home

cbuninstall.exe

cbinstall Module

Simple Software Inc

This is the uninstaller utility registered in the Windows Control Panel for the program Conference Client Uninstall. The file has been seen being downloaded from www.visualvox.net and multiple other hosts.
Publisher:
Simple Software Inc  (signed and verified)

Product:
cbinstall Module

Version:
1, 0, 1, 0

MD5:
6c2ac758c294d3b6f49b9e59d2a38bee

SHA-1:
bb131d14c834758f71664ef1f49160b8cdc2025c

SHA-256:
b0295a15fcdc07276bbcaf9c9431e7ce0a69a22a99433b686d2236a700a10382

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 9:19:07 PM UTC  (today)

File size:
173.5 KB (177,664 bytes)

Product version:
1, 0, 1, 0

Copyright:
Copyright 2005

Original file name:
cbinstall.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\windows\cbuninstall.exe

Digital Signature
Signed by:
Simple Software Inc

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
2/22/2008 7:00:00 PM

Valid to:
2/22/2009 6:59:59 PM

Subject:
CN=Simple Software Inc, OU=ENGINEERING, O=Simple Software Inc, L=Strasburg, S=Colorado, C=US

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
5C0CA1C20B458491C0C5A16F2E49B7BE

File PE Metadata
Compilation timestamp:
4/15/2008 1:24:14 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
3072:S7ZTT1G0b4w3bDymcF/UK7ilHJ5rMRibu6vDf4Q2tCVgenv:8fM0kwhcFJGlHXr8ibu6vDAQp

Entry address:
0x12A6D

Entry point:
E8, BE, 87, 00, 00, E9, 16, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, 55, 8B, EC, 57, 56, 8B, 75, 0C, 8B, 4D, 10, 8B, 7D, 08, 8B, C1, 8B, D1, 03, C6, 3B, FE, 76, 08, 3B, F8, 0F, 82, A4, 01, 00, 00, 81, F9, 00, 01, 00, 00, 72, 1F, 83, 3D, A0, 88, 42, 00, 00, 74, 16, 57, 56, 83, E7, 0F, 83, E6, 0F, 3B, FE, 5E, 5F, 75, 08, 5E, 5F, 5D, E9, 8A, 7B, 00, 00, F7, C7, 03, 00, 00, 00, 75, 15, C1, E9, 02, 83, E2, 03, 83, F9, 08, 72, 2A, F3, A5, FF, 24, 95, F4, 2B, 41, 00, 90, 8B, C7, BA, 03, 00, 00, 00, 83, E9...
 
[+]

Entropy:
6.3759

Code size:
120 KB (122,880 bytes)

Program Uninstaller
Program name:
Conference Client Uninstall

Uninstall string:
C:\Windows\cbuninstall.exe /u


The file cbuninstall.exe has been seen being distributed by the following 3 URLs.

http://www.visualvox.net/load_2.php

http://www.visualvox.com/load.php

http://download.howudodat.com/chatterbox/download/.../cbinstall.net.exe

Scan cbuninstall.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.