» ToolbarCleaner.exe
Overview
Analysis
File Details
Programs (1)

ToolbarCleaner.exe

Toolbar Cleaner

Visicom Media Inc.

This is part of the Visicom VMN web browser toolbar and extension that will modify the browser's default search provider, DNS, and home page functions. The application ToolbarCleaner.exe by Visicom Media has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This file is typically installed with the program Toolbar Cleaner 1.0 by Visicom Media inc. which is a potentially unwanted software program.

File name:

ToolbarCleaner.exe

Publisher:

Visicom Media Inc. (signed and verified)

Product:

Toolbar Cleaner

Version:

1, 0, 1, 12

MD5:

0e56f6b8dabb90db7015b5ec2f1df3f3

SHA-1:

ebc7d90bab48be35a5a5b7f3d024f4f5f0aa52ce

SHA-256:

9318a66a56d6a369af3b8d95c1fa9f5d8a6ef1532e24ca2f8e914ef1128984aa

Scanner detections:

1 / 68

Status:

Potentially unwanted

Note:

Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:

4/16/2024 4:31:57 PM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.ToolbarCleaner.VisicomMedia.O

14.8.7.19

File size:

393 KB (402,392 bytes)

Product version:

1, 0, 1, 12

Original file name:

ToolbarCleaner.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\toolbar cleaner\toolbarcleaner.exe

Digital Signature

Signed by:

Visicom Media Inc.

Authority:

Thawte Consulting (Pty) Ltd.

Valid from:

6/24/2010 2:00:00 AM

Valid to:

6/22/2012 1:59:59 AM

Subject:

CN=Visicom Media Inc., OU=SECURE APPLICATION DEVELOPMENT, O=Visicom Media Inc., L=Brossard, S=Quebec, C=CA

Issuer:

CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:

73C74D9445094BFD79759F7B9CAFD730

File PE Metadata

Compilation timestamp:

4/19/2011 9:39:45 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

12288:N/vQG2mS3Uz4kT0PAP0WZj0K4eLgMDBgej+90HvHQz:VvF2RUz4kgPAcWZ4K4efDBgx9B

Entry address:

0x2C941

Entry point:

E8, 47, D3, 00, 00, E9, 79, FE, FF, FF, 8B, FF, 55, 8B, EC, 8B, 55, 08, 53, 56, 57, 33, FF, 3B, D7, 74, 07, 8B, 5D, 0C, 3B, DF, 77, 1E, E8, 90, FB, FF, FF, 6A, 16, 5E, 89, 30, 57, 57, 57, 57, 57, E8, EA, C6, FF, FF, 83, C4, 14, 8B, C6, 5F, 5E, 5B, 5D, C3, 8B, 75, 10, 3B, F7, 75, 07, 33, C0, 66, 89, 02, EB, D4, 8B, CA, 0F, B7, 06, 66, 89, 01, 41, 41, 46, 46, 66, 3B, C7, 74, 03, 4B, 75, EE, 33, C0, 3B, DF, 75, D3, 66, 89, 02, E8, 47, FB, FF, FF, 6A, 22, 59, 89, 08, 8B, F1, EB, B3, CC, CC, 68, 30, B9, 42, 00... 
[+]

Entropy:

6.3882

Code size:

261.5 KB (267,776 bytes)

The file ToolbarCleaner.exe has been discovered within the following program.

Toolbar Cleaner 1.0 by Visicom Media inc.

Toolbar Cleaner is an app from Visicom Media that allows you to select various toolbars installed on your PC and remove them. It is typically installed through bundled installers but could also be installed from the Visicom Media website.

toolbarcleaner.com

87% remove it

Remove ToolbarCleaner.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.