Bulz.480898 malicious file

The Bulz.480898 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.480898 virus can do?

Presents an Authenticode digital signature
The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

How to determine Bulz.480898?


File Info:
crc32: 2F32D555
md5: 40caefae9655ee0c0726c76becde4743
name: 40CAEFAE9655EE0C0726C76BECDE4743.mlw
sha1: 1ec75b1ba3a8112b48ec7bf48cbab527b695f5a9
sha256: 555ef005b76db7d2c8bcd3364b02c0f282fbd5cf1da87524e2f2160a6ff7d642
sha512: a09ee2a7571ca406e12c273d275637daa639c7a7df9abd26b7b67e550236ebb6a7220396f88307be8cf46a076da54a133e7dbaed5557030374729d1430b50703
ssdeep: 3072:UBj6K0QdseKpNK3N6zuVHCTrEETmqayLp/ChdWKEsth6xChK:FSuKOuurKE2NEi6x0K
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: (C) 2016 philandro Software GmbH
Assembly Version: 4.3.0.0
InternalName: ConsoleApp12.exe
FileVersion: 4.3.0.0
CompanyName: philandro Software GmbH
LegalTrademarks: 
Comments: AnyDesk
ProductName: AnyDesk
ProductVersion: 4.3.0.0
FileDescription: AnyDesk
OriginalFilename: ConsoleApp12.exe

Bulz.480898 also known as:

Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_100% (W)
Cybereason	malicious.ba3a81
Cyren	W32/MSIL_Injector.MM.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Injector.VMM
APEX	Malicious
Avast	FileRepMetagen [Malware]
Kaspersky	UDS:DangerousObject.Multi.Generic
BitDefender	Gen:Variant.Bulz.480898
MicroWorld-eScan	Gen:Variant.Bulz.480898
Ad-Aware	Gen:Variant.Bulz.480898
BitDefenderTheta	Gen:NN.ZemsilF.34690.mm2@aqPXo5i
McAfee-GW-Edition	Artemis!Trojan
FireEye	Generic.mg.40caefae9655ee0c
Emsisoft	Gen:Variant.Bulz.480898 (B)
SentinelOne	Static AI – Suspicious PE
Microsoft	Trojan:Win32/AgentTesla!ml
GData	MSIL.Trojan.BSE.XNY6ZA
McAfee	Artemis!40CAEFAE9655
MAX	malware (ai score=80)
Malwarebytes	Malware.AI.72376607
Rising	Trojan.Injector!8.C4 (CLOUD)
Ikarus	Trojan.MSIL.Inject
AVG	FileRepMetagen [Malware]
Paloalto	generic.ml

How to remove Bulz.480898?

Bulz.480898 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X