home

wmpfirefoxplugin.exe

This is a setup program which is used to install the application. It runs as a scheduled task under the Windows Task Scheduler. The file has been seen being downloaded from www.appsfactorycurrent.com and multiple other hosts.
MD5:
5343c1a8b203c162a3bf3870d9f50fd4

SHA-1:
04b5b886c20d88b57eea6d8ff882624a4ac1e51d

SHA-256:
dc1d54dab6ec8c00f70137927504e4f222c8395f10760b6beecfcfa94e08249f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 10:15:12 AM UTC  (today)

File size:
1.2 KB (1,245 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\appdata\local\temp\wmpfirefoxplugin.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
24:hM0mIAvy4Wvsqs1Ra7JZRGNeHX+AYcvP2wk1RjdEF3qpMk5:lmIAq1UqsziJZ+eHX+AdP2TvpMk5

Entry point:
3C, 21, 44, 4F, 43, 54, 59, 50, 45, 20, 68, 74, 6D, 6C, 20, 50, 55, 42, 4C, 49, 43, 20, 22, 2D, 2F, 2F, 57, 33, 43, 2F, 2F, 44, 54, 44, 20, 58, 48, 54, 4D, 4C, 20, 31, 2E, 30, 20, 53, 74, 72, 69, 63, 74, 2F, 2F, 45, 4E, 22, 20, 22, 68, 74, 74, 70, 3A, 2F, 2F, 77, 77, 77, 2E, 77, 33, 2E, 6F, 72, 67, 2F, 54, 52, 2F, 78, 68, 74, 6D, 6C, 31, 2F, 44, 54, 44, 2F, 78, 68, 74, 6D, 6C, 31, 2D, 73, 74, 72, 69, 63, 74, 2E, 64, 74, 64, 22, 3E, 0D, 0A, 3C, 68, 74, 6D, 6C, 20, 78, 6D, 6C, 6E, 73, 3D, 22, 68, 74, 74, 70...
 
[+]

Scheduled Task
Task name:
{064F967C-ECED-46A8-9372-93FFAD231C39}

Trigger:
Registration (Runs on registration)


The file wmpfirefoxplugin.exe has been discovered within the following programs.

Homestead Websites SiteBuilder  by Homestead Websites
About 7% of users remove it
Intuit SiteBuilder  by Intuit Inc.
Publisher's description - “Intuit's all-in-one website builder lets you customize a ready-made design. Packages include web hosting & a professional website builder. It's simple to create, publish & update your business website.”
www.intuit.com
12% remove it
 
Powered by Should I Remove It?

The file wmpfirefoxplugin.exe has been seen being distributed by the following 38 URLs.

http://www.appsfactorycurrent.com/Prgn5h2a576qeuWwmxbfXt6NC_A1Sfoa1gW8KuZaGpWzbOLLxxStmQMYCuksbrMFSBA1sZTTnEdfAqj8S7tt15kIArnlHvbea_jRk01ptnklD9OlGJmOzoZJyJ694JLQpxwLNIEtWgCbO7na GYQIc7CQM_mjiePN39EHYBZ4OdPpEKH4DKCQbtZ7E 4RvJLWp24z1Ile3WjRhG46o9 C3IYaPc9oA==-G18AAGRwXmtrh9igCgg24MAlGnwZNEAbNuCEK5hff9_7JMAbHtZ1q eiejHyJuALmoe3gfQCca8n3PyNct0SO2ojtPglwVhG0X1lHjzWpIFGwkiWIDmUZig=

http://www.centersharenew.com/jFp5YsjSXpJnLDUrm777HpcUBsYwL26hszIK7a6jSJatZTLlMNQvkojdrG2FKZtt_yHSeicoZ7ZwwPOrUztK0l _RSXhG1tENui3S5MXx2BXDuviphEI6EYt5P 7UpqIItedT XqfkJOronm_kL4qsm3PYco2mWfEsFn35hIIZVPjMhcrBEI64baV29CfrC tb7crM8C9niKh2xVEDGHi96nymCIOg==-G18AAGRwXmtvRiPS83gCNuDAJRp8GTRAGzbghCuYH7mubRLgzdFlWcFU1Ljj3wR8shN9IKsXlns9OPhB_7xcJES3Nhc_yL5IuK g7AnUXwa6oqLLqmzqigw=

