ToolbarCleaner.exe

Toolbar Cleaner

Visicom Media Inc.

This is part of the Visicom VMN web browser toolbar and extension that will modify the browser's default search provider, DNS, and home page functions. The application ToolbarCleaner.exe by Visicom Media has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This file is typically installed with the program Toolbar Cleaner 1.0 by Visicom Media inc. which is a potentially unwanted software program.
Publisher:
Visicom Media Inc.  (signed and verified)

Product:
Toolbar Cleaner

Version:
1, 0, 1, 12

MD5:
0e56f6b8dabb90db7015b5ec2f1df3f3

SHA-1:
ebc7d90bab48be35a5a5b7f3d024f4f5f0aa52ce

SHA-256:
9318a66a56d6a369af3b8d95c1fa9f5d8a6ef1532e24ca2f8e914ef1128984aa

Scanner detections:
1 / 68

Status:
Potentially unwanted

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
10/18/2021 3:42:50 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.ToolbarCleaner.VisicomMedia.O
14.8.7.19

File size:
393 KB (402,392 bytes)

Product version:
1, 0, 1, 12

Copyright:
Copyright (c) 2011 All rights reserved Visicom Media Inc.

Original file name:
ToolbarCleaner.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\toolbar cleaner\toolbarcleaner.exe

Digital Signature
Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
6/24/2010 2:00:00 AM

Valid to:
6/22/2012 1:59:59 AM

Subject:
CN=Visicom Media Inc., OU=SECURE APPLICATION DEVELOPMENT, O=Visicom Media Inc., L=Brossard, S=Quebec, C=CA

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
73C74D9445094BFD79759F7B9CAFD730

File PE Metadata
Compilation timestamp:
4/19/2011 9:39:45 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
12288:N/vQG2mS3Uz4kT0PAP0WZj0K4eLgMDBgej+90HvHQz:VvF2RUz4kgPAcWZ4K4efDBgx9B

Entry address:
0x2C941

Entry point:
E8, 47, D3, 00, 00, E9, 79, FE, FF, FF, 8B, FF, 55, 8B, EC, 8B, 55, 08, 53, 56, 57, 33, FF, 3B, D7, 74, 07, 8B, 5D, 0C, 3B, DF, 77, 1E, E8, 90, FB, FF, FF, 6A, 16, 5E, 89, 30, 57, 57, 57, 57, 57, E8, EA, C6, FF, FF, 83, C4, 14, 8B, C6, 5F, 5E, 5B, 5D, C3, 8B, 75, 10, 3B, F7, 75, 07, 33, C0, 66, 89, 02, EB, D4, 8B, CA, 0F, B7, 06, 66, 89, 01, 41, 41, 46, 46, 66, 3B, C7, 74, 03, 4B, 75, EE, 33, C0, 3B, DF, 75, D3, 66, 89, 02, E8, 47, FB, FF, FF, 6A, 22, 59, 89, 08, 8B, F1, EB, B3, CC, CC, 68, 30, B9, 42, 00...
 
[+]

Entropy:
6.3882

Code size:
261.5 KB (267,776 bytes)

The file ToolbarCleaner.exe has been discovered within the following program.

Toolbar Cleaner 1.0  by Visicom Media inc.
Toolbar Cleaner is an app from Visicom Media that allows you to select various toolbars installed on your PC and remove them. It is typically installed through bundled installers but could also be installed from the Visicom Media website.
toolbarcleaner.com
87% remove it
 
Powered by Should I Remove It?

Remove ToolbarCleaner.exe - Powered by Reason Core Security