home

80da9662fc65f5dd38d0ac7c82d3bb9030810573

Módulo Defensor - Banco Safra

Banco Safra SA

It is installed within the Mozilla Firefox web browser as part of an addin/plugin.
Publisher:
GAS Tecnologia  (signed by Banco Safra SA)

Product:
Módulo Defensor - Banco Safra

Description:
Internet Banking Helper

Version:
3.12.0.2

MD5:
9ab1eda84511a0f3e8dda3f6582f3e32

SHA-1:
34d88909cec0ccd42561f84dd00c034af1659b64

SHA-256:
0a27a278dc6562c9536ec35e8ee6ef43f59823deab206b5edb2f126c92846704

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/5/2024 1:39:36 PM UTC  (today)

File size:
2.2 MB (2,343,274 bytes)

Product version:
3.12.0.2

Copyright:
Copyright 2014 GAS Tecnologia

Original file name:
npsf_sfr.dll

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\mozilla\firefox\profiles\{user}.default\cache2\entries\80da9662fc65f5dd38d0ac7c82d3bb9030810573

Digital Signature
Signed by:
Banco Safra SA

Authority:
Symantec Corporation

Valid from:
10/21/2015 9:00:00 PM

Valid to:
12/20/2016 8:59:59 PM

Subject:
CN=Banco Safra SA, OU=Banco Safra SA, O=Banco Safra SA, L=Sao Paulo, S=Sao Paulo, C=BR

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
016D5D6B4B1DD44C216241C805FB8645

File PE Metadata
Compilation timestamp:
10/2/2014 10:29:40 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
11.0

CTPH (ssdeep):
49152:uPaYo4hctr6nVNPoS2ipe03OAA85n+YVQITsQdrxfE:uA4hcGVuiA0328t/Vvg

Entry address:
0x58884A

Entry point:
9C, E9, EA, FF, FF, FF, 00, 00, 51, 75, 65, 72, 79, 50, 65, 72, 66, 6F, 72, 6D, 61, 6E, 63, 65, 46, 72, 65, 71, 75, 65, 6E, 63, 79, 00, 8D, 64, 24, 08, 0F, 82, A7, 80, FD, FF, 66, 0F, BA, E2, 0D, 3B, 45, F0, E8, 0B, 98, EE, FF, 00, 00, 43, 6F, 6D, 70, 61, 72, 65, 53, 74, 72, 69, 6E, 67, 57, 00, 83, ED, 04, E9, 6A, 2C, 00, 00, 66, C1, DD, 05, 66, 81, CD, 53, 03, 66, 0F, CE, FF, 35, 66, 91, 58, 10, 0F, AD, D5, 66, C1, CE, 07, 68, 00, 00, 00, 00, 66, F7, D5, 0F, BA, EE, 07, 8B, 74, 24, 30, 66, FF, CD, 66, D3...
 
[+]

Code size:
1.9 MB (1,952,256 bytes)

Scan 80da9662fc65f5dd38d0ac7c82d3bb9030810573 - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.