http://www.centersharenew.com/jdPwtE8Y_R4R 8jub Ppl733ta 86ekL7riIm4h zBc2CkiXfsIE8hCSveRzVzjSUmMXH_LTXYhwFNDOfGosODQb0XD0wXyKFFur4_TeMA6i8kbdS2N96pW8_u7Plf TAYq7OW14f 8f_aZhddrGdaECAai7GDkSVkHwIFE7ysOEwOFheovFWe309ySv9veRj7irrFJppoXWLBwYNxzzZOsBt NJSQ==-G18AAGRqXmvfwC39LVGhAYANOHCZAl8GDZCGDTjgsIf5dde1TSJ6o35Z1mpqVLfAbwI 4dQ_NYwH9N4OVH 1cV4qpDxYTTeAf3D1VbqW0dpaL6gVFbqgFEg=

http://www.appsfactorycurrent.com/j8g_EGO9kDQjE5KiEDO oFw1tFdqFQ7T_vYJP95n8yl_vjTGkizI8kdcLBlTb6Z_sUwCzTzFXDkwdIraac6iPJVODkh5cKYZgRNL_hFkI4pbuEXpRcEpaJT7YoM1Sl3bAV1nlsKN zlCoGDGUvCHnGwQA9s19pKzlJ0DFHaoSxPO6RAnMWNiEhTw1ZUGrEdUKycFcJIHlafd5XpIovf6TnQ97ijjzQ==-G18AAGRwXmtr88V2p3fAsAEHLtHgy6AB2rABJ1zB_Pr73icB3mhY162ei qn E3AF5yHt4F6gdzriZq_sa_bjF55uNym7r16DPukyoJrVzvQmFRQRCpLXCU=

https://minhaclarotv.claro.com.br/viaportal-facade/rs/fatura/recuperarFaturaCompletaPorCpfEVencimento/00281436045/.../81627549

http://www.factorysignsclean.com/VsV4SgrfrlbGRF893 Ezpr4ZOhDQ aspfZ3DzfZCAk55jU3ghZp_Np NdFMMZ87RqFmnisp2rTucXtcTG8uEBQG5Zyx6 oOH3GpJB1h6o5PRt0belX37yNKloPt7h5vmgT_5npPZD0snIuZZaW1VEQN9EhK 6LTHVkSXslqLlv80C91iZvheU57WK1VSJ_fOZD a0T6mdH2vyXwmS3EGRbBHPO Vxw==-G18AAGRgnq2tiT5A2IADl2jwZdAAbdiAE65gfvv3 z4J8IYO1 ttfS5qmcNvAn6B58N3A oF5F6f0Oa_kV9vMboj2Mbu2tmrrprjapPqpl__gI2IEjSFkSxBMw==

http://www.centersharenew.com/ 6r2FjH_YEMqbEYBPhFgDVt_n6AmH3FPbLy3HjwqOku c3GHF_K1bv8z0nxhQhDTOkskrEyc07EQ8vUWd6sPiZna_qM8A_0mzRap1l qFUw hRa9qS94uAwbgfZbYvQ2xZSnaDbS6exFq_Jn4KBJO8P8xPNbU0U9B9KwOVSIUI4tzQTT17a8GJvzjxrNcjxY_YSlu_sN0XteWqHdhqvmXtiuYOAH3A==-G18AAGRwXmtr2yFGdxs24MAlGnwZNEAbNuCEK5hfd13bJMAb9cuyVlNRgwR7E_AJp_6poV4g93qg qu181K6Oxj_ cNK_FL3_eS2iljA9QKQbOcQAo8RQA=

http://www.centersharenew.com/bmCV TdtPR13UvZMz ot99GVBHN4LkxNWOCjXNzvgUsfOPTO2VPYSsPIFu4pMnOCpHLoNi0UDhBQU1mMc06XH9SFkRPr_bCAhXOBy57ct pYSpWFGFFxcFu7Tw9Kh6y6nkR7149UMDnHF 9RCDAeUOzC_j541460DynsitAvoUKLYZ vHZYGayM9HEAo0L4H62i_3PmyTdOvFhwivkXS_9Xx81a4Q==-G18AAGRwXmtr2wFHpTfAsAEHLtHgy6AB2rABJ1zB_NrzXCcB3qib56Ucixok2JuADzh2dwX1ArnXHVVvpR2nErpM7rmp03KZ7blnbrrRTzSgUgiaY3BWYEgG

