Suspicious 80% firefox Download

SPOT Collector 1.0.0

New package, zero downloads, broad permissions

“Lets the SPOT portal you are signed in to read SAP PO design-time metadata from inside your network. Read-only. No sign-in of its own.”

Archive contains Mozilla COSE digest manifestArchive contains Mozilla COSE signature file
SHA-2566f0ffd7c507099563aec23726ba988243bcf93f9d8d10f73c3392c14cebc5ae8
URLhttps://addons.mozilla.org/firefox/downloads/file/5035347/spot_collector-1.0.0.xpi
MaleculeO₂(AsI)H₅(Br₂Cm₁₃Db₉Os₅U₄)Md₂(Pm₄Si)

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.