» gbmzh_uni.dll
Overview
Analysis
File Details

gbmzh_uni.dll

GBBD Banco Itau Unibanco

BANCO ITAU S/A

It is installed within the Mozilla Firefox web browser as part of an addin/plugin.

File name:

gbmzh_uni.dll

Publisher:

GAS Tecnologia (signed by BANCO ITAU S/A)

Product:

GBBD Banco Itau Unibanco

Description:

Interceptador de eventos

Version:

2.6.4

MD5:

64079868da8ab52843c4eefbbbead2f1

SHA-1:

b5fd0fee006ec34d8b0b563f15490696849cd36b

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/26/2024 7:22:24 AM UTC (today)

File size:

1.7 MB (1,774,536 bytes)

Product version:

2.6.4

Original file name:

gbmzh.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Documents and Settings\{user}\AppData\mozilla\firefox\profiles\41a66e7e5ee1\extensions\{87f8774f-b485-47e2-a755-a40a8a5e8873}-trash\components\gbmzh_uni.dll

Digital Signature

Signed by:

BANCO ITAU S/A

Authority:

VeriSign, Inc.

Valid from:

6/9/2009 8:00:00 PM

Valid to:

6/9/2012 7:59:59 PM

Subject:

CN=BANCO ITAU S/A, OU=DIOTI - Superintendencia de Continuidade de Negocios, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=BANCO ITAU S/A, L=Sao Paulo, S=Sao Paulo, C=BR

Issuer:

CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

4B18AEC7FDBB4EBDA6D39194D559C959

File PE Metadata

Compilation timestamp:

10/10/2011 11:12:31 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

49152:RzoZZeVuqqU/89Sy4JgLIjHsA6xpBm4+mQiY:Rs3qd/8ISLIxIpJ+vV

Entry address:

0x3DC913

Entry point:

56, E9, CE, FA, F2, FF, 28, 14, 79, FB, 62, 24, 70, 6F, 02, 71, 7F, A9, CB, 69, 94, DA, 89, F8, E6, 74, A5, 1E, 01, 00, 1E, A6, 9E, 71, B3, 17, E0, AD, 19, 46, 6A, E6, EE, EB, 93, EE, 60, BE, 1B, 18, 03, 12, 2D, 53, F8, 9C, BF, 49, 58, 38, 72, 92, BA, 3F, 8E, E7, DF, FE, D4, 11, A5, EC, 94, A1, 8C, 2E, DF, EC, EF, 78, BE, A5, A3, 5D, 6C, 80, 8C, 43, 45, 2A, A2, 64, AD, 11, 5B, 1D, 20, 3C, A3, DF, A5, 9A, 16, 6B, 6F, 6B, ED, FC, D5, BA, 62, BF, AA, 5F, 49, 54, 62, 30, 4A, E9, 83, 96, 08, 3B, C1, D0, 6C, 29... 
[+]

Code size:

1.6 MB (1,655,808 bytes)

Scan gbmzh_uni.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.