AI
IObit Driver Booster contains spyware components
Local reference
Suspicious dependency
Inferred
Microsoft masquerade with malware self-description: CareScan.exe, DIFxAPI64.dll, DIFxAPI32.dll, dpinst.exe, dpinst.exe
PE resource extraction before process/network execution: IObitDownloader.exe
Unsigned native Run-key replacement persistence: Bugreport.exe
| 0xc338 | 44240cc6442410008d54240c33c9b878 | D$..D$...T$.3..x |
| 0xc348 | cf4000e8ecfdffff8b4424083bc6740a | .@.......D$.;.t. |
| 0xc358 | b806000000e8dafcffff83c4145f5e5b | ............._^[ |
| 0xc368 | c3000000b0040200ffffffff16000000 | ................ |
| 0xc378 | 4c007a006d0061004400650063006f00 | L.z.m.a.D.e.c.o. |
| 0xc388 | 6400650020006600610069006c006500 | d.e. .f.a.i.l.e. |
| 0xc398 | 64002000280025006400290000000000 | d. .(.%.d.)..... |
| 0xc3a8 | c6401100c6401000c38d4000538bd856 | .@...@....@.S..V |
| 0xc3b8 | 518b033b430475278bcc8b73108bd38b | Q..;C.u'...s.... |
| 0xc3c8 | c6ff168943148b0b030c24894b04833c | ....C.....$.K..< |
| 0xc3d8 | 2400750bc7431801000000b0ffeb068b | $.u..C.......... |
| 0xc3e8 | 13ff038a025a5e5bc3909090538bd833 | .....Z^[....S..3 |
| 0xc3f8 | c05689430433d2 | .V.C.3. |
| 0x111cc | 14a2400054a2400080a2400000000000 | ..@.T.@...@..... |
| 0x111dc | 0000008000000040000000c000000000 | .......@........ |
| 0x111ec | 01000000020000000300000002000000 | ................ |
| 0x111fc | 01000000030000000400000005000000 | ................ |
| 0x1120c | 496e6e6f205365747570205365747570 | Inno Setup SetupInno Setup self-extracting installer |
| 0x1121c | 20446174612028352e352e3729202875 | Data (5.5.7) (u |
| 0x1122c | 29000000000000000000000000000000 | )............... |
| 0x1123c | 00000000000000000000000000000000 | ................ |
| 0x1124c | 496e6e6f205365747570204d65737361 | Inno Setup Messa |
| 0x1125c | 6765732028352e352e33292028752900 | ges (5.5.3) (u). |
| 0x1126c | 00000000000000000000000000000000 | ................ |
| 0x1127c | 00000000000000000000000000000000 | ................ |
| 0x1128c | 54db400070db400084db400098db4000 | T.@.p.@...@...@. |
| 0x1129c | b4db4000300031003200330034003500 | ..@.0.1.2.3.4.5. |
| 0x112ac | 3600 | 6. |
| 0x21fc0 | 5850414444494e4750414444494e4758 | XPADDINGPADDINGX |
| 0x21fd0 | 5850414444494e4750414444494e4758 | XPADDINGPADDINGX |
| 0x21fe0 | 5850414444494e4750414444494e4758 | XPADDINGPADDINGX |
| 0x21ff0 | 5850414444494e4750414444494e4758 | XPADDINGPADDINGX |
| 0x22000 | 7a6c621a1ce22b27e0075d002696861d | zlb...+'..].&... |
| 0x22010 | f7f2016b0275948fa7be7be83a09ca83 | ...k.u....{.:... |
| 0x22020 | 17d15264c298c1a63c2d5747be2dbe94 | ..Rd....<-WG.-.. |
| 0x22030 | bd8bdc6f2597af50f1d25b8552e1d47c | ...o%..P..[.R..| |
| 0x22040 | 3d4c754da71f1b73edeb01c5712f705f | =LuM...s....q/p_ |
| 0x22050 | b4256f1ea3c5c8f11bbd6adedcab13b3 | .%o.......j..... |
| 0x22060 | 2a23f21d6f420b2b450947936c54493d | *#..oB.+E.G.lTI= |
