Ulise.428749 malicious file

The Ulise.428749 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ulise.428749 virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
Executable file is packed/obfuscated with MPRESS
Authenticode signature is invalid

How to determine Ulise.428749?


File Info:
name: AE2B9EDD45E0670ECA8C.mlw
path: /opt/CAPEv2/storage/binaries/747a52585343a970f0bda317ffb4d0903172c729a364c3dfc8398f0e1b5d1b28
crc32: 49175609
md5: ae2b9edd45e0670eca8cc4f0a1d2d6a4
sha1: 2e3e9a74b44af239b3ba1229fb9166e56e50daf6
sha256: 747a52585343a970f0bda317ffb4d0903172c729a364c3dfc8398f0e1b5d1b28
sha512: dd6e39697becfa26a34f391341ff9a0d6b52f0966485b51cf8f9265d5c3ebad86b4eed9e8642301f64000040ec59396e626594563c53d231e4da955d241df59e
ssdeep: 6144:B82p4pFHfzMepymgWPnviP6Koa0nArn20l96tCF2eKNBDRlC8HQQDhy5OwbYRlk:5p4pNfz3ymJnJ8QCFkxCaQTOlf
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T135B46E26B6E08533D1632A749D1B96AD9C26BE517D28B8463FF82D4C9F3878138371D3
sha3_384: 9bc2e1636d248eb35d93d3ec1e229496288f7bb3bc3bda697535c9bc3ce8a665103690ba5cd87f6617723afe931bc446
ep_bytes: 3fe7fdff8bf0eb0233f685f675048bf7
timestamp: 1992-06-19 22:22:17

Version Info:
0: [No Data]

Ulise.428749 also known as:

Bkav	W32.AIDetectMalware
MicroWorld-eScan	Gen:Variant.Ulise.428749
Skyhigh	BehavesLike.Win32.Generic.hm
McAfee	Artemis!AE2B9EDD45E0
Malwarebytes	Generic.Malware.AI.DDS
VIPRE	Gen:Variant.Ulise.428749
Sangfor	Suspicious.Win32.Save.ins
K7AntiVirus	Trojan ( 0052964f1 )
BitDefender	Gen:Variant.Ulise.428749
K7GW	Trojan ( 0052964f1 )
Cybereason	malicious.4b44af
BitDefenderTheta	Gen:NN.ZexaF.36792.FmZ@auhI7Qp
VirIT	Trojan.Win32.SHeur2.BBFW
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
APEX	Malicious
ClamAV	Win.Virus.Stihat-9753082-0
Sophos	Generic ML PUA (PUA)
Google	Detected
F-Secure	Trojan.TR/Patched.Ren.Gen
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.ae2b9edd45e0670e
Emsisoft	Gen:Variant.Ulise.428749 (B)
SentinelOne	Static AI – Malicious PE
Avira	TR/Patched.Ren.Gen
Antiy-AVL	Trojan/Win32.Wacatac
Kingsoft	malware.kb.b.892
Microsoft	Trojan:Win32/Wacatac.B!ml
Xcitium	TrojWare.Win32.Trojan.Mepaow.hwl0@1c5hff
Arcabit	Trojan.Ulise.D68ACD
GData	Gen:Variant.Ulise.428749
Cynet	Malicious (score: 100)
Acronis	suspicious
ALYac	Gen:Variant.Ulise.428749
MAX	malware (ai score=83)
DeepInstinct	MALICIOUS
Cylance	unsafe
Ikarus	Trojan.Win32.Mepaow
MaxSecure	Trojan.Malware.215845759.susgen
Fortinet	W32/Ulise.428749!dam
AVG	Win32:Stihat [Wrm]
Avast	Win32:Stihat [Wrm]
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Ulise.428749?

Ulise.428749 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X