home

bscertsync.exe

Cartão Múltiplo Banrisul

Banrisul S.A.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘CSPBanrisulMultiploCertSync’.
Publisher:
Banrisul S.A.  (signed and verified)

Product:
Cartão Múltiplo Banrisul

Description:
Banrisul Certificate Synchronizer

Version:
1.2.0.974

MD5:
724619ac96cee6b93197ef7a23fcd7ec

SHA-1:
90b03109b5825d5e387dd3bda8f8a3aec52fcddd

SHA-256:
1d9a1fb4aad4eefc0341d13d243deed447bb951cf6e9989c19e021d6f9eb8921

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 11:22:57 PM UTC  (a few moments ago)

File size:
99.5 KB (101,928 bytes)

Product version:
1.2.0.974

Copyright:
Copyright (C) 2007-2011 Banrisul S.A.

Original file name:
CERTSYNC.EXE

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\csp banrisul multiplo\bscertsync.exe

Digital Signature
Signed by:
Banrisul S.A.

Authority:
VeriSign, Inc.

Valid from:
7/22/2013 9:00:00 PM

Valid to:
10/21/2016 9:59:59 PM

Subject:
CN=Banrisul S.A., OU=Unidade de Seguranca de TI, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Banrisul S.A., L=Porto Alegre, S=Rio Grande do Sul, C=BR

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
5F61814B34C21A0E5729DF63DA8977C4

File PE Metadata
Compilation timestamp:
11/28/2011 1:53:42 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
1536:zt0Y8RhrtEoC5D9QKqYSgnZvf2E3k44RoQgStNCoc:GYpoSpvYRZtNCoc

Entry address:
0x4F59

Entry point:
E8, 69, 51, 00, 00, E9, 16, FE, FF, FF, 55, 8B, EC, 83, EC, 04, 89, 7D, FC, 8B, 7D, 08, 8B, 4D, 0C, C1, E9, 07, 66, 0F, EF, C0, EB, 08, 8D, A4, 24, 00, 00, 00, 00, 90, 66, 0F, 7F, 07, 66, 0F, 7F, 47, 10, 66, 0F, 7F, 47, 20, 66, 0F, 7F, 47, 30, 66, 0F, 7F, 47, 40, 66, 0F, 7F, 47, 50, 66, 0F, 7F, 47, 60, 66, 0F, 7F, 47, 70, 8D, BF, 80, 00, 00, 00, 49, 75, D0, 8B, 7D, FC, 8B, E5, 5D, C3, 55, 8B, EC, 83, EC, 10, 89, 7D, FC, 8B, 45, 08, 99, 8B, F8, 33, FA, 2B, FA, 83, E7, 0F, 33, FA, 2B, FA, 85, FF, 75, 3C, 8B...
 
[+]

Code size:
52 KB (53,248 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
CSPBanrisulMultiploCertSync

Command:
C:\Program Files\csp banrisul multiplo\bscertsync.exe


Scan bscertsync.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.