1439702 - Block more FF Tool clones

Status: RESOLVED FIXED

(Toolkit :: Blocklist Policy Requests, enhancement)

Description

[Andreas Wagner [:TheOne] [use NI]]

Here are about 90 more GUIDS of the 'FF Tool' malware.

{0c9970a2-6874-483b-a486-2296cfe251c2}
{01c9a4a4-06dd-426b-9500-2ea6fe841b88}
{1c981c7c-30e0-4ed2-955d-6b370e0a9d19}
{2aa275f8-fabc-4766-95b2-ecfc73db310b}
{2cac0be1-10a2-4a0d-b8c5-787837ea5955}
{2eb66f6c-94b3-44f5-9de2-22371236ec99}
{2f8aade6-8717-4277-b8b1-55172d364903}
{3c27c34f-8775-491a-a1c9-fcb15beb26d3}
{3f4dea3e-dbfc-428f-a88b-36908c459e20}
{3f4191fa-8f16-47d2-9414-36bfc9e0c2bf}
{4c140bc5-c2ad-41c3-a407-749473530904}
{05a21129-af2a-464c-809f-f2df4addf209}
{5da81d3d-5db1-432a-affc-4a2fe9a70749}
{5f4e63e4-351f-4a21-a8e5-e50dc72b5566}
{7c1df23b-1fd8-42b9-8752-71fff2b979de}
{7d5e24a1-7bef-4d09-a952-b9519ec00d20}
{7d932012-b4dd-42cc-8a78-b15ca82d0e61}
{7f8bc48d-1c7c-41a0-8534-54adc079338f}
{8a61507d-dc2f-4507-a9b7-7e33b8cbc31b}
{09c8fa16-4eec-4f78-b19d-9b24b1b57e1e}
{9ce2a636-0e49-4b8e-ad17-d0c156c963b0}
{11df9391-dba5-4fe2-bd48-37a9182b796d}
{23c65153-c21e-430a-a2dc-0793410a870d}
{36a4269e-4eef-4538-baea-9dafbf6a8e2f}
{37f8e483-c782-40ed-82e9-36f101b9e41f}
{63df223d-51cf-4f76-aad8-bbc94c895ed2}
{72c1ca96-c05d-46a7-bce1-c507ec3db4ea}
{76ce213c-8e57-4a14-b60a-67a5519bd7a7}
{79db6c96-d65a-4a64-a892-3d26bd02d2d9}
{81ac42f3-3d17-4cff-85af-8b7f89c8826b}
{83d38ac3-121b-4f28-bf9c-1220bd3c643b}
{86d98522-5d42-41d5-83c2-fc57f260a3d9}
{0111c475-01e6-42ea-a9b4-27bed9eb6092}
{214cb48a-ce31-4e48-82cf-a55061f1b766}
{216e0bcc-8a23-4069-8b63-d9528b437258}
{226b0fe6-f80f-48f1-9d8d-0b7a1a04e537}
{302ef84b-2feb-460e-85ca-f5397a77aa6a}
{408a506b-2336-4671-a490-83a1094b4097}
{419be4e9-c981-478e-baa0-937cf1eea1e8}
{0432b92a-bfcf-41b9-b5f0-df9629feece1}
{449e185a-dd91-4f7b-a23a-bbf6c1ca9435}
{591d1b73-5eae-47f4-a41f-8081d58d49bf}
{869b5825-e344-4375-839b-085d3c09ab9f}
{919fed43-3961-48d9-b0ef-893054f4f6f1}
{01166e60-d740-440c-b640-6bf964504b3c}
{2134e327-8060-441c-ba68-b167b82ff5bc}
{02328ee7-a82b-4983-a5f7-d0fc353698f0}
{6072a2a8-f1bc-4c9c-b836-7ac53e3f51e4}
{28044ca8-8e90-435e-bc63-a757af2fb6be}
{28092fa3-9c52-4a41-996d-c43e249c5f08}
{31680d42-c80d-4f8a-86d3-cd4930620369}
{92111c8d-0850-4606-904a-783d273a2059}
{446122cd-cd92-4d0c-9426-4ee0d28f6dca}
{829827cd-03be-4fed-af96-dd5997806fb4}
{4479446e-40f3-48af-ab85-7e3bb4468227}
{9263519f-ca57-4178-b743-2553a40a4bf1}
{71639610-9cc3-47e0-86ed-d5b99eaa41d5}
{84406197-6d37-437c-8d82-ae624b857355}
{93017064-dfd4-425e-a700-353f332ede37}
{a0ab16af-3384-4dbe-8722-476ce3947873}
{a0c54bd8-7817-4a40-b657-6dc7d59bd961}
{a2de96bc-e77f-4805-92c0-95c9a2023c6a}
{a3fbc8be-dac2-4971-b76a-908464cfa0e0}
{a42e5d48-6175-49e3-9e40-0188cde9c5c6}
{a893296e-5f54-43f9-a849-f12dcdee2c98}
{ac296b47-7c03-486f-a1d6-c48b24419749}
{b26bf964-7aa6-44f4-a2a9-d55af4b4eec0}
{be981b5e-1d9d-40dc-bd4f-47a7a027611c}
{be37931c-af60-4337-8708-63889f36445d}
{bfd92dfd-b293-4828-90c1-66af2ac688e6}
{c5cf4d08-0a33-4aa3-a40d-d4911bcc1da7}
{c488a8f5-ea3d-408d-809e-44e82c06ad9d}
{c661c2dc-00f9-4dc1-a9f6-bb2b7e1a4f8d}
{cd28aa38-d2f1-45a3-96c3-6cfd4702ef51}
{cd89045b-2e06-46bb-9e34-48e8799e5ef2}
{cf9d96ff-5997-439a-b32b-98214c621eee}
{d14acee6-f32b-4aa3-a802-6616003fc6a8}
{d97223b8-44e5-46c7-8ab5-e1d8986daf44}
{ddae89bd-6793-45d8-8ec9-7f4fb7212378}
{de3b1909-d4da-45e9-8da5-7d36a30e2fc6}
{df09f268-3c92-49db-8c31-6a25a6643896}
{e5bc3951-c837-4c98-9643-3c113fc8cf5e}
{e9ccb1f2-a8ba-4346-b43b-0d5582bce414}
{e341ed12-a703-47fe-b8dd-5948c38070e4}
{e2139287-2b0d-4f54-b3b1-c9a06c597223}
{ed352072-ddf0-4cb4-9cb6-d8aa3741c2de}
{f0b809eb-be22-432f-b26f-b1cadd1755b9}
{f1bce8e4-9936-495b-bf48-52850c7250ab}
{f01c3add-dc6d-4f35-a498-6b4279aa2ffa}
{f9e1ad25-5961-4cc5-8d66-5496c438a125}
{f4262989-6de0-4604-918f-663b85fad605}
{fc0d55bd-3c50-4139-9409-7df7c1114a9d}

Comment 1

[Andreas Wagner [:TheOne] [use NI]]

This is now pending review. Philipp, could you take a look and approve, please?

Comment 2

[Philipp Kewisch [:Fallen][📱📆]]

Done