Reason Labs

mylucky123.xml

The file mylucky123.xml has been detected as Adware.MyLucky. This is a Mozilla Firefox web browser search plugin called ‘mylucky123’ which enables the search engine provider as well as search suggestions.
MD5:
1d29f4f8b838f6df27dc450e9528caf1

SHA-1:
2d636d4157746121cb3c14519d66d90315e58676

SHA-256:
7a7f6867fb420d7df2b6ba586a3aca663b3809dfcfe71b36c1c68d5490d47c2a

Detection:
Adware.MyLucky

Risk:
Medium

Explanation:
This potentially unwanted mylucky123 search plugin for Firefox is used to direct web searches from the search bar and runs as the browser's search engine.

Analysis date:
10/19/2018 3:49:41 AM UTC  (today)

File size:
645 Bytes

File type:
OpenSearch plugin for Firefox

Common path:
C:\users\{user}\appdata\roaming\mozilla\firefox\profiles\{user}.default\searchplugins\mylucky123.xml

Mozilla Search Plugins
Name:
mylucky123

Description:
mylucky123 Search

Search Form:
http://www.mylucky123.com/search/


<SearchPlugin xmlns="http://www.mozilla.org/2006/browser/search/">
  <ShortName>mylucky123</ShortName>
  <Description>mylucky123 Search</Description>
  <InputEncoding>ISO-8859-1</InputEncoding>
  <Url type="text/html" method="GET" template="http://www.mylucky123.com/search/">
    <Param name="from" value="wzp1008" />
    <Param name="uid" value="ST1000LM024XHN-M101MBB_S30YJ9BF411690" />
    <Param name="ts" value="1476015226" />
    <Param name="z" value="fc9afe29eaf18fcf1298116g2z1mbq5e7g4waofo8q" />
    <Param name="type" value="ds" />
    <Param name="q" value="{searchTerms}" />
  </Url>
  <SearchForm>http://www.mylucky123.com/search/</SearchForm>
</SearchPlugin>
Download Reason Core Security - Powerful anti-malware software