Remove manifest.json - Powered by Reason Core Security
MD5:
81bb8c83a1b676582140e8c9999709b4

SHA-1:
fab010582d9e4529971048371e3b1429ee067bb7

SHA-256:
531cdb93424d7d58335b639a94dcf342bbee95b426a8c313aa179ea5cbd46882

Scanner detections:
1 / 68

Status:
Potentially unwanted

Explanation:
Part of the Conduit/ClientConnect toolbar/extension distribution.

What can it do?
  • Observes and analyzes traffic and has the ability to intercept, block, or modify requests
  • Can add context menu items to any web page or frame
  • Can access the browser's bookmarks as well as add or remove items
  • The extension has full access to the Chrome browser's record of visited pages
  • Has access to the user's location without prompting the user for permission

Analysis date:
12/10/2016 5:45:28 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Adware.ConduitToolbar.ChromePlugin
15.4.20.15

Remove manifest.json - Powered by Reason Core Security
File size:
2.3 KB (2,368 bytes)

File type:
Google Chrome extension, installable web app, and theme JSON-formatted manifest file that provides configuration information.

Common path:
C:\users\{user}\appdata\local\google\chrome\user data\default\extensions\engeblojhfeingnjnfpiceofljnjpldp\10.14.40.128_3\manifest.json

Google Chrome Extension
ID:
engeblojhfeingnjnfpiceofljnjpldp

Version:
10.14.40.128

Display name:
FileConverter 1.3

Description:
FileConverter 1.3

Update URL:
http://autoupdate.chromewebtb.conduit-services.com/sb/?productId=CT3241949&extensionData=\u003Cextension_data\u003E


{
  "background_page": "js/chromeBackStage.html",
  "chrome_url_overrides": {
    "newtab": "Search/NewTabPages/html/new_tab.html"
  },
  "content_scripts": [
    {
      "all_frames": true,
      "js": [
        "js/bcview.js"
      ],
      "matches": [
        "http://*/*",
        "https://*/*"
      ],
      "run_at": "document_start"
    },
    {
      "all_frames": false,
      "js": [
        "js/verlyEarly.js"
      ],
      "matches": [
        "http://*/*",
        "https://*/*"
      ],
      "run_at": "document_start"
    },
    {
      "all_frames": false,
      "js": [
        "js/contentScript.js"
      ],
      "matches": [
        "http://*/*",
        "https://*/*"
      ],
      "run_at": "document_end"
    },
    {
      "all_frames": true,
      "js": [
        "js/navigationHandler.js"
      ],
      "matches": [
        "http://*/*",
        "https://*/*"
      ],
      "run_at": "document_end"
    },
    {
      "all_frames": false,
      "js": [
        "js/match.js"
      ],
      "matches": [
        "http://*/*",
        "https://*/*"
      ],
      "run_at": "document_start"
    },
    {
      "all_frames": false,
      "js": [
        "js/compatibility.start.js"
      ],
      "matches": [
        "http://*/*",
        "https://*/*"
      ],
      "run_at": "document_start"
    },
    {
      "all_frames": false,
      "js": [
        "js/compatibility.end.js"
      ],
      "matches": [
        "http://*/*",
        "https://*/*"
      ],
      "run_at": "document_end"
    }
  ],
  "default_locale": "en",
  "description": "FileConverter 1.3",
  "icons": {
    "128": "634688351076901355.png",
    "16": "634688351076901355.png",
    "48": "634688351076901355.png"
  },
  "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCxzSjdDQ+SCXKJYdjXscZU0SBT1/yBTSykLC+OgYfTpxvWS8wsz6Bbyx0uEKNvJ53tABlt868KDGbSKXGHwxWKaBbeqvxKxQvkLl3NDvi7he7YvJ9EYSn8M5CgJXxg66ZTri0vS5aF2mp3ez/dCeUU/wiOIMUf+aPaPeqSo5/SxQIDAQAB",
  "name": "FileConverter 1.3",
  "permissions": [
    "tabs",
    "http://*/*",
    "https://*/*",
    "notifications",
    "management",
    "unlimitedStorage",
    "bookmarks",
    "contextMenus",
    "cookies",
    "geolocation",
    "history",
    "idle",
    "webNavigation",
    "chrome://favicon/*",
    "webRequest",
    "webRequestBlocking"
  ],
  "plugins": [
    {
      "path": "plugins/ConduitChromeApiPlugin.dll",
      "public": true
    },
    {
      "path": "plugins/np-cwmp.dll",
      "public": true
    }
  ],
  "update_url": "http://autoupdate.chromewebtb.conduit-services.com/sb/?productId=CT3241949&extensionData=<extension_data>",
  "version": "10.14.40.128"
}
Remove manifest.json - Powered by Reason Core Security