Falco Bundleware (PUA) malicious file

The Falco Bundleware (PUA) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Falco Bundleware (PUA) virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Sample contains Overlay data
• The binary contains an unknown PE section name indicative of packing
• Authenticode signature is invalid
• Anomalous binary characteristics

How to determine Falco Bundleware (PUA)?

File Info:
name: 98A2976A3DFA263FCBD5.mlw
path: /opt/CAPEv2/storage/binaries/2b5a86644c18e252134f697df62495dedd7847629633459dde9c6b73fa1116c2
crc32: 0A579772
md5: 98a2976a3dfa263fcbd5c14ba1b9b030
sha1: a7d71952e67f6eebe9c2761789fced84bc7e089c
sha256: 2b5a86644c18e252134f697df62495dedd7847629633459dde9c6b73fa1116c2
sha512: c1daa408227e4cef276d14c1269b3d25dc0bcf35f21c96170e838314346b5c3895c3401ee811ea1dc35a36bf95c2ec8b97370c5796b84dc514015df8148c929d
ssdeep: 98304:X1QTnEeFh0x58fyuH8301SBUeaPZ5YlDf0dE4KYE0J+6T:liV09uH8yeah+lDf0dex6T
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T18C060227B298A13EC4AE27354573A05068FBA76DF417BE1676F4C48CCF660C01E3EA65
sha3_384: 52b259c8a8cf726a847c85f8a81468e056b6ab82c4ac5818791c8045dbd4b2eae5290bee2f7881fc67c879260ce516f0
ep_bytes: 558bec83c4a453565733c08945c48945
timestamp: 2019-10-12 11:15:57

Version Info:
Comments: This installation was built with Inno Setup.
CompanyName: FalcoWare, Inc.                                             
FileDescription: Where Is The Cake Setup                                     
FileVersion:                     
LegalCopyright:                                                                                                     
OriginalFileName:                                                   
ProductName: Where Is The Cake                                           
ProductVersion:                                                   
Translation: 0x0000 0x04b0

Falco Bundleware (PUA) also known as:

How to remove Falco Bundleware (PUA)?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.