home

Inbox.exe

Inbox Toolbar

Xacti

The application Inbox.exe by Xacti has been detected as a potentially unwanted program by 10 anti-malware scanners. It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘InboxToolbar’. This file is typically installed with the program Inbox Toolbar by Xacti Corp which is a potentially unwanted software program.
Publisher:
Xacti, LLC  (signed by Xacti)

Product:
Inbox Toolbar

Version:
2.0.1.106

MD5:
5202d3cf3355b41d5e71220d9f9f7b97

SHA-1:
5cae58b3c21c7a736cb929e483b909fb7cb5f5de

SHA-256:
66dc39f42acd596a32e86d0ad8540cce06dab29019ceb4dfe4a482ededa76e41

Scanner detections:
10 / 68

Status:
Potentially unwanted

Analysis date:
2/7/2026 7:33:20 AM UTC  (today)

Scan engine
Detection
Engine version

AVG
MalSign.Generic
2017.0.2829

Baidu Antivirus
Adware.Win32.Crawler
4.0.3.16218

ESET NOD32
Win32/Toolbar.Inbox.H potentially unwanted application
10.7.0.302.0

IKARUS anti.virus
PUA.Toolbar
t3scan.1.6.1.0

McAfee
Artemis!6097988A73CE
5600.6485

Reason Heuristics
Win32.Generic
16.2.18.22

Total Defense
Win32/Tnega.fUdNVU
37.0.10895

Trend Micro House Call
TROJ_GEN.F47V0321
7.2.49

VIPRE Antivirus
Threat.4150696
32210

XVirus List
Win32.Detected
2.7.3

File size:
1.4 MB (1,417,640 bytes)

Product version:
2.0.0.0

Copyright:
© Inbox.com

Original file name:
Inbox.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\inbox toolbar\inbox.exe

Digital Signature
Signed by:
Xacti

Authority:
Thawte, Inc.

Valid from:
8/29/2013 5:30:00 AM

Valid to:
9/19/2015 5:29:59 AM

Subject:
CN=Xacti, O=Xacti, L=Boca Raton, S=Florida, C=US

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
723180E2A807DDA0F77264108931DA53

File PE Metadata
Compilation timestamp:
5/28/2014 7:00:36 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:6KEZUTGSGKEbPGocQKgkZTcWOiZwWE6LeuGcsUQDrjCul/uZKnXK32p8T:F3lEMsk9OiZm6LFQPjCunXKmKT

Entry address:
0xEDE84

Entry point:
55, 8B, EC, 83, C4, F0, B8, 74, 5E, 4E, 00, E8, 48, E0, F1, FF, E8, 8B, 7D, FF, FF, E8, B6, 98, F1, FF, 8B, C0, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.4381

Developed / compiled with:
Microsoft Visual C++

Code size:
947 KB (969,728 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
InboxToolbar

Command:
"C:\Program Files\inbox toolbar\inbox.exe" \startup


The file Inbox.exe has been discovered within the following program.

Inbox Toolbar  by Xacti Corp
Publisher's description - “Inbox.com Toolbar is a search tool allowing users to access their webmail with a single click, receive notification and previews of incoming messages and monitor multiple email accounts.”
www2.inbox.com/legal/about.aspx
75% remove it
 
Powered by Should I Remove It?

Remove Inbox.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.