» npgbfnc_uni.dll
Overview
Analysis
File Details

npgbfnc_uni.dll

Módulo de Proteção - Banco Itau Unibanco

BANCO ITAU S/A

It is installed within the Mozilla Firefox web browser as part of an addin/plugin.

File name:

npgbfnc_uni.dll

Publisher:

GAS Tecnologia (signed by BANCO ITAU S/A)

Product:

Módulo de Proteção - Banco Itau Unibanco

Description:

Internet Banking Helper

Version:

2.12.0.8

MD5:

43eab3d89e01d4ad7ab27aa2b3b61a01

SHA-1:

411abad57bcec895627b21c156678742f93ff550

SHA-256:

d51a40c0a4baf70329b0e6f3888cddbf739103ad884bbd7d9397868ed10a14e8

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/23/2025 5:24:47 AM UTC (today)

File size:

2.4 MB (2,494,368 bytes)

Product version:

2.12.0.8

Original file name:

npgbfnc_uni.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\users\{user}\appdata\roaming\mozilla\firefox\profiles\{user}.default\extensions\{87f8774f-b485-47e2-a755-a40a8a5e8873}\plugins\npgbfnc_uni.dll

Digital Signature

Signed by:

BANCO ITAU S/A

Authority:

VeriSign, Inc.

Valid from:

6/9/2009 9:00:00 PM

Valid to:

6/9/2012 8:59:59 PM

Subject:

CN=BANCO ITAU S/A, OU=DIOTI - Superintendencia de Continuidade de Negocios, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=BANCO ITAU S/A, L=Sao Paulo, S=Sao Paulo, C=BR

Issuer:

CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

4B18AEC7FDBB4EBDA6D39194D559C959

File PE Metadata

Compilation timestamp:

3/22/2012 4:42:02 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

49152:x8Q1yT1L3lE1RozsCfAo+bTdFNBWwhum/AtrQlXLP7Fo1m7LZtftwaU:qQMRACfKL5zYeLP72sRtwp

Entry address:

0x642CB0

Entry point:

E8, 8F, 55, DE, FF, E8, B6, 4F, EB, FF, 9D, 1C, 93, E6, 38, 43, A4, 89, 72, 52, 33, 1D, FB, E0, CC, B7, 96, 73, 59, 3C, 4D, CC, 49, 2F, 81, 52, 3A, EA, CE, C4, 4E, 26, 6E, 31, 14, F8, 77, E2, 34, B6, C3, 48, FC, 7B, 5E, 27, 85, 19, B1, DA, C1, 09, EF, 33, B2, 4D, 7C, 3E, 1D, 7A, B3, 86, 36, 19, 0F, 8E, 85, E6, 2D, E8, 9D, E6, A5, 68, 4D, 43, C2, 45, 91, C4, 1E, D8, 57, 4E, A2, DC, 6E, 81, AF, 9C, FA, E0, 5F, 5A, 44, 25, 65, 18, FD, 7C, 86, B9, BE, 3A, 77, B5, 9A, F8, DE, C6, 9C, 75, 85, 99, 73, 84, 94, A1... 
[+]

Code size:

2.1 MB (2,239,488 bytes)

Scan npgbfnc_uni.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.