home

Inbox.exe

Inbox Toolbar

Xacti

The application Inbox.exe by Xacti has been detected as a potentially unwanted program by 22 anti-malware scanners. It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘InboxToolbar’. This file is typically installed with the program Inbox Toolbar by Xacti Corp which is a potentially unwanted software program.
Publisher:
Xacti, LLC  (signed by Xacti)

Product:
Inbox Toolbar

Version:
2.0.1.135

MD5:
a6d1aee09532cb025ee2bdf3315e9db2

SHA-1:
b3fdaf20cd0b3825950bf6cec1717a1cc1e2b5cf

SHA-256:
64a47584f2c6301695ed1acc757bb354a5742cec9068f66ea809822bd9df2763

Scanner detections:
22 / 68

Status:
Potentially unwanted

Analysis date:
4/23/2024 10:26:14 AM UTC  (today)

Scan engine
Detection
Engine version

AVG
MalSign.Generic
2016.0.3179

Baidu Antivirus
Adware.Win32.Crawler
4.0.3.1536

ESET NOD32
Win32/Toolbar.Inbox.H potentially unwanted application
9.7.0.302.0

IKARUS anti.virus
PUA.Toolbar
t3scan.1.6.1.0

K7 AntiVirus
Unwanted-Program
13.198.15085

Kaspersky
not-a-virus:WebToolbar.Win32.MusIn
14.0.0.2389

McAfee
Artemis!6097988A73CE
5600.6835

Panda Antivirus
Generic Suspicious
15.03.06.02

Qihoo 360 Security
Win32/Virus.WebToolbar.a7b
1.0.0.1015

Reason Heuristics
PUP.Optional.Startup
15.3.6.2

Total Defense
Win32/Tnega.fUdNVU
37.0.10895

Trend Micro House Call
Suspicious_GEN.F47V0129
7.2.65

VIPRE Antivirus
Threat.4150696
32210

XVirus List
Win32.Detected
2.7.3

File size:
2.3 MB (2,410,416 bytes)

Product version:
2.0.0.0

Copyright:
© Inbox.com

Original file name:
Inbox.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\inbox toolbar\inbox.exe

Digital Signature
Signed by:
Xacti

Authority:
Thawte, Inc.

Valid from:
8/28/2013 5:00:00 PM

Valid to:
9/18/2015 4:59:59 PM

Subject:
CN=Xacti, O=Xacti, L=Boca Raton, S=Florida, C=US

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
723180E2A807DDA0F77264108931DA53

File PE Metadata
Compilation timestamp:
1/21/2015 2:38:46 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:KCAt+Xp9vkNiABAoQpJMrgrmYrXqXloa3I2kzviM+GhZnd74fWjqoYPnXMFWf:KChg2acrBraXjYx+cGfWjtYPnXMY

Entry address:
0x105F38

Entry point:
55, 8B, EC, 83, C4, F0, B8, 34, DE, 4F, 00, E8, 3C, 61, F0, FF, E8, 2B, 7C, FF, FF, E8, 8E, 18, F0, FF, 8B, C0, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.3065

Developed / compiled with:
Microsoft Visual C++

Code size:
1 MB (1,068,544 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
InboxToolbar

Command:
"C:\Program Files\inbox toolbar\inbox.exe" \startup


The file Inbox.exe has been discovered within the following programs.

Inbox Toolbar  by Xacti Corp
Publisher's description - “Inbox.com Toolbar is a search tool allowing users to access their webmail with a single click, receive notification and previews of incoming messages and monitor multiple email accounts.”
www2.inbox.com/legal/about.aspx
75% remove it
 
Powered by Should I Remove It?

Remove Inbox.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.