home

Banco do Brasil S.A.

Publisher Information

Banco do Brasil S.A. is a software publisher located in Brasilia, Distrito Federal in Brazil*. Thre are 5 additional code signing certificates issued to this publisher.
Authority:
VeriSign, Inc.

Valid from:
9/24/2007 9:00:00 PM

Valid to:
10/3/2008 8:59:59 PM

Subject:
CN=Banco do Brasil S.A., OU=UF Tecnologia, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Banco do Brasil S.A., L=Brasilia, S=Distrito federal, C=BR

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
7d4258baaebc77e462d087caad3d7865

Status:
Inconclusive detections from multiple engines

Scan engine
Details
Detections

G Data
Trojan.Generic.2049960, Trojan.Generic.1728866, Win32.Trojan.Agent.X5SU5D, Trojan.Generic.3702150
58.33%

Bitdefender
Trojan.Generic.2049960, Trojan.Generic.1728866, Trojan.Generic.3702150
50.00%

McAfee
Artemis!CB31632EBAB1, PWS-Banker, Artemis!07D1B5DAF8DF
41.67%

Vba32 AntiVirus
suspected of Malware-Cryptor.Win32.General, TrojanBanker.Banbra
33.33%

Rising Antivirus
Trojan.Win32.Generic.127945B8, PE:Trojan.Spy.Win32.Banker.zsk!1075186772
33.33%

Panda Antivirus
Suspicious file, Generic Malware
25.00%

Norman
W32/Dropper!gens.1642675
25.00%

Dr.Web
BACKDOOR.Trojan
25.00%

Avira AntiVirus
TR/Dropper.Gen, TR/Spy.65352
25.00%

Clam AntiVirus
PUA.Packed.PECompact-1
16.67%

1 / 68
GbpSv.exe (Gbp Service)  (07d1b5daf8df3e0f2be1bc6d60f73fda)

0 / 68
Gbieh.dll (Banco do Brasil Gbieh by Banco do Brasil)  (c8b9a078e6fffc6e9df1bb2935d06b0d)

0 / 68
GbpSv.exe (Gbp Service)  (40b29472f725de57152f881202a6f9b2)

0 / 68
GbpDist.DLL (GbpDist Module)  (ca48e976d737be3da332f128e05a015d)

0 / 68
GbpKm.sys (GbpKm by GAS Tecnologia)  (8f358d3289bb32c959e681d99a7eeb51)

14 / 68    (inconclusive)
GbpDist.DLL (GbpDist Module)  (aff2684ffc0fa91ab57ae4483feb3498)

0 / 68
instala.exe  (1d037bb9ffdbff21e37344e486e861e6)

0 / 68
gbmzhbb.dll (Banco do Brasil GbMzh by Banco do Brasil)  (ab419b723e766647e7a5afe42bd4fd81)

0 / 68
Gbieh.dll (Banco do Brasil Gbieh by Banco do Brasil)  (f1e7c8f4d1c4887da0052977a0faded7)

4 / 68      (inconclusive)
instala.exe  (ff11c41d687ddbfeac34fdc5f5816e96)

0 / 68
GbpDist.DLL (GbpDist Module)  (f24a2849d33c7db43e861ffb235b7e41)

12 / 68    (Malware)
GbpDist.DLL (GbpDist Module)  (0815f2e9a1c2f998513d2e73ee00bf7e)

0 / 68
instala.exe  (3461fc7f196fe4c514fbc36a61781be1)

0 / 68
instala.exe  (38f720388bdd0639dcbde8d1db78987c)

0 / 68
Gbieh.dll (Banco do Brasil Gbieh by Banco do Brasil)  (fb68f9c68c26dcdb708c6f11c3a89f8e)

0 / 68
instala.exe  (380df69a1396b00ecf246826c74d8bc7)

0 / 68
Gbieh.dll (Banco do Brasil Gbieh by Banco do Brasil)  (53945764053d1a3515ce17cc0fad8620)

5 / 68
GbpSv.exe (Gbp Service)  (b4ab7bd6b761bf93a27c1ace97b7724c)

5 / 68
GbpSv.exe (Gbp Service)  (c2f28672e8c455f04d9ced95568b9c7f)

0 / 68
gbpsv.exe.upd.437a3637 (Gbp Service)  (66fe46ba4ddae3634dadf1ee01b5bf77)

5 / 68
GbpDist.DLL (GbpDist Module)  (61eed852ca48727fe11af10885680046)

0 / 68
Gbieh.dll (Banco do Brasil Gbieh by Banco do Brasil)  (1892851300ef014520c22b0acb8723da)

2 / 68
instala.exe  (fdb22abcc5991d5355ae0f4bb32a0d01)

0 / 68
Gbieh.dll (Banco do Brasil Gbieh by Banco do Brasil)  (38e245e12f0eb0c43fe00aa4bae80b28)

6 / 68      (false positives)
GbpSv.exe (Gbp Service)  (62a19bc942a0ee544e3c46132765f636)

0 / 68
backup-20080915-144616-720.dll (Banco do Brasil Gbieh by Banco do Brasil)  (ce82475b6aaafded2fd72b385c0bccfc)

3 / 68
GbpDist.DLL (GbpDist Module)  (9d103deb41dd8eb3c4f56a18ad00c80f)

4 / 68
GbpDist.DLL (GbpDist Module)  (1a0eaec758b0eeb49cb316c11641c716)

1 / 68
GbpDist.DLL (GbpDist Module)  (8f0745e527ee98446ba2aa094489e85c)

The certificates below are also signed by Banco do Brasil S.A..

1121F37D9D7CAEDB53287A02D5557B1FD3A0  (Sep 25, 2014 to Sep 25, 2017)

7D3250B27E0547C77307030491B42802  (Sep 29, 2011 to Oct 01, 2014)

5C76152BFFECF8B55B3FB4B15DED1A3A  (Oct 01, 2008 to Oct 02, 2011)

47F4EDDC7733CAB2C05F42891B63A1F9  (Sep 13, 2006 to Sep 26, 2007)

271C24A6302FD657E8209D86509E8C0A  (Sep 07, 2005 to Sep 17, 2006)

* Note, the details and description above are based on the code signing digital signature issued to Banco do Brasil S.A. by VeriSign, Inc. on September 24, 2007 with the serial number '7d4258baaebc77e462d087caad3d7865'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.