Ulise.411832 (file analysis)

The Ulise.411832 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ulise.411832 virus can do?

Sample contains Overlay data
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Ulise.411832?


File Info:
name: FF49BED8DD1EC76C31AB.mlw
path: /opt/CAPEv2/storage/binaries/7189fe0730b52febb3624e97b014c5ea400f801b5d3407a30c9c44f33164db4c
crc32: CEF8DBC2
md5: ff49bed8dd1ec76c31ab35c54839d8ca
sha1: b2d002cab4c7a7c5c68e8e2482498c0acb18631e
sha256: 7189fe0730b52febb3624e97b014c5ea400f801b5d3407a30c9c44f33164db4c
sha512: 8be78e035ecd435a6e965914dc6ec4c9f8d66f42a206298a3080af175cb1f9289deea5c17a22f4b2c560fb24d91695f3fb50af1ba4854ccfefb1fadfc9a4c99f
ssdeep: 6144:WV+vWZCxcLrzCL1qyxaX/Nd6AMALNh64nBVFEXh16Rw0Z9BPNxvL:E8WEYsaPNsAMAxh64ngiwCf1
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1B7F46B21B6808071E36A17750417E2B50B7D6D3A4BA596CFF7A43A392E313D39B3724E
sha3_384: 0dffcb82fc98c3b09ac76decb68099f588b5d300f45e805a75eec99a0ef6722268ddcc4d0fd740903854e6f88a4387ba
ep_bytes: 8ef489448ff48b448ef889448ff88b44
timestamp: 2013-10-14 03:32:42

Version Info:
0: [No Data]

Ulise.411832 also known as:

Bkav	W32.AIDetectMalware
McAfee	Artemis!FF49BED8DD1E
Cylance	unsafe
Sangfor	Suspicious.Win32.Save.a
BitDefender	Gen:Variant.Ulise.411832
Cybereason	malicious.8dd1ec
Baidu	Win32.Trojan.Urelas.d
VirIT	Trojan.Win32.Generic.DNJ
Cyren	W32/Urelas.DN.gen!Eldorado
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Agent_AGen.BF
APEX	Malicious
ClamAV	Win.Malware.Mikey-9891201-0
Avast	Win32:TrojanX-gen [Trj]
Rising	Spyware.CardSpy!1.A1A8 (CLASSIC)
F-Secure	Trojan.TR/Spy.Cardspy.vkmqv
DrWeb	Trojan.Siggen9.32763
VIPRE	Gen:Variant.Ulise.411832
McAfee-GW-Edition	BehavesLike.Win32.Generic.bt
Sophos	Generic ML PUA (PUA)
Ikarus	Trojan.MSIL.Inject
Google	Detected
MAX	malware (ai score=87)
Antiy-AVL	Trojan/Win32.Wecod
Microsoft	Trojan:Win32/Sabsik.TE.B!ml
Xcitium	TrojWare.Win32.Urelas.ASE@5izxb0
Arcabit	Trojan.Ulise.D648B8
ZoneAlarm	HEUR:Trojan.Win32.Wecod.pef
GData	Win32.Trojan.PSE.1JQAYT4
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win32.Generic.C4086090
Malwarebytes	CardSpy.Spyware.Stealer.DDS
Tencent	Trojan.Win32.CardSpy.16000130
SentinelOne	Static AI – Malicious PE
Fortinet	W32/CardSpy.PRKJ!tr
AVG	Win32:TrojanX-gen [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (D)

How to remove Ulise.411832?

Ulise.411832 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X