babylon.exe

Babylon Client

Babylon Ltd.

This is part of the Babylon web browser toolbar and extension that will modify the browser's default search provider, DNS, and home page functions. The application babylon.exe, “Babylon Information Tool” by Babylon has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. This file is typically installed with the program Babylon by Babylon Ltd which is a potentially unwanted software program. This will display context specific advertisements in the browser as well as attempt to modify the browser's search provider.
Publisher:
Babylon Ltd.  (signed and verified)

Product:
Babylon Client

Description:
Babylon Information Tool

Version:
9.0.4.13

MD5:
52054888abb60d4e634765847b2d2558

SHA-1:
7977012986349dc87b5de686e0c5d76dcbbda47d

SHA-256:
5e40f19d22dc9207501209f899d91f6664a5d0e02ae2b51085a4614ea7f5525e

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
10/31/2024 10:17:42 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Babylon (M)
17.2.23.16

File size:
3 MB (3,189,360 bytes)

Product version:
9.0.4.13

Copyright:
Copyright © Babylon Ltd. 1997-2012

Original file name:
babylon.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\data\dic\babylon\babylon9\! babylon ok\babylon.exe

Digital Signature
Signed by:

Authority:
Thawte, Inc.

Valid from:
2/10/2011 9:00:00 AM

Valid to:
3/9/2012 8:59:59 AM

Subject:
CN=Babylon Ltd., O=Babylon Ltd., L=Or-Yehuda, S=Or-Yehuda, C=IL

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
23EB6FA7C450FB11E23708D04D92DD17

File PE Metadata
Compilation timestamp:
1/23/2012 11:16:42 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

Entry address:
0xBC35F

Entry point:
E8, BA, 13, 01, 00, E9, 78, FE, FF, FF, 8B, FF, 55, 8B, EC, 83, EC, 48, 53, 33, DB, 57, 8B, F8, 89, 5D, F8, 89, 5D, FC, 3B, FB, 75, 22, E8, 75, 07, 00, 00, 53, 53, 53, 53, 53, C7, 00, 16, 00, 00, 00, E8, DA, 0A, 00, 00, 83, C4, 14, 83, CA, FF, 8B, C2, E9, 77, 02, 00, 00, 8B, 47, 14, 99, 8B, C8, 8B, C2, 89, 4D, EC, 83, C1, BB, 89, 45, F0, 83, D0, FF, 56, 3B, C3, 0F, 87, 49, 02, 00, 00, 72, 0C, 81, F9, 08, 04, 00, 00, 0F, 87, 3B, 02, 00, 00, 8B, 47, 10, 3B, C3, 7C, 05, 83, F8, 0B, 7E, 46, 99, 6A, 0C, 59, F7...
 
[+]

Entropy:
6.2780

Code size:
2.2 MB (2,328,576 bytes)

The file babylon.exe has been discovered within the following program.

Babylon  by Babylon Ltd
Babylon is a computer dictionary and translation program, developed by Babylon Ltd. Babylon's translation software prompts to add the Babylon Toolbar, identified as a browser hijacker. The toolbar also comes bundled as an add-on with other software downloads.
www.babylon.com/products/babylon
67% remove it
 
Powered by Should I Remove It?

Remove babylon.exe - Powered by Reason Core Security