home

npsf_abn.dll

Módulo de Proteção - Banco Santander (Brasil) S.A.

ICP-Brasil

It is installed within the Mozilla Firefox web browser as an extension/plugin as ‘gastecnologia.com.br/sf/abn’.
Publisher:
GAS Tecnologia  (signed by ICP-Brasil)

Product:
Módulo de Proteção - Banco Santander (Brasil) S.A.

Description:
Internet Banking Helper

Version:
3.12.1.2

MD5:
7236a371a6c64fee230437e27282baab

SHA-1:
409d7f96aae1e695d3aefc499e32b144c0ca1b08

SHA-256:
6f48df151a01d5393bda72e9bc60ece87012cf2335d7c1230e11e4a9bf613dab

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/26/2024 12:35:13 AM UTC  (today)

Scan engine
Detection
Engine version

IKARUS anti.virus
Trojan.Win32.VMProtect
t3scan.1.9.5.0

File size:
2.5 MB (2,610,504 bytes)

Product version:
3.12.1.2

Copyright:
Copyright 2014 GAS Tecnologia

Original file name:
npsf_abn.dll

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\gas tecnologia\gbbd\npsf_abn.dll

Digital Signature
Signed by:
ICP-Brasil

Authority:
ICP-Brasil

Valid from:
5/22/2015 10:00:00 AM

Valid to:
5/21/2016 10:00:00 AM

Subject:
CN=Banco Santander Brasil SA, OU=BANCO SANTANDER BRASIL SA, OU=(EM BRANCO), OU=RISCOS TECNOLOGICOS E SEGURANCA, OU=SAO PAULO, OU=SP, OU=000001006118551, OU=CERTIFICADO SERASA PARA ASSINATURA DE CODIGO, O=ICP-Brasil, C=BR

Issuer:
CN=SERASA Certificadora Digital v2, O=ICP-Brasil, C=BR

Serial number:
5A7305F2AF4F22D6

File PE Metadata
Compilation timestamp:
2/12/2015 6:55:03 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
11.0

CTPH (ssdeep):
49152:5N9Ik+clchTqjWY9WV2k794asEEWsE8QnNDENXjKmAJH6iYgqesCp2X2SWODOS6g:5Ticlc4aaW0QnNyKmOH6iYg7+XAOD8u7

Entry address:
0x5C8E2B

Entry point:
0F, 80, C0, 06, E8, FF, 9C, C7, 04, 24, 48, 84, 17, 22, E8, 6A, B9, D8, FF, 00, 00, 4C, 6F, 63, 6B, 52, 65, 73, 6F, 75, 72, 63, 65, 00, 00, 00, 47, 65, 74, 46, 69, 6C, 65, 56, 65, 72, 73, 69, 6F, 6E, 49, 6E, 66, 6F, 53, 69, 7A, 65, 41, 00, 00, 00, 47, 65, 74, 57, 69, 6E, 64, 6F, 77, 54, 68, 72, 65, 61, 64, 50, 72, 6F, 63, 65, 73, 73, 49, 64, 00, E8, 6C, 04, 00, 00, 10, CB, 9C, D0, CF, F9, 89, C3, 66, 0F, A3, F5, 66, 0F, A3, CB, 89, 0C, 24, F9, 80, 3F, 23, E9, 21, 01, 00, 00, 00, 00, 6C, 73, 74, 72, 6C, 65...
 
[+]

Code size:
1.9 MB (1,951,232 bytes)

Mozilla Plugin
Name:
gastecnologia.com.br/sf/abn


Scan npsf_abn.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.