home

npsf_amz_64.dll

Módulo de Proteção - Banco da Amazonia

Banco da Amazonia SA

Publisher:
GAS Tecnologia  (signed by Banco da Amazonia SA)

Product:
Módulo de Proteção - Banco da Amazonia

Description:
Internet Banking Helper

Version:
3.10.0.1

MD5:
95977a0cd222bc5a7929399c7e82c1d4

SHA-1:
11ed25491deda48c4eddb69712e8616bc90bc32d

SHA-256:
ca95f4424a0218d3c35723280fd0ed124da8fbe7657f49c78ca221a0a75f2147

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
7/13/2025 11:55:37 PM UTC  (a few moments ago)

File size:
4.2 MB (4,408,192 bytes)

Product version:
3.10.0.1

Copyright:
Copyright 2014 GAS Tecnologia

Original file name:
npsf_amz_64.dll

File type:
Dynamic link library (Win64 DLL)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\gas tecnologia\gbbd\npsf_amz_64.dll

Digital Signature
Signed by:
Banco da Amazonia SA

Authority:
Thawte, Inc.

Valid from:
4/20/2014 8:00:00 PM

Valid to:
4/20/2016 7:59:59 PM

Subject:
CN=Banco da Amazonia SA, O=Banco da Amazonia SA, L=Belem, S=Para, C=BR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
26DCF7FF21AA37143499184F574C664A

File PE Metadata
Compilation timestamp:
6/30/2014 12:36:17 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows Console

Linker version:
11.0

CTPH (ssdeep):
49152:bCfnG4+RK6/vKz2G2QgF4UP6BFnfFH3RrO7uUCcdUtlrTdYjVYjYKQrXKno6pe:qsdYhQjR6pe

Entry address:
0x3F8084

Entry point:
E9, D5, 82, 00, 00, 0F, 82, A2, D3, FF, FF, 66, 0F, A3, D2, F9, F8, 80, 7F, FF, 00, E9, 27, BB, FF, FF, E9, F3, C5, FF, FF, 00, 00, 53, 65, 74, 46, 6F, 63, 75, 73, 00, 2C, 30, F9, F5, 3C, 09, E9, 89, 64, 00, 00, 0F, 84, 84, CD, FF, FF, 66, C1, F9, 0F, 48, 01, C2, 80, E9, FF, FE, C9, 80, D9, 79, 8B, 8E, 8C, 00, 00, 00, F5, E9, 61, FF, FF, FF, 00, 00, 56, 69, 72, 74, 75, 61, 6C, 50, 72, 6F, 74, 65, 63, 74, 00, 00, 00, 53, 77, 69, 74, 63, 68, 54, 6F, 54, 68, 72, 65, 61, 64, 00, E9, DE, BF, FF, FF, E9, 1B, CF...
 
[+]

Entropy:
6.5008

Packer / compiler:
Xtreme-Protector v1.05

Code size:
2.5 MB (2,619,904 bytes)

Scan npsf_amz_64.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.