» gbmzh_scd.dll
Overview
Analysis
File Details

gbmzh_scd.dll

GBBD Sicredi

Confederacao Interestadual das Cooperativas Ligadas ao Sicredi

It is installed within the Mozilla Firefox web browser as part of an addin/plugin.

File name:

gbmzh_scd.dll

Publisher:

GAS Tecnologia (signed by Confederacao Interestadual das Cooperativas Ligadas ao Sicredi)

Product:

GBBD Sicredi

Description:

Interceptador de eventos

Version:

2.12.1

MD5:

509db667a05cc9923a6f178c97fcf02a

SHA-1:

d5fd53eddc2c93cae61b032a10aee394c2f1c88e

SHA-256:

888a1050a1aa0a770bca961dcf7fe4d08c4ec07888d775a3e8fa88db7017a353

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/19/2024 5:29:47 AM UTC (today)

File size:

1.7 MB (1,809,496 bytes)

Product version:

2.12.1

Original file name:

gbmzh.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\users\{user}\appdata\roaming\mozilla\firefox\profiles\{user}.default\extensions\{87f8774f-b485-47e2-a755-a40a8a5e8871}\components\gbmzh_scd.dll

Digital Signature

Signed by:

Confederacao Interestadual das Cooperativas Ligadas ao Sicredi

Authority:

VeriSign, Inc.

Valid from:

2/11/2012 10:00:00 PM

Valid to:

3/13/2014 8:59:59 PM

Subject:

CN=Confederacao Interestadual das Cooperativas Ligadas ao Sicredi, OU=Confederacao Interestadual das Cooperativas Ligadas ao Sicredi, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Confederacao Interestadual das Cooperativas Ligadas ao Sicredi, L=Porto Alegre, S=Rio Grande do Sul, C=BR

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

1B70095AE7B122EDED713F1546A12C79

File PE Metadata

Compilation timestamp:

6/6/2012 9:40:17 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

49152:9SlCn/jd9CSmqff9bFWCP/B2il65IrP8d:aC/jGStff95WOB2UkcPC

Entry address:

0x3BF4C1

Entry point:

E9, 78, 89, F5, FF, 05, 48, 44, B3, E7, 3B, 6D, 3C, 0A, 28, D7, 62, F9, 3D, 06, 50, B7, 62, BD, 48, 22, 23, 18, 12, DD, 44, E7, 7F, A8, 7D, B6, A4, AD, CF, B2, B2, F1, 76, 43, 48, ED, 2A, FF, 56, 5A, 1A, A0, E7, DE, 96, 1D, 36, 53, FD, 49, 9D, 55, 33, A5, 57, B7, C4, AF, F8, B9, 18, 20, EA, 3F, DE, CA, 8D, CE, 23, 4E, 31, 33, FA, 8E, C4, 2B, 8C, F0, D4, A7, 8B, 0A, D6, 17, 74, F6, 78, BD, 13, 45, EC, 5F, FB, 88, EF, 9C, E3, B8, AB, 9A, 1A, 3B, 95, 96, 84, F1, BF, 8E, 32, 59, 12, 61, 0E, 6D, D6, 8D, EE, D5... 
[+]

Packer / compiler:

Xtreme-Protector v1.05

Code size:

1.6 MB (1,712,640 bytes)

Scan gbmzh_scd.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.