» BZbho.dll
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

BZbho.dll

BufferZone

Trustware 101 Ltd.

It is installed within the context of Internet Explore as a BHO (Browser Helper Object) under the name ‘CBZurlmon Object’. This is installed with BufferZone.

File name:

BZbho.dll

Publisher:

Trustware (signed by Trustware 101 Ltd.)

Product:

BufferZone

Description:

BufferZone Trusted Sites Protection

Version:

1.0.0.1

MD5:

67b0a07ac500b7330257262ce541e7ba

SHA-1:

5db8e04c6a5255adfee0789fbf014a87b3e17ab7

SHA-256:

c3e979fcbef498602b636e7179849520e4f0a382eb34fdb71c3ab248b53a2d2b

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/19/2024 1:35:45 AM UTC (today)

File size:

224.2 KB (229,536 bytes)

Product version:

1.0.0.1

Original file name:

BZbho.dll

File type:

Dynamic link library (Win32 DLL)

Language:

French (France)

Common path:

C:\Program Files\bufferzone\bzbho.dll

Digital Signature

Signed by:

Trustware 101 Ltd.

Authority:

GlobalSign nv-sa

Valid from:

10/26/2010 2:00:42 PM

Valid to:

10/27/2011 2:00:40 PM

Subject:

CN=Trustware 101 Ltd., O=Trustware 101 Ltd., L=Tel Aviv, S=Israel, C=IL

Issuer:

CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:

0100000000012BE8657318

Registration

CLSID:

{311BA51F-64F2-439D-9A4A-772373D77312}

ProgID:

BZbho.BZurlmon.1

COM registered:

Yes

File PE Metadata

Compilation timestamp:

4/26/2011 9:02:02 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

7.10

CTPH (ssdeep):

3072:60nybX8+SUrKndXVI+iFNR1K4KujHFER6hyx4wUpR29ZmRPuF74I3zWqsVz2RIKg:i72HI+i91Kruj+R6hyb/Ff3zWzzZKg

Entry address:

0x722C

Entry point:

6A, 0C, 68, B0, AA, 02, 10, E8, B8, 04, 00, 00, 33, C0, 40, 89, 45, E4, 8B, 75, 0C, 33, FF, 3B, F7, 75, 0C, 39, 3D, 04, 01, 03, 10, 0F, 84, B3, 00, 00, 00, 89, 7D, FC, 3B, F0, 74, 05, 83, FE, 02, 75, 31, A1, E4, 19, 03, 10, 3B, C7, 74, 0C, FF, 75, 10, 56, FF, 75, 08, FF, D0, 89, 45, E4, 39, 7D, E4, 0F, 84, 85, 00, 00, 00, FF, 75, 10, 56, FF, 75, 08, E8, 22, FE, FF, FF, 89, 45, E4, 3B, C7, 74, 72, 8B, 5D, 10, 53, 56, FF, 75, 08, E8, F3, AC, FF, FF, 89, 45, E4, 83, FE, 01, 75, 0E, 3B, C7, 75, 0A, 53, 57, FF... 
[+]

Entropy:

6.2814

Developed / compiled with:

Microsoft Visual C++ v7.1

Code size:

164 KB (167,936 bytes)

Internet Explorer BHO

CLSID:

{311BA51F-64F2-439D-9A4A-772373D77312}

CLSID name:

CBZurlmon Object

The file BZbho.dll has been discovered within the following programs.

BufferZone by Trustwave

Publisher's description - “BufferZone works by creating an isolated virtual environment where online apps and other potentially harmful sources can run completely separated from the corporate network and data, neutralizing even threats that seep through other security tiers.”

www.trustware.com

4% remove it

Scan BZbho.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.