Babar.413726 (file analysis)

The Babar.413726 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Babar.413726 virus can do?

Authenticode signature is invalid

How to determine Babar.413726?


File Info:
name: FA373EC05D2E2A1C0567.mlw
path: /opt/CAPEv2/storage/binaries/7e70143fcd01b940aa2ebe222a764a7e1e82d8b8621c1c24fc938c11f974212e
crc32: B94E4506
md5: fa373ec05d2e2a1c0567cc7a1b6767ad
sha1: 102c244cf072602c7707dd9dc6eb373277e9506b
sha256: 7e70143fcd01b940aa2ebe222a764a7e1e82d8b8621c1c24fc938c11f974212e
sha512: 2ef5d2335020421fd6da7955a25da969c3abc682652a0af5bb53f3c6c35756f9a06e43669525be2d33820a6dcd4cce6986816675c68e983ae7b1f7526d09cb94
ssdeep: 6144:r5KY2zvjBgHDRkQIe23WcFV3WtlpSyHwEuZUAaVu1mY3NS5:rt2aItVoDSyHwEuFI
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T148C41952A7D40C64F5F3A6B46EBA93C99A3DBD145B32D1CF2104B1CA0A2DBD0DE34726
sha3_384: 91a4bc488165426d28572f2e9bde13e9bc0bdd51abae56eaf720b39a13d1baf15aa15a9ef6b66259c497ce3661a79a7e
ep_bytes: 6a0c68f8960434e84a01000033c04089
timestamp: 2014-10-20 20:58:27

Version Info:
Comments: Built by Farmer@CAE BUILD FARM[] on Mon 10/20/2014 at 16:51:32.29 in directory [CAE BUILD FARM]C:BFWFbt2261sourceMESOSTOOLS 
CompanyName: CAE Inc.
FileDescription: Medallion/Tropos-6000 Graphics Library and Utilities
FileVersion: V5.1.41.24
InternalName: MGLU.dll
LegalCopyright: Copyright (C) 2001-2009 CAE Inc.
OriginalFilename: MGLU.dll
ProductName: MGLU.dll
ProductVersion: V5.1.41.24
Translation: 0x0409 0x04b0

Babar.413726 also known as:

Lionic	Trojan.Win32.Generic.4!c
MicroWorld-eScan	Gen:Variant.Babar.413726
FireEye	Gen:Variant.Babar.413726
ALYac	Gen:Variant.Babar.413726
TrendMicro-HouseCall	TROJ_GEN.R002H09A324
BitDefender	Gen:Variant.Babar.413726
Emsisoft	Gen:Variant.Babar.413726 (B)
VIPRE	Gen:Variant.Babar.413726
Antiy-AVL	Trojan/Win32.Agent
Arcabit	Trojan.Babar.D6501E
GData	Gen:Variant.Babar.413726
Cynet	Malicious (score: 100)
MAX	malware (ai score=80)
MaxSecure	Trojan.Malware.222600807.susgen
Fortinet	W32/PossibleThreat

How to remove Babar.413726?

Babar.413726 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X