» npgbfnc_cef.dll
Overview
Analysis
File Details

npgbfnc_cef.dll

GBBD Caixa Economica Federal

Caixa Economica Federal

It is installed within the Mozilla Firefox web browser as part of an addin/plugin.

File name:

npgbfnc_cef.dll

Publisher:

GAS Tecnologia (signed by Caixa Economica Federal)

Product:

GBBD Caixa Economica Federal

Description:

Internet Banking Helper

Version:

2.3.5

MD5:

1a7c4c9071b56f3afe78fc880688f60f

SHA-1:

69be648c05edf155c18485937fc1396c41a6ac95

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

4/25/2024 3:42:36 AM UTC (today)

Scan engine

Detection

Engine version

Rising Antivirus

Suspicious

23.00.65.141103

File size:

2 MB (2,105,120 bytes)

Product version:

2.3.5

Original file name:

npgbfnc_cef.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Documents and Settings\{user}\AppData\mozilla\firefox\profiles\{user}.default\extensions\{87f8774f-b485-47e2-a755-a40a8a5e886d}\plugins\npgbfnc_cef.dll

Digital Signature

Signed by:

Caixa Economica Federal

Authority:

The USERTRUST Network

Valid from:

7/18/2010 9:00:00 PM

Valid to:

7/18/2012 8:59:59 PM

Subject:

CN=Caixa Economica Federal, OU=GISUT/BR, O=Caixa Economica Federal, STREET=SEPN 507 BLOCO A 3º Andar - Asa Norte, L=Brasília, S=Distrito Federal, PostalCode=70740-521, C=BR

Issuer:

CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:

18471E6B12B1A09DE7D5AA6814AEF186

File PE Metadata

Compilation timestamp:

4/12/2011 10:19:07 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

49152:UBL4pEiolBWN/pdnI3BKWd8Tr8iW2dZHtE8q8+remd:UFpio6pdh3vZKn8kemd

Entry address:

0x58DBAD

Entry point:

E9, 1C, FB, EC, FF, C6, 47, FF, 00, 9F, E8, 34, 6D, EB, FF, F6, D8, E8, 29, 12, F1, FF, 9C, C7, 44, 24, 04, 96, 04, A1, BA, E9, 66, 09, 00, 00, E8, 51, 7C, E0, FF, 00, 07, 9C, F1, 9A, E1, 34, 90, C6, 46, AA, F4, B9, EE, 53, 68, ED, C2, 77, EC, 31, 36, 9B, 34, 1D, C4, ED, D8, E6, F9, 28, 95, B6, 00, 99, 94, B4, E3, 20, 16, 60, 89, 05, CA, 93, FB, 15, 40, 19, E0, 4A, 07, 4D, FD, 4E, 6F, 00, 4F, 78, 7B, 4A, 58, 9C, 6C, 82, 7B, C7, 45, 36, CF, C0, D6, 6A, 69, C7, F3, F5, A5, 23, 5A, 57, E4, D4, 88, C6, 10, E9... 
[+]

Packer / compiler:

Xtreme-Protector v1.05

Code size:

1.9 MB (1,950,720 bytes)

Scan npgbfnc_cef.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.