» emailnotifiersetup.exe
Overview
Analysis
File Details
Downloads (1)

emailnotifiersetup.exe

Inbox EmailNotifier Toolbar

Inbox.com, Inc

The application emailnotifiersetup.exe, “Inbox EmailNotifier Toolbar Setup ” by Inbox.com, Inc has been detected as a potentially unwanted program by 10 anti-malware scanners. The program is a setup application that uses the Inno Setup installer. This program installs potentially unwanted software on your PC at the same time as the software you are trying to install, without adequate consent. The file has been seen being downloaded from www.ibxdnl.com.

File name:

Publisher:

Inbox.com, Inc. (signed by Inbox.com, Inc)

Product:

Inbox EmailNotifier Toolbar

Description:

Inbox EmailNotifier Toolbar Setup

Version:

2.0.1.87

MD5:

823e44cbaa0ec6b11a75484c69957807

SHA-1:

be0cba4f0295d6bc6ea3a59f86d96f8ea14dcba3

Scanner detections:

10 / 68

Status:

Potentially unwanted

Analysis date:

4/19/2024 11:24:56 AM UTC (today)

Scan engine

Detection

Engine version

Agnitum Outpost

PUA.Toolbar.Inbox

7.1.1

Clam AntiVirus

Win.Adware.PCFixSpeed

0.98/19246

ESET NOD32

Win32/Toolbar.Inbox.H potentially unwanted application

10.7.0.302.0

F-Secure

Riskware.Gen:Application.Bundler.Firseria

11.2016-27-01_4

G Data

Win32.Application.ToolbarCrawler

16.1.25

K7 AntiVirus

Unwanted-Program

13.183.13521

Malwarebytes

PUP.Optional.Inbox

v2016.01.27.10

NANO AntiVirus

Riskware.Win32.InstallToolbar.dguyoz

0.30.0.64448

Reason Heuristics

PUP.Inbox.Installer (M)

16.1.27.10

Trend Micro House Call

TROJ_GEN.F47V1102

7.2.27

File size:

2.6 MB (2,723,128 bytes)

Product version:

2.0.1.87

File type:

Executable application (Win32 EXE)

Installer:

Inno Setup

Language:

Language Neutral

Common path:

C:\Documents and Settings\{user}\My documents\downloads\emailnotifiersetup.exe

Digital Signature

Signed by:

Inbox.com, Inc

Authority:

Thawte, Inc.

Valid from:

8/29/2013 1:00:00 AM

Valid to:

9/5/2015 12:59:59 AM

Subject:

CN="Inbox.com, Inc", OU=INBOX.COM, O="Inbox.com, Inc", L=Wilmington, S=DELAWARE, C=US

Issuer:

CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:

4084E537D71E3ED859F43C48F1092DB3

File PE Metadata

Compilation timestamp:

6/19/1992 11:22:17 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

49152:NVMvFALwXQyHAUSPdzz7fv4kT4g+tM6n3DZkXPE+CnlElJMNKL7ebA5rOYiZnx:NVMvFmwgyHA3pIpg++LXPkkMMfebSivb

Entry address:

0xC1C0

Entry point:

55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, C8, C0, 40, 00, E8, 60, 86, FF, FF, 33, C0, 55, 68, 85, C8, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 41, C8, 40, 00, 64, FF, 32, 64, 89, 22, A1, 60, E6, 40, 00, E8, 5E, FD, FF, FF, E8, C9, F8, FF, FF, 8D, 55, EC, 33, C0, E8, 93, CA, FF, FF, 8B, 55, EC, B8, 8C, F0, 40, 00, E8, 0A, 77, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 8C, F0, 40, 00, B2, 01... 
[+]

Entropy:

7.9949

Developed / compiled with:

Microsoft Visual C++

Code size:

46.5 KB (47,616 bytes)

The file emailnotifiersetup.exe has been seen being distributed by the following URL.

http://www.ibxdnl.com/.../EmailNotifierSetup.exe

Remove emailnotifiersetup.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.