home

npsf_sfr.dll

Módulo Defensor - Banco Safra

Banco Safra SA

It is installed within the Mozilla Firefox web browser as an extension/plugin as ‘gastecnologia.com.br/sf/sfr’.
Publisher:
GAS Tecnologia  (signed by Banco Safra SA)

Product:
Módulo Defensor - Banco Safra

Description:
Internet Banking Helper

Version:
3.8.0.2

MD5:
c6e00609df2fdfed429203d680f5ed63

SHA-1:
a8df63ead5f207b28007a21395ae495a7d2be0e2

SHA-256:
7161685fb317d644ee10d0f36d62a6e2cff8e067d852db9ddc9ceccb9e626c8d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 4:27:45 PM UTC  (today)

File size:
2 MB (2,140,216 bytes)

Product version:
3.8.0.2

Copyright:
Copyright 2014 GAS Tecnologia

Original file name:
npsf_sfr.dll

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\gas tecnologia\gbbd\npsf_sfr.dll

Digital Signature
Signed by:
Banco Safra SA

Authority:
VeriSign, Inc.

Valid from:
10/2/2012 9:00:00 PM

Valid to:
10/3/2014 8:59:59 PM

Subject:
CN=Banco Safra SA, OU=Banco Safra SA, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Banco Safra SA, L=Sao Paulo, S=Sao Paulo, C=BR

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
279F7FC1DC9AC1E3403513DB5FF3A1F0

Registration
CLSIDs:
{0783EB25-59F8-4F02-B6B0-F1D4349F0015}, {0783EB25-59F8-4F02-B6B1-F1D4349F0015}

ProgIDs:
gas.ibh.sfr.1, gas.events.sfr.1

COM registered:
Yes

File PE Metadata
Compilation timestamp:
4/2/2014 3:46:31 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
11.0

CTPH (ssdeep):
49152:T/W+vro3Rgid0z4HKIl9OWXIB5Mys17nkDpVH8PGdk1OWAxkku/LvZ:3z4VS9saMUPcZ

Entry address:
0x539433

Entry point:
E8, A2, E1, FF, FF, 8D, 64, 24, 30, 0F, 87, D9, 71, FC, FF, C0, D8, 03, C0, F8, 02, 29, FB, 00, D0, 66, C1, E7, 09, F8, 01, E3, 66, C1, DF, 0C, 0F, BD, FE, 89, DF, 60, D2, F0, FE, C8, E9, BE, BB, FC, FF, C7, 44, 24, 1C, CC, 50, 01, 35, 9C, 9C, 52, 9C, 8D, 64, 24, 2C, E9, 9B, 16, 00, 00, 7F, C0, 52, 24, 36, C9, C9, FA, 59, 17, B4, DB, 43, C1, 52, 24, D8, 49, CA, 16, 52, 6E, E4, 2C, 28, A6, 32, 24, B3, CA, C9, 5E, 84, FC, F7, 1F, FB, 5A, DF, E7, 3B, C9, C9, CA, 43, 82, E1, AA, 88, 34, 24, E8, D3, 5D, FC, FF...
 
[+]

Code size:
1.8 MB (1,888,256 bytes)

Mozilla Plugin
Name:
gastecnologia.com.br/sf/sfr


Scan npsf_sfr.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.