File scan report
Verdict Suspicious
Is Taskbar Plus60. exe safe? Treat it as suspicious.
Signed taskbar utility with clean engine scans but high-entropy packing, minor offensive behaviour, and similar files previously flagged suspicious.
Read the whole reasonShow less
Why Suspicious? The file appears packed, a code section has packed-level entropy.
Limited evidence · One sign points to a problem; nothing else confirms it.
If it came from a link, an attachment or a stranger, delete it.
What to do now4 steps
Some signs point to a problem, but nothing confirms it is harmful. Treat it with caution.
What to do
Don't run it unless you're sure where it came from.
Check where you got it: an unexpected attachment, a link someone sent you or a re-upload is a red flag.
If you can't confirm where it came from, delete it. If you need the program, download it again from the publisher's own website.
If you already ran it
Stop using it, run a full scan with your antivirus and watch for unexpected behavior or security alerts.
Not sure what to do?
Ask the MalwareTips community before you run it. If you already ran it, follow the cleanup guide.
- Ask for free help on the MalwareTips forumWindows malware removal help, answered by volunteers. (opens malwaretips.com in a new tab)
- Remove malware from WindowsStep-by-step cleanup with free tools. (opens malwaretips.com in a new tab)
Paste this report's link in your topic so helpers can see what was found.
Reads the latest antivirus results for this file's hash. Nothing is uploaded.
Antivirus results
0 of 70 flagged
- Flagged 0
- No detection 70
- No result 5
- Code signing VoodooSoft, LLC
- Test run Partial
- First seen 6mo ago
Chapter 02
Why we think so
5 points against it and 4 in its favour, checked against the scan evidence.
The reasoning behind this verdict
The file exhibits high code entropy suggesting packing, one offensive MITRE technique, and shares import hash with two prior suspicious verdicts. As a signed executable from an untrusted publisher, we rate it suspicious pending more data.
The file scans completely clean, which is a strong safe signal, but technical anomalies like high entropy and likely packing raise concerns typical of obfuscated software. One offensive behaviour technique (T1620: victim identity gathering) appears alongside common actions, hinting at potential monitoring capabilities. Similar files by import hash were previously deemed suspicious for analogous reasons, and the extreme rarity (first submission today) limits confidence in its legitimacy despite valid signing.
What We Detected
Verified Authenticode signature by VoodooSoft (1/1 historical safe, low sample count). High code entropy (7.62) and packing indicators.
Threat Behavior
One offensive MITRE technique: T1620 (identity collection via event logs). No malicious contacts, drops, or sandbox flags. Shares import-table fingerprint with two prior suspicious cases (e.g., Screenpresso.exe).
What To Do Now
Verify source before running; monitor for taskbar-related changes. Submit for re-analysis if more scans emerge.
Where this verdict could be wrong3 caveats
- Clean engine results (0 malicious) suggest possible benign utility, but outweighed by packing + offensive MITRE + suspicious RAG similars.
- signerStats limited to 1 prior safe sample — could be early legitimate software, but low count prevents auto-trust.
- No sandbox analysis (sandboxCount=0) leaves behaviour in the test run partially unverified.
These are the assessment's weak points. If you believe one applies to your file, report the verdict and we'll re-review it.
- engines 0/71 malicious, 17 tier1ReportedClean
- The code signature is valid
- signerStats safeRate=1.0
- no malicious sandbox/contactedHosts/droppedChildren
- The file appears packed, a code section has packed-level entropy
- behaviour.offensiveTechniques T1620
- similarHashes 2/2 'suspicious' (import-table fingerprint)
- prevalence 'rare and newly seen', it was first seen on Apr 26, 2026
- signerStats totalSamples=1 (not autoTrusted)
6 sources checked · 4 complete · 1 partial · 1 not needed or not applicable. See every source
Chapter 03
Technical details
None of the 70 antivirus engines that checked it flag it; signed by VoodooSoft, LLC.
Sources checked
Every check behind this verdict
6 sources checked · 4 complete · 1 partial · 1 not needed or not applicable. Complete means the check returned a usable result; it does not mean the file is safe.
File fingerprint
- Last analyzed
- Oct 17, 2026, 1:16 PM UTC
- SHA-256
71b99bdf4511eaafe0ca800eab85f5b60f53ca5498358ac3eb36b28fd6986e30- SHA-1
3fd49d8b176bdcafa6f343e2ac2cb64e378b2b98- MD5
134b4140cce3c55f8ba42943f0225ff4
About this file
TaskbarPlus60.exe is a Win32 EXE file of 793.7 kB.
- Type and size
- Win32 EXE · 793.7 kB
- Signer
- VoodooSoft, LLCValid code signature.
- First seen
- Apr 26, 2026On VirusTotal.
- Submitted by
- 1 sourceRarely seen: few people have submitted this exact file.
- Packer
- None detected
- Entropy
- 7.62 of 8
First scanned Updated
Includes every engine result (75), PE section entropy and packers and how widely the file has been seen.
Show the technical evidenceChapter 04
Questions & answers
Short answers to the 7 questions people ask most about this file.
Is TaskbarPlus60.exe safe, or is it malware?
What is TaskbarPlus60.exe?
How many antivirus engines detected TaskbarPlus60.exe?
I already downloaded and ran TaskbarPlus60.exe — what should I do?
Is TaskbarPlus60.exe digitally signed?
What is the SHA-256 hash of TaskbarPlus60.exe?
How up to date is this analysis of TaskbarPlus60.exe?
Community
Member reviews and reports for this exact file hash.