home

BabylonIEPI.dll

Babylon IE Addin

Babylon Ltd.

This is part of the Babylon web browser toolbar and extension that will modify the browser's default search provider, DNS, and home page functions. The module BabylonIEPI.dll, “Babylon Internet Explorer Addin” by Babylon has been detected as adware by 5 anti-malware scanners. It is installed within the context of Internet Explore as a BHO (Browser Helper Object) under the name ‘Babylon IE plugin’. This will display context specific advertisements in the browser as well as attempt to modify the browser's search provider.
Publisher:
Babylon Ltd.  (signed and verified)

Product:
Babylon IE Addin

Description:
Babylon Internet Explorer Addin

Version:
10.3.0.0

MD5:
69b32ddf86eeacd35d8bfac30c397522

SHA-1:
6072399631574fee81c656d743bf68299c8f5775

SHA-256:
aa40001e468ef5691a59bb723335ad4e5b6b0fce0379213f18ee03b4152a505b

Scanner detections:
5 / 68

Status:
Adware

Analysis date:
4/19/2024 10:09:30 PM UTC  (today)

Scan engine
Detection
Engine version

Baidu Antivirus
Adware.Win32.Bbylon
4.0.3.15921

Boost by Reason
Optional.Babylon.BHO
188838

ESET NOD32
Win32/Toolbar.Babylon (variant)
9.10967

Reason Heuristics
PUP.Babylon (M)
15.9.21.16

Trend Micro House Call
Suspicious_GEN.F47V1218
7.2.264

File size:
299.1 KB (306,256 bytes)

Product version:
10.3.0.0

Copyright:
Copyright © Babylon Ltd. 1997-2015

Original file name:
BabylonIEPI.dll

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\Program Files\babylon\babylon-pro\utils\babyloniepi.dll

Digital Signature
Signed by:
Babylon Ltd.

Authority:
Thawte, Inc.

Valid from:
2/11/2014 7:00:00 PM

Valid to:
3/7/2016 6:59:59 PM

Subject:
CN=Babylon Ltd., O=Babylon Ltd., L=Or-Yehuda, S=Or-Yehuda, C=IL

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
4A3CB79EE8B7A32A0263FE5D13CC5291

Registration
CLSID:
{9CFACCB6-2F3F-4177-94EA-0D2B72D384C1}

ProgID:
BabylonIEPI.BabylonIEBho.1

COM registered:
Yes

File PE Metadata
Compilation timestamp:
12/2/2014 5:31:07 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
6144:mMRQI4h/OX6YpyQ44f7QqVRbEAGNPIL88u:mMRQjOoQ4KkqrbEAqPUu

Entry address:
0x22285

Entry point:
8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 30, 84, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, 68, 00, EE, 01, 10, 64, FF, 35, 00, 00, 00, 00, 8B, 44, 24, 10, 89, 6C, 24, 10, 8D, 6C, 24, 10, 2B, E0, 53, 56, 57, A1, FC, 2F, 04, 10, 31, 45, FC, 33, C5, 50, 89, 65, E8, FF, 75, F8, 8B, 45, FC, C7, 45, FC, FE, FF, FF, FF, 89, 45, F8, 8D, 45, F0, 64, A3, 00, 00, 00, 00, C3, 8B, 4D, F0, 64, 89, 0D, 00, 00, 00, 00, 59, 5F, 5F, 5E, 5B, 8B, E5, 5D, 51, C3, 50, 64, FF, 35...
 
[+]

Entropy:
6.3261

Code size:
205.5 KB (210,432 bytes)

Internet Explorer BHO
Display name:
Babylon IE plugin

CLSID:
{9CFACCB6-2F3F-4177-94EA-0D2B72D384C1}


Remove BabylonIEPI.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.