» npgbfnc_scd.dll
Overview
Analysis
File Details

npgbfnc_scd.dll

Módulo de Proteção - Sicredi

Confederacao Interestadual das Cooperativas Ligadas ao Sicredi

It is installed within the Mozilla Firefox web browser as part of an addin/plugin.

File name:

npgbfnc_scd.dll

Publisher:

GAS Tecnologia (signed by Confederacao Interestadual das Cooperativas Ligadas ao Sicredi)

Product:

Módulo de Proteção - Sicredi

Description:

Internet Banking Helper

Version:

2.3.5

MD5:

baa0acd7252331f214588196ed2ef400

SHA-1:

34fda3f9ecda50205da0bd2b28d18ceb23d7414d

SHA-256:

66f9b57b7271de5a593fd733caa8055197198533a61659c820ac88672640d651

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

5/3/2024 6:11:17 PM UTC (today)

File size:

2 MB (2,100,664 bytes)

Product version:

2.3.5

Original file name:

npgbfnc_scd.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\users\{user}\appdata\roaming\mozilla\firefox\profiles\{user}.default\extensions\{87f8774f-b485-47e2-a755-a40a8a5e8871}\plugins\npgbfnc_scd.dll

Digital Signature

Signed by:

Confederacao Interestadual das Cooperativas Ligadas ao Sicredi

Authority:

VeriSign, Inc.

Valid from:

12/18/2009 10:00:00 PM

Valid to:

2/17/2012 9:59:59 PM

Subject:

CN=Confederacao Interestadual das Cooperativas Ligadas ao Sicredi, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Confederacao Interestadual das Cooperativas Ligadas ao Sicredi, L=Porto Alegre, S=Rio Grande do Sul, C=BR

Issuer:

CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

227DA8380DC0B54ABF2DFA36BB017731

File PE Metadata

Compilation timestamp:

6/30/2011 5:31:34 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

49152:dueY0D4IU/lnRzqkBalMiae6vTQlqm0AZEhisRDfansCpjYPCS8bX:dueY0DQmkBalMiSvTAZrsFlCQCS2X

Entry address:

0x5A4FEB

Entry point:

60, C7, 44, 24, 1C, FD, 06, 5F, 96, 60, E8, 4E, BD, FF, FF, 20, BD, 2A, EE, B5, 72, 9D, 9A, 7A, 55, 2F, 43, 84, 54, BA, 7F, D5, 1A, FB, 35, 52, 0A, C8, BA, 9F, B8, E5, B6, 50, D3, C4, 51, 60, CA, 83, 8B, 2A, CD, 08, A9, 46, 92, D7, 98, BD, 0E, 3E, 0B, 13, B0, F0, 85, 0C, B6, 9B, DE, FC, 56, 35, B9, 7A, E8, 7C, 7F, 4D, FA, DC, 2E, 5E, 28, F3, EA, 3F, DE, 71, 9F, D1, 07, CE, 17, F4, 44, DB, 0E, C1, D0, 52, B1, 58, 8A, 19, 3C, EF, 03, 4F, 5B, 35, EE, 2D, A9, 12, 2F, BD, 8C, 86, 30, B0, 92, CB, DC, B1, 60, 1D... 
[+]

Code size:

1.9 MB (1,952,256 bytes)

Scan npgbfnc_scd.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.