» iobituninstaler.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)
Downloads (17)

iobituninstaler.exe

Uninstall Programs

IObit Information Technology

This is a self-extracting archive and installer. It runs as a scheduled task under the Windows Task Scheduler. This file is installed with the program IObit Uninstaller. The file has been seen being downloaded from update.instair.net and multiple other hosts.

File name:

iobituninstaler.exe

Publisher:

IObit (signed by IObit Information Technology)

Product:

Uninstall Programs

Version:

4.1.5.30

MD5:

705c0e251d48bc5d6af174f165141ba4

SHA-1:

f07af60a699988e7285ddb95d2d28877f72c802a

SHA-256:

a04cfae8377c37fe5c4232275722441b393cd75f7a39ef8fb7dbeb9f5b3b6ba8

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

11/25/2024 12:41:37 AM UTC (today)

Scan engine

Detection

Engine version

G Data

Win32.Adware.IObit

14.11.24

File size:

16.3 MB (17,086,240 bytes)

Product version:

4.0.0.0

Trademarks:

IObit

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\iobit\iobit uninstaller\iobituninstaler.exe

Digital Signature

Signed by:

IObit Information Technology

Authority:

VeriSign, Inc.

Valid from:

1/14/2013 7:00:00 PM

Valid to:

2/14/2016 6:59:59 PM

Subject:

CN=IObit Information Technology, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=IObit Information Technology, L=Chengdu, S=Sichuan, C=CN

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

11CADAF29DA4C3CB113BF1877B120103

File PE Metadata

Compilation timestamp:

11/25/2014 4:51:49 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

393216:FdpCwVKHoI/V8D/7AL/YU4LWmTxxvYwRmTmO+ALQltOER:FdctII/qDzXU4KmbFRmTAdtOq

Entry address:

0x31001C

Entry point:

55, 8B, EC, B9, 05, 00, 00, 00, 6A, 00, 6A, 00, 49, 75, F9, 51, 53, B8, 78, C7, 70, 00, E8, 59, 9A, CF, FF, 33, C0, 55, 68, 0F, 02, 71, 00, 64, FF, 30, 64, 89, 20, 6A, 00, 6A, 00, 6A, 00, 6A, 00, 33, C9, BA, 28, 02, 71, 00, B8, 74, 02, 71, 00, E8, 46, 60, FF, FF, E8, 91, 38, FC, FF, 8B, D8, 84, DB, 74, 33, B8, AC, 02, 71, 00, E8, D5, E1, E0, FF, 8B, 15, 48, C1, 72, 00, 88, 02, EB, 11, B8, AC, 02, 71, 00, E8, E5, D8, FB, FF, 6A, 0A, E8, 82, 98, D5, FF, B8, AC, 02, 71, 00, E8, B0, E1, E0, FF, 84, C0, 75, E1... 
[+]

Developed / compiled with:

Microsoft Visual C++

Code size:

3.1 MB (3,205,120 bytes)

Scheduled Task

Task name:

Uninstaller_SkipUac_imed

The file iobituninstaler.exe has been discovered within the following program.

IObit Uninstaller by IObit

Publisher's description - “Uninstall programs with IObit Uninstaller. The free software removal program can uninstall programs and clean leftovers thoroughly. As a pure uninstall program, IObit Uninstaller 2 features himself in the market without install required to remove programs.”

www.iobit.com

18% remove it

The file iobituninstaler.exe has been seen being distributed by the following 17 URLs.

http://update.instair.net/.../iobituninstaller4.1.exe

http://down.filepuma.com/files/uninstallers/.../Iobit_Uninstaller_v4.1.5.30.exe

http://www.filepuma.com/down/1420833988c7584/iobit_uninstaller_4.1.5.30/.../0/

http://www.filepuma.com/file/1420833988c7584/iobit_uninstaller_4.1.5.30/.../0/

http://download.instalki.info/programy/Windows/Narzedzia/.../iobituninstaller4.1_www.INSTALKI.pl.exe

http://depo-tamindir.com/p/i/.../iobituninstaller-4.1.5.30-tamindir.exe

http://www.tamindir.com/indir/MjAxNC0xMi0yOSAxNTowMDo0Mw==/iobit-uninstaller/.../4.1.5.30

http://lb.cdn.m6web.fr/d/c/a/ba8c9541db907aca45eceaf592d79a0e/548b382d/soft/.../iobit-uninstaller_4-1-5-30_fr_322480.exe

http://lb.cdn.m6web.fr/d/c/a/4fb4bf63b79dadd5b156fa2dbac331c2/54a93cbb/soft/.../iobit-uninstaller_4-1-5-30_fr_322480.exe

http://www.tamindir.com/indir/MjAxNS0wMS0wNCAxMTozMToxNA==/iobit-uninstaller/.../4.1.5.30

http://www.tamindir.com/indir/MjAxNC0xMi0yMiAwODowMDoxNA==/iobit-uninstaller/.../4.1.5.30

http://dl.cdn.chip.de/downloads/.../iobituninstaller41.exe

http://www.filepuma.com/file/1418827338c7584/iobit_uninstaller_4.1.5.30/.../0/

http://lb.cdn.m6web.fr/d/c/a/2d6cff55ba5d900fe2c551d7c3520af5/5481f153/soft/.../iobit-uninstaller_4-1-5-30_fr_322480.exe

http://www.tamindir.com/indir/MjAxNC0xMS0zMCAxODo1Njo0MA==/iobit-uninstaller/.../4.1.5.30

http://www.majorgeeks.com/index.php?ct=files&action=download&

http://software-files-a.cnet.com/s/software/13/93/97/.../iobituninstaller41.exe

Scan iobituninstaler.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.