Should I block it?

76%

76% of PCs block this file from running.

Possible reason:

Performance resource utilization

Additional versions

5acd2	33.33%
3b2e0	33.33%
af605	33.33%

(Note, MusicLab LLC publishes each variation of this file with the same version, but the hashes are unique.)

Relationships

PE file structure

Show functions

Import table

dbghelp.dll

ImageNtHeader

gdi32.dll

CreateSolidBrush, CreateCompatibleDC, CreateCompatibleBitmap, SelectObject, DeleteObject, BitBlt, DeleteDC, GetStockObject, GetObjectW, GetDeviceCaps, CreateDCW

kernel32.dll

DllMain

user32.dll

PrintWindow, SendDlgItemMessageW, MapDialogRect, SetWindowContextHelpId, EndDialog, IsDlgButtonChecked, CheckDlgButton, DialogBoxIndirectParamW, GetWindowTextLengthW, GetWindowTextW, SetWindowTextW, BeginPaint, EndPaint, IsChild, GetFocus, GetWindow, GetDlgItem, IsWindow, GetSysColor, GetClassInfoExW, DestroyWindow, CreateAcceleratorTableW, ClientToScreen, SetCapture, FillRect, InvalidateRgn, InvalidateRect, GetDC, ReleaseDC, GetDesktopWindow, DestroyAcceleratorTable, LoadCursorW, RedrawWindow, MoveWindow, ScreenToClient, ShowWindow, GetKeyState, SetFocus, SetWindowPos, GetClientRect, SetClassLongW, GetParent, RegisterWindowMessageW, GetWindowLongW, FindWindowW, KillTimer, SetTimer, EnumThreadWindows, SetWindowsHookExW, CallNextHookEx, UnhookWindowsHookEx, EnumWindows, GetWindowRect, MsgWaitForMultipleObjects, PeekMessageW, IsWindowUnicode, GetMessageA, DispatchMessageA, GetAsyncKeyState, CallWindowProcW, SetWindowLongW, PostThreadMessageW, PostMessageW, DispatchMessageW, TranslateMessage, GetMessageW, CreateWindowExW, RegisterClassExW, SendMessageW, DefWindowProcW, EnumChildWindows, FindWindowExW, GetWindowThreadProcessId, GetClassNameW, CharNextW, ReleaseCapture, UnregisterClassA

Export table

BHOCheck

DllCanUnloadNow

DllGetClassObject

DllInstall

DllRegisterServer

DllUnregisterServer

IEBHO.dll

By MusicLab LLC (Signed)

Remove IEBHO.dll

MD5:	af6050340baa9cce2b40697705c5e793
SHA1:	442dc3455b836e077ec95400480d02d4d7b0f4fb

Overview

IEBHO.dll is loaded as dynamic link library that runs in the context of Internet Explorer. It is installed in Internet Explorer as a Browser Helper Object (BHO) which has full acess to the web browser's behaviors and content. It is installed with a couple of know programs including Wincore MediaBar published by Musiclab, LLC, BearShare from Musiclab, LLC and BearShare by Musiclab, LLC. The file is digitally signed by MusicLab LLC which was issued by the Thawte certificate authority (CA).

Details

File name:	IEBHO.dll
Typical file path:	C:\Program Files\Windows iLivid Toolbar\Datamngr\IEBHO.dll
Size:	1.46 MB (1,528,792 bytes)
Certificate
Issued to:	MusicLab LLC
Authority (CA):	Thawte
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
.NET CLR:	No

More details

Programs

The following programs will install this file

Wincore MediaBar

Musiclab, LLC

82% remove

Wincore Mediabar is a type of browser hijacker instaled in Google Chrome, Internet Explorer, and Mozilla Firefox browsers and modifies DNS settings in MS Windows hosts file in order to redirect your legitimate search traffic to associated 'parnter' advertising sites. Wincore Mediabar alters the system registry to enable itself immediate activation when Windows is loaded. Wincore Mediabar is bundled with a number of unwanted programs.

BearShare

Musiclab, LLC

29% remove

BearShare is a peer-to-peer file sharing application originally created by Free Peers, Inc. for Microsoft Windows and also a rebranded version of iMesh by MusicLab, LLC, tightly integrated with their music subscription service. Three variants of the original BearShare gnutella servent were distributed by Free Peers: Free, Lite and Pro. The Free version had higher performance limits than the Lite version but contained some bundled potent...