» gbmzh_uni.dll
Overview
Analysis
File Details

gbmzh_uni.dll

GBBD Banco Itau Unibanco

BANCO ITAU S/A

It is installed within the Mozilla Firefox web browser as part of an addin/plugin.

File name:

gbmzh_uni.dll

Publisher:

GAS Tecnologia (signed by BANCO ITAU S/A)

Product:

GBBD Banco Itau Unibanco

Description:

Interceptador de eventos

Version:

2.12.0.8

MD5:

c5abb4af218754fe4f02cefacfd343c5

SHA-1:

12c9a9546bfa88709de8dff907a1c5fa3e203fa9

SHA-256:

1782a056ea8c894be56991f4074958638865f7774e59456e16da77779a54a5ff

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/23/2025 9:21:51 AM UTC (today)

File size:

1.9 MB (1,963,424 bytes)

Product version:

2.12.0.8

Original file name:

gbmzh.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\users\{user}\appdata\roaming\mozilla\firefox\profiles\{user}.default\extensions\{87f8774f-b485-47e2-a755-a40a8a5e8873}\components\gbmzh_uni.dll

Digital Signature

Signed by:

BANCO ITAU S/A

Authority:

VeriSign, Inc.

Valid from:

6/9/2009 9:00:00 PM

Valid to:

6/9/2012 8:59:59 PM

Subject:

CN=BANCO ITAU S/A, OU=DIOTI - Superintendencia de Continuidade de Negocios, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=BANCO ITAU S/A, L=Sao Paulo, S=Sao Paulo, C=BR

Issuer:

CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

4B18AEC7FDBB4EBDA6D39194D559C959

File PE Metadata

Compilation timestamp:

4/25/2012 3:16:08 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

49152:KVLHDaMRYQgbWNG4VanA8LenmsyPwAbRTZo34YEjbq78YKM5Kte:4LeMRYQgbWNVEA8LenCPw8RO3I/YK3M

Entry address:

0x35E1D3

Entry point:

E9, 5A, 93, 0B, 00, 76, 78, B5, D1, A5, 03, 16, 43, 4A, 61, C8, C7, F6, 45, 84, 13, 4A, F1, 98, F8, FD, 56, 9E, 37, F9, 1A, A7, EC, B3, 95, 3E, B1, 85, 0B, 73, 9C, C6, EF, 86, BD, CC, F3, AA, 89, AE, C1, B8, 7F, 29, 7A, 61, 9E, AB, 27, 44, 1E, 6F, 56, 1D, 7D, 5A, 34, 85, B4, 35, 8C, D3, C5, 0B, 7A, F9, D8, 97, 7E, 1D, CC, C3, 00, E7, DE, 9E, 9F, D8, 4B, 93, E1, A4, 56, 8E, A4, D9, 28, 3A, 37, D3, B9, 23, 3A, 8B, 55, A6, A5, 74, 0B, ED, A0, 92, 1F, A4, 6B, B8, 8F, C6, 1F, FC, D2, A5, 03, A1, 1A, 31, 98, BF... 
[+]

Packer / compiler:

Xtreme-Protector v1.05

Code size:

1.6 MB (1,712,640 bytes)

Scan gbmzh_uni.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.