Should I block it?

No, this file is 100% safe to run.

Additional versions

69127	7.14%
531cc	21.43%
55f4c	7.14%
56680	7.14%
824b5	57.14%

(Note, the developer publishes each variation of this file with the same version, but the hashes are unique.)

PE file structure

Show functions

Import table

kernel32.dll

RaiseException, FlushFileBuffers, CloseHandle, CreateFileW, CompareStringA, GetModuleFileNameA, GetCurrentProcessId, InterlockedDecrement, GetTickCount, InterlockedIncrement, FreeLibrary, GetProcAddress, LoadLibraryA, WriteConsoleW, SetStdHandle, GetStringTypeW, MultiByteToWideChar, LCMapStringW, IsProcessorFeaturePresent, LoadLibraryW, HeapReAlloc, RtlUnwind, GetCurrentThreadId, DecodePointer, GetCommandLineA, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, EncodePointer, TlsAlloc, TlsGetValue, TlsSetValue, TlsFree, GetModuleHandleW, SetLastError, GetLastError, HeapAlloc, HeapFree, Sleep, ExitProcess, SetHandleCount, GetStdHandle, InitializeCriticalSectionAndSpinCount, GetFileType, GetStartupInfoW, DeleteCriticalSection, FreeEnvironmentStringsW, WideCharToMultiByte, GetEnvironmentStringsW, HeapCreate, HeapDestroy, QueryPerformanceCounter, GetSystemTimeAsFileTime, LeaveCriticalSection, EnterCriticalSection, GetCPInfo, GetACP, GetOEMCP, IsValidCodePage, SetFilePointer, WriteFile, GetConsoleCP, GetConsoleMode, HeapSize, GetModuleFileNameW, InitOnceExecuteOnce, LCMapStringEx, OutputDebugStringW, GetModuleHandleExW, GetProcessHeap, GetTickCount64, FlsAlloc, FlsGetValue, FlsSetValue, FlsFree, SetFilePointerEx, LoadLibraryExW

shlwapi.dll

StrCpyNW, StrStrW, StrCmpW, PathFindFileNameA

urlmon.dll

CreateURLMoniker

user32.dll

SendMessageA, CallNextHookEx, GetDlgItemTextW, GetClassNameA, GetWindowTextA, UnhookWindowsHookEx, SetWindowsHookExA

Export table

DllRegisterServer

DllUnregisterServer

hideAction

initShld

releaseShld

wndProc

escortshld.dll

Remove escortshld.dll

MD5:	56680a97162675b2a6394cf309b5e1a7
SHA1:	0d46a97555e7d8fe6a578739eea49c6cef812333
SHA256:	992a1716ab9d3f283c0aeba14d7dfe7900f5f387d24882063899210ac079212c

What is escortshld.dll?

escortshld.dll is an Internet Explorer Toolbar for the Babylon Toolbar. When loaded by IE, it will install a toolbar in the top of your Internet Explore web browser. By installing itself, the toolbar has full access to the a loaded web page's HTML content and knowledge of the URL the user is currently viewing; it can also manipuate these depending on the intended function of the toolbar.

Overview

escortshld.dll is loaded as dynamic link library that runs in the context of a process. It is installed with a couple of know programs including Babylon toolbar published by Babylon Ltd and Babylon toolbar on IE published by Babylon Ltd.

Details

File name:	escortshld.dll
Typical file path:	C:\Program Files\babylontoolbar\babylontoolbar\1.6.4.6\escortshld.dll
Size:	59.5 KB (60,928 bytes)
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
.NET CLR:	No

More details

Programs

The following programs will install this file

Babylon toolbar

Babylon Ltd

67% remove

Babylon Toolbar from Babylon Ltd is a web browser plugin that allows you to get language translations and definitions through an installed web browser toolbar. Typically, the Babylon Toolbar comes bundled with other software, usually freeware and shareware. Before installing the toolbar, users have to agree to end user software agreement and accept all the changes that will be made during the installation. This web browser toolbar can c...

Babylon toolbar on IE

Babylon Ltd

82% remove