home

Inbox.exe

Inbox Toolbar

Xacti

The application Inbox.exe by Xacti has been detected as a potentially unwanted program by 13 anti-malware scanners. It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘InboxToolbar’. This file is typically installed with the program Inbox Toolbar by Xacti Corp which is a potentially unwanted software program.
Publisher:
Xacti, LLC  (signed by Xacti)

Product:
Inbox Toolbar

Version:
2.0.1.117

MD5:
49a14d6a003bc908a4c9975dcf73a45f

SHA-1:
0e81f604ba6d222fd4732e12878090b71c169ceb

SHA-256:
c2cd18656d82f7358327cf2a1e373751b6a05145110534051c8b132688c8a26b

Scanner detections:
13 / 68

Status:
Potentially unwanted

Analysis date:
4/25/2024 11:09:51 AM UTC  (today)

Scan engine
Detection
Engine version

AVG
MalSign.Generic
2015.0.3283

Baidu Antivirus
Adware.Win32.Crawler
4.0.3.141121

ESET NOD32
Win32/Toolbar.Inbox.H potentially unwanted application
8.7.0.302.0

IKARUS anti.virus
PUA.Toolbar
t3scan.1.6.1.0

Kaspersky
not-a-virus:WebToolbar.Win32.MusIn
14.0.0.2911

McAfee
Artemis!6097988A73CE
5600.6939

Panda Antivirus
Trj/Genetic.gen
14.11.21.09

Qihoo 360 Security
Win32/Virus.WebToolbar.a7b
1.0.0.1015

Reason Heuristics
PUP.Optional.Startup.F
14.11.21.21

Total Defense
Win32/Tnega.fUdNVU
37.0.10895

Trend Micro House Call
Suspicious_GEN.F47V1114
7.2.325

VIPRE Antivirus
Threat.4150696
32210

XVirus List
Win32.Detected
2.7.3

File size:
1.4 MB (1,430,960 bytes)

Product version:
2.0.0.0

Copyright:
© Inbox.com

Original file name:
Inbox.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\inbox toolbar\inbox.exe

Digital Signature
Signed by:
Xacti

Authority:
Thawte, Inc.

Valid from:
8/28/2013 7:00:00 PM

Valid to:
9/18/2015 6:59:59 PM

Subject:
CN=Xacti, O=Xacti, L=Boca Raton, S=Florida, C=US

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
723180E2A807DDA0F77264108931DA53

File PE Metadata
Compilation timestamp:
10/15/2014 6:41:02 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:9EZUMCQ0P7DgqTIeECqVrY04MZ1PiRReVcejkupNYjnXKBWp:93MCcb54MZ1mBejkupNYjnXK2

Entry address:
0xEFE84

Entry point:
55, 8B, EC, 83, C4, F0, B8, 08, 84, 4E, 00, E8, 6C, C0, F1, FF, E8, FF, 82, FF, FF, E8, B6, 78, F1, FF, 8B, C0, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.4375

Developed / compiled with:
Microsoft Visual C++

Code size:
956 KB (978,944 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
InboxToolbar

Command:
"C:\Program Files\inbox toolbar\inbox.exe" \startup


The file Inbox.exe has been discovered within the following programs.

Inbox Toolbar  by Xacti Corp
Publisher's description - “Inbox.com Toolbar is a search tool allowing users to access their webmail with a single click, receive notification and previews of incoming messages and monitor multiple email accounts.”
www2.inbox.com/legal/about.aspx
75% remove it
 
Powered by Should I Remove It?

Remove Inbox.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.