» npgbfnc_uni.dll
Overview
Analysis
File Details

npgbfnc_uni.dll

Módulo de Proteção - Banco Itau Unibanco

BANCO ITAU S/A

It is installed within the Mozilla Firefox web browser as part of an addin/plugin.

File name:

npgbfnc_uni.dll

Publisher:

GAS Tecnologia (signed by BANCO ITAU S/A)

Product:

Módulo de Proteção - Banco Itau Unibanco

Description:

Internet Banking Helper

Version:

2.12.0.8

MD5:

1c9d1885bf0c53dece4fe72dc41651eb

SHA-1:

aaf22efd7c72a483ba8be359149b5d62be01c251

SHA-256:

2501eb36365236cc8e3168defc62d1e1df15864d9e332904cda681c8b64234e0

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

12/28/2024 1:42:17 AM UTC (today)

File size:

2.4 MB (2,485,152 bytes)

Product version:

2.12.0.8

Original file name:

npgbfnc_uni.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\users\{user}\appdata\roaming\mozilla\firefox\profiles\{user}.default\extensions\{87f8774f-b485-47e2-a755-a40a8a5e8873}\plugins\npgbfnc_uni.dll

Digital Signature

Signed by:

BANCO ITAU S/A

Authority:

VeriSign, Inc.

Valid from:

6/9/2009 9:00:00 PM

Valid to:

6/9/2012 8:59:59 PM

Subject:

CN=BANCO ITAU S/A, OU=DIOTI - Superintendencia de Continuidade de Negocios, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=BANCO ITAU S/A, L=Sao Paulo, S=Sao Paulo, C=BR

Issuer:

CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

4B18AEC7FDBB4EBDA6D39194D559C959

File PE Metadata

Compilation timestamp:

4/25/2012 3:19:12 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

49152:7WMiE+REAaQHUqGFZiFgH3Ushj7L58yUL0e6X+t8XJyjQJfkUAU0UQy:7Wl5a4HKiA7L58V2+URkUTV

Entry address:

0x6802A5

Entry point:

E9, DC, FF, FF, FF, 0E, 4A, 29, 37, 6F, 42, 7D, 87, 4E, 36, 30, E6, DC, 9D, E7, 4A, 27, DE, FD, FA, C8, E6, F1, D6, 76, 97, 1F, 08, BC, F4, 6C, 12, 76, 26, D2, 0B, FF, DD, B2, 7B, C2, B0, AF, 51, 8A, 6C, 67, 20, 81, 9B, B8, 99, 91, B3, 4A, A6, 06, 9C, 5A, 7A, 7D, 57, F0, BB, 3D, 08, 8E, F6, 27, A5, 8D, 1C, 55, F2, AE, 25, FB, F6, 67, 6D, 5A, 03, 83, 9A, 82, 55, C6, 7B, 56, 95, 5C, 55, 9A, 13, FF, 70, 3C, B5, 6E, D3, EE, A3, 14, 2C, 16, 57, CD, 92, 4E, AF, 97, 6C, CC, F0, 69, 82, FD, 98, C2, D7, B0, 44, 36... 
[+]

Packer / compiler:

tElock 0.99 - 1.0 private

Code size:

2.1 MB (2,239,488 bytes)

Scan npgbfnc_uni.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.