Ulise.100375 (B) (file analysis)

The Ulise.100375 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ulise.100375 (B) virus can do?

The binary likely contains encrypted or compressed data.

How to determine Ulise.100375 (B)?


File Info:
crc32: C32B3430
md5: 90110ff0308297e4ce021dec842da3da
name: fengfeng.exe
sha1: b021c868bccf9281b66dd885a53d4e0869994b30
sha256: 698703460532a494874a653ac9cf1807a1241f0f38f5f988f026404da2133660
sha512: 09efee1898a6ff08282960396787be4b4e33a14a572f4dc97f9592e932eb1ce4aa26630c8a46edb4008a85ea28a16f8ca587e0025092ad8ab83b8f2a25b08243
ssdeep: 12288:7der4XMfUw0KOQPfbxFn7aZXO3c8/eVV+W6hNNN7Qvm7xEEYo2AuaUekS:7MgMcwlfNF7UXO3c8QILZmfoJu1ek
type: PE32+ executable (console) x86-64, for MS Windows

Version Info:
LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: sppsvc
FileVersion: 10.0.17134.590 (WinBuild.160101.0800)
CompanyName: Microsoft Corporation
ProductName: Microsoftxae Windowsxae Operating System
ProductVersion: 10.0.17134.590
FileDescription: Microsoft Software Protection Platform Service
OriginalFilename: sppsvc.exe
Translation: 0x0409 0x04b0

Ulise.100375 (B) also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Ulise.100375
FireEye	Generic.mg.90110ff0308297e4
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Malware
K7AntiVirus	Trojan ( 0051b4fe1 )
BitDefender	Gen:Variant.Ulise.100375
K7GW	Trojan ( 0051b4fe1 )
Cybereason	malicious.8bccf9
Invincea	heuristic
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of Win64/CoinMiner.FQ
APEX	Malicious
Avast	Win64:Malware-gen
ClamAV	Win.Packed.XMRig-8977228-0
Kaspersky	not-a-virus:HEUR:RiskTool.Win32.BitCoinMiner.vho
Alibaba	Trojan:Win32/CoinMiner.25b0922d
AegisLab	Riskware.Win32.BitCoinMiner.1!c
Tencent	Win64.Trojan.Coinminer.Hoxl
Emsisoft	Gen:Variant.Ulise.100375 (B)
Comodo	ApplicUnwnt@#2g7lnqko2qzle
F-Secure	Heuristic.HEUR/AGEN.1120942
TrendMicro	TROJ_GEN.R031C0PFJ20
Fortinet	Riskware/CoinMiner
Trapmine	suspicious.low.ml.score
Sophos	Generic PUA LA (PUA)
Ikarus	Trojan.Win64.CoinMiner
Cyren	W64/Trojan.KJZW-5187
MaxSecure	Trojan.Malware.300983.susgen
Avira	HEUR/AGEN.1120942
MAX	malware (ai score=82)
Antiy-AVL	GrayWare/Win32.Kryptik.BQX
Arcabit	Trojan.Ulise.D18817
AhnLab-V3	Win-Trojan/Miner3.Exp
ZoneAlarm	not-a-virus:HEUR:RiskTool.Win32.BitCoinMiner.vho
Microsoft	PUA:Win32/CoinMiner
Cynet	Malicious (score: 100)
Acronis	suspicious
McAfee	RDN/Generic PUP.z
Malwarebytes	Trojan.BitCoinMiner
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_GEN.R031C0PFJ20
Rising	Trojan.CoinMiner!8.30A (CLOUD)
SentinelOne	DFI – Suspicious PE
eGambit	Unsafe.AI_Score_90%
GData	Gen:Variant.Ulise.100375
AVG	Win64:Malware-gen
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_60% (W)
Qihoo-360	Win32/Virus.RiskTool.047

How to remove Ulise.100375 (B)?

Ulise.100375 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X