| 0x22070 | e617e28f7c7ed857bc1fbc79eff78843 | ....|~.W...y...C |
| 0x22080 | 7dbf66696064e57a2179ca441d351819 | }.fi`d.z!y.D.5.. |
| 0x22090 | b7e489c64c199f1c54090d35de9f8cce | ....L...T..5.... |
| 0x220a0 | 30e13590437f63d7b56483f900644add | 0.5.C.c..d...dJ. |
| 0x220b0 | b3cb4bc4e14194330f546eacad7a361b | ..K..A.3.Tn..z6. |
| 0x220c0 | abf29138bd7dc23337209f4c848bdde6 | ...8.}.37 .L.... |
| 0x220d0 | 25d57f957d81529877565b5a70b13043 | %...}.R.wV[Zp.0C |
| 0x220e0 | 5b7e87f1eb316753a2dff5c5bd317235 | [~...1gS.....1r5 |
| 0x220f0 | 530c505d62b4ffc792b820ea0f5b9e2a | S.P]b..... ..[.* |
| 0x22100 | 168a7f754cad7a10d8744a038072e9a2 | ...uL.z..tJ..r.. |
| 0x22110 | a0015530e95e32fddd494328168ba73e | ..U0.^2..IC(...> |
| 0x22120 | b4ab1f40eb540effc723d0889a75d2d6 | ...@.T...#...u.. |
| 0x22130 | d9ac3b256daed300634a60874e9702c2 | ..;%m...cJ`.N... |
| 0x22140 | 60d53ec27459db89554cf51cf3d2e292 | `.>.tY..UL...... |
| 0x22150 | b538ca3f4f43f0ad4595b21f15a24376 | .8.?OC..E.....Cv |
| 0x22160 | 628969da77902169795650dcdb0bb5f0 | b.i.w.!iyVP..... |
| 0x22170 | d9642f87da8a1e1f99dbe4c86b299193 | .d/.........k).. |
| 0x22180 | 535c09d8c512bb649d78776d64d3090c | S\.....d.xwmd... |
| 0x22190 | 85a1ca8812d38e5938fe6fe7b1fb83c7 | .......Y8.o..... |
| 0x221a0 | bf1f37f6e0b58df15097cf86a7a67e9a | ..7.....P.....~. |
| 0x221b0 | 3d87060e652cd556764333521bc74268 | =...e,.VvC3R..Bh |
| 0x221c0 | aa1f2dcf159fdf8281736f05e4f2fc75 | ..-......so....u |
| 0x221d0 | 060db579ecaf09479f00d858a673b25a | ...y...G...X.s.Z |
| 0x221e0 | 4683b16e2957131d07367bdb8a9b587f | F..n)W...6{...X. |
| 0x221f0 | b3cc0abf6d2a1a19422fa4e6780b94e0 | ....m*..B/..x... |
| 0x22200 | 4f14493ea7126b2aebc9490e4aa3ea7f | O.I>..k*..I.J... |
| 0x22210 | 4d6f771624b03607edd35708ec07871b | Mow.$.6...W..... |
| 0x22220 | 94a85ea6386b476809c0dde904aa4fba | ..^.8kGh......O. |
| 0x22230 | 1edd8da2de573c4aa3b7f443a84f005f | .....W<J...C.O._ |
| 0x22240 | 930bc0c0592be21134e2f926e2b969bc | ....Y+..4..&..i. |
| 0x22250 | a0116752f2666350a2692cb3d9af1e90 | ..gR.fcP.i,..... |
| 0x22260 | 4ff78cb559a8151c2536907a2e1e0eb5 | O...Y...%6.z.... |
| 0x22270 | 670ff52138d40ed238fcffca36ee13a1 | g..!8...8...6... |
Loading traits…
Identity
| SHA-256 | a67d4d48e93daae7a844bcdb235b83c88ad8b4d8f819c8241204a32e41696d61 |
|---|---|
| Canonical SHA-256 | 0049fe51845faef449d558a581635cfa17f74a03131beb4793f892a0a895fa32 |
| Filename | driver_booster_setup.exe |
| Package | IObit.DriverBooster |
Origin
| Source | forager |
|---|---|
| Feed | winget.run |
| Ecosystem | windows |
| Domain | iobit.com |
| URL | https://cdn.iobit.com/dl/driver_booster_setup.exe |
Timeline
| First seen | 4 Aug 2026 05:23 UTC |
|---|---|
| First analyzed | 4 Aug 2026 08:31 UTC |
| Last analyzed | 4 Aug 2026 08:31 UTC |
| Last updated | 4 Aug 2026 08:31 UTC |
Labeling
| Label | unknown |
|---|---|
| Label source | forager |
| Traits version | 6052a |
Not seeing what you expected? Let us know