Generic.Ransom.CloudSword.7516A4E0 removal guide

The Generic.Ransom.CloudSword.7516A4E0 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Generic.Ransom.CloudSword.7516A4E0 virus can do?

Network activity detected but not expressed in API logs

How to determine Generic.Ransom.CloudSword.7516A4E0?


File Info:
crc32: FFB20908
md5: c27baa12001bbba4150bb0e10d136bd6
name: C27BAA12001BBBA4150BB0E10D136BD6.mlw
sha1: e824d5f175cdf0b282b3ac5a3a5fa56529a038a8
sha256: 65962947c9eb2144896adcb3f9a1b525d1427c53f2fabd8ca7b1bdaabfc6278b
sha512: 98c3c0122b7fc3085f8240be0713b8a6d0acd8e576664657b12822996153a797612969b86e7f71a34cf731fa2062059eb79ca4ca8d86d60e5d64148c748dae9f
ssdeep: 24576:YJbSlqlvcBwQ15/2/qyFYNm8SwnR7CjT2+qgB33TYNxF:YtcBw02wmGR+73U
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2021
Assembly Version: 1.0.0.0
InternalName: hanta_2_0_offline.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: hanta_2_0
ProductVersion: 1.0.0.0
FileDescription: hanta_2_0
OriginalFilename: hanta_2_0_offline.exe

Generic.Ransom.CloudSword.7516A4E0 also known as:

Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	DeepScan:Generic.Ransom.CloudSword.7516A4E0
CrowdStrike	win/malicious_confidence_90% (W)
Alibaba	TrojanPSW:Win32/Coins.c5faf177
Cybereason	malicious.2001bb
Cyren	W32/MSIL_Troj.NT.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	UDS:Trojan.Multi.GenericML.xnet
BitDefender	DeepScan:Generic.Ransom.CloudSword.7516A4E0
MicroWorld-eScan	DeepScan:Generic.Ransom.CloudSword.7516A4E0
Ad-Aware	DeepScan:Generic.Ransom.CloudSword.7516A4E0
Sophos	Mal/Generic-S
BitDefenderTheta	Gen:NN.ZemsilF.34688.1n0@a8S67Sl
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_GEN.R014C0WE521
McAfee-GW-Edition	BehavesLike.Win32.Dropper.tt
FireEye	Generic.mg.c27baa12001bbba4
Emsisoft	DeepScan:Generic.Ransom.CloudSword.7516A4E0 (B)
SentinelOne	Static AI – Malicious PE
Webroot	W32.Ransom.Hanta
Avira	TR/ATRAPS.Gen
AegisLab	Trojan.Multi.GenericML.4!c
GData	DeepScan:Generic.Ransom.CloudSword.7516A4E0
AhnLab-V3	Malware/Win32.RL_Generic.C3530436
McAfee	Artemis!C27BAA12001B
MAX	malware (ai score=87)
TrendMicro-HouseCall	TROJ_GEN.R014C0WE521
Rising	Trojan.AgentTesla!8.104D5 (CLOUD)
Ikarus	Trojan.PSW.Coins
Fortinet	PossibleThreat
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove Generic.Ransom.CloudSword.7516A4E0?

Generic.Ransom.CloudSword.7516A4E0 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X