home

ICP-Brasil

Publisher Information

ICP-Brasil is a software publisher located in Brazil*. Thre are 293 additional code signing certificates issued to this publisher.
Authority:
ICP-Brasil

Valid from:
5/22/2015 10:00:00 AM

Valid to:
5/21/2016 10:00:00 AM

Subject:
CN=Banco Santander Brasil SA, OU=BANCO SANTANDER BRASIL SA, OU=(EM BRANCO), OU=RISCOS TECNOLOGICOS E SEGURANCA, OU=SAO PAULO, OU=SP, OU=000001006118551, OU=CERTIFICADO SERASA PARA ASSINATURA DE CODIGO, O=ICP-Brasil, C=BR

Issuer:
CN=SERASA Certificadora Digital v2, O=ICP-Brasil, C=BR

Serial number:
5a7305f2af4f22d6

Status:
Inconclusive detections from multiple engines

Scan engine
Details
Detections

Quick Heal
(Suspicious) - DNAScan
50.00%

IKARUS anti.virus
Trojan.Win32.VMProtect
25.00%

Rising Antivirus
PE:Malware.Generic/QRS!1.9E2D [F]
25.00%

Reason Heuristics
PUP.InstallCore.CSH (L)
25.00%

1 / 68      (PUP)
sf.exe (Módulo de Proteção - Banco Santander (Brasil) S.A. by GAS Tecnologia)  (f3379883f155e392022c041cfe372424)

0 / 68
npsf_abn.dll (Módulo de Proteção - Banco Santander (Brasil) S.A. by GAS Tecnologia)  (3bd7dbd9501f34e16afa184a48a23ce9)

0 / 68
gbpluginabnsetup.exe (Diagnóstico do Módulo de Proteção by Grupo Banco Santander (BRASIL) SA)  (9ade9e949a10c939585099f9aec2d4b0)

0 / 68
sf.exe (Módulo de Proteção - Banco Santander (Brasil) S.A. by GAS Tecnologia)  (4b1677e826ea33b573911b3f674147d9)

0 / 68
gbpluginabnsetup.exe  (d7d1399c7055a295bb385b757b247677)

0 / 68
gbpluginabnsetup.exe (Diagnóstico do Módulo de Proteção by Grupo Banco Santander (BRASIL) SA)  (7df6d8563b07605c15e49eed932289af)

2 / 68
gbplugin.exe (Módulo de Proteção Banco Santander)  (eec67069424b65c7782cadc8f65135ce)

0 / 68
gbplugin.exe (Módulo de Proteção Banco Santander)  (522435c0a49569ac26e0527be3ae60e4)

0 / 68
sf.exe (Módulo de Proteção - Banco Santander (Brasil) S.A. by GAS Tecnologia)  (dbb0c166a4eeace8fb48390bcb4424f5)

0 / 68
sf.exe (Módulo de Proteção - Banco Santander (Brasil) S.A. by GAS Tecnologia)  (fb05c7c5d4984af1a40a89f1c573d170)

0 / 68
sf_abn_inp_64.dll (Módulo de Proteção - Banco Santander (Brasil) S.A. by GAS Tecnologia)  (f59ae64d6ef7e5304d6c0496556fab09)

0 / 68
sf_abn_inp.dll (Módulo de Proteção - Banco Santander (Brasil) S.A. by GAS Tecnologia)  (ac5d35e9466095a20353d6f4a6c031d3)

0 / 68
sf.exe (Módulo de Proteção - Banco Santander (Brasil) S.A. by GAS Tecnologia)  (4b1677e826ea33b573911b3f674147d9)

0 / 68
gbpluginabnsetup.exe (Diagnóstico do Módulo de Proteção by Grupo Banco Santander (BRASIL) SA)  (388c2eadd06cdb3b53ad5d735ab73539)

0 / 68
npsf_abn_64.dll (Módulo de Proteção - Banco Santander (Brasil) S.A. by GAS Tecnologia)  (235ab64f552ff09e02a3045c9c68cc4c)

1 / 68
npsf_abn.dll (Módulo de Proteção - Banco Santander (Brasil) S.A. by GAS Tecnologia)  (7236a371a6c64fee230437e27282baab)

1 / 68
gbplugin.exe (Módulo de Proteção Banco Santander)  (2ca4481818bd53f20b84c09a6cac69b9)

0 / 68
sf.exe (Módulo de Proteção - Banco Santander (Brasil) S.A. by GAS Tecnologia)  (0e42a23ed5cd93078fd3fc5850637efb)

0 / 68
gbiehabn.dll.updc (Banco Real Gbieh by Banco Real)  (e29a48788bad3c99c0ec0ee3526a9d69)

Downloads URLs for files signed by ICP-Brasil.

0 / 68
https://wwws2.santandernet.com.br/MPS/.../gbplugin2.exe  (4b1677e826ea33b573911b3f674147d9)

0 / 68
https://wwws.santandernet.com.br/mps/.../gbpluginabnsetup.exe  (388c2eadd06cdb3b53ad5d735ab73539)

0 / 68
https://wwws2.santandernet.com.br/mps/.../gbpluginabnsetup.exe  (388c2eadd06cdb3b53ad5d735ab73539)

The following websites host and distribute files published by ICP-Brasil.

wwws.santandernet.com.br

wwws2.santandernet.com.br

The certificates below are also signed by ICP-Brasil.

0A  (Jan 01, 2011 to Dec 31, 2041)

05  (Aug 10, 2007 to Aug 02, 2037)

13  (May 27, 2015 to May 27, 2025)

06  (Sep 25, 2012 to Sep 18, 2022)

02  (Oct 23, 2011 to Oct 20, 2021)

1E52E7EB77C3364F  (Dec 22, 2015 to Aug 05, 2020)

03  (Apr 09, 2000 to May 24, 2020)

00  (Apr 09, 2000 to May 24, 2020)

10  (Apr 25, 2001 to Apr 25, 2020)

2DB61FCED189A925  (Dec 23, 2011 to Dec 21, 2019)

10 of 293 code signing certificates issued

The following publishers (by Authenticode signature organization name) are related.

BANCO SANTANDER BRASIL SA

BANCO SANTANDER BRASIL S.A.

GAS INFORMATICA LTDA

* Note, the details and description above are based on the code signing digital signature issued to ICP-Brasil by ICP-Brasil on May 22, 2015 with the serial number '5a7305f2af4f22d6'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.