home

npsf_bb.dll

Módulo de Proteção - Banco do Brasil

Banco do Brasil S.A.

It is installed within the Mozilla Firefox web browser as an extension/plugin as ‘gastecnologia.com.br/sf/bb’.
Publisher:
GAS Tecnologia  (signed by Banco do Brasil S.A.)

Product:
Módulo de Proteção - Banco do Brasil

Description:
Internet Banking Helper

Version:
3.5.1.1

MD5:
402f73996235a5ed472d3b31c4fd4bc5

SHA-1:
2946e53de46b1bb4f06ce9aa4374837379cb4018

SHA-256:
28ec500c6df9426a621c4cd92b93537d34b491588e362092dd37a688974df214

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/18/2024 6:14:20 AM UTC  (today)

File size:
2.3 MB (2,421,800 bytes)

Product version:
3.5.1.1

Copyright:
Copyright 2013 GAS Tecnologia

Original file name:
npsf_bb.dll

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\gas tecnologia\gbbd\npsf_bb.dll

Digital Signature
Signed by:
Banco do Brasil S.A.

Authority:
VeriSign, Inc.

Valid from:
9/29/2011 9:00:00 PM

Valid to:
10/1/2014 8:59:59 PM

Subject:
CN=Banco do Brasil S.A., OU=Diretoria de Tecnologia, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Banco do Brasil S.A., L=Brasilia, S=Distrito Federal, C=BR

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
7D3250B27E0547C77307030491B42802

Registration
CLSIDs:
{0783EB25-59F8-4F02-B6B0-F1D4349F0000}, {0783EB25-59F8-4F02-B6B1-F1D4349F0000}

ProgIDs:
gas.ibh.bb.1, gas.events.bb.1

COM registered:
Yes

File PE Metadata
Compilation timestamp:
10/17/2013 7:54:33 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
11.0

CTPH (ssdeep):
49152:cwazh26qIyiGp2c/w5A8NQigwvqk/rEQ79gtRcaYbx11whj9F7Kd3TdBuha8V:WzLqIy9p2c/w5A8aijvqOYQdRz1whj3L

Entry address:
0x46B152

Entry point:
57, FF, 34, 24, 68, F5, 2A, F4, 72, C7, 44, 24, 08, 35, 82, 40, E5, E8, 86, 3F, EF, FF, 57, E8, 74, 73, 07, 00, CE, 54, C7, 2F, 5F, 7A, 44, 56, 70, B5, 7D, E8, 30, A9, 33, 79, E1, 68, C8, 6D, 2D, 48, EE, 3E, FA, A2, 85, EF, 69, 15, 55, D5, B3, BC, B9, F5, 60, CE, 5E, 5C, E0, 6B, 71, 04, 56, C5, 2C, 02, 52, DB, 07, 6A, 0E, 5F, 0B, AE, 6A, 07, F3, 32, 84, E6, 2A, 2F, 45, D5, 13, C0, E5, 29, 46, 1C, 8B, CE, 52, 40, AD, 77, 05, E1, 07, 07, 82, D0, 40, 7E, 55, D6, 5F, 27, B9, 50, F9, BD, B1, EA, 7F, 5F, 6E, 51...
 
[+]

Code size:
1.8 MB (1,864,704 bytes)

Google Chrome Plugin
Name:
npsf_bb.dll


Mozilla Plugin
Name:
gastecnologia.com.br/sf/bb


The file npsf_bb.dll has been discovered within the following program.

GBBD Caixa Economica Federal  by Caixa Econômica Federal
About 9% of users remove it
 
Powered by Should I Remove It?

Scan npsf_bb.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.