install.rdf

deal2deealit

This is an Install Manifest file for the deal2deealit Firefox extension and provides metadata identifying the extension. It is installed within the Mozilla Firefox web browser as part of an addin/plugin.
Remove install.rdf - Powered by Reason Core Security
MD5:
c8a4bb3ae322c131272e3bf12be1e930

SHA-1:
221695191484932fa8901d2a99c0bbb0e43607d2

SHA-256:
f8d2321589fae500f5dec5278245d6c151f2ba707aeb23e60103aedcafd93778

Scanner detections:
1 / 68

Status:
Potentially unwanted

Explanation:
While the manifest file itself is not malware, it is linked to an unwanted Firefox extension.

Analysis date:
12/8/2016 3:01:53 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Firefox.Extension.deal2deealit
14.9.18.0

Remove install.rdf - Powered by Reason Core Security
File size:
602 Bytes

File type:
Resource Description Framework (RDF)

Common path:
C:\users\{user}\appdata\roaming\mozilla\firefox\profiles\{user}.default\extensions\q_ojb@qibmou.org\install.rdf

Mozilla Extension
Name:
deal2deealit

Description:
“deal2deealit”


<RDF xmlns="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:em="http://www.mozilla.org/2004/em-rdf#">
  <Description about="urn:mozilla:install-manifest">
    <em:id>q_ojb@qibmou.org</em:id>
    <em:name>deal2deealit</em:name>
    <em:version>2.0</em:version>
    <em:bootstrap>true</em:bootstrap>
    <em:targetApplication>
      <Description>
        <em:id>{ec8030f7-c20a-464f-9b0e-13a3a9e97384}</em:id>
        <em:minVersion>2.0</em:minVersion>
        <em:maxVersion>534</em:maxVersion>
      </Description>
    </em:targetApplication>
    <em:description></em:description>
  </Description>
</RDF>
Remove install.rdf - Powered by Reason Core Security