home

Banco Safra SA

Publisher Information

Banco Safra SA is a software publisher located in Sao Paulo, Brazil*. Thre are 2 additional code signing certificates issued to this publisher.
Authority:
Symantec Corporation

Valid from:
10/21/2015 10:00:00 PM

Valid to:
12/20/2016 9:59:59 PM

Subject:
CN=Banco Safra SA, OU=Banco Safra SA, O=Banco Safra SA, L=Sao Paulo, S=Sao Paulo, C=BR

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
016d5d6b4b1dd44c216241c805fb8645

Status:
No known positive detections

Scan engine
Details
Detections

Avira AntiVirus
TR/Dropper.Gen
50.00%

Quick Heal
(Suspicious) - DNAScan
50.00%

0 / 68
c81667c397b3f89c2f381b89592d57b1a82a43fb (Módulo Defensor - Banco Safra by GAS Tecnologia)  (53ec2bf936536752d3f4e7b3c466b736)

0 / 68
80da9662fc65f5dd38d0ac7c82d3bb9030810573 (Módulo Defensor - Banco Safra by GAS Tecnologia)  (9ab1eda84511a0f3e8dda3f6582f3e32)

0 / 68
defensor_stormfish.exe (GBBD Defensor Safra by Banco Safra)  (b58c583eda97ee13524d12202322d8a2)

0 / 68
defensor.exe (Defensor Banco Safra)  (698c5ca66aa01d6cf528f1cae20f5531)

1 / 68
defensor.exe (Defensor Banco Safra)  (5d0f618896e9debdee81310b73cddf0b)

1 / 68      (inconclusive)
gbiehsfr.dll (Banco Safra Gbieh by Banco Safra)  (f56c3fdc296a5bd3d9ac07e7a771cecb)

0 / 68
sf_sfr_inp.dll (Módulo Defensor - Banco Safra by GAS Tecnologia)  (37691894833daac74fffa25a4684a529)

0 / 68
defensorsafra.exe (Diagnóstico Safra by Banco Safra)  (45ba295b9874554e06cf33f673cc23f5)

0 / 68
defensorsafra.exe (Diagnóstico Safra by Banco Safra)  (dd3b170c04206a3c9d21ddfa1965a8c7)

0 / 68
npsf_sfr_64.dll (Módulo Defensor - Banco Safra by GAS Tecnologia)  (b4929d3f5b18eceff49880e47b1da044)

0 / 68
npsf_sfr.dll (Módulo Defensor - Banco Safra by GAS Tecnologia)  (bb4d371fe72251cd8c177f8f164cf189)

0 / 68
gbiehsfr.dll (Banco Safra Gbieh by Banco Safra)  (cc7cf7aa8455b0151a0d22143b78263a)

Downloads URLs for files signed by Banco Safra SA.

0 / 68
https://md.safra.com.br/defensor/.../DefensorSafra.exe  (45ba295b9874554e06cf33f673cc23f5)

0 / 68
https://md.safra.com.br/defensor/.../DefensorSafra.exe  (dd3b170c04206a3c9d21ddfa1965a8c7)

The following websites host and distribute files published by Banco Safra SA.

md.safra.com.br

The certificates below are also signed by Banco Safra SA.

28764FBA7061F74689898D493B92266F  (Sep 08, 2014 to Nov 08, 2015)

279F7FC1DC9AC1E3403513DB5FF3A1F0  (Oct 02, 2012 to Oct 03, 2014)

The following publishers (by Authenticode signature organization name) are related.

GAS INFORMATICA LTDA

* Note, the details and description above are based on the code signing digital signature issued to Banco Safra SA by Symantec Corporation on October 21, 2015 with the serial number '016d5d6b4b1dd44c216241c805fb8645'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.