http://secure.innodl.com/.../windows-live-movie-maker.exe

http://www.centersharenew.com/Z73FE K6G j7A1XzvIgCpmX1I4k_Lqt48K 30zHPqZaWdvE0JLJ0dqQQui8euvaWmrtmpdk URMhKTVmuEqGQjML8AaHL9d kpQrFW2 S vF8tx1RJks Q3ns6BB7rxAzliFeFggmHroS419VAQzwON_NTIFwenFw3wEf_QS_xCOkGRgbBorE6kx5DPTTTDUGM4CXQBKSCaJvdexHcVl5JeVTgOLkw==-G18AAGRgu_d6gsYEABtw4BINvgwaoA0bcMIVzK89z3US4A1187yUY1HdAn4T8AGO3V2BegG51x2q3ko TrFip9RttbMPkWmOne _TI9WgUpECRrBMBJlCQ==

http://95.211.174.231/.../Adobe_Photoshop_7.exe

http://121.14.212.184/nut40a51.exe

http://www.cucusoft.com/.../YouTubeMate.exe

http://e.ccm2.net/pt.kioskea.net/download/.../wlsetup-web.exe_1.0

http://www.bestcontentbundle.com/m09WIAJQ6kIsC4URjQQ Mvj yXlo217nQw9_AEd_VBkdIuiTIiciLhr5 xdPArZHaxfQxzkopDqDXYMrjKISC3w9xjNNVQWppwHMoFZ2wEKmQQZQlpqq65JRYDAS5fLRUei82pi7v30n98DVqfe3M03U7moyhse7pO8s0ID4RuCAXexQH14T9b5nOeO Cb7WAQJtE7UDAO4QkNzWQNEm70h9mRMwSg==-G18AAGRgnq2tGQnWCdiAA5do8GXQAG3YgBOuYH77 32fBHhDh v1Np LasTwm4Bf4PnwXUC9gNzrE1r i_x6ixmoxMXLQZJfcu_K VJM3jwHwCKiBE2yBMUSDA==

http://www.centersharenew.com/A3tqpIbPLC6yAi8vQeeotidXMgYy O5L8_5ck3gw06NnNVWFtkSs29d2JAS0qzv_cPmh5Az4au52HvM5AcMHP1IVSCeixDkkn3HrdPX7iKYoneyN1m2DWvljHmVVVUIULI_2n5cIcckz3lmNmC1OrYSsOWiB2zpUP8NGKNVnImPM Q8DtxlbzUQXO6LeO0zRL512sbOo_WhisQGhYl_gjnVOWEpQgw==-G18AAGRwXmtr84VGhGjCBhy4RIMvgwZowwaccAXz6 97nwR4o2Fdt3ouql_hNwFfcB7eBuoFcq8nav7Gvm5TOsi8j9VV7Mm vlEciL6T5qAxqSATonIiyA==

http://www.centersharenew.com/c?x=rWUa4TGv9W4NSf/T2a/Ud6YMYfhpiUu29MmVpcaLLZg=&c=Ooe2Pye4n3fWXDJgT0D2g05g0NNC/fhuzz0qlQwDUNRVI2rwHZY3CYtr6yVF3ZejiUkrXOkchgK hmkZpkwMbthUDw0qBPFmd38DdNBs5G6JPrLLE55TcDRAMczKnLKZ W7UEfvHOCJUMHxPWNpR09Dc6BO2n6WUwnpQxXko2Qs=&e=0&fallback_url=https://secure.innodl.com/.../windows-live-movie-maker.exe

http://www.centersharenew.com/PqM0NxsafrthEiIghzFnSkmJcJOgaVAhcxZRl65kpZF0wISmgNtHba0xiQw92RW66LxLTj0SIS_1 a_qEuxv Dr uiDJYlXAcBrDMdVloUdn9S48x0vj9s8e8zNFEqzARy1NPPzMd_W42QLRH4Vi_CjDfCUUTpmB5slWO01U8QL7iNT1W0Updua3pWjecyBnBveFNCzBfhC_Rzo6df2btIQCOoxnKg==-G18AAGRwXmtrB5nubMIGHLhEgy DBmjDBpxwBfPr73ufBHjDw7pu9VxUL0HeBHxB8_A2kF4g7vWEm79RrlvyX oq4 Fzy6j98ar7DJ8JNNBIGMkQOMvgOAM=

