install.rdf

This is manifest file for a Firefox extension that provides the metadata required to install and identify the addin.
Remove install.rdf - Powered by Reason Core Security
MD5:
00883a25f389a9c879cfdb58f3b06730

SHA-1:
e543b9108601702997da76f72c62cdbcfdb2aad8

SHA-256:
123f7a7993743e4f15a04341e7c73792b3a99cf1b3c3b5acde1cd8378308fc4b

Scanner detections:
1 / 68

Status:
Potentially unwanted

Explanation:
While the manifest file itself is not malware, it is linked to an unwanted Firefox extension.

Analysis date:
12/11/2016 8:58:34 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Ask.K
14.9.18.4

Remove install.rdf - Powered by Reason Core Security
File size:
4 KB (4,145 bytes)

File type:
Resource Description Framework (RDF)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\install.rdf

<RDF xmlns="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:em="http://www.mozilla.org/2004/em-rdf#">
  <Description about="urn:mozilla:install-manifest">
    <em:id>toolbar_FF3-V7C@apn.ask.com</em:id>
    <em:name>Ask Toolbar</em:name>
    <em:description>Convenient tools and links to make your browsing more enjoyable</em:description>
    <!-- Localized descriptions -->
    <em:localized>
      <Description>
        <em:locale>es-</em:locale>
        <em:name>Ask Toolbar</em:name>
        <em:creator>Ask.com</em:creator>
        <em:description>Herramientas y enlaces útiles para mejorar su experiencia de navegación</em:description>
      </Description>
    </em:localized>
    <em:localized>
      <Description>
        <em:locale>de-</em:locale>
        <em:name>Ask Toolbar</em:name>
        <em:creator>Ask.com</em:creator>
        <em:description>Praktische Tools und Links für ein noch größeres Surfvergnügen</em:description>
      </Description>
    </em:localized>
    <em:localized>
      <Description>
        <em:locale>fr-</em:locale>
        <em:name>Ask Toolbar</em:name>
        <em:creator>Ask.com</em:creator>
        <em:description>Des outils et des liens très pratiques pour faciliter votre navigation sur le Web</em:description>
      </Description>
    </em:localized>
    <em:localized>
      <Description>
        <em:locale>it-</em:locale>
        <em:name>Ask Toolbar</em:name>
        <em:creator>Ask.com</em:creator>
        <em:description>Strumenti e link utili per facilitare la navigazione sul Web</em:description>
      </Description>
    </em:localized>
    <em:localized>
      <Description>
        <em:locale>nl-</em:locale>
        <em:name>Ask Toolbar</em:name>
        <em:creator>Ask.com</em:creator>
        <em:description>Handige tools en koppelingen voor prettiger websurfen</em:description>
      </Description>
    </em:localized>
    <em:localized>
      <Description>
        <em:locale>pl-</em:locale>
        <em:name>Ask Toolbar</em:name>
        <em:creator>Ask.com</em:creator>
        <em:description>Wygodne narzędzia i łącza ułatwiające korzystanie z sieci</em:description>
      </Description>
    </em:localized>
    <em:localized>
      <Description>
        <em:locale>pt-</em:locale>
        <em:name>Ask Toolbar</em:name>
        <em:creator>Ask.com</em:creator>
        <em:description>Ferramentas e links convenientes para tornar sua navegação na web mais agradável</em:description>
      </Description>
    </em:localized>
    <em:localized>
      <Description>
        <em:locale>ru-</em:locale>
        <em:name>Ask Toolbar</em:name>
        <em:creator>Ask.com</em:creator>
        <em:description>Удобные инструменты и ссылки, которые сделают вашу навигацию в сети Интернет еще более приятной</em:description>
      </Description>
    </em:localized>
    <em:creator>Ask.com</em:creator>
    <em:homepageURL>http://www.ask.com/</em:homepageURL>
  ...
Remove install.rdf - Powered by Reason Core Security