» Boleto.exe
Overview
Analysis
File Details

Boleto.exe

Boleto Expresso

Neo Tecnologia Interativa Ltda

File name:

Boleto.exe

Publisher:

Neo Tecnologia Interativa Ltda (signed and verified)

Product:

Boleto Expresso

Description:

Programa para impressão e gerenciamento de boletos bancários

Version:

2.0.27.0

MD5:

f6bd05309410a6d5572ea9a13a1cc7bf

SHA-1:

56bf1b63c5221fd428c0857df0d67498cab31268

SHA-256:

81d119c0802212194e737b698dc461bc9a7fd691de36d6d35cbbcd98ded03af8

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

5/6/2024 3:54:50 AM UTC (today)

File size:

1.9 MB (2,037,856 bytes)

Product version:

2.0.27.0

Original file name:

Boleto.exe

File type:

Executable application (Win32 EXE)

Language:

Brazilian Portuguese

Common path:

C:\Program Files\neointer\boleto\v2.0\boleto.exe

Digital Signature

Signed by:

Neo Tecnologia Interativa Ltda

Authority:

COMODO CA Limited

Valid from:

6/21/2012 9:00:00 PM

Valid to:

6/22/2014 8:59:59 PM

Subject:

CN=Neo Tecnologia Interativa Ltda, O=Neo Tecnologia Interativa Ltda, STREET="Av. Brig. Faria Lima, 1234 Cj 113", L=São Paulo, S=SP, PostalCode=01451913, C=BR

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

00FEA1DC3BB2654FFB983FF5FA7D18F9A5

File PE Metadata

Compilation timestamp:

6/19/1992 7:22:17 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

49152:2UMsTdb3LEZPinWUthXz3jEz3neC7wDo9o88pk8xt7nUCVjLu:9Ms5TLEZoWUjjjS3n37gpk8xFUCFu

Entry address:

0x1000

Entry point:

68, 01, 10, A3, 00, E8, 01, 00, 00, 00, C3, C3, 6D, 77, 55, 17, 96, 47, 7B, CB, 59, 7F, ED, 17, 2C, 6F, EA, 89, 88, 85, 11, 43, F3, 0B, 29, 7F, A9, 61, 87, 32, F5, 9F, 74, DE, 56, D0, 87, BE, DA, 2C, 50, 22, B6, 86, 95, 14, 74, F8, 94, C2, 1C, 16, C0, F7, 3A, 3B, FE, FD, 21, 41, 02, 7E, FD, 27, E7, 1F, 0B, E8, A6, 09, 56, FD, 2F, 35, 55, 80, AF, 33, 4D, 6A, D9, EF, 69, B7, 5A, 02, 4C, 23, 25, C8, 77, 40, 1B, 38, 65, 22, 94, 43, 3A, 67, 88, 38, D6, 83, 61, 0D, 22, 32, 27, 6F, 64, C1, FE, 8B, 91, A5, 8A, 05... 
[+]

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

4.2 MB (4,357,120 bytes)

Scan Boleto.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.