install.rdf

Ask New Tabs

This is an Install Manifest file for the Ask New Tabs Firefox extension and provides metadata identifying the extension. It is installed within the Mozilla Firefox web browser as part of an addin/plugin.
Remove install.rdf - Powered by Reason Core Security
MD5:
c042cc95d0ab06e8ff2fad0e0e69703a

SHA-1:
35f1677f3e970fe12b2971db0af4299906977d85

SHA-256:
b5d14f3eccdfbd80e6c8cb6529af8ad9cf68ff0105c91f2e9ee4f042d7d0773d

Scanner detections:
1 / 68

Status:
Potentially unwanted

Explanation:
While the manifest file itself is not malware, it is linked to an unwanted Firefox extension.

Analysis date:
12/5/2016 7:30:21 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.MozillaPlugin.K
14.9.18.4

Remove install.rdf - Powered by Reason Core Security
File size:
1.2 KB (1,238 bytes)

File type:
Resource Description Framework (RDF)

Common path:
C:\users\{user}\appdata\roaming\mozilla\firefox\profiles\{user}.default\extensions\{04fc1d22-db06-1362-fc4e-74a4b8c7e863}\install.rdf

Mozilla Extension
Name:
Ask New Tabs

Description:
“Ask New Tabs for Firefox”

Home page:
http://www.search.ask.com/?o=APN10645A&gct=hp&d=406-1483&v=u12712-372&t=4


<RDF xmlns="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:em="http://www.mozilla.org/2004/em-rdf#">
  <Description about="urn:mozilla:install-manifest">
    <em:id>{04FC1D22-DB06-1362-FC4E-74A4B8C7E863}</em:id>
    <em:unpack>true</em:unpack>
    <em:name>Ask New Tabs</em:name>
    <em:version>5.0.0.12712</em:version>
    <em:description>Ask New Tabs for Firefox</em:description>
    <em:homepageURL>http://www.search.ask.com/?o=APN10645A&amp;gct=hp&amp;d=406-1483&amp;v=u12712-372&amp;t=4</em:homepageURL>
    <em:targetApplication>
      <Description>
        <em:id>{ec8030f7-c20a-464f-9b0e-13a3a9e97384}</em:id>
        <!-- firefox -->
        <em:minVersion>4.0</em:minVersion>
        <em:maxVersion>29.*</em:maxVersion>
      </Description>
    </em:targetApplication>
    <em:updateURL>http://ffupdate.cdn.bn-update-download.com/update.rdf?id={04FC1D22-DB06-1362-FC4E-74A4B8C7E863}&amp;p=ilivid.com&amp;sysid=406&amp;appid=1483&amp;v=u12712-372&amp;t=4</em:updateURL>
    <em:updateKey>
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC5l5uUNAxoDP0gcVCfKweH63YtjLUzHBordUGwacNqgWd4E8JNxYiBXjBU8sxTI/MNVXIg7UyTzhwQIdkhWX9POuwOTmFA9BQMvLZst+XUxfuH6x1t8EGLfwasp+m4Pq1adTYxVlQsSEvURxztS5y7lVpppRBFEzC46IsVTAGUUwIDAQAB
</em:updateKey>
  </Description>
</RDF>
Remove install.rdf - Powered by Reason Core Security