home

np_mc_ns_invoke_helper_win64.dll

Mailocash

Rentabiliweb Europe

The library np_mc_ns_invoke_helper_win64.dll, “Mailocash helper plugin for Firefox and Chrome” has been detected as malware by 1 anti-virus scanner. It is installed within the Mozilla Firefox web browser as an extension/plugin as ‘@rentabiliweb.net/MailocashHelper’.
Publisher:
Rentabiliweb Europe  (signed and verified)

Product:
Mailocash

Description:
Mailocash helper plugin for Firefox and Chrome

Version:
1, 0, 0, 1

MD5:
9783b4a0d5bbfd8e1f2de6afb5cb56e2

SHA-1:
6996191f31f65f776d0237b9eeaec24532157d47

SHA-256:
576f42f4f8aed3dde09426b77729d8d81b1f20dcb120ab9c45483b62fbd699ee

Scanner detections:
1 / 68

Status:
Malware

Analysis date:
4/18/2024 5:42:17 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Optional.Rentabiliweb.Messanger (L)
16.8.14.23

File size:
187.4 KB (191,936 bytes)

Product version:
1, 0, 0, 3

Copyright:
Copyright (c) 2010 Rentabiliweb

Original file name:
ns_mc_ns_invoke_helper.dll

File type:
Dynamic link library (Win64 DLL)

Language:
English (United States)

Common path:
C:\Program Files\mailocash\x64\np_mc_ns_invoke_helper_win64.dll

Digital Signature
Signed by:
Rentabiliweb Europe

Authority:
Thawte, Inc.

Valid from:
2/14/2011 1:00:00 AM

Valid to:
2/10/2013 12:59:59 AM

Subject:
CN=Rentabiliweb Europe, OU=Mailorama, O=Rentabiliweb Europe, L=Clichy la Garenne, S=Ile de France, C=FR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
6088E4C64BC662A95485B483F3D49D4A

File PE Metadata
Compilation timestamp:
2/25/2011 10:24:07 AM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows Console

Linker version:
9.0

CTPH (ssdeep):
3072:zqXY6kj5OC+mwvWJfUWrNgcrgwmpA6lAMr+E:wrkdOC+m4SsYgckwmpV

Entry address:
0x1E3C

Entry point:
48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 49, 8B, F8, 8B, DA, 48, 8B, F1, 83, FA, 01, 75, 05, E8, 5B, 26, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, AB, FE, FF, FF, CC, CC, CC, 48, 85, C9, 74, 37, 53, 48, 83, EC, 20, 4C, 8B, C1, 48, 8B, 0D, 80, AA, 02, 00, 33, D2, FF, 15, 80, E5, 02, 00, 85, C0, 75, 17, E8, 13, 27, 00, 00, 48, 8B, D8, FF, 15, 66, E5, 02, 00, 8B, C8, E8, BB, 26, 00, 00, 89, 03, 48, 83, C4, 20, 5B, C3, CC, CC, CC...
 
[+]

Code size:
134 KB (137,216 bytes)

Mozilla Plugin
Name:
@rentabiliweb.net/MailocashHelper


Remove np_mc_ns_invoke_helper_win64.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.