home

npsf_bes_64.dll

Módulo de Proteção - Banese (Banco do Estado de Sergipe)

BANCO DO ESTADO DE SERGIPE S/A

Publisher:
GAS Tecnologia  (signed by BANCO DO ESTADO DE SERGIPE S/A)

Product:
Módulo de Proteção - Banese (Banco do Estado de Sergipe)

Description:
Internet Banking Helper

Version:
3.7.1.1

MD5:
4357862fbe48a1bed97876c698c1188c

SHA-1:
f0f1f8104c33989e5fd71876b4e2e110148e3a80

SHA-256:
2025d3af7923c6703092330a6e97ae37ca63569c50d5e33550a59debb06be5d3

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/30/2024 9:54:28 PM UTC  (today)

File size:
4 MB (4,242,824 bytes)

Product version:
3.7.1.1

Copyright:
Copyright 2013 GAS Tecnologia

Original file name:
npsf_bes_64.dll

File type:
Dynamic link library (Win64 DLL)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\gas tecnologia\gbbd\npsf_bes_64.dll

Digital Signature
Signed by:
BANCO DO ESTADO DE SERGIPE S/A

Authority:
GlobalSign nv-sa

Valid from:
6/4/2014 5:26:42 PM

Valid to:
6/5/2015 5:26:42 PM

Subject:
CN=BANCO DO ESTADO DE SERGIPE S/A, OU=TI, O=BANCO DO ESTADO DE SERGIPE S/A, L=Aracaju, S=Sergipe, C=BR

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11211A93CA6AB8C33511EB8D399E1D7299AD

Registration
CLSIDs:
{0783EB25-59F8-4F02-B6B0-F1D4349F0018}, {0783EB25-59F8-4F02-B6B1-F1D4349F0018}

ProgIDs:
gas.ibh.bes.1, gas.events.bes.1

COM registered:
Yes

File PE Metadata
Compilation timestamp:
12/11/2013 10:16:05 AM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows Console

Linker version:
11.0

CTPH (ssdeep):
49152:FNErHmha99bl4Q3hc4pq+AbOmzuh/u6oQLDbSdwTTA4D7mO104whmfJChG7v6pb:1Cq+5H7mDSMh+6pb

Entry address:
0x3DEB88

Entry point:
E9, 3D, 14, 00, 00, E9, 75, D5, FF, FF, 00, 00, 49, 6E, 74, 65, 72, 6E, 65, 74, 43, 72, 61, 63, 6B, 55, 72, 6C, 41, 00, 00, 00, 43, 72, 65, 61, 74, 65, 57, 69, 6E, 64, 6F, 77, 45, 78, 57, 00, 00, 00, 43, 72, 65, 61, 74, 65, 46, 69, 6C, 65, 4D, 61, 70, 70, 69, 6E, 67, 57, 00, 0F, 84, 91, 23, 00, 00, 66, FF, C1, 66, 0F, B3, F9, 66, 0F, A5, D9, 48, 01, C2, 66, 0F, BC, C8, F9, 48, 8D, 8E, 6B, 69, 9A, 63, 8B, 8E, 8C, 00, 00, 00, 66, 0F, A3, F4, 48, 01, D1, 66, 0F, A3, D0, 48, 89, 4D, F0, D2, F1, 48, C1, C9, 1E...
 
[+]

Packer / compiler:
Xtreme-Protector v1.05

Code size:
2.4 MB (2,548,736 bytes)

Scan npsf_bes_64.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.