» emailnotifiersetup.exe
Overview
Analysis
File Details

emailnotifiersetup.exe

Inbox EmailNotifier Toolbar

Inbox.com, Inc

The application emailnotifiersetup.exe, “Inbox EmailNotifier Toolbar Setup ” by Inbox.com, Inc has been detected as a potentially unwanted program by 10 anti-malware scanners. The program is a setup application that uses the Inno Setup installer. This program installs potentially unwanted software on your PC at the same time as the software you are trying to install, without adequate consent.

File name:

Publisher:

Inbox.com, Inc. (signed by Inbox.com, Inc)

Product:

Inbox EmailNotifier Toolbar

Description:

Inbox EmailNotifier Toolbar Setup

Version:

2.0.1.89

MD5:

eed71df9a5329b842ffa452d910792eb

SHA-1:

dd2b29c0c2d1716a59cf89d89944785e0e52cdf9

SHA-256:

0ca60641a4faed18b771768e5da19ad436abc0b68d3bcd3135409d79bfbd8b5a

Scanner detections:

10 / 68

Status:

Potentially unwanted

Analysis date:

4/25/2024 6:09:48 AM UTC (today)

Scan engine

Detection

Engine version

Agnitum Outpost

PUA.Toolbar.Inbox

7.1.1

Clam AntiVirus

Win.Adware.PCFixSpeed

0.98/19246

ESET NOD32

Win32/Toolbar.Inbox.H potentially unwanted application

10.7.0.302.0

F-Secure

Riskware.Gen:Application.Bundler.Firseria

11.2016-15-02_2

G Data

Win32.Application.ToolbarCrawler

16.2.25

K7 AntiVirus

Unwanted-Program

13.183.13521

Malwarebytes

PUP.Optional.Inbox

v2016.02.15.09

NANO AntiVirus

Riskware.Win32.InstallToolbar.dguyoz

0.30.0.64448

Reason Heuristics

PUP.Inbox.Installer (M)

16.2.15.9

Trend Micro House Call

TROJ_GEN.F47V1102

7.2.46

File size:

2.7 MB (2,812,680 bytes)

Product version:

2.0.1.89

File type:

Executable application (Win32 EXE)

Installer:

Inno Setup

Language:

Language Neutral

Common path:

C:\users\{user}\downloads\emailnotifiersetup.exe

Digital Signature

Signed by:

Inbox.com, Inc

Authority:

Thawte, Inc.

Valid from:

8/28/2013 8:00:00 PM

Valid to:

9/4/2015 7:59:59 PM

Subject:

CN="Inbox.com, Inc", OU=INBOX.COM, O="Inbox.com, Inc", L=Wilmington, S=DELAWARE, C=US

Issuer:

CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:

4084E537D71E3ED859F43C48F1092DB3

File PE Metadata

Compilation timestamp:

6/19/1992 6:22:17 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

49152:caFh10MOO9F4K7fJapZMArtLFFpCR6hwlYVSSNwsykRWb3im9yrPP7wZz+LYe6Ed:5qMOY4KopZMYpY6hUYTvK3i0gi+8lebV

Entry address:

0xC1C0

Entry point:

55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, C8, C0, 40, 00, E8, 60, 86, FF, FF, 33, C0, 55, 68, 85, C8, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 41, C8, 40, 00, 64, FF, 32, 64, 89, 22, A1, 60, E6, 40, 00, E8, 5E, FD, FF, FF, E8, C9, F8, FF, FF, 8D, 55, EC, 33, C0, E8, 93, CA, FF, FF, 8B, 55, EC, B8, 8C, F0, 40, 00, E8, 0A, 77, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 8C, F0, 40, 00, B2, 01... 
[+]

Entropy:

7.9952

Developed / compiled with:

Microsoft Visual C++

Code size:

46.5 KB (47,616 bytes)

Remove emailnotifiersetup.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.