How to remove “PUA.CymulateFC.S24738010”?

The PUA.CymulateFC.S24738010 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What PUA.CymulateFC.S24738010 virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
Authenticode signature is invalid
CAPE detected the DLAgent10 malware family

How to determine PUA.CymulateFC.S24738010?


File Info:
name: 6C22A30CA504512B4877.mlw
path: /opt/CAPEv2/storage/binaries/e73cf621e1c91bac11f2aa1c61d374192b6667a88728bd5b7ebcf6b35437800c
crc32: BAEF7402
md5: 6c22a30ca504512b4877b638d68fd182
sha1: 7a787e1d9d26c8ff22fdefddde0ad70627a1e86e
sha256: e73cf621e1c91bac11f2aa1c61d374192b6667a88728bd5b7ebcf6b35437800c
sha512: 0ac106309222396a9707d33da249f27334bbacf4cade4fd7ddddbffc4d7246ce9e593368c31103f99b8d31c374d6ecdc18e0ec4ca76f96e164125816436027e2
ssdeep: 1536:E6S73NyFqkwFS1YcqLB4eQrVPb7dIZbbcWc2dNO8au:O7NyQFS1YFB4eQt2pVFNO8au
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T11643840177FC0208F6FBBF75ADBB94904676BAA79932D70E4584518E09F1B848A21F73
sha3_384: 64117b93238ce6fc121888c99641aeac0f117500cc5de67163bc6cf3e6562b3ea7e4b552b97f92ed320404299350a747
ep_bytes: ff250020400000000000000000000000
timestamp: 2021-11-21 07:14:07

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: CymulateEDRRansom
FileVersion: 1.0.0.0
InternalName: CymulateEDRRansom.exe
LegalCopyright: Copyright ©  2018
LegalTrademarks: 
OriginalFilename: CymulateEDRRansom.exe
ProductName: CymulateEDRRansom
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

PUA.CymulateFC.S24738010 also known as:

Lionic	Riskware.MSIL.Cymulate.1!c
MicroWorld-eScan	IL:Trojan.MSILZilla.5667
FireEye	Generic.mg.6c22a30ca504512b
CAT-QuickHeal	PUA.CymulateFC.S24738010
ALYac	IL:Trojan.MSILZilla.5667
Cylance	Unsafe
K7AntiVirus	Riskware ( 005673e61 )
Alibaba	RiskWare:MSIL/Cymulate.4c3765f9
K7GW	Riskware ( 005673e61 )
Cybereason	malicious.ca5045
BitDefenderTheta	Gen:NN.ZemsilF.34084.dm0@aKNqHKf
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Riskware.Cymulate.A
TrendMicro-HouseCall	TROJ_GEN.R002C0PKS21
Paloalto	generic.ml
Kaspersky	not-a-virus:HEUR:RiskTool.MSIL.Cymulate.gen
BitDefender	IL:Trojan.MSILZilla.5667
Avast	Win32:MalwareX-gen [Trj]
Tencent	Msil.Risk.Cymulate.Wozq
Ad-Aware	IL:Trojan.MSILZilla.5667
Sophos	Mal/Generic-S
TrendMicro	TROJ_GEN.R002C0PKS21
McAfee-GW-Edition	GenericRXQE-GM!6C22A30CA504
SentinelOne	Static AI – Suspicious PE
Emsisoft	IL:Trojan.MSILZilla.5667 (B)
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
GData	IL:Trojan.MSILZilla.5667
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win.Generic.C4702166
McAfee	GenericRXQE-GM!6C22A30CA504
Malwarebytes	RiskWare.Cymulate
APEX	Malicious
Yandex	Riskware.Cymulate!B/0ax44eqr0
MAX	malware (ai score=88)
Fortinet	Riskware/Cymulate
AVG	Win32:MalwareX-gen [Trj]
Panda	Trj/GdSda.A

How to remove PUA.CymulateFC.S24738010?

PUA.CymulateFC.S24738010 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X