home

npsf_bes.dll

Módulo de Proteção - Banese (Banco do Estado de Sergipe)

BANCO DO ESTADO DE SERGIPE SA

It is installed within the Mozilla Firefox web browser as an extension/plugin as ‘gastecnologia.com.br/sf/bes’.
Publisher:
GAS Tecnologia  (signed by BANCO DO ESTADO DE SERGIPE SA)

Product:
Módulo de Proteção - Banese (Banco do Estado de Sergipe)

Description:
Internet Banking Helper

Version:
3.4.3.1

MD5:
2b612ec80f2025ca646f863fb081b7db

SHA-1:
c956e180795bea3a0bbbe3652a2f56d6bf4a652d

SHA-256:
b097fa59fc8751cf4b5896fe3b59dcd7f12ace4a6af11fe9f9465cb35da300f7

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 7:15:06 PM UTC  (today)

File size:
1.9 MB (1,970,400 bytes)

Product version:
3.4.3.1

Copyright:
Copyright 2013 GAS Tecnologia

Original file name:
npsf_bes.dll

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\gas tecnologia\gbbd\npsf_bes.dll

Digital Signature
Signed by:
BANCO DO ESTADO DE SERGIPE SA

Authority:
GlobalSign nv-sa

Valid from:
6/14/2013 3:23:56 PM

Valid to:
6/15/2014 3:23:56 PM

Subject:
CN=BANCO DO ESTADO DE SERGIPE SA, O=BANCO DO ESTADO DE SERGIPE SA, L=ARACAJU, S=SERGIPE, C=BR

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11216F0E7F2E4F8D8CA97F47D454F1C17CBC

File PE Metadata
Compilation timestamp:
9/5/2013 11:02:20 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
11.0

CTPH (ssdeep):
49152:MR1LLY77iSHMkWGonzS4G6N/kZc5YAb0HgxFSZmOFVTAlOH:W9FtdN/D1gH+sZmWsw

Entry address:
0x498D87

Entry point:
60, C7, 44, 24, 1C, 5D, 90, DA, C8, 60, C6, 44, 24, 08, 14, 66, 89, 3C, 24, C7, 44, 24, 38, D8, C7, 9F, 8C, 9C, C6, 44, 24, 04, 42, FF, 34, 24, 9C, 8D, 64, 24, 44, E9, EA, 25, 03, 00, 00, 00, 53, 65, 74, 46, 69, 6C, 65, 53, 65, 63, 75, 72, 69, 74, 79, 41, 00, 85, 91, 53, D4, 94, 2C, 6D, 0A, 8D, AD, 05, D8, F3, 7F, B1, 1A, 5F, 62, A4, 8B, D3, B8, 7C, F3, 2E, EB, 8D, B1, 72, 45, 1C, 61, 3A, F2, B4, B0, 72, 6A, AE, CE, 8A, 2D, A7, EC, DD, A9, DC, 24, 5F, E4, 4B, 17, D6, 9E, 1B, C6, 9A, 94, 0A, 19, 03, 48, EA...
 
[+]

Code size:
1.6 MB (1,723,392 bytes)

Mozilla Plugin
Name:
gastecnologia.com.br/sf/bes


Scan npsf_bes.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.