home

npsf_amz_64.dll

Módulo de Proteção - Banco da Amazonia

Banco da Amazonia SA

Publisher:
GAS Tecnologia  (signed by Banco da Amazonia SA)

Product:
Módulo de Proteção - Banco da Amazonia

Description:
Internet Banking Helper

Version:
3.10.0.1

MD5:
9f710906ee092d5ee187021bf18a6182

SHA-1:
90fe31f50c5d3ba942fb27778c282d1e6a41e9b3

SHA-256:
9c897bc307a21160ba7532669723fbc88ac36b36e46f82ef6615bb03cb6a8a44

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/28/2024 9:47:51 PM UTC  (today)

File size:
4.2 MB (4,410,952 bytes)

Product version:
3.10.0.1

Copyright:
Copyright 2014 GAS Tecnologia

Original file name:
npsf_amz_64.dll

File type:
Dynamic link library (Win64 DLL)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\gas tecnologia\gbbd\npsf_amz_64.dll

Digital Signature
Signed by:
Banco da Amazonia SA

Authority:
Thawte, Inc.

Valid from:
4/20/2014 9:00:00 PM

Valid to:
4/20/2016 8:59:59 PM

Subject:
CN=Banco da Amazonia SA, O=Banco da Amazonia SA, L=Belem, S=Para, C=BR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
26DCF7FF21AA37143499184F574C664A

Registration
CLSIDs:
{0783EB25-59F8-4F02-B6B0-F1D4349F0002}, {0783EB25-59F8-4F02-B6B1-F1D4349F0002}

ProgIDs:
gas.ibh.amz.1, gas.events.amz.1

COM registered:
Yes

File PE Metadata
Compilation timestamp:
6/30/2014 1:36:17 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows Console

Linker version:
11.0

CTPH (ssdeep):
49152:qCfnG4+RK6/vKz2G2QgF4UP6BFnfFH3RrO7uUCcdUtlrTdYjVYjYKQrXKno6pn:nsdYhQjR6pn

Entry address:
0x3F8084

Entry point:
E9, D5, 82, 00, 00, 0F, 82, A2, D3, FF, FF, 66, 0F, A3, D2, F9, F8, 80, 7F, FF, 00, E9, 27, BB, FF, FF, E9, F3, C5, FF, FF, 00, 00, 53, 65, 74, 46, 6F, 63, 75, 73, 00, 2C, 30, F9, F5, 3C, 09, E9, 89, 64, 00, 00, 0F, 84, 84, CD, FF, FF, 66, C1, F9, 0F, 48, 01, C2, 80, E9, FF, FE, C9, 80, D9, 79, 8B, 8E, 8C, 00, 00, 00, F5, E9, 61, FF, FF, FF, 00, 00, 56, 69, 72, 74, 75, 61, 6C, 50, 72, 6F, 74, 65, 63, 74, 00, 00, 00, 53, 77, 69, 74, 63, 68, 54, 6F, 54, 68, 72, 65, 61, 64, 00, E9, DE, BF, FF, FF, E9, 1B, CF...
 
[+]

Packer / compiler:
Xtreme-Protector v1.05

Code size:
2.5 MB (2,619,904 bytes)

Scan npsf_amz_64.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.