home

50a7537530f310c48d803a537de3aee3aa0cec84

Módulo de Proteção - Banese (Banco do Estado de Sergipe)

BANCO DO ESTADO DE SERGIPE S/A

It is installed within the Mozilla Firefox web browser as part of an addin/plugin.
Publisher:
GAS Tecnologia  (signed by BANCO DO ESTADO DE SERGIPE S/A)

Product:
Módulo de Proteção - Banese (Banco do Estado de Sergipe)

Description:
Internet Banking Helper

Version:
3.12.0.2

MD5:
eae170dbb7de2ccb1303d03d31d7dde2

SHA-1:
fc3c977292885e70588ae1d48214a9c35262adae

SHA-256:
b69f916c5bccf60f5e11d42c687f336d289cf0457f0357b051ec6cf15b8f05d9

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/1/2024 1:21:59 AM UTC  (today)

File size:
4.3 MB (4,471,296 bytes)

Product version:
3.12.0.2

Copyright:
Copyright 2014 GAS Tecnologia

Original file name:
npsf_bes_64.dll

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\mozilla\firefox\profiles\{user}.default\cache2\entries\50a7537530f310c48d803a537de3aee3aa0cec84

Digital Signature
Signed by:
BANCO DO ESTADO DE SERGIPE S/A

Authority:
GlobalSign nv-sa

Valid from:
6/4/2014 4:26:42 PM

Valid to:
6/5/2015 4:26:42 PM

Subject:
CN=BANCO DO ESTADO DE SERGIPE S/A, OU=TI, O=BANCO DO ESTADO DE SERGIPE S/A, L=Aracaju, S=Sergipe, C=BR

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11211A93CA6AB8C33511EB8D399E1D7299AD

File PE Metadata
Compilation timestamp:
10/2/2014 6:47:32 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows Console

Linker version:
11.0

Entry address:
0x409256

Entry point:
E9, F4, 4E, FF, FF, E9, 3D, 3D, FF, FF, F6, D8, E9, C5, 51, FF, FF, FF, 25, 9B, 8D, FF, FF, 00, 00, 48, 74, 74, 70, 41, 64, 64, 52, 65, 71, 75, 65, 73, 74, 48, 65, 61, 64, 65, 72, 73, 41, 00, 48, 3B, 45, F0, E9, 82, 32, FF, FF, 0F, 84, 64, 37, FF, FF, D2, F6, 66, 0F, BC, D5, F6, C6, F5, 8B, 70, 3C, 66, 0F, BD, D3, 30, DA, 66, 0F, BA, EA, 02, 0F, BC, D7, 48, 01, C6, FF, CA, 0F, AB, CA, 8B, 96, 88, 00, 00, 00, 85, CD, F5, 85, D2, E9, 83, 2F, 00, 00, 48, 8D, 8B, D8, F6, 5C, E4, 50, 48, 8D, 0C, FD, CE, 47, 69...
 
[+]

Packer / compiler:
tElock 0.99 - 1.0 private

Code size:
2.5 MB (2,651,136 bytes)

Scan 50a7537530f310c48d803a537de3aee3aa0cec84 - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.