The IObitUnlockerPortable_1.3.paf.exe (IObit Unlocker Portable) File Analysis

Updated 1 year ago

Checked by Malware Check

IObitUnlockerPortable_1.3.paf.exe

Technical Analysis

File Name	IObitUnlockerPortable_1.3.paf.exe
File Type	Win32 EXE
Magic Bytes	`PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive`
SSDEEP Hash	49152:Qk9icdyMn6OwYu8LDKlDPSTb+5ser2XvLMjaaO1QRup08e:QCwRmDkDK/EserkTfaO1QRuC8e
Scanner Version	1.0.178.174
Database Version	2024-06-07 17:00:58 UTC

⚠

Suspicious File Detected

Detected by 8 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.

11%

Detection Rate

2,106,849

File Size (bytes)

8/74

Engines Detected

2024-06-07

Analysis Date

Scan Another File

File Identification

Hash Type	Value	Action
MD5	5fbcd7e9d1752a4fc50e6cc7ce60a31f
SHA1	e1b392088c1084a2bba902f7dbfc801dc0d02510
SHA256	d8b37733a0c3bb4d7071c0c502d810ac11bc7727157473c731a5e0c181c5b4f4
SHA512	ce4fafd76cd69c4599022bb8cec0573da8a9b4c2bdea04f741bc929c698100ccf35a39755668efd9628e25b49c88232ddff140f054b5b333df5f11a7960c834e
ImpHash	61259b55b8912888e90f516ca08dc514

Security Engines with Detections (8 of 74)

Bkav

W32.Common.D1C3975D Malicious

Cylance

Unsafe Malicious

Sangfor

Trojan.Win32.Agent.Vnis Malicious

ESET-NOD32

a variant of Win64/IObitUnlocker.A potentially unsafe Malicious

DrWeb

Program.Unwanted.2520 Malicious

Sophos

IObit Unlocker (PUA) Malicious

GData

Win32.Application.iObit.B (2x) Malicious

DeepInstinct

MALICIOUS Malicious

66 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

▼

Icon	Hash: 2c09465cc979677d65781d9403176c31 Fuzzy: 5c00f471cce984e3b873ef9ade242aed dHash: 71e0e4b8cccccce0
Image Base	`0x00400000`
Entry Point	`0x00403640`
Compilation Time	2021-09-25 22:04:50
Checksum	0x00000000 (Actual: 0x002040f0)
OS Version	4.0
PEiD Signatures	`PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive`
Digital Signature	The PE file does not contain a certificate table.
Imports	7 libraries ADVAPI32, SHELL32, ole32, COMCTL32, USER32, GDI32, KERNEL32
Exports	0 functions
Resources	71 Resources
Sections	5 Sections

Version Information

▼

Comments	For additional details, visit PortableApps.com
CompanyName	PortableApps.com
FileDescription	IObit Unlocker Portable
FileVersion	1.3.0.0
InternalName	IObit Unlocker Portable
LegalCopyright	2007-2022 PortableApps.com, PortableApps.com Installer 3.7.2.0
LegalTrademarks	PortableApps.com is a registered trademark of Rare Ideas, LLC.
OriginalFilename	IObitUnlockerPortable_1.3.paf.exe
PortableApps.comAppID	IObitUnlockerPortable
PortableApps.comFormatVersion	3.7.2
PortableApps.comInstallerVersion	3.7.2.0
ProductName	IObit Unlocker Portable
ProductVersion	1.3.0.0
Translation	0x0409 0x04b0

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	26,230 bytes	26,624 bytes	6.42 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`D01CD60C08AD4410541807EBC6D4A26F`
`.rdata`	`0x00008000`	5,018 bytes	5,120 bytes	5.14 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`8C5EDFD8FF9CC0135E197611BE38CA18`
`.data`	`0x0000a000`	418,680 bytes	1,536 bytes	4.11 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`C7E50177934AEC2FCDDFD0ACEAF14B43`
`.ndata`	`0x00071000`	1,523,712 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_CNT_UNINITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.rsrc`	`0x001e5000`	123,656 bytes	123,904 bytes	7.07 (Compressed)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`55736C1CAD143E7BA1D59D2447B760A9`

Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼

Total Resources: 71 (119,987 bytes)

Resource Type	Count	Total Size	Percentage
RT_ICON	8	99,868 bytes	83.2%
RT_DIALOG	60	17,292 bytes	14.4%
RT_GROUP_ICON	1	118 bytes	0.1%
RT_VERSION	1	1,460 bytes	1.2%
RT_MANIFEST	1	1,249 bytes	1%

Certificate Chain Analysis

▼

Certificate Information

Product	IObit Unlocker Portable
Description	IObit Unlocker Portable
File Version	1.3.0.0
Original Name	IObitUnlockerPortable_1.3.paf.exe
Internal Name	IObit Unlocker Portable
Copyright	2007-2022 PortableApps.com, PortableApps.com Installer 3.7.2.0

✓ This file has been digitally signed and the certificate chain has been verified

The signature ensures file integrity and authenticity from the publisher
Timestamping proves when the signature was applied

Certificate Verification Status

The PE file does not contain a certificate table.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
Email Security: Be cautious with email attachments and links, even from known contacts.

Proactive Protection

8 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Your Score for

5 4 3 2 1