» gbmzh_uni.dll
Overview
Analysis
File Details

gbmzh_uni.dll

GBBD Banco Itau Unibanco

BANCO ITAU S/A

It is installed within the Mozilla Firefox web browser as part of an addin/plugin.

File name:

gbmzh_uni.dll

Publisher:

GAS Tecnologia (signed by BANCO ITAU S/A)

Product:

GBBD Banco Itau Unibanco

Description:

Interceptador de eventos

Version:

2.12.1

MD5:

616feb284bbea96503f6742157561776

SHA-1:

edc6a8c1d537ff366fe14f8713abc346550e7fa0

SHA-256:

ab5f4bfddbd3603850b25d8d47dd5599c9eb404087621d3bf13bd4a68c53594b

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/25/2024 5:53:22 PM UTC (today)

File size:

1.9 MB (1,941,664 bytes)

Product version:

2.12.1

Original file name:

gbmzh.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\users\{user}\appdata\roaming\mozilla\firefox\profiles\{user}.default\extensions\{87f8774f-b485-47e2-a755-a40a8a5e8873}\components\gbmzh_uni.dll

Digital Signature

Signed by:

BANCO ITAU S/A

Authority:

VeriSign, Inc.

Valid from:

6/4/2012 9:00:00 PM

Valid to:

6/9/2013 8:59:59 PM

Subject:

CN=BANCO ITAU S/A, OU=DIOTI - Superintendencia de Continuidade de Negocios, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=BANCO ITAU S/A, L=Sao Paulo, S=Sao Paulo, C=BR

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

6A5F64A01854E848E5D9116C3FF88937

File PE Metadata

Compilation timestamp:

5/21/2012 6:36:09 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

49152:MGd6IlaB2x67topaL4MOIzPZj317Kp1yWkKmAY2J0:MIlaB26vL4MT9KP3kKmAb2

Entry address:

0x4F2CB7

Entry point:

60, E8, 9A, F4, E5, FF, 1F, EA, 76, 09, A3, 2F, B8, 01, AB, 4D, F5, A9, 73, 39, E5, 8F, 55, 13, CB, 89, 36, 04, 1F, 12, EE, AE, 95, D8, 94, 5B, 0D, D7, 54, 3F, C2, E2, 70, BB, 39, AC, 6E, E7, FA, 5D, 17, F8, EB, C6, 64, C2, C4, 27, A1, D5, 37, DB, C6, 10, 6A, E6, 77, F7, 69, 02, 72, 2D, 60, BF, 5F, 39, 8B, 90, D5, FF, 4B, A8, 51, E5, 06, 27, 01, 4B, 79, E0, 08, 54, EC, 88, 20, 82, 08, 40, D4, D9, B3, 81, 3B, 8E, 91, 5F, 71, B4, F8, 23, B4, 7B, CD, CC, 69, AD, 39, 9B, BF, 93, 5C, E5, 6D, 5A, 48, 00, B9, 63... 
[+]

Packer / compiler:

ASPack v1.08.04

Code size:

1.6 MB (1,711,616 bytes)

Scan gbmzh_uni.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.