File scan report
Verdict Safe
Is imyfone-
This iMyFone LockWiper installer carries a valid iMyFone signature, is widely submitted, and was flagged by only one less reliable engine with a generic label.
Read the whole reasonShow less
Strong evidence · Widely seen for a long time, and nothing harmful found.
This installer appears to be the genuine iMyFone LockWiper setup; download it only from the vendor's official site and keep your antivirus protection enabled.
Good practice2 tips
We found nothing harmful in this file.
Install it only if it came from the developer's own website or an official app store.
Keep your antivirus and Windows updates switched on.
No scanner can promise a file is 100% safe.
Antivirus results
1 of 71 flagged
- Flagged 1
- No detection 70
- No result 4
- Code signing Shenzhen iMyFone Technology Co., Ltd
- Test run Completed
- First seen 1y ago
Chapter 02
Why we think so
2 points against it and 5 in its favour, checked against the scan evidence.
The reasoning behind this verdict
Only 1 of the 71 antivirus engines that checked it flagged this installer, a generic VBA32 label, while all 18 major engines found nothing. The file is validly signed by Shenzhen iMyFone Technology Co., Ltd and has been submitted by 759 sources since it was first seen on Dec 19, 2024. The combined sandbox verdict was clean.
The single detection comes from a less reliable engine and uses a generic network-trojan bucket, not a named malware family. Every major engine stayed silent. The file carries a valid signature from the iMyFone company named in the file name, and it is widely distributed, with 759 distinct submitters. In the sandbox runs, the installer wrote its own configuration and language files and iMyfone registry keys, with no injection or persistence recorded. The 23 contacted hosts we cross-checked held no malicious or suspicious entries, and no external intelligence lists the file.
What We Detected
1 of the 71 antivirus engines that checked it (VBA32) flagged the file with a generic network-trojan label. None of the major engines, including Kaspersky, ESET, BitDefender and Avast, flagged it. The installer has a valid signature from Shenzhen iMyFone Technology Co., Ltd.
Threat Behavior
In the sandbox runs, the installer created iMyFone program folders, language and log files, and vendor registry keys. No process injection or persistence was recorded, and the combined sandbox verdict was clean. None of the 23 contacted hosts is known to be malicious.
What To Do Now
If you obtained this installer from iMyFone's official website, it fits the profile of the genuine product. Keep your antivirus enabled during installation.
Where this verdict could be wrong2 caveats
- A community annotation tags the file with defence-evasion and persistence labels and a high threat score, but the sandbox runs recorded no persistence and no high-risk techniques.
- The signer has no stored history with us and is not on our trusted-publisher list, so the signature alone does not vouch for the file.
These are the assessment's weak points. If you believe one applies to your file, report the verdict and we'll re-review it.
- Valid code signature from Shenzhen iMyFone Technology Co., Ltd
- Widely distributed: 759 distinct submitters since Dec 19, 2024
- None of the 18 major engines flagged the file
- The combined sandbox verdict was clean, with no high-risk techniques
- No contacted host has a malicious or suspicious reputation
- One less reliable engine flags the file with a generic trojan label.
- The signing company has no stored history in our records.
6 sources checked · all complete. See every source
Chapter 03
What it did in our test
It ran in 6 isolated tests; no test environment rated what it did as risky.
Test run summary
Capture complete- 6isolated sandbox runs
- 23sandbox rule tags
- 6spawned processes
- 17network contacts
- 22filesystem & mutex artifacts
Includes the sandbox verdicts, 23 mapped techniques, every process, file, registry and network entry and 6 dropped files.
Show the technical evidenceChapter 04
Technical details
1 of the 71 antivirus engines that checked it flags it; signed by Shenzhen iMyFone Technology Co., Ltd.
Sources checked
Every check behind this verdict
6 sources checked · all complete. Complete means the check returned a usable result; it does not mean the file is safe.
Engines that flagged it 1
The Safe verdict weighed these detections and treats them as non-decisive.
- VBA32BScope.Trojan.Win32.NetworkGeneric
File fingerprint
- Last analyzed
- Oct 23, 2026, 8:38 PM UTC
- SHA-256
fa11a4d3552443cb9e9977f3f7412afdec9f36e5ac1356858cc4a64a58b84e64- SHA-1
deb6cf9ee8f2a9ec220e2cb2fb2a7c69eab9ac9d- MD5
d539b65ce5afec3c73839858e08be5ba
About this file
imyfone-lockwiper_setup.exe is a Win32 EXE file of 3.0 MB.
- Claims to be
- imyfone-lockwiper_setup.exe (iMyFone LockWiper)From the file's own version information, written by whoever built it.
- Type and size
- Win32 EXE · 3.0 MB
- Signer
- Shenzhen iMyFone Technology Co., LtdValid code signature.
- First seen
- Dec 19, 2024On VirusTotal.
- Submitted by
- 759 distinct sources
- Packer
- None detected
- Entropy
- 6.42 of 8
First scanned
Includes every engine result (75), 1 matched signature rule, PE section entropy and packers and how widely the file has been seen.
Show the technical evidenceChapter 05
Questions & answers
Short answers to the 7 questions people ask most about this file.
Is imyfone-lockwiper_setup.exe safe?
What is imyfone-lockwiper_setup.exe?
How many antivirus engines detected imyfone-lockwiper_setup.exe?
Is imyfone-lockwiper_setup.exe digitally signed?
What is the SHA-256 hash of imyfone-lockwiper_setup.exe?
Is it safe to install imyfone-lockwiper_setup.exe?
How up to date is this analysis of imyfone-lockwiper_setup.exe?
Community
Member reviews and reports for this exact file hash.