home

RebateI.dll

RebateInformer

Inbox.com, Inc

The module RebateI.dll, “RebateInformer Browser Object” by Inbox.com, Inc has been detected as a potentially unwanted program by 3 anti-malware scanners. It is installed within the context of Internet Explore as a BHO (Browser Helper Object) under the name ‘’. This file is typically installed with the program RebateInformer by Inbox.com, Inc. which is a potentially unwanted software program.
Publisher:
Inbox.com, Inc.  (signed by Inbox.com, Inc)

Product:
RebateInformer

Description:
RebateInformer Browser Object

Version:
1.0.0.89

MD5:
82b6c90714630307d09200e4c7da8ea3

SHA-1:
ad8e8c741ec94ee4d97e7c116c8a27743902ca99

SHA-256:
e2df006b1de3bcbb24c71f0ebb210d40a605aa9c2328037cea4d2a5c0b1a65ff

Scanner detections:
3 / 68

Status:
Potentially unwanted

Analysis date:
4/23/2024 4:46:55 PM UTC  (today)

Scan engine
Detection
Engine version

ESET NOD32
Win32/Toolbar.Inbox (variant)
8.8943

Malwarebytes
PUP.Optional.RebateInformer.A
v2014.08.29.12

Reason Heuristics
PUP.Inbox.H
14.8.29.0

File size:
814.1 KB (833,672 bytes)

Product version:
1.0.0.89

Copyright:
© Inbox.com, Inc.

Original file name:
RebateI.dll

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\Program Files\rebateinformer\rebatei.dll

Digital Signature
Signed by:
Inbox.com, Inc

Authority:
Thawte, Inc.

Valid from:
8/28/2011 7:00:00 PM

Valid to:
9/4/2013 6:59:59 PM

Subject:
CN="Inbox.com, Inc", OU=INBOX.COM, O="Inbox.com, Inc", L=Wilmington, S=DELAWARE, C=US

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
263A9EA35EE9217F9233ABD64FC388C0

Registration
CLSIDs:
{AF808758-C780-404C-A4EE-4526323FD9B6}, {CCB69577-088B-4004-9ED8-FF5BCC83A039}

ProgIDs:
RebateI.RebateInformImageGen, RebateI.Rebate Informer BHO

COM registered:
Yes

File PE Metadata
Compilation timestamp:
4/4/2013 8:53:20 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:ZvGI9Rf4ZrfUttymM9WRQ1tXBi3McT++V:ZPRfMOk0W1taLTl

Entry address:
0x9F9A0

Entry point:
55, 8B, EC, 83, C4, C4, B8, C4, E9, 49, 00, E8, BC, 7E, F6, FF, E8, 17, 58, F6, FF, 8D, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 02, 8D, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.8022

Developed / compiled with:
Microsoft Visual C++

Code size:
634.5 KB (649,728 bytes)

Internet Explorer BHO
CLSID:
{CCB69577-088B-4004-9ED8-FF5BCC83A039}


The file RebateI.dll has been discovered within the following programs.

RebateInformer  by Inbox.com, Inc.
RebateInformer (RebateGiant) is a web browser plugin for Internet Explorer that monitors the web pages the user is visiting and checks against an affiliate database for various rebates and coupons related to the context of the products being shown in the browser.
www.rebateinformer.com
86% remove it
 
Powered by Should I Remove It?

Remove RebateI.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.