home

iobituninstaller.exe

IObit Uninstaller

IObit Information Technology

This is a setup and installation application. The file has been seen being downloaded from www.freenew.net and multiple other hosts.
Publisher:
IObit  (signed by IObit Information Technology)

Product:
IObit Uninstaller

Version:
5.2.1.116

MD5:
00635513abee9e45f1e127178439acfa

SHA-1:
aaa2a632470032961a302419e0abaaf4471b9193

SHA-256:
e14099db4fc0a7c0ca2eefec7c5864a8799d4f93cbb0f08709345e93df222640

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 3:52:35 AM UTC  (today)

File size:
11.9 MB (12,485,408 bytes)

Product version:
5.2.0.0

Copyright:
Copyright© 2005-2016

Trademarks:
IObit

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Digital Signature
Signed by:
IObit Information Technology

Authority:
Symantec Corporation

Valid from:
12/23/2015 1:00:00 AM

Valid to:
3/24/2018 12:59:59 AM

Subject:
CN=IObit Information Technology, O=IObit Information Technology, L=Chengdu, S=Sichuan, C=CN

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
454A6CD2E1E63CA9D542DFDAB518FED9

File PE Metadata
Compilation timestamp:
12/24/2015 12:32:58 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
196608:QI8ktJUrx/SjV1x+Up23V3Mx0MqzzBjacQpevNiu3Uk6lSlDu1IpjzyR6o9UnzeW:QwSrx/SjPIUp23VYWzzBOcQAlt3671I/

Entry address:
0xF8E3C

Entry point:
55, 8B, EC, 83, C4, F0, B8, 80, 76, 4F, 00, E8, A4, FE, F0, FF, 33, C0, 55, 68, C7, 8E, 4F, 00, 64, FF, 30, 64, 89, 20, 6A, 00, 6A, 00, 6A, 00, 6A, 00, 68, E0, 8E, 4F, 00, 33, C9, BA, 10, 8F, 4F, 00, B8, 84, 8F, 4F, 00, E8, 80, 44, FD, FF, A1, 64, 1F, 50, 00, 8B, 00, E8, B8, EE, FA, FF, A1, 64, 1F, 50, 00, 8B, 00, BA, E0, 8E, 4F, 00, E8, 37, E9, FA, FF, 8B, 0D, 80, 1D, 50, 00, A1, 64, 1F, 50, 00, 8B, 00, 8B, 15, B8, 23, 4F, 00, E8, A7, EE, FA, FF, A1, 64, 1F, 50, 00, 8B, 00, E8, EB, EF, FA, FF, 33, C0, 5A...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
991 KB (1,014,784 bytes)

The file iobituninstaller.exe has been seen being distributed by the following 17 URLs.

http://www.freenew.net/.../downApp.htm?platform=windows&id=68873&toUrl=1d06183455584139190a0a0117422d00150738470d04185d0828401e012e001a1e1b1b02371b1602200c1c45100a09

http://ru.iobit.com/downloads/.../redir.php?file=iobituninstaller

&onid=2096&oid=3001-2096_4-75161625&rsid=cbsidownloadcomsite&sl=en&sc=us&topicguid=utilities/software-removal&topicbrcrm=&pid=14492675&mfgid=6271865&merid=6271865&ctype=dm&cval=NONE&devicetype=desktop&pguid=37dd71a41f352733dd99afad&viewguid=aSy@LmzAjeGFgPgkzCo6KNUKixTRqrGC5kpO&destUrl=http://files.downloadnow.com/s/software/14/49/26/.../iobituninstaller.exe

http://files1.majorgeeks.com/d4a4ccddfa91dcb33b30f0b1e210c9eb/.../iobituninstaller.exe

https://doc-00-2c-docs.googleusercontent.com/docs/securesc/peuqo819p23e86gqf3lan2tparvikp7l/de11a5n18kdf8unnjlb1fuklm33iplmk/1453896000000/.../10129416871852782057/0B1f3ngll-dymTkF0SGpBdGQ0dWc?e=download

http://indir.gezginler.net/i/17799/.../

http://software-files-a.cnet.com/u/.../iobituninstaller.exe

http://external.comss.ru/url.php?url=http://update.iobit.com/.../iobituninstaller.exe

http://files.downloadnow.com/s/software/14/48/35/.../iobituninstaller.exe

http://update.iobit.com/.../iobituninstaller.exe

http://lb.cdn.m6web.fr/d/c/a/4d33c9f496b2e744da995fd6764d5f41/569de350/soft/.../iobit-uninstaller_5-2-1-117_fr_322480.exe

http://lb.cdn.m6web.fr/d/c/a/f4b07e3b4c5123eac958b0565a79867e/56978a81/soft/.../iobit-uninstaller_5-2-1-117_fr_322480.exe

http://95.141.193.17/noload2/files/.../rsload.net.iobituninstaller.exe

http://software-files-a.cnet.com/s/software/14/49/26/.../iobituninstaller.exe

http://files2.majorgeeks.com/e58e3a33512dd5cbb9e07daa9cca8d19/.../iobituninstaller.exe

http://www.majorgeeks.com/index.php?ct=files&action=download&

http://files.downloadnow.com/s/software/14/49/26/.../iobituninstaller.exe

Scan iobituninstaller.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.