defaulttab.xpi

Default Tab

The file defaulttab.xpi has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. It loads in Mozilla Firefox as a compliled extension named 'Default Tab' created by Search Results, LLC.
Remove defaulttab.xpi - Powered by Reason Core Security
MD5:
2dbd5c138d2ad048c4606868e9503f6f

SHA-1:
9dec6c24dfd52e9477939ebf3c962aea554784f0

SHA-256:
a6d37c0eb439ef658dccc0d7d506e37da8f938a598cf252b7f2ba18f6d4187b1

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
12/4/2016 7:12:05 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.MozillaPlugin.N
14.6.13.1

Remove defaulttab.xpi - Powered by Reason Core Security
File size:
21.9 KB (22,426 bytes)

File type:
Cross-Platform Installer Module (XPI), used by Mozilla bundles

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\defaulttab.xpi

Mozilla Extension
Name:
defaulttab.xpi

Display:
Default Tab

Id:
defaulttab

Creator:
Search Results, LLC

Description:
“Default Tab”

Home page:
http://mysearchresults.com/


<RDF xmlns="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:em="http://www.mozilla.org/2004/em-rdf#">
  <Description about="urn:mozilla:install-manifest">
    <em:id>addon@defaulttab.com</em:id>
    <em:name>Default Tab</em:name>
    <em:version>1.4.2</em:version>
    <em:creator>Search Results, LLC</em:creator>
    <em:optionsURL>chrome://defaulttab/content/options.xul</em:optionsURL>
    <em:homepageURL>http://mysearchresults.com/</em:homepageURL>
    <em:updateURL>https://updates.defaulttab.com/firefox</em:updateURL>
    <em:description>Default Tab</em:description>
    <em:targetApplication>
      <Description>
        <em:id>{ec8030f7-c20a-464f-9b0e-13a3a9e97384}</em:id>
        <em:minVersion>3.6</em:minVersion>
        <em:maxVersion>10.*</em:maxVersion>
      </Description>
    </em:targetApplication>
  </Description>
</RDF>
Remove defaulttab.xpi - Powered by Reason Core Security