home

npABCSafeInputApp.dll

npABCsafeinputapp

Agricultural Bank of China

It is installed within the Mozilla Firefox web browser as an extension/plugin as ‘ABCSafeInputApp’.
Publisher:
ABChina  (signed by Agricultural Bank of China)

Product:
npABCsafeinputapp

Version:
1, 0, 15, 131

MD5:
47a4f03f57c182bd5210843a939d819d

SHA-1:
670252210b48a9841dfa6724a0e1989cfb5f8355

SHA-256:
c810db9f8ed468ffc274198f6dfd977c68e3805363280385d34d9798712474cb

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 2:10:48 PM UTC  (today)

File size:
1.1 MB (1,197,616 bytes)

Product version:
1, 0, 15, 131

Copyright:
Copyright(C) 2014 ABChina

Original file name:
npABCSafeInputApp.dll

File type:
Dynamic link library (Win64 DLL)

Common path:
C:\Windows\System32\npabcsafeinputapp.dll

Digital Signature
Signed by:
Agricultural Bank of China

Authority:
VeriSign, Inc.

Valid from:
5/4/2013 8:00:00 AM

Valid to:
5/4/2016 7:59:59 AM

Subject:
CN=Agricultural Bank of China, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Agricultural Bank of China, L=beijing, S=beijing, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
395410384D767D7CDC6635C57A4EB5E0

Registration
CLSID:
{E5752D5E-5BFB-4d04-AEFB-3601B8BF2D23}

ProgID:
ABCSAFEINPUTAPP.ABCSafeInputAppCtrl.1

COM registered:
Yes

File PE Metadata
Compilation timestamp:
1/31/2015 3:17:31 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
24576:0/L/A5XaItw98BpBxFJmpjiIasS5J0709DzM6U5zpIfjESCBUwDmba:0aX7tAmB/J2jVa507WkzpMgSYzAa

Entry address:
0x2DE187

Entry point:
0F, 8C, 5A, 13, F2, FF, 68, CF, B7, 80, 7F, E9, 83, CE, 00, 00, 68, AC, 46, 01, 3A, E9, F3, 34, 03, 00, F6, A4, CE, 78, BB, 1B, E2, 13, 5D, E3, D8, C1, 13, BD, 1F, 59, 1B, CD, CF, 19, 03, BD, DF, 71, 9B, 1D, 77, 59, BB, 65, E7, 12, 5D, 05, 38, DA, 30, 37, D2, 43, 21, 6C, 00, 93, 21, 8E, 60, F6, 56, EA, B5, 69, 8C, CF, 02, 1B, 78, D2, E2, 0C, FD, C6, F2, 99, 71, A3, 67, 00, 00, 00, 00, 46, 3E, 52, 81, EF, 44, 7F, 4A, ED, C8, 70, A3, A4, 1A, D8, 15, A7, E7, 23, 61, CC, 2B, F5, EB, 94, 99, 05, 98, D0, 09, 8D...
 
[+]

Entropy:
7.9480  (probably packed)

Code size:
914.5 KB (936,448 bytes)

Mozilla Plugin
Name:
ABCSafeInputApp


Scan npABCSafeInputApp.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.