home

npgbfnc_bb.dll

Módulo de Proteção - Banco do Brasil

Banco do Brasil S.A.

It is installed within the Mozilla Firefox web browser as part of an addin/plugin.
Publisher:
GAS Tecnologia  (signed by Banco do Brasil S.A.)

Product:
Módulo de Proteção - Banco do Brasil

Description:
Internet Banking Helper

Version:
2.8.0

MD5:
ee3c36845dfdc2d0a48f266714372112

SHA-1:
7079b809e4ef185e0f96c1bf0924087e6099540b

SHA-256:
d53be8dfa145b9acbb931cb110724c2352c2dba529661fb6c5738f134b2d3810

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 7:21:59 PM UTC  (today)

File size:
2.1 MB (2,202,696 bytes)

Product version:
2.8.0

Copyright:
Copyright 2011 GAS Tecnologia

Original file name:
npgbfnc_bb.dll

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\roaming\mozilla\firefox\profiles\{user}.default\extensions\{87f8774f-b485-47e2-a755-a40a8a5e886c}\plugins\npgbfnc_bb.dll

Digital Signature
Signed by:
Banco do Brasil S.A.

Authority:
VeriSign, Inc.

Valid from:
9/29/2011 9:00:00 PM

Valid to:
10/1/2014 8:59:59 PM

Subject:
CN=Banco do Brasil S.A., OU=Diretoria de Tecnologia, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Banco do Brasil S.A., L=Brasilia, S=Distrito Federal, C=BR

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
7D3250B27E0547C77307030491B42802

File PE Metadata
Compilation timestamp:
10/20/2011 8:56:33 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
49152:Php4Vrq4NY9Ms0r1s7naAiFeTePLrqTtv8zsy5zJ+:PhYS9GoaAiFeTeDrqTtv4s6+

Entry address:
0x4C9973

Entry point:
E9, A6, C3, FF, FF, 9F, 66, 89, C0, C6, 47, FF, 00, 68, 93, 15, 69, 57, E8, BC, 1A, 00, 00, 29, FB, 66, 01, DF, 83, C4, 04, 01, E3, 66, 0F, BC, F9, 89, DF, 0F, 90, C0, D2, E8, D2, E8, 2C, DE, B0, 2E, 80, FC, A4, F2, AE, 60, FF, 74, 24, 04, E9, 8A, 64, 00, 00, 8D, 64, 24, 04, 0F, 8B, 9B, 4E, 00, 00, 60, C7, 44, 24, 1C, F9, 9B, 3D, 10, FF, 34, 24, 9C, E8, C0, B5, FF, FF, F1, CC, 12, 08, 02, E3, 7D, B4, 9D, 14, 8C, 75, 3C, 24, 4C, 64, DD, 05, 1C, 15, 5D, 90, CA, AB, F3, 53, 7F, C7, 8F, 57, D0, 0D, 02, 99, DB...
 
[+]

Packer / compiler:
tElock 0.99 - 1.0 private

Code size:
1.9 MB (1,953,280 bytes)

Scan npgbfnc_bb.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.