install.rdf

Ask New Tabs

This is an Install Manifest file for the Ask New Tabs Firefox extension and provides metadata identifying the extension. It is installed within the Mozilla Firefox web browser as part of an addin/plugin.
Remove install.rdf - Powered by Reason Core Security
MD5:
cf6b3899feda9993b82d9f553bff2f98

SHA-1:
972c8d60907630c388293bd36993555f77c8d939

SHA-256:
c1f920db0a15e652ca84b9b49f1e391270e108b31a70d2549dfa68a2e84f02a8

Scanner detections:
1 / 68

Status:
Potentially unwanted

Explanation:
While the manifest file itself is not malware, it is linked to an unwanted Firefox extension.

Analysis date:
12/3/2016 8:58:07 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.MozillaPlugin.K
14.9.18.4

Remove install.rdf - Powered by Reason Core Security
File size:
1.2 KB (1,238 bytes)

File type:
Resource Description Framework (RDF)

Common path:
C:\users\{user}\appdata\roaming\mozilla\firefox\profiles\{user}.default\extensions\{867e9fa0-5984-91e0-7ecc-f6263a456ae1}\install.rdf

Mozilla Extension
Name:
Ask New Tabs

Description:
“Ask New Tabs for Firefox”

Home page:
http://www.search.ask.com/?o=APN10645A&gct=hp&d=406-1610&v=n12712-375&t=4


<RDF xmlns="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:em="http://www.mozilla.org/2004/em-rdf#">
  <Description about="urn:mozilla:install-manifest">
    <em:id>{867E9FA0-5984-91E0-7ECC-F6263A456AE1}</em:id>
    <em:unpack>true</em:unpack>
    <em:name>Ask New Tabs</em:name>
    <em:version>5.0.0.12712</em:version>
    <em:description>Ask New Tabs for Firefox</em:description>
    <em:homepageURL>http://www.search.ask.com/?o=APN10645A&amp;gct=hp&amp;d=406-1610&amp;v=n12712-375&amp;t=4</em:homepageURL>
    <em:targetApplication>
      <Description>
        <em:id>{ec8030f7-c20a-464f-9b0e-13a3a9e97384}</em:id>
        <!-- firefox -->
        <em:minVersion>4.0</em:minVersion>
        <em:maxVersion>30.*</em:maxVersion>
      </Description>
    </em:targetApplication>
    <em:updateURL>http://ffupdate.cdn.bn-update-download.com/update.rdf?id={867E9FA0-5984-91E0-7ECC-F6263A456AE1}&amp;p=ilivid.com&amp;sysid=406&amp;appid=1610&amp;v=n12712-375&amp;t=4</em:updateURL>
    <em:updateKey>
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC5l5uUNAxoDP0gcVCfKweH63YtjLUzHBordUGwacNqgWd4E8JNxYiBXjBU8sxTI/MNVXIg7UyTzhwQIdkhWX9POuwOTmFA9BQMvLZst+XUxfuH6x1t8EGLfwasp+m4Pq1adTYxVlQsSEvURxztS5y7lVpppRBFEzC46IsVTAGUUwIDAQAB
</em:updateKey>
  </Description>
</RDF>
Remove install.rdf - Powered by Reason Core Security