» iWinUpgrader.exe
Overview
Analysis
File Details
Programs (2)

iWinUpgrader.exe

iWin Upgrade Helper

iWin, Inc

This is installed with multiple programs including Iplay Games and iWin Games.

File name:

iWinUpgrader.exe

Publisher:

iWin Inc (signed by iWin, Inc)

Product:

iWin Upgrade Helper

Version:

1.1.0.149

MD5:

c0435e2fce701e1695ab1ef7d8212bc4

SHA-1:

1615fe0b75509d63aacff51236d4ce2fbbf28bb2

SHA-256:

330a29a2921c474faa207afb44870c8fe25abb9781394302aa88e6d2282a42d0

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/27/2024 12:46:51 AM UTC (today)

File size:

989.5 KB (1,013,224 bytes)

Product version:

1.1.0.149

Original file name:

iWinUpgrader.exe

File type:

Executable application (Win32 EXE)

Language:

English (United Kingdom)

Common path:

C:\users\{user}\appdata\local\gamesmanager_iwin_iplay\iwinupgrader.exe

Digital Signature

Signed by:

iWin, Inc

Authority:

thawte, Inc.

Valid from:

12/19/2016 2:00:00 AM

Valid to:

1/20/2019 1:59:59 AM

Subject:

CN="iWin, Inc", OU=SECURE APPLICATION DEVELOPMENT, O="iWin, Inc", L=San Francisco, S=California, C=US

Issuer:

CN=thawte SHA256 Code Signing CA - G2, O="thawte, Inc.", C=US

Serial number:

23AD1E6D2F57EF8CC582E237E53BE812

File PE Metadata

Compilation timestamp:

3/13/2017 6:04:25 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

Entry address:

0x77D2B

Entry point:

E8, 65, 2F, 00, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 8B, 45, 08, 56, 8B, F1, C6, 46, 0C, 00, 85, C0, 75, 63, E8, 84, 2C, 00, 00, 89, 46, 08, 8B, 48, 6C, 89, 0E, 8B, 48, 68, 89, 4E, 04, 8B, 0E, 3B, 0D, 00, DA, 49, 00, 74, 12, 8B, 0D, B8, D7, 49, 00, 85, 48, 70, 75, 07, E8, 5F, 39, 00, 00, 89, 06, 8B, 46, 04, 3B, 05, C0, D6, 49, 00, 74, 16, 8B, 46, 08, 8B, 0D, B8, D7, 49, 00, 85, 48, 70, 75, 08, E8, BE, 31, 00, 00, 89, 46, 04, 8B, 46, 08, F6, 40, 70, 02, 75, 14, 83, 48, 70, 02, C6, 46, 0C, 01, EB, 0A... 
[+]

Entropy:

6.2044

Code size:

563.5 KB (577,024 bytes)

The file iWinUpgrader.exe has been discovered within the following programs.

Iplay Games by iWin Inc.

About 3% of users remove it

iWin Games by iWin Inc.

About 6% of users remove it

Scan iWinUpgrader.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.