home

npsf_uni.dll

Guardião Itaú 30 horas

BANCO ITAU S/A

It is installed within the Mozilla Firefox web browser as an extension/plugin as ‘gastecnologia.com.br/sf/uni’.
Publisher:
GAS Tecnologia  (signed by BANCO ITAU S/A)

Product:
Guardião Itaú 30 horas

Description:
Internet Banking Helper

Version:
3.10.0.1

MD5:
23dfb30a87c13c73d74df5903bc33599

SHA-1:
4a6fe7a985771eee7a99118191832161d5ebf379

SHA-256:
ab7ec754f614393054ab852f048f3dd196731e99568cb41e713daa0a43b1be93

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 8:30:16 AM UTC  (today)

File size:
2.3 MB (2,384,952 bytes)

Product version:
3.10.0.1

Copyright:
Copyright 2014 GAS Tecnologia

Original file name:
npsf_uni.dll

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\gas tecnologia\gbbd\npsf_uni.dll

Digital Signature
Signed by:
BANCO ITAU S/A

Authority:
VeriSign, Inc.

Valid from:
5/8/2013 9:00:00 PM

Valid to:
7/8/2015 8:59:59 PM

Subject:
CN=BANCO ITAU S/A, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=BANCO ITAU S/A, L=Sao Paulo, S=Sao Paulo, C=BR

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
43FA90A311EFC01947FA97B37E9710CB

File PE Metadata
Compilation timestamp:
6/5/2014 8:23:39 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
11.0

CTPH (ssdeep):
49152:3KqrBXuNaz1dgN/HeDdhby8mItND4ImMmAoWTsLE3lM0LOc5p0kvPs29OYvZWD1T:3Beu1Jy8jlajWQovOEp052cYBWJ

Entry address:
0x498C5E

Entry point:
60, E8, 18, 84, 00, 00, 00, 00, 57, 69, 6E, 48, 74, 74, 70, 53, 65, 74, 4F, 70, 74, 69, 6F, 6E, 00, 89, C3, 80, CD, AA, 66, 01, C1, 66, 85, C0, 01, C7, 89, C7, 66, 0F, AB, D9, 0F, 96, C1, E9, D2, F4, F0, FF, 8D, 64, 24, 08, 0F, 87, 44, 1E, F3, FF, 60, F8, 69, D2, 0A, 00, 00, 00, F6, C3, DA, 80, FA, F2, 01, C2, 8D, 64, 24, 20, 9C, 8D, 64, 24, 04, E9, B9, 26, F6, FF, 00, 00, 43, 6F, 49, 6E, 69, 74, 69, 61, 6C, 69, 7A, 65, 45, 78, 00, 8D, 64, 24, 08, 0F, 84, E2, 25, F3, FF, 68, F5, 6E, 53, EF, 2C, 30, FF, 34...
 
[+]

Packer / compiler:
ASPack v1.08.04

Code size:
1.8 MB (1,930,240 bytes)

Mozilla Plugin
Name:
gastecnologia.com.br/sf/uni


Scan npsf_uni.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.