typeentityconfidencehighcreated2026-07-03updated2026-07-03benignsoftwarefalse-positive

IObit Driver Booster

IObit Driver Booster is a legitimate Windows system utility for updating hardware drivers. It is distributed as a freemium application by IObit (https://www.iobit.com). MalwareBazaar has ingested at least one installer bundle for this product as a false positive.

Build Stack

  • Compiler: Embarcadero RAD Studio XE2 (Delphi)
  • Packages: rtl120.bpl, vcl120.bpl
  • Crash reporting: madExcept framework (madExcept_.bpl, madBasic_.bpl, madDisAsm_.bpl)
  • Networking: Indy + OpenSSL via winhttp.dll
  • Distribution: Often wrapped in 7-Zip SFX (7ZSfxMod_x86.exe)

Deploy / Behavior

  • Extracts to %TEMP% via SFX
  • Scans system for outdated drivers
  • Downloads driver updates over HTTPS
  • Optional crash-reporting UI with screenshot capture
  • Support email: support10@iobit.com

Variants / Aliases

  • DeltaGen32.exe — observed inner executable name in SFX bundle
  • Driver Booster v3.4 — version string in crash-report UI

Notable Analyses

  • /intel/analyses/a7a9205e561af4ee6961ed357c8b2320dd035bd28e73c94847ccc58282d19504.html — 15.7 MB 7-Zip SFX installer, benign false positive

Related Entities

  • None (legitimate software)

Capabilities

  • driver-scan-system-hardware
  • driver-download-https-update
  • crash-report-screenshot-ui
  • sfx-temp-extraction