» Inbox64.dll
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

Inbox64.dll

Inbox Toolbar

Xacti

The module Inbox64.dll, “Inbox Toolbar Browser Object” by Xacti has been detected as a potentially unwanted program by 5 anti-malware scanners. This file is typically installed with the program Inbox Toolbar by Xacti Corp which is a potentially unwanted software program.

File name:

Inbox64.dll

Publisher:

Xacti, LLC (signed by Xacti)

Product:

Inbox Toolbar

Description:

Inbox Toolbar Browser Object

Version:

2.0.0.44

MD5:

fe20a1f9899cc2461aed8582e9f9e0bf

SHA-1:

8b65610c8aa2b9fe81b2ddcd7db297266d59a1a4

SHA-256:

2c30cca837f786eaa6919296041b1777a0b43c32dd865433f82045d252d727da

Scanner detections:

5 / 68

Status:

Potentially unwanted

Analysis date:

4/17/2024 11:29:27 PM UTC (a few moments ago)

Scan engine

Detection

Engine version

AVG

MalSign.Generic

2017.0.2832

Baidu Antivirus

Adware.Win32.Crawler

4.0.3.16215

IKARUS anti.virus

PUA.Toolbar

t3scan.1.6.1.0

Reason Heuristics

PUP.Inbox.Toolbar.Optional.Toolbar.Meta (L)

16.2.15.19

Trend Micro House Call

Suspicious_GEN.F47V0704

7.2.46

File size:

1.5 MB (1,571,760 bytes)

Product version:

2.0.0.0

Original file name:

Inbox64.dll

File type:

Dynamic link library (Win64 DLL)

Language:

English (United States)

Common path:

C:\Program Files\inbox toolbar\inbox64.dll

Digital Signature

Signed by:

Xacti

Authority:

Thawte, Inc.

Valid from:

8/29/2013 2:00:00 AM

Valid to:

9/19/2015 1:59:59 AM

Subject:

CN=Xacti, O=Xacti, L=Boca Raton, S=Florida, C=US

Issuer:

CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:

723180E2A807DDA0F77264108931DA53

Registration

CLSIDs:

{042DA63B-0933-403D-9395-B49307691690}, {37540F19-DD4C-478B-B2DF-C19281BCAF27}, {C7C55C60-F5B5-40A3-A2E9-EC00E1FE08F3}, {D3D233D5-9F6D-436C-B6C7-E63F77503B30}, {D7E97865-918F-41E4-9CD0-25AB1C574CE8}

ProgIDs:

Inbox.JSServer, Inbox.IBX404, Inbox.JSServer2, Inbox.Toolbar

COM registered:

Yes

File PE Metadata

Compilation timestamp:

6/24/2014 11:39:03 AM

OS version:

5.2

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

12288:oQ04tVRKAgv8m/dR1bu2Zg3BJCxKQvqu8wdqGhRMVWLgG1cLD1q/vAkVqLdQDQ:oLazj2ScolsUqgG1cGAkVqLdQU

Entry address:

0x111C70

Entry point:

55, 48, 81, EC, 90, 00, 00, 00, 48, 8B, EC, 48, 89, 4D, 30, 89, 55, 3C, 4C, 89, 45, 40, 90, 48, 8D, 4D, 48, 48, 8D, 15, 46, 20, FF, FF, 4C, 8B, 45, 30, 44, 8B, 4D, 3C, 48, 8B, 45, 40, 48, 89, 44, 24, 20, E8, C8, EF, EF, FF, E8, 03, 88, EF, FF, C7, 85, 8C, 00, 00, 00, 01, 00, 00, 00, EB, 17, 90, 90, E8, 30, 8A, EF, FF, 85, C0, 0F, 94, C0, 48, 0F, B6, C0, 89, 85, 8C, 00, 00, 00, 90, 8B, 85, 8C, 00, 00, 00, 48, 8D, A5, 90, 00, 00, 00, 5D, C3, 90, 48, 83, EC, 28, E8, 57, 7E, EF, FF, 48, 83, C4, 28, C3, CC, CC... 
[+]

Code size:

1.1 MB (1,117,696 bytes)

PROTOCOLS Handler

Type of handler:

inbox

CLSID:

{37540F19-DD4C-478B-B2DF-C19281BCAF27}

The file Inbox64.dll has been discovered within the following program.

Inbox Toolbar by Xacti Corp

Publisher's description - “Inbox.com Toolbar is a search tool allowing users to access their webmail with a single click, receive notification and previews of incoming messages and monitor multiple email accounts.”

www2.inbox.com/legal/about.aspx

75% remove it

Remove Inbox64.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.