Gridinsoft Logo
File Icon

The unlocker-setup(1).exe (IObit Unlocker) File Analysis

Updated 1 year ago
Checked by Malware Check
unlocker-setup(1).exe

Technical Analysis

File Name unlocker-setup(1).exe
File Type
Win32 EXE
Magic Bytes PE32 executable (GUI) Intel 80386, for MS Windows
SSDEEP Hash
49152:jIPYz2KQMb4jfbDalv1AZkMV8XzhjBT3uBZAKxhqPl/pspgG9hmY0hW3hUyn:uoXQMbayUkogdjAYNhqhmYaWJn
Scanner Version 1.0.171.174
Database Version 2024-04-12 21:00:29 UTC
⚠

Suspicious File Detected

Detected by 13 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.
19%
Detection Rate
2,451,912
File Size (bytes)
13/70
Engines Detected
2024-04-12
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
5aff327b388e7dbd63509f44c0e23d3a
SHA1
9bf4da1bf90a69413cdd003f65ad4d2a91396e67
SHA256
c114ff90e7cb93cadea5d4af69624c5c17b7beaafe0e0285f41371fe5c68b76d
SHA512
4195d17a2ece882b10c9ba5376ba9a6873d421b3708a6b40281e0a2f164be06bba9b23ae5d187b910109b8871d38fbae4e03278af5ceb59f6d2d071574d51b17
ImpHash
48aa5c8931746a9655524f67b25a47ef

Security Engines with Detections (13 of 70)

CAT-QuickHeal
HackTool.IObitUnlocker.M9 Malicious
CrowdStrike
win/grayware_confidence_100% (W) Malicious
ESET-NOD32
Win32/IObit.D potentially unwanted Malicious
DrWeb
Program.Unwanted.276 Malicious
Sophos
IObit Unlocker (PUA) Malicious
Antiy-AVL
Trojan/Win32.Zpevdo Malicious
Xcitium
ApplicUnwnt@#3bhljjj783fu8 Malicious
GData
Win32.Application.iObit.B Malicious
Cylance
unsafe Malicious
Panda
PUP/Generic Malicious
MaxSecure
Trojan.Malware.216064600.susgen Malicious
Fortinet
Riskware/IObitUnlocker Malicious
DeepInstinct
MALICIOUS Malicious
57 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

▼
Icon
Hash: 47a7ca285d0a83cad8e1c0c74e1f3865
Fuzzy: a28f185e4c373f477223e4cd15e1a803
dHash: a4a4c4b01210b0c4
Image Base 0x00400000
Entry Point 0x004113bc
Compilation Time 2013-10-13 08:19:32
Checksum 0x002600e6 (Actual: 0x002600e6)
OS Version 5.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
Digital Signature OK
Imports 5 libraries
oleaut32, advapi32, user32, kernel32, comctl32
Exports 0 functions
Resources 20 Resources
Sections 8 Sections

Version Information

▼
Comments This installation was built with Inno Setup.
CompanyName IObit
FileDescription IObit Unlocker
FileVersion 1.1
LegalCopyright Copyright © 2005-2015
ProductName IObit Unlocker
ProductVersion 1.1
Translation 0x0000 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 61,740 bytes 61,952 bytes 6.39 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 3A126E478661F20816F9D9285615F98E
.itext 0x00011000 2,884 bytes 3,072 bytes 5.73 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ BA48B9B17B3DD8B92DA3BD93F20DDB34
.data 0x00012000 3,208 bytes 3,584 bytes 2.25 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D7FD5F4B562D7961758F3D6A8C834FD0
.bss 0x00013000 22,196 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.idata 0x00019000 3,536 bytes 3,584 bytes 4.97 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 93D91A2B90E60BD758FC0C4908856AE1
.tls 0x0001a000 8 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.rdata 0x0001b000 24 bytes 512 bytes 0.20 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 3DFFC444CCC131C9DCEE18DB49EE6403
.rsrc 0x0001c000 65,480 bytes 65,536 bytes 5.30 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 38C1D8F6F966025CCDA51ED128FACDAC

Resource Analysis

▼
Total Resources: 20 (64,284 bytes)
Resource Type Count Total Size Percentage
RT_ICON 7 24,824 bytes
38.6%
RT_STRING 6 2,668 bytes
4.2%
RT_RCDATA 4 33,908 bytes
52.7%
RT_GROUP_ICON 1 104 bytes
0.2%
RT_VERSION 1 1,268 bytes
2%
RT_MANIFEST 1 1,512 bytes
2.4%

Certificate Chain Analysis

▼
Certificate Information
Product IObit Unlocker
Description IObit Unlocker
File Version 1.1
Signing Date 08:50 AM 07/21/2015 (3631 days ago)
Verification Status Signed
Signers IObit Information Technology; VeriSign Class 3 Code Signing 2010 CA; VeriSign
Counter Signers Symantec Time Stamping Services Signer - G4; Symantec Time Stamping Services CA - G2; Thawte Timestamping CA
Copyright Copyright © 2005-2015
Certificate Chain Summary
Symantec Time Stamping Services CA - G2 #1 Primary
Validity Period: 2012-12-21 00:00:00 → 2020-12-30 23:59:59
Signature Algorithm: sha1RSA
Serial Number: 7E 93 EB FB 7C C6 4E 59 EA 4B 9A 77 D4 06 FC 3B
Symantec Time Stamping Services Signer - G4 #2 Chain
Validity Period: 2012-10-18 00:00:00 → 2020-12-29 23:59:59
Signature Algorithm: sha1RSA
Serial Number: 0E CF F4 38 C8 FE BF 35 6E 04 D8 6A 98 1B 1A 50
IObit Information Technology #3 Chain
Validity Period: 2013-01-15 00:00:00 → 2016-02-14 23:59:59
Signature Algorithm: sha1RSA
Serial Number: 11 CA DA F2 9D A4 C3 CB 11 3B F1 87 7B 12 01 03

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
13 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware