home

babylonspacppi.dll

Babylon Ltd.

This is part of the Babylon web browser toolbar and extension that will modify the browser's default search provider, DNS, and home page functions. The module babylonspacppi.dll by Babylon has been detected as adware by 2 anti-malware scanners. This will display context specific advertisements in the browser as well as attempt to modify the browser's search provider.
Publisher:
Babylon Ltd.  (signed and verified)

MD5:
4f1d75e15c14f7d6ffd47c0594b43258

SHA-1:
8beb51516821ffd8026e69f8ca0f0ba2da8147c5

SHA-256:
f957f100bd97f8cd9e6f20a2834a9271818dc837ad04e9cd1c7a79a6510b634f

Scanner detections:
2 / 68

Status:
Adware

Analysis date:
4/25/2024 5:36:40 AM UTC  (today)

Scan engine
Detection
Engine version

Baidu Antivirus
Adware.Win32.Bbylon
4.0.3.141116

Reason Heuristics
PUP.Babylon.O
14.11.16.15

File size:
120.1 KB (122,960 bytes)

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\Program Files\babylon\babylon-pro\utils\babylonspacppi.dll

Digital Signature
Signed by:
Babylon Ltd.

Authority:
Thawte, Inc.

Valid from:
2/12/2014 8:00:00 AM

Valid to:
3/8/2016 7:59:59 AM

Subject:
CN=Babylon Ltd., O=Babylon Ltd., L=Or-Yehuda, S=Or-Yehuda, C=IL

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
4A3CB79EE8B7A32A0263FE5D13CC5291

File PE Metadata
Compilation timestamp:
8/3/2014 8:52:44 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
1536:+7aisN1IhDqPh+OUIsSiwwcg/50W6oVmOS4DdiIOv5MHzf:YSmpqM2Sw40WrpS4Ddirv5MD

Entry address:
0x6EF5

Entry point:
8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 00, 44, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, 8B, FF, 55, 8B, EC, 83, EC, 20, 8B, 45, 08, 56, 57, 6A, 08, 59, BE, 80, 12, 01, 10, 8D, 7D, E0, F3, A5, 89, 45, F8, 8B, 45, 0C, 5F, 89, 45, FC, 5E, 85, C0, 74, 0C, F6, 00, 08, 74, 07, C7, 45, F4, 00, 40, 99, 01, 8D, 45, F4, 50, FF, 75, F0, FF, 75, E4, FF, 75, E0, FF, 15, 1C, 11, 01, 10, C9, C2, 08, 00, 8B, FF, 55, 8B, EC, 51, 53, 8B, 45, 0C, 83, C0, 0C, 89, 45, FC, 64...
 
[+]

Entropy:
6.0308

Code size:
63.5 KB (65,024 bytes)

Remove babylonspacppi.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.