» iWinInstaller.exe
Overview
Analysis
File Details
Programs (2)

iWinInstaller.exe

iWin Installation Helper

iWin, Inc

This is installed with multiple programs including Iplay Games and iWin Games.

File name:

iWinInstaller.exe

Publisher:

iWin Inc (signed by iWin, Inc)

Product:

iWin Installation Helper

Version:

1.1.0.152

MD5:

d1a8da04d8b112ecff6e63e0384116fb

SHA-1:

73dc97d5f4360e08e24499014610f87d2bf8649c

SHA-256:

c629c3f93094b920c1e2399e9d8e706d03867c22201cfe3629242c5ae88a925e

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/24/2024 11:35:26 AM UTC (today)

File size:

655.5 KB (671,216 bytes)

Product version:

1.1.0.152

Original file name:

iWinInstaller.exe

File type:

Executable application (Win32 EXE)

Language:

English (United Kingdom)

Common path:

C:\users\{user}\appdata\local\gamesmanager_iwin_iplay\iwininstaller.exe

Digital Signature

Signed by:

iWin, Inc

Authority:

thawte, Inc.

Valid from:

12/19/2016 2:00:00 AM

Valid to:

1/20/2019 1:59:59 AM

Subject:

CN="iWin, Inc", OU=SECURE APPLICATION DEVELOPMENT, O="iWin, Inc", L=San Francisco, S=California, C=US

Issuer:

CN=thawte SHA256 Code Signing CA - G2, O="thawte, Inc.", C=US

Serial number:

23AD1E6D2F57EF8CC582E237E53BE812

File PE Metadata

Compilation timestamp:

3/13/2017 5:59:32 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

Entry address:

0xE7C7

Entry point:

E8, 89, 2F, 00, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 8B, 45, 08, 56, 8B, F1, C6, 46, 0C, 00, 85, C0, 75, 63, E8, 8A, 2C, 00, 00, 89, 46, 08, 8B, 48, 6C, 89, 0E, 8B, 48, 68, 89, 4E, 04, 8B, 0E, 3B, 0D, 60, BC, 44, 00, 74, 12, 8B, 0D, 18, BA, 44, 00, 85, 48, 70, 75, 07, E8, 83, 39, 00, 00, 89, 06, 8B, 46, 04, 3B, 05, 20, B9, 44, 00, 74, 16, 8B, 46, 08, 8B, 0D, 18, BA, 44, 00, 85, 48, 70, 75, 08, E8, E2, 31, 00, 00, 89, 46, 04, 8B, 46, 08, F6, 40, 70, 02, 75, 14, 83, 48, 70, 02, C6, 46, 0C, 01, EB, 0A... 
[+]

Entropy:

5.6962

Code size:

251 KB (257,024 bytes)

The file iWinInstaller.exe has been discovered within the following programs.

Iplay Games by iWin Inc.

About 3% of users remove it

iWin Games by iWin Inc.

About 6% of users remove it

Scan iWinInstaller.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.