Categories: Malware

Ulise.326062 (file analysis)

The Ulise.326062 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Ulise.326062 virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
At least one process apparently crashed during execution
Reads data out of its own binary image
Authenticode signature is invalid

How to determine Ulise.326062?


File Info:
name: 7994296BF60BBB99692A.mlwpath: /opt/CAPEv2/storage/binaries/9af4f4799067990649b36747870bf4526ec29a40e5f139b5ae63f172d40793b5crc32: 5956CB9Cmd5: 7994296bf60bbb99692a198f91586935sha1: afb25db7adb17cadbab76ee8b7cafc72a542fb6asha256: 9af4f4799067990649b36747870bf4526ec29a40e5f139b5ae63f172d40793b5sha512: 2d92577abe9f6ec9579fb09ba9b32f9408f0698aadd2da554b1880a1bdd5e100b7860aa1facddadfa813574101a7d57fc2332e9c9623e9f410d85e928c1088cbssdeep: 6144:h5TncXkV305v9C24Oo/jzdkuPQ9ukho5Y7e:h57ZV349C68PysK1itype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T11896BF03B2C1C0BED5F7257418766F399ABD7D028629EA87A330FD9A5E31241E52D34Esha3_384: f9e350b603274352670b04dbb42e6692f06c9277dda85fe8cf00775d538358639e8bf8516df7c0a46dc0fa72ac4a7bb7ep_bytes: 558bec6aff68f888cc00688882cb0064timestamp: 2006-02-02 03:17:11
Version Info:
Comments: CompanyName: Sysinternals - www.sysinternals.comFileDescription: Rootkit detection utilityFileVersion: 1.70InternalName: LegalCopyright: Copyright (C) 2005-2006 Bryce Cogswell and Mark RussinovichLegalTrademarks: OriginalFilename: PrivateBuild: ProductName: Sysinternals RootkitrevealerProductVersion: 1.70SpecialBuild: Translation: 0x0409 0x04b0

Ulise.326062 also known as:

Bkav	W32.AIDetect.malware2
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Ulise.326062
FireEye	Generic.mg.7994296bf60bbb99
CAT-QuickHeal	Trojan.Swisyn.OD5
ALYac	Gen:Variant.Ulise.326062
Malwarebytes	Malware.AI.3621182947
Cybereason	malicious.7adb17
Cyren	W32/Swisyn.R.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
BitDefender	Gen:Variant.Ulise.326062
NANO-Antivirus	Trojan.Win32.Swisyn.ezhrht
Avast	Win32:Malware-gen
Ad-Aware	Gen:Variant.Ulise.326062
Emsisoft	Gen:Variant.Ulise.326062 (B)
Sophos	ML/PE-A
APEX	Malicious
MAX	malware (ai score=87)
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
GData	Win32.Trojan.PSE.14A82VQ
Cynet	Malicious (score: 100)
Acronis	suspicious
Ikarus	Trojan.Win32
Rising	Trojan.Generic@ML.99 (RDML:mBKbDeMo9ed4tOKTbb85lA)
Yandex	Trojan.Vilsel!DYnMUgokP1U
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_100%
Fortinet	W32/Swisyn.R!tr
AVG	Win32:Malware-gen
CrowdStrike	win/malicious_confidence_100% (D)