home

NfIEPlugin.dll

Normfall Manager

Normfall GmbH

It is installed within the context of Internet Explore as a BHO (Browser Helper Object) under the name ‘Normfall’.
Publisher:
Normfall GmbH  (signed and verified)

Product:
Normfall Manager

Description:
Normfall Internet Explorer Plugin

Version:
5.00.0056

MD5:
48dfd619250e34fcd716de689317f3e3

SHA-1:
01d8f75f6b4a4c64f00b27443ca6449664398dc2

SHA-256:
461f1110b80ccb8b3d212b9581d67c13cdc990daf88e8e6b6215a62b3a43ee90

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
7/2/2025 6:18:23 AM UTC  (today)

File size:
468.6 KB (479,872 bytes)

Product version:
5.00.0056

Copyright:
Normfall GmbH

Original file name:
NfIEPlugin.dll

File type:
Dynamic link library (Win32 DLL)

Language:
German (Germany)

Common path:
C:\Program Files\normfall manager 5\plugins\ie\nfieplugin.dll

Digital Signature
Signed by:
Normfall GmbH

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
8/11/2009 3:57:58 PM

Valid to:
8/20/2010 2:43:54 PM

Subject:
CN=Normfall GmbH, OU="", O=Normfall GmbH, L=Muenchen, S=Bayern, C=DE

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
49C5B8AF9B662781A2717F3398DC2646

File PE Metadata
Compilation timestamp:
4/30/2010 4:01:18 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:7AbP+JauA144444441o3bbo2iHhz3Ab9ze+6INnMOnKk+U+guB8Ddz14AdxVWjiX:7AaPbo3Xo2iBzQbIwrnPLvLfdvCLbA

Entry address:
0x2760

Entry point:
5A, 68, 88, D4, 06, 11, 68, 8C, D4, 06, 11, 52, E9, E9, FF, FF, FF, 00, 00, 00, 48, 00, 00, 00, 30, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 41, E1, 4D, 13, 80, EA, A9, 45, B9, 91, D8, 83, 9B, 88, 40, 12, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 4D, 49, 54, 20, 3D, 20, 4E, 66, 49, 45, 50, 6C, 75, 67, 69, 6E, 00, 76, 61, 74, 65, 20, 00, 6F, 6E, 73, 74, 20, 4D, 45, A8, 00, 00, 00, 90, 00, 00, 00, 00, 00, 00, 00, 02, 00, 00, 00, 13, 00, 00, 00, 6A, C8, 53, 75, 82, 09, 4C, 40, 85, 9F, DB, AA, 23, 66, 3B, 03...
 
[+]

Developed / compiled with:
Microsoft Visual Basic v6.0

Code size:
424 KB (434,176 bytes)

Internet Explorer BHO
Display name:
Normfall

CLSID:
{7553C86A-0982-404C-859F-DBAA23663B03}

CLSID name:
NfIEPlugin.BHO


Scan NfIEPlugin.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.