» gbmzh_uni.dll
Overview
Analysis
File Details

gbmzh_uni.dll

GBBD Banco Itau Unibanco

BANCO ITAU S/A

It is installed within the Mozilla Firefox web browser as part of an addin/plugin.

File name:

gbmzh_uni.dll

Publisher:

GAS Tecnologia (signed by BANCO ITAU S/A)

Product:

GBBD Banco Itau Unibanco

Description:

Interceptador de eventos

Version:

2.3.5.36

MD5:

1481f2d5b71b99a41e16434dc38d0ef2

SHA-1:

891f7fcd3343991407d6e8fbc271ba37c8ec86b6

SHA-256:

44bc4607730fc3236844ac5a0eab5a14b4e8fcea8ee00431957469aaf0a41d5f

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/18/2024 7:14:21 PM UTC (today)

File size:

1.6 MB (1,727,392 bytes)

Product version:

2.3.5.36

Original file name:

gbmzh.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\users\{user}\appdata\roaming\mozilla\firefox\profiles\{user}.default\extensions\{87f8774f-b485-47e2-a755-a40a8a5e8873}\components\gbmzh_uni.dll

Digital Signature

Signed by:

BANCO ITAU S/A

Authority:

VeriSign, Inc.

Valid from:

6/9/2009 9:00:00 PM

Valid to:

6/9/2012 8:59:59 PM

Subject:

CN=BANCO ITAU S/A, OU=DIOTI - Superintendencia de Continuidade de Negocios, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=BANCO ITAU S/A, L=Sao Paulo, S=Sao Paulo, C=BR

Issuer:

CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

4B18AEC7FDBB4EBDA6D39194D559C959

File PE Metadata

Compilation timestamp:

5/17/2011 3:52:33 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

49152:92mMIIEi7zYwImeIaBySGzQZCDnF3jy+Q7uS7i:9FRI9nuIzkQ5QqP

Entry address:

0x30239D

Entry point:

0F, 8F, A5, 60, 0D, 00, 68, 96, 76, D7, 0C, E9, 6F, ED, FF, FF, AF, ED, 1B, 06, 06, 97, 35, 21, 6A, 2A, 3E, 4C, 59, E7, 95, 82, B0, FD, 2B, B8, 25, 92, 9D, C8, 2A, 8D, 29, DB, B9, 9F, E8, E7, 26, 72, 6C, CF, D2, EC, F4, DF, 71, 4A, BD, 75, D5, A0, 0A, 8B, EA, BE, 27, 98, 10, CD, A8, 4E, 3F, 7E, 32, C7, EF, 46, A1, CE, 83, 35, BB, D8, 0F, 2B, 6B, 98, B2, 20, DE, 48, 55, 3D, 5A, 70, 1B, E2, FD, 4B, 71, 5C, 28, 88, D8, 1D, 72, 43, 0C, 75, 9E, 07, F0, F9, C4, CD, 37, 81, 4C, 76, 63, 3F, F0, AF, E4, 2A, 27, E8... 
[+]

Code size:

1.6 MB (1,640,960 bytes)

Scan gbmzh_uni.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.