home

WT_Plugin.exe

WT_Plugin

WebTrain.com Internet Communication Platforms Inc.

Publisher:
WebTrain Communications  (signed by WebTrain.com Internet Communication Platforms Inc.)

Product:
WT_Plugin

Version:
3.09.0002

MD5:
cacd44cd8631de9746187fe142ffb2cd

SHA-1:
76bb0635397b7ea3b932fbbd0d01f990e07ad035

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
7/13/2025 1:55:37 PM UTC  (today)

File size:
17 KB (17,448 bytes)

Product version:
3.09.0002

Original file name:
WT_Plugin.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Documents and Settings\{user}\Application data\programs\webtrain\wt_plugin.exe

Digital Signature
Signed by:
WebTrain.com Internet Communication Platforms Inc.

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
5/22/2008 7:00:00 PM

Valid to:
4/11/2009 6:59:59 PM

Subject:
CN=WebTrain.com Internet Communication Platforms Inc., OU=SECURE APPLICATION DEVELOPMENT, O=WebTrain.com Internet Communication Platforms Inc., L=Kelowna, S=British Columbia, C=CA

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
75BC0AA3EE00DBA08ADE137BE262F8EF

File PE Metadata
Compilation timestamp:
4/3/2009 10:26:22 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
4.20

CTPH (ssdeep):
192:IchtMZ1DEvFVDCllGAh1mh978hmA4cjCEn+6DBLZcM9EyncjWOeyowJL/brV5z5N:IKK1A/W/oA4TEn+UFZconNYJLb0K

Entry address:
0x11F4

Entry point:
68, F0, 12, 40, 00, E8, F0, FF, FF, FF, 00, 00, 70, 00, 00, 00, 30, 00, 00, 00, 68, 00, 00, 00, 40, 00, 00, 00, 22, 1C, BA, 09, 75, 92, 8D, 46, 9B, 97, C4, D8, E5, 90, 27, 4D, 00, 00, 00, 00, 00, 00, 01, 00, 01, 00, 00, 00, 00, 00, 00, 00, 57, 54, 5F, 50, 6C, 75, 67, 69, 6E, 00, 61, 72, 79, 20, 43, 61, 57, 65, 62, 54, 72, 61, 69, 6E, 20, 50, 6C, 75, 67, 69, 6E, 20, 56, 65, 72, 73, 69, 6F, 6E, 20, 63, 6F, 6D, 70, 6F, 6E, 65, 6E, 74, 00, 5C, 53, 6F, 75, 72, 63, 00, 5C, 56, 33, 5C, 45, 6E, 67, 00, 00, 00, 00...
 
[+]

Entropy:
5.5209

Developed / compiled with:
Microsoft Visual Basic v5.0/v6.0

Code size:
4 KB (4,096 bytes)

Automation Object
CLSID:
{B2EC10BA-48FF-48DE-9B50-44BA4C593F26}

CLSID name:
WT_Plugin.clsPlugin


Scan WT_Plugin.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.