home

npsf_scd.dll

Módulo de Proteção - Sicredi

Confederacao Interestadual das Cooperativas Ligadas ao Sicredi

It is installed within the Mozilla Firefox web browser as an extension/plugin as ‘gastecnologia.com.br/sf/scd’.
Publisher:
GAS Tecnologia  (signed by Confederacao Interestadual das Cooperativas Ligadas ao Sicredi)

Product:
Módulo de Proteção - Sicredi

Description:
Internet Banking Helper

Version:
3.4.3.1

MD5:
306c3adf984b84713f945b9b3bf2740c

SHA-1:
b04a4aff26cb2e6c6f62ede61f1bb904f717a6ce

SHA-256:
255e808a7b9e8d315e20cf4b264caefd0a8d862ca6bda263f4782dbcf4a21f84

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 10:41:12 PM UTC  (today)

File size:
1.9 MB (2,001,432 bytes)

Product version:
3.4.3.1

Copyright:
Copyright 2013 GAS Tecnologia

Original file name:
npsf_scd.dll

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\gas tecnologia\gbbd\npsf_scd.dll

Digital Signature
Signed by:
Confederacao Interestadual das Cooperativas Ligadas ao Sicredi

Authority:
VeriSign, Inc.

Valid from:
2/11/2012 10:00:00 PM

Valid to:
3/13/2014 8:59:59 PM

Subject:
CN=Confederacao Interestadual das Cooperativas Ligadas ao Sicredi, OU=Confederacao Interestadual das Cooperativas Ligadas ao Sicredi, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Confederacao Interestadual das Cooperativas Ligadas ao Sicredi, L=Porto Alegre, S=Rio Grande do Sul, C=BR

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
1B70095AE7B122EDED713F1546A12C79

Registration
CLSIDs:
{0783EB25-59F8-4F02-B6B0-F1D4349F000F}, {0783EB25-59F8-4F02-B6B1-F1D4349F000F}

ProgIDs:
gas.ibh.scd.1, gas.events.scd.1

COM registered:
Yes

File PE Metadata
Compilation timestamp:
9/5/2013 11:22:23 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
11.0

CTPH (ssdeep):
49152:99+11TLcDL+bfcGH3UuoStDL22/aM8OeebpeBuE89yKy4h1FmEeBq:99Em2f22eYKuE5j8mTq

Entry address:
0x343210

Entry point:
E8, 80, A8, 18, 00, 60, F6, D0, E8, 1F, A8, 18, 00, 00, 00, 43, 6F, 49, 6E, 69, 74, 69, 61, 6C, 69, 7A, 65, 53, 65, 63, 75, 72, 69, 74, 79, 00, 91, 46, EF, A5, F3, F8, FD, F3, A3, D9, 5C, 97, 1A, 2D, B0, D7, 5A, A5, 28, 5B, DE, 09, 8C, C3, 46, 85, 10, D8, C5, F4, B9, 6E, 0E, 5E, 81, D7, 8A, 61, 18, C0, E2, 44, 53, 9F, 1E, 74, D8, 0C, 07, 02, A4, F1, AE, 4E, 9E, B9, 34, 52, D5, E4, 5F, A9, 29, 0A, 60, 2A, 0A, 28, 12, 77, 14, 63, DE, FD, 15, 62, C7, 4A, D5, 9D, 11, C8, 0F, 73, 7C, 9B, 09, B8, 01, 60, 3D, BD...
 
[+]

Code size:
1.6 MB (1,723,392 bytes)

Mozilla Plugin
Name:
gastecnologia.com.br/sf/scd


Scan npsf_scd.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.