home

webplus.exe

GoDaddy.com, Inc.

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘Web+’.
Publisher:
GoDaddy.com, Inc.  (signed and verified)

MD5:
927eeeee48d2af703acc24b8b9d6285c

SHA-1:
7369fc601ef6ac98ffe5239fa10a2f8bda65cd0d

SHA-256:
87f8f46f3e77ff7fafbe9d2b5840075db3280e5f42ea929c81b4bf4acb275c9f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 4:01:21 PM UTC  (today)

File size:
1 MB (1,087,488 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\webplus\webplus.exe

Digital Signature
Signed by:
GoDaddy.com, Inc.

Authority:
The Go Daddy Group, Inc.

Valid from:
11/16/2006 2:54:37 AM

Valid to:
11/16/2026 2:54:37 AM

Subject:
SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Issuer:
OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US

Serial number:
0301

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:KGF5NL/5Ejj0z5Y5pN3Ov3xpIr+usnCH:KGbNLRoj0z5Y5v383kaxC

Entry address:
0xC264C

Entry point:
55, 8B, EC, 83, C4, F0, 53, 56, 57, B8, BC, 21, 4C, 00, E8, 05, 42, F4, FF, A1, 7C, B9, 4C, 00, 8B, 00, E8, C5, 07, FB, FF, 8B, 0D, C0, B4, 4C, 00, A1, 7C, B9, 4C, 00, 8B, 00, 8B, 15, 34, 0A, 4C, 00, E8, CD, 07, FB, FF, E8, 98, CF, FF, FF, A1, 7C, B9, 4C, 00, 8B, 00, E8, 50, 08, FB, FF, 33, C0, 55, 68, B1, 26, 4C, 00, 64, FF, 30, 64, 89, 20, E8, 59, DC, FF, FF, 33, C0, 5A, 59, 59, 64, 89, 10, EB, 0A, E9, 26, 15, F4, FF, E8, 89, 18, F4, FF, 5F, 5E, 5B, E8, F9, 1C, F4, FF, 90, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
774 KB (792,576 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Web+

Command:
C:\Program Files\webplus\webplus.exe


Scan webplus.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.