Gridinsoft Logo
File Icon

The iobituninstaller.exe (Setup File) File Analysis

Updated 3 months ago
Checked by Malware Check
iobituninstaller.exe

Technical Analysis

File Name iobituninstaller.exe
File Type
Win32 EXE
Magic Bytes PE32 executable (GUI) Intel 80386, for MS Windows
SSDEEP Hash
786432:xSAxsk65/DGhjvqNUkl0MEsMT+laE9MJ5Z2QInBu/Mw/YrhE:xSOy/ShD805ny8Dv0wwrhE
Scanner Version 1.0.225.174
Database Version 2025-09-20 08:00:22 UTC
⚠

Suspicious File Detected

Detected by 3 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.
4%
Detection Rate
33,540,224
File Size (bytes)
3/71
Engines Detected
2025-09-20
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
9a141fbe16602b95165104622c5c480d
SHA1
58d8ecd94628db258ff0e1a808a9935ad9532dad
SHA256
12b20bbce394f4e6c8af4b808bed79552a685818b09140936d8d7b03c05b3d55
SHA512
138ac7afe25befc6c44eea66ddb1fbf80f37c54c0cd27598f9db9b3148f22d8c074aea1c0d171a67bb96970c2761962a787880c3261d7f684062904e93a17941
ImpHash
48aa5c8931746a9655524f67b25a47ef

Security Engines with Detections (3 of 71)

Malwarebytes
PUP.Optional.BundleInstaller Malicious
CrowdStrike
win/grayware_confidence_90% (D) Malicious
DrWeb
Trojan.PWS.Spy.21454 Malicious
68 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

▼
Icon
Hash: 76ecc7f8817b55e80a787389d612ec51
Fuzzy: afa19386137efc057bb15478cdadf35e
dHash: 80b4ec80b0b4b4e4
Image Base 0x00400000
Entry Point 0x004113bc
Compilation Time 2013-10-13 08:19:32
Checksum 0x00000000 (Actual: 0x0200b588)
OS Version 5.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
Digital Signature OK
Imports 5 libraries
oleaut32, advapi32, user32, kernel32, comctl32
Exports 0 functions
Resources 19 Resources
Sections 8 Sections

Version Information

▼
Comments This installation was built with Inno Setup.
CompanyName IObit
FileDescription Setup File
FileVersion 15.0.0.13
LegalCopyright ©IObit. All rights reserved.
ProductName Uninstall Utility 15
ProductVersion 15.0.0.13
Translation 0x0000 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 61,740 bytes 61,952 bytes 6.39 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 3A126E478661F20816F9D9285615F98E
.itext 0x00011000 2,884 bytes 3,072 bytes 5.73 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ BA48B9B17B3DD8B92DA3BD93F20DDB34
.data 0x00012000 3,208 bytes 3,584 bytes 2.25 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D7FD5F4B562D7961758F3D6A8C834FD0
.bss 0x00013000 22,196 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.idata 0x00019000 3,536 bytes 3,584 bytes 4.97 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 93D91A2B90E60BD758FC0C4908856AE1
.tls 0x0001a000 8 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.rdata 0x0001b000 24 bytes 512 bytes 0.20 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 3DFFC444CCC131C9DCEE18DB49EE6403
.rsrc 0x0001c000 62,980 bytes 63,488 bytes 5.24 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 2CB535D28405937F5C81B6039A1F2484

Resource Analysis

▼
Total Resources: 19 (61,830 bytes)
Resource Type Count Total Size Percentage
RT_ICON 6 22,384 bytes
36.2%
RT_STRING 6 2,668 bytes
4.3%
RT_RCDATA 4 33,908 bytes
54.8%
RT_GROUP_ICON 1 90 bytes
0.1%
RT_VERSION 1 1,268 bytes
2.1%
RT_MANIFEST 1 1,512 bytes
2.4%

Certificate Chain Analysis

▼
Certificate Information
Product Uninstall Utility 15
Description Setup File
File Version 15.0.0.13
Copyright ©IObit. All rights reserved.
Certificate Chain Summary
GlobalSign #1 Primary
Validity Period: 2009-03-18 10:00:00 → 2029-03-18 10:00:00
Signature Algorithm: sha256RSA
Serial Number: 04 00 00 00 00 01 21 58 53 08 A2
DigiCert Trusted Root G4 #2 Chain
Validity Period: 2022-08-01 00:00:00 → 2031-11-09 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 0E 9B 18 8E F9 D0 2D E7 EF DB 50 E2 08 40 18 5A
GlobalSign Code Signing Root R45 #3 Chain
Validity Period: 2020-07-28 00:00:00 → 2029-03-18 00:00:00
Signature Algorithm: sha384RSA
Serial Number: 78 03 18 42 45 70 8A 41 CF 6F 01 B8 EE B4 A9 54
DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1 #4 Chain
Validity Period: 2025-05-07 00:00:00 → 2038-01-14 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0D C7 AC 57 05 FF 21 99 2E 40 43 22 0C 3A 49 86
GlobalSign GCC R45 EV CodeSigning CA 2020 #5 Chain
Validity Period: 2020-07-28 00:00:00 → 2030-07-28 00:00:00
Signature Algorithm: sha256RSA
Serial Number: 77 BD 0E 05 B7 59 0B B6 1D 47 61 53 1E 3F 75 ED
DigiCert SHA256 RSA4096 Timestamp Responder 2025 1 #6 Chain
Validity Period: 2025-06-04 00:00:00 → 2036-09-03 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0A 80 EF 18 4B 8D F1 05 82 D1 C4 76 A7 95 74 68
IObit Co., Ltd. #7 Chain
Validity Period: 2025-08-06 09:42:51 → 2028-08-06 09:42:51
Signature Algorithm: sha256RSA
Serial Number: 58 F3 D2 53 2D 20 05 E0 E0 12 6D 59

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
3 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Your Score for
/

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware Download Now
Gridinsoft Anti-Malware