install.rdf

This is manifest file for a Firefox extension that provides the metadata required to install and identify the addin.
Remove install.rdf - Powered by Reason Core Security
MD5:
ba909426156dd299a473b0057f6fe715

SHA-1:
bfc2a3d989ffb28272e7345b8443599e6415b958

SHA-256:
2caca37be1580f75a3b230e06d9185cb540ae1602ae3751e801f59146debd933

Scanner detections:
1 / 68

Status:
Potentially unwanted

Explanation:
While the manifest file itself is not malware, it is linked to an unwanted Firefox extension.

Analysis date:
12/7/2016 5:26:28 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Ask.K
14.9.18.4

Remove install.rdf - Powered by Reason Core Security
File size:
4 KB (4,140 bytes)

File type:
Resource Description Framework (RDF)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\install.rdf

<RDF xmlns="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:em="http://www.mozilla.org/2004/em-rdf#">
  <Description about="urn:mozilla:install-manifest">
    <em:id>toolbar_FF3-V7C@apn.ask.com</em:id>
    <em:name>Ask Toolbar</em:name>
    <em:description>Convenient tools and links to make your browsing more enjoyable</em:description>
    <!-- Localized descriptions -->
    <em:localized>
      <Description>
        <em:locale>es-</em:locale>
        <em:name>Ask Toolbar</em:name>
        <em:creator>Ask.com</em:creator>
        <em:description>Herramientas y enlaces útiles para mejorar su experiencia de navegación</em:description>
      </Description>
    </em:localized>
    <em:localized>
      <Description>
        <em:locale>de-</em:locale>
        <em:name>Ask Toolbar</em:name>
        <em:creator>Ask.com</em:creator>
        <em:description>Praktische Tools und Links für ein noch größeres Surfvergnügen</em:description>
      </Description>
    </em:localized>
    <em:localized>
      <Description>
        <em:locale>fr-</em:locale>
        <em:name>Ask Toolbar</em:name>
        <em:creator>Ask.com</em:creator>
        <em:description>Des outils et des liens très pratiques pour faciliter votre navigation sur le Web</em:description>
      </Description>
    </em:localized>
    <em:localized>
      <Description>
        <em:locale>it-</em:locale>
        <em:name>Ask Toolbar</em:name>
        <em:creator>Ask.com</em:creator>
        <em:description>Strumenti e link utili per facilitare la navigazione sul Web</em:description>
      </Description>
    </em:localized>
    <em:localized>
      <Description>
        <em:locale>nl-</em:locale>
        <em:name>Ask Toolbar</em:name>
        <em:creator>Ask.com</em:creator>
        <em:description>Handige tools en koppelingen voor prettiger websurfen</em:description>
      </Description>
    </em:localized>
    <em:localized>
      <Description>
        <em:locale>pl-</em:locale>
        <em:name>Ask Toolbar</em:name>
        <em:creator>Ask.com</em:creator>
        <em:description>Wygodne narzędzia i łącza ułatwiające korzystanie z sieci</em:description>
      </Description>
    </em:localized>
    <em:localized>
      <Description>
        <em:locale>pt-</em:locale>
        <em:name>Ask Toolbar</em:name>
        <em:creator>Ask.com</em:creator>
        <em:description>Ferramentas e links convenientes para tornar sua navegação na web mais agradável</em:description>
      </Description>
    </em:localized>
    <em:localized>
      <Description>
        <em:locale>ru-</em:locale>
        <em:name>Ask Toolbar</em:name>
        <em:creator>Ask.com</em:creator>
        <em:description>Удобные инструменты и ссылки, которые сделают вашу навигацию в сети Интернет еще более приятной</em:description>
      </Description>
    </em:localized>
    <em:creator>Ask.com</em:creator>
    <em:homepageURL>http://www.ask.com/</em:homepageURL>
  ...
Remove install.rdf - Powered by Reason Core Security