» tmp00000002709474bcbacf0202
Overview
Analysis
File Details

tmp00000002709474bcbacf0202

Gbp Service

BANCO SANTANDER BRASIL S.A.

File name:

Publisher:

BANCO SANTANDER BRASIL S.A. (signed and verified)

Product:

Gbp Service

Description:

G-Buster Browser Defense - Service

Version:

2.3.1.0

MD5:

3cf7e0a76285e3b96ca12069f6f82d34

SHA-1:

5dc88ff6e38cd5fec1fbcea6d5d8bdb010c84b8a

SHA-256:

5b38dacbc4850610a643e5252ba75c73a24ebd33d21a4f7c7277cc964fd0d2e0

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/26/2024 1:47:54 AM UTC (today)

File size:

512 KB (524,288 bytes)

Product version:

2.3.1.0

Trademarks:

GbpSv

Original file name:

GbpSv.exe

Language:

Brazilian Portuguese

Common path:

C:\windows\temp\tmp00000002709474bcbacf0202

Digital Signature

Signed by:

BANCO SANTANDER BRASIL S.A.

Authority:

VeriSign, Inc.

Valid from:

8/30/2011 9:00:00 PM

Valid to:

8/30/2013 8:59:59 PM

Subject:

CN=BANCO SANTANDER BRASIL S.A., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=BANCO SANTANDER BRASIL S.A., L=SAO PAULO, S=SAO PAULO, C=BR

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

253059D43D8AE55665C6D9BF9A92104F

File PE Metadata

Compilation timestamp:

10/29/2011 12:31:43 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

3072:dXfOXWm+0+Sy/PCD/Zj7bgsCg7rKkY2vKCefKyCdJnGfkwi/GbNYcopsr+LEuTn1:dvOmu3nZEsCZkzyzKJlXObqcGBLhn1

Entry address:

0x24650

Entry point:

B8, 54, 1D, 48, 00, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, 87, 1A, A4, D9, 7A, D9, A8, 8B, 5D, B0, 65, CC, F7, 30, D3, 6E, CB, CF, FC, E5, 40, B6, 89, 11, 23, 0F, A7, 98, 94, 8B, 41, FA, CE, DD, EE, AE, 6D, F7, AA, 6E, 27, 5C, 89, 88, 33, DD, BE, 02, F2, 52, 1B, F0, 62, 12, C6, 2B, 52, 1E, 00, 02, 47, E8, 6F, 9B, F8, 34, FD, 18, 38, 38, A3, D4, FA, C4, 7C, 41, A8, 82, B2, E6, 78, A9, 65, 8F, E2, A9, 8B, AF, 74, 28, 56, 12, 88... 
[+]

Packer / compiler:

PECompact v2

Code size:

355 KB (363,520 bytes)

Scan tmp00000002709474bcbacf0202 - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.