home

npgbfnc_sfr.dll

Módulo de Proteção - Banco Safra

Banco Safra SA

It is installed within the Mozilla Firefox web browser as part of an addin/plugin.
Publisher:
GAS Tecnologia  (signed by Banco Safra SA)

Product:
Módulo de Proteção - Banco Safra

Description:
Internet Banking Helper

Version:
2.12.1

MD5:
f89f1a7a38fb7d71f503f24c99f06132

SHA-1:
945b4c5dfdf3c0d639331c990b93c5411b061501

SHA-256:
4c691d16cc6e3e69f51a7ba190675d832abb0e6956db8f3096926a511e26abd9

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 7:37:31 AM UTC  (today)

File size:
2.2 MB (2,301,368 bytes)

Product version:
2.12.1

Copyright:
Copyright 2012 GAS Tecnologia

Original file name:
npgbfnc_sfr.dll

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\roaming\mozilla\firefox\profiles\{user}.default\extensions\{87f8774f-b485-47e2-a755-a40a8a5e8881}\plugins\npgbfnc_sfr.dll

Digital Signature
Signed by:
Banco Safra SA

Authority:
VeriSign, Inc.

Valid from:
10/2/2012 9:00:00 PM

Valid to:
10/3/2014 8:59:59 PM

Subject:
CN=Banco Safra SA, OU=Banco Safra SA, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Banco Safra SA, L=Sao Paulo, S=Sao Paulo, C=BR

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
279F7FC1DC9AC1E3403513DB5FF3A1F0

File PE Metadata
Compilation timestamp:
8/1/2012 6:03:13 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
49152:Z5ReFZ/8d2kE/1g8aQdrrBgaS8d2B4jlAOahf/DKHJG2k3:Mr/O2k0g8ndrr6fBOS1K+

Entry address:
0x4D4D18

Entry point:
9C, 9C, 9C, 51, C7, 44, 24, 0C, 27, 7D, 4D, 10, E8, E5, 84, 12, 00, 26, 8D, E2, 95, 3A, 72, C7, 1E, 34, 07, 3B, 7F, 2A, D6, 3A, E0, 90, 8D, A2, 29, 26, 2C, 84, B2, DE, 90, 20, 70, C0, 41, CE, 51, 3E, 71, AF, E3, EF, B4, C4, 8F, 6C, 3D, C4, 4D, 6B, 52, CF, 88, B8, 88, 56, 1E, 3A, 18, 9E, 4B, 08, F9, 87, 72, 5D, 75, 3A, 24, 02, 23, CE, 89, 49, BA, 77, A0, F9, 81, 3A, EA, 39, AB, 43, 75, E6, 07, E9, 1C, 3D, 70, 03, 3D, 6C, 87, 88, 81, 67, 1E, 06, D5, BA, 61, 32, 2F, D0, 31, 7E, 4A, 46, 7A, B4, A4, 8C, 94, 6D...
 
[+]

Code size:
2.1 MB (2,239,488 bytes)

Scan npgbfnc_sfr.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.