» WebUpdater.EXE
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

WebUpdater.EXE

WebUpdater Application

iWin, Inc

File name:

WebUpdater.EXE

Publisher:

iWin, Inc (signed and verified)

Product:

WebUpdater Application

Description:

Web Updater Application

Version:

1, 1, 0, 1

MD5:

aa2217597da9076ea147fa21d8e4ee23

SHA-1:

07e77f677619bfc46d3970caae3fe176abbf0d15

SHA-256:

ee072c68033abdac8ab6e9b5c97a41707bd38da45b5faf2883f7743677fdb4ff

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/25/2024 10:00:58 PM UTC (today)

File size:

647.7 KB (663,248 bytes)

Product version:

1, 1, 0, 1

Original file name:

WebUpdater.EXE

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\pogo games\webupdater.exe

Digital Signature

Signed by:

iWin, Inc

Authority:

Thawte, Inc.

Valid from:

11/8/2010 5:00:00 PM

Valid to:

11/15/2012 4:59:59 PM

Subject:

CN="iWin, Inc", OU=SECURE APPLICATION DEVELOPMENT, O="iWin, Inc", L=San Francisco, S=California, C=US

Issuer:

CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:

1E8BC9CF1531362AB9BA27FE43D39BA3

File PE Metadata

Compilation timestamp:

12/12/2011 6:17:19 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

6144:oWifxqW7oJpzDGbyyFPZsPogWx5wknJcTn9glK2+KZHhYWvz9G+u6I5CM+6X:oWGxq+oJYPZMob26JcYKCFz9sM

Entry address:

0x22D62

Entry point:

E8, D0, 9D, 00, 00, E9, 78, FE, FF, FF, 8B, FF, 55, 8B, EC, 51, 83, 65, FC, 00, 56, 8D, 45, FC, 50, FF, 75, 0C, FF, 75, 08, E8, 47, 9E, 00, 00, 8B, F0, 83, C4, 0C, 85, F6, 75, 18, 39, 45, FC, 74, 13, E8, E0, 06, 00, 00, 85, C0, 74, 0A, E8, D7, 06, 00, 00, 8B, 4D, FC, 89, 08, 8B, C6, 5E, C9, C3, 8B, FF, 55, 8B, EC, 57, BF, E8, 03, 00, 00, 57, FF, 15, 6C, 82, 43, 00, FF, 75, 08, FF, 15, AC, 80, 43, 00, 81, C7, E8, 03, 00, 00, 81, FF, 60, EA, 00, 00, 77, 04, 85, C0, 74, DE, 5F, 5D, C3, 8B, FF, 55, 8B, EC, E8... 
[+]

Entropy:

5.7582

Code size:

216.5 KB (221,696 bytes)

Windows Firewall Allowed Program

Name:

C:\Program Files\Pogo Games\WebUpdater.exe

The file WebUpdater.EXE has been discovered within the following program.

Pogo Games (remove only) by Electronic Arts

Publisher's description - “Play free online games, including puzzle games, word games, card games and more with chances for prizes! Play your childhood favorites like Scrabble, Monopoly and Risk, earn Tokens and save your high score. Make new friends.”

www.pogo.com

53% remove it

Scan WebUpdater.EXE - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.