Suspicious 86% firefox 7 installs Download

Pyxils Download Manager 0.4.7

New package, broad permissions

“Sends your downloads to Pyxils Download Manager: multi-connection speed, pause and resume that survive anything.”

Extension install triggers a native host stagerArchive contains Mozilla COSE digest manifest
SHA-256fd876e80e230a44d660a7f6a49d79b1680ec83bca1bdac1dd2d8d4d301e0adf1
URLhttps://addons.mozilla.org/firefox/downloads/file/5048666/pyxils_download_manager-0.4.7.xpi
MaleculeO₄(CCaCoS₂)H₈(Br₉Cm₁₂Db₁₆Hf₂Os₂Po₃TiU₇)Md₃(Pm₈Si)

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.