» gbmzh_uni.dll
Overview
Analysis
File Details

gbmzh_uni.dll

GBBD Banco Itau Unibanco

BANCO ITAU S/A

It is installed within the Mozilla Firefox web browser as part of an addin/plugin.

File name:

gbmzh_uni.dll

Publisher:

GAS Tecnologia (signed by BANCO ITAU S/A)

Product:

GBBD Banco Itau Unibanco

Description:

Interceptador de eventos

Version:

2.12.1

MD5:

d52d3feb062bff0a8e5ceea4662b39ce

SHA-1:

4a8db7dc2a552db2720d428470d6b0f5c753c512

SHA-256:

2e6230431476bd59008fe44081f167f74f7ea2cd46a986334927e533289245ac

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/24/2024 8:48:09 AM UTC (today)

File size:

1.8 MB (1,839,264 bytes)

Product version:

2.12.1

Original file name:

gbmzh.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\users\{user}\appdata\roaming\mozilla\firefox\profiles\{user}.default\extensions\{87f8774f-b485-47e2-a755-a40a8a5e8873}\components\gbmzh_uni.dll

Digital Signature

Signed by:

BANCO ITAU S/A

Authority:

VeriSign, Inc.

Valid from:

6/4/2012 9:00:00 PM

Valid to:

6/9/2013 8:59:59 PM

Subject:

CN=BANCO ITAU S/A, OU=DIOTI - Superintendencia de Continuidade de Negocios, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=BANCO ITAU S/A, L=Sao Paulo, S=Sao Paulo, C=BR

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

6A5F64A01854E848E5D9116C3FF88937

File PE Metadata

Compilation timestamp:

7/18/2012 8:34:05 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

49152:kCk0kUFz9D4MdRAPG5kquEPeRZbDhvyRiSW7iAb:tlkUL3dRbRqyy

Entry address:

0x48D86A

Entry point:

60, E9, 2D, 2A, 00, 00, D2, 00, F6, 00, 36, AA, AC, 5F, 49, 67, 31, 9D, DC, C8, 33, 1A, CF, F7, A0, 59, 50, 4B, CB, 66, A8, 8F, 46, F6, 1F, 60, D7, 0E, B8, EA, BD, BE, 67, 11, E3, E1, FD, FD, 90, E2, B5, E2, 8C, E2, 8E, 90, CB, 5C, 30, 58, 4D, C2, F7, C7, 1E, 88, 85, B3, AE, D3, 86, 15, 72, 50, CB, 8F, 3A, 32, 66, 05, D7, CF, C6, C3, 4D, 91, 3C, F2, 2A, 15, AE, BE, 1B, A0, D2, BF, D8, 88, 0A, 09, 12, 78, 09, AB, 08, 26, E7, 83, 14, 74, FD, 49, 6D, EF, 2A, 57, 4C, 3E, AD, 57, EB, 98, 77, 1B, E7, 18, E0, 0C... 
[+]

Packer / compiler:

ASProtect v1.1, 0xBRS

Code size:

1.6 MB (1,712,640 bytes)

Scan gbmzh_uni.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.