https://secure.innodl.com/.../windows-live-movie-maker.exe

http://www.bestcontentbundle.com/JNEZPeammeeOL4b7JSrNQtCV83vrREPgq11sY6L7Qp9_XwpfiKEv69kZmvKDSelmm0QJlSYADch7Rn90wBy3K7v jRu8Sx5ZoK AgnK7c5dU4Byr7iuTuHzFly9e9kWEZ TPeCUqF5BtcAEIZYy20PlbzUSZND dMr AmdzOd4A3CCaeQviJwCuAcjP533pt 9JR_UtWh_hay3VT9O9OPhrSmM0Wow==-G18AAGRgnq2tSWrCCdiAA5do8GXQAG3YgBOuYH7b63WbBHhD VynU5FdQv4TcBP8LR_ZlAvIPf6gObfLD9fImEU5Cf_x_gnpfxm25IWPZIpMIsoQVMoitIoAw==

http://www.bestcontentbundle.com/Y9dm0bm7eLaUoSifrK mJnVN8qoWxSfGIX_1B9xDqVVrYyWM22T2LB1oUI7sZPvdmyNVjsPB9zVAg42OCFb4mrWOHCL9PqRbsSwQMyenEJT00ZjfUgb0PJxWKuvqQw32CrvVyBFLsf8sjosSdk2cOjv69Px3c9wH3DnX0YG0PAAAGaQKbhahIGUBORwQQnBin ouE0XnRd1xCql6GNGzSUKVnPYfpw==-G18AAGRwXmtrh5Sc3gDDBhy4RIMvgwZowwaccAXza89znQR4w908L VYVC9B3gR8QGN3V5BeIO51h6u3Uo5TCiHavKgjD_3oR7knzbOifxtQSRjJ0DjGECQL

http://www.metaappshosting.com/Ck1Xai9Lsv1UB3cpr hI9U 3Ya1 _EqH VaIMDegQoYSZpyxoIg5uxdNRt7jO3BYl8rzFDQ24HDIKn zDn4wW1hQe0vKlPKjOOXa1ZEtF QB2gV9LkC3ZPycTvBOlaFSB1FjdCp462yYVeShQiwLCXFvWjjwj2pLSJDTnZCaWOY4ycnPQW4_w83G8gExa2TYzGFgKMgoNkIcnB JUrWZE89EyBLsNw==-G14AAGRgu_d6xjMuQNiAA5eWwRcK0IYNOOFK1rPG0A31y7JWU9D0CD4T8AlO_VODdgWx1wOqv1o L_F5yaCvM0bJV1sninGz_ h9gVpECZqkEJYlUA==

http://www.centersharenew.com/f5biH3U3SFkUbO8HnBDpHV9sYlWgPKv0Jxff4HtTkdk9ajL3FGhycwltEokrEZCEtLOGWDbg0EMTgHcFXOL7f81zoqEBn2VebnLH4znq_2ry362zQAkDHFIPNTRZ 41IpjEWDV7jvLdi8VYQpSB9yJglQpa6zdJGRSucEPo9lXQgQXREyXRW1VmU H6XXnHYK6mnwHAfiDKu5D4mBscr4xr5wLUhrHqPyi_OIW9kCdfnhGYR7_NvwVyarK5yhQX1SPFkidZn0UT 787xLJINIQ3vPE_bTyhLeGpJrA7wjfOzrFdhNuQLNxfKI_V9FhojayGY37wMgJDM n0l2nuJ62E1gcpfUQmZfxCkRmmhGJWiyL2qqxth AKu5ZWFzlGmiP4lK9MgyIpXEUK3dlbcW2zsesQexOopLttIfJQyWrgsEZQ 4zXFHRo7TdYnUa71xx0qmfj1Rq6s97u8fcYK_NX0TqaLoyaLUaf0SoxYfZDKTmcM6xSxzX0XnYCDW5Rmsc45MQA w3gZjlfe0 ejBRAEfQHdzRdjqKmOomDO6HSMqaEpWO4=-G18AAGRwXmtrPICokADBBhy4RIMvgwZowwaccAXz665rmwR4o35Z1moqapzjNwGfcOqfGuoFcq8Hqr_aPC99DrvXSSV 2Pyn4OEl_6_XJKDWKSeIsswRRgI=

http://www.centersharenew.com/BAPA5I71QZ8MBekjNi3aqlpfkiIiV6IQjE2pG8qy_Q1vvE UNj6HcH1Z MD3eC96Q1BcBKlHdyWoQ6l5 BcvWvHI5bZvHHPixGXwQY5dwItc_xHZ_ySDOOidxucgvVapHN4usAhC7cajZkdKUPcRjAHCC4bbfu6aImdivmebmxpxKLbtZYjbg2ZH2fOVn9J MgO8XCXCajaOFAzke5uZ6iuhnCmetw==-G18AAGRwXmtr26lMRkCwAQcu0eDLoAHasAEnXMH8 vveJwHeaFjXrZ6LqkfYm4AvOA9vA_UCudcTNX jXbfSL0tDlG VQycxzdP14yIefNAoBM3RDCtwrAA=

