home

2c1b09fac5558c3ea94799525aa735179f71ce8f

Módulo de Proteção - Banco da Amazonia

Banco da Amazonia SA

It is installed within the Mozilla Firefox web browser as part of an addin/plugin.
Publisher:
GAS Tecnologia  (signed by Banco da Amazonia SA)

Product:
Módulo de Proteção - Banco da Amazonia

Description:
Internet Banking Helper

Version:
3.11.0.1

MD5:
489ca470d776a91bc07bbc1f815876e5

SHA-1:
b3f161581f80a8f889f67b9a5bc65ad24732fabe

SHA-256:
350eae93cb5239e089346e809136251fdd29e5589fe24607bb9a45fc1f030c13

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/28/2024 9:52:02 PM UTC  (today)

File size:
2.2 MB (2,263,828 bytes)

Product version:
3.11.0.1

Copyright:
Copyright 2014 GAS Tecnologia

Original file name:
npsf_amz.dll

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\mozilla\firefox\profiles\{user}.default\cache2\entries\2c1b09fac5558c3ea94799525aa735179f71ce8f

Digital Signature
Signed by:
Banco da Amazonia SA

Authority:
Thawte, Inc.

Valid from:
4/20/2014 9:00:00 PM

Valid to:
4/20/2016 8:59:59 PM

Subject:
CN=Banco da Amazonia SA, O=Banco da Amazonia SA, L=Belem, S=Para, C=BR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
26DCF7FF21AA37143499184F574C664A

File PE Metadata
Compilation timestamp:
7/29/2014 9:26:02 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
11.0

CTPH (ssdeep):
49152:nlgOft6bFhrv99MYKwaBDNZ1vMR4DSKuCVOAYA9qwH950RospB:nlgxzD5WnvMR4uCVO9JRouB

Entry address:
0x3DC980

Entry point:
0F, 87, 9B, 26, 19, 00, 51, 51, C6, 44, 24, 04, 90, C7, 44, 24, 04, B8, F9, C7, EF, 8D, 64, 24, 04, 0F, 8F, FB, 1D, 19, 00, 9C, 9C, C6, 04, 24, F6, C7, 44, 24, 04, 64, 79, 4F, CD, C7, 04, 24, CB, D3, 13, B0, 8D, 64, 24, 04, E9, A5, 3B, 19, 00, 00, 00, 49, 73, 56, 61, 6C, 69, 64, 55, 52, 4C, 00, 00, 00, 47, 65, 74, 53, 74, 72, 69, 6E, 67, 54, 79, 70, 65, 57, 00, 60, 54, CE, 8B, D2, AD, 5C, 17, 7C, 88, 4B, 49, 3E, 2E, 39, FD, B8, AA, 94, BE, 37, 43, 34, EC, 7A, DF, E7, 2E, 4E, 37, 8A, 21, 22, A9, 35, DB, 50...
 
[+]

Code size:
1.8 MB (1,937,920 bytes)

Scan 2c1b09fac5558c3ea94799525aa735179f71ce8f - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.