Reason Labs

nice.xml

The file nice.xml has been detected as Adware.Nice.Search. This is a Mozilla Firefox web browser search plugin called ‘nice’ which enables the search engine provider as well as search suggestions.
MD5:
be4310a6c42b8a24650443088bebf2d2

SHA-1:
be624fa6bcf18c8120f01c2db44a29a90374cd29

SHA-256:
53388f8c86a1e6f28ced039069d8a85ef49d09b3be5dd2166ba707c296998ed6

Detection:
Adware.Nice.Search

Risk:
Medium

Explanation:
This potentially unwanted nice search plugin for Firefox is used to direct web searches from the search bar and runs as the browser's search engine.

Analysis date:
10/19/2018 4:49:24 AM UTC  (today)

File size:
760 Bytes

File type:
OpenSearch plugin for Firefox

Common path:
C:\users\{user}\appdata\roaming\mozilla\firefox\profiles\{user}.default\searchplugins\nice.xml

Mozilla Search Plugins
Name:
nice

Description:
nice Search

Search Form:
http://www.nicesearches.com/


<SearchPlugin xmlns="http://www.mozilla.org/2006/browser/search/">
  <ShortName>nice</ShortName>
  <Description>nice Search</Description>
  <InputEncoding>ISO-8859-1</InputEncoding>
  <Image height="16" width="16" type="image/x-icon">http://www.nicesearches.com/favicon.ico?t=1</Image>
  <Url type="text/html" method="GET" template="http://www.nicesearches.com/">
    <Param name="utm_source" value="b" />
    <Param name="utm_medium" value="" />
    <Param name="from" value="fb081008" />
    <Param name="uid" value="st1000lm024xhn-m101mbb_s30yj9bf411690" />
    <Param name="q" value="{searchTerms}" />
    <Param name="type" value="" />
    <Param name="ts" value="1475933132" />
    <Param name="ref" value="" />
  </Url>
  <SearchForm>http://www.nicesearches.com/</SearchForm>
</SearchPlugin>
Download Reason Core Security - Powerful anti-malware software