Virus:Win32/Hublo.A malicious file

The Virus:Win32/Hublo.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Virus:Win32/Hublo.A virus can do?

• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• The executable is compressed using UPX
• Authenticode signature is invalid
• Yara detections observed in process dumps, payloads or dropped files

How to determine Virus:Win32/Hublo.A?

File Info:
name: 812152AEBC04CE53EB5A.mlw
path: /opt/CAPEv2/storage/binaries/8ec9c469be8790b8a62492758c986fbe7e14934c36c245a4233aac06ee069c08
crc32: 5AE48F95
md5: 812152aebc04ce53eb5a2ca8d1cae6d7
sha1: ec5e19386ec2c471ee2a41e69d4c17edcc216b9c
sha256: 8ec9c469be8790b8a62492758c986fbe7e14934c36c245a4233aac06ee069c08
sha512: 4857db0bb197202acfed31ad0ca0ba608f43dd4005111825544d6df4bfb7573289ee5cc3b16cb6b6bc26c3aefd770269312ac587aa469abb0ea5a63c65f82404
ssdeep: 384:iwcqkFZ7rkHHGNHRS/jyOE8itf6Ixv9tSck4jW5nW8:s7YHGNH4/jREth2ckn
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T12462C095EFEA4462F6E202348ED7A4365138E594D73D8B5D1F99AF0E9C33090972A323
sha3_384: d4ec1727127cef5fb1bd1f18d54a997fc5556edfd9941fa30cfd36d2fff6b628cafd94bccdb662ff0f1b1864af9c7f37
ep_bytes: 60be00a000018dbe0070ffff5783cdff
timestamp: 2001-08-17 20:53:58

Version Info:
CompanyName: Microsoft Corporation
FileDescription: Sort Utility
FileVersion: 5.1.2600.0 (xpclient.010817-1148)
InternalName: Sort
LegalCopyright: © Microsoft Corporation. All rights reserved.
OriginalFilename: Sort.EXE
ProductName: Microsoft® Windows® Operating System
ProductVersion: 5.1.2600.0
Translation: 0x0409 0x04b0

Virus:Win32/Hublo.A also known as:

How to remove Virus:Win32/Hublo.A?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.