http://www.centersharenew.com/sjsZcoyJjeBB2OgfK7ObQSilF3YbihoWwM0ANEselfMLBjeZXRtwGbNp00fEY0hVFtrcyGFNjflne8lTRUJxUCBhKq4AGYP 4v1NV1tobXQsWxYq77Uaju2TeOL3yZSoS dR7SvMuRP4etAzlpHkfMc6PueVTtZYa6CMwneZyZCSZLQwslhdWXPwt5ARx_FNq5r3A15ChCRAUuVT6EESfBEm19kTqA==-G18AAGR0W2u034HESK7dFTbgwCUafBk0QBs24IQrmF9_3_skwBsO67rVc1GtFL0J ALz8DZAL4B7PWHzN p1K93deFVsEC2VmpLnXc1EJkZCoxAuY0liFDM=

http://www.centersharenew.com/Pyy12QGCIJ9nsXFFdigBjkbPTDgZDnd_XziO23wVoPTnHvHuUXlh0Dg9xUS_eDn4MRoR1G9dqf0Z0NX_GCZ2ySbZAF4LgAHM I0vB4CxrXquA5ZQysCvY1VmalNeMgJEMXPLR3Hy7DTw_Uc9WTfWTpeIvH6b8pG E3S91sjOlpgdcvRAzDxkJTLiup3PYYESzzXJDgbTKul6HHnP6K_J6o_V2wvXA==-G18AAGRwXmtvRpbS88DDsAEHLtHgy6AB2rABJ1zB_Mh975MAb42u6wZEUYtZfxPwpQr6QlUvKvd6avCH XWn zgES022 ip4JYOt7C5wfQpMTce3PMdzvRA=

http://www.centersharenew.com/U6PD3j1m2obsNe1WPmyODXYFqxTMpIzkMFSZmg1zpLNVOhwuAd9o9PojWAwcxnzvOG8U1BLmihv_6TOJ5NCTwUzdiVg_XPl6D463ID dh2FDR2jA HkVq8ghzj4ErYuuDWhoi8cSXjPUt3FSe0uc_1qoDYaG17RokCSZK12AlZvyxN3StXPM6AodjkLz6ao3USFXWuIzYZcJgBA_STO kZQcs_QUlw==-G18AAGRgnq2tSW7gCdiAA5do8GXQAG3YgBOuYH7b63WbBHhD VynU5FdQv4TcBP8LR_ZlAvIPf6gObfLD9fYmf5157Bz_X7r6fI2Y9Luy5TYBZRgkYplkJoFg==

http://www.centersharenew.com/cl5O1nIL5v2wCT4A5w5xyFmN2lwl7Fm59LvPJldYbunmMDhvIPBwAaATIsDmyoUExzSe_tRLBBBa7pRUT80FaSgh fz96rjZz268s_MF_9UrE2bp5yj34HSBf4H5ArbEtcrbKz0mmwZrxwDSQYrjDJNmZEGwgliMPn_aU6SfHfBTXy2Hm2gRKEQegX4ldHdpok5A35zYonY3ZJshDnZlrjN0 haMRw==-G18AAGRwXmtru5mIUADABhy4RIMvgwZowwaccAXza89znQR4I908L VYVCtF3wR8wLG7K6gXyL3uSPVW6nHKLkd0Q2EmRNXuNWGV1x_ZtA4qGacYnsIogiYA

http://www.centersharenew.com/c?x=G/yenye1LoAwMP0dGo1/AuymC0gXqLTaIOApiJyTN00=&c=syXcQ0HFqZ366x3cCDEzELhfDQWre80sUdFn0QZr7XOZIK9Ae7AgRmkaBaux4xe781vCxY8Q0q9H22L0hsdcOE724g7v3sWamsObKBMvb oz7jc4neBC3swf2OCXOewl8WSRyJCAr8IihuoPZNdglUBPT Lqky9tL35aE6W Ce8=&e=0&fallback_url=https://secure.innodl.com/.../windows-live-movie-maker.exe

http://117.21.175.128/andmain6.exe

Latest 30 of 38 download URLs

Scan wmpfirefoxplugin.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.