home

55b2ca7c3cfbc3082340e95f9497606623ac3e39

Módulo de Proteção - Banco da Amazonia

Banco da Amazonia SA

It is installed within the Mozilla Firefox web browser as part of an addin/plugin.
Publisher:
GAS Tecnologia  (signed by Banco da Amazonia SA)

Product:
Módulo de Proteção - Banco da Amazonia

Description:
Internet Banking Helper

Version:
3.11.0.1

MD5:
1527928987c4dfea8ebe0503e12233f5

SHA-1:
2dc2c86e31d6c6683f3d6404e83e61c108511840

SHA-256:
4f910586af67456dc78340764d7be102f782b3d1a466cf20d1615955e04bd59a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/28/2024 11:04:55 PM UTC  (a few moments ago)

File size:
4.2 MB (4,442,880 bytes)

Product version:
3.11.0.1

Copyright:
Copyright 2014 GAS Tecnologia

Original file name:
npsf_amz_64.dll

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\mozilla\firefox\profiles\{user}.default\cache2\entries\55b2ca7c3cfbc3082340e95f9497606623ac3e39

Digital Signature
Signed by:
Banco da Amazonia SA

Authority:
Thawte, Inc.

Valid from:
4/20/2014 9:00:00 PM

Valid to:
4/20/2016 8:59:59 PM

Subject:
CN=Banco da Amazonia SA, O=Banco da Amazonia SA, L=Belem, S=Para, C=BR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
26DCF7FF21AA37143499184F574C664A

File PE Metadata
Compilation timestamp:
7/29/2014 9:17:12 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows Console

Linker version:
11.0

CTPH (ssdeep):
49152:YcfPBoS0mspuqr3Oh8ve0twXpRMNpxSJ1IbpgZTuK24XqUGUKtxsoa/XjxgcDFqP:8zCGZESAFnP6pd

Entry address:
0x3FC04E

Entry point:
E9, ED, 6B, 00, 00, 48, 3B, 45, F0, E9, 07, 60, 00, 00, F9, F5, 66, A9, 7C, D4, 48, 83, EC, 20, E9, 55, BF, FF, FF, 00, 00, 47, 65, 74, 46, 69, 6C, 65, 53, 65, 63, 75, 72, 69, 74, 79, 41, 00, 0F, 85, BC, 2E, 00, 00, 48, 0F, AD, C9, 84, D3, F9, 81, CE, 80, 5A, 76, 43, 89, F9, 66, 89, FE, 29, D9, 66, BE, 30, E6, 48, 89, E6, E9, F8, 2C, 00, 00, 0F, BD, CA, 50, FE, C1, 66, F7, D1, 48, 8D, 8E, B0, 58, 69, 81, 66, 0F, A4, E9, 08, 48, 89, D9, F9, F9, 48, 83, EC, 20, E9, F9, BE, FF, FF, E9, 42, DE, FF, FF, E9, D7...
 
[+]

Packer / compiler:
Xtreme-Protector v1.05

Code size:
2.5 MB (2,630,656 bytes)

Scan 55b2ca7c3cfbc3082340e95f9497606623ac3e39 - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.