Bulz.155351 information

The Bulz.155351 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.155351 virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine Bulz.155351?


File Info:
name: 3FF931E0CDF43D8D961C.mlw
path: /opt/CAPEv2/storage/binaries/f66b695a68c3dfd6a70268c748c0988a1998fe412c33362f39ca215d972e67cb
crc32: 4612E7D2
md5: 3ff931e0cdf43d8d961c9802f8aaa326
sha1: a66a341391eb563dedf8338c695fac23da9787d6
sha256: f66b695a68c3dfd6a70268c748c0988a1998fe412c33362f39ca215d972e67cb
sha512: a66cc3afac5ab460f821b038af201c621813058abe1ad826862baa8b45ad1bea553ca438933d4b6e25b62621140092b778056910ea49115bd5070b0108bc353e
ssdeep: 768:Ko64TpmpLWSQH+Ekol/d3eJG53G73my86iCgkoOQlr96:ZTTpoLWSQn3eJG53G73mxdvdOmr96
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1F113BF5AA2F88B7DC93B0BF20DF2925083F5990A5A63C51B2DD526CE4C7275102217F7
sha3_384: c1df288d7a5167f8cf5aa73e27b4d514e5c3a81fac9cdef10b0fcac84dcc5cb526e4c995d4c8e360116ab525bba5af35
ep_bytes: ff250020400000000000000000000000
timestamp: 2073-08-11 08:39:52

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: WindowsFormsApp1
FileVersion: 1.0.0.0
InternalName: WindowsFormsApp1.exe
LegalCopyright: Copyright ©  2021
LegalTrademarks: 
OriginalFilename: WindowsFormsApp1.exe
ProductName: WindowsFormsApp1
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Bulz.155351 also known as:

Lionic	Trojan.Win32.Bulz.4!c
Cynet	Malicious (score: 99)
FireEye	Generic.mg.3ff931e0cdf43d8d
McAfee	Artemis!3FF931E0CDF4
Cylance	Unsafe
Sangfor	Trojan.Win32.Agent.aa
Cybereason	malicious.0cdf43
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
BitDefender	Gen:Variant.Bulz.155351
MicroWorld-eScan	Gen:Variant.Bulz.155351
Avast	Win32:DropperX-gen [Drp]
Ad-Aware	Gen:Variant.Bulz.155351
Emsisoft	Gen:Variant.Bulz.155351 (B)
DrWeb	Trojan.DownLoader25.54842
McAfee-GW-Edition	BehavesLike.Win32.Fareit.pc
GData	Gen:Variant.Bulz.155351
Avira	HEUR/AGEN.1117204
Microsoft	Trojan:Win32/Wacatac.B!ml
AhnLab-V3	Trojan/Win32.RL_MSILKrypt.C3485285
ALYac	Gen:Variant.Bulz.155351
MAX	malware (ai score=81)
VBA32	TScope.Trojan.MSIL
TrendMicro-HouseCall	TROJ_GEN.R002H09F421
SentinelOne	Static AI – Suspicious PE
Fortinet	PossibleThreat
AVG	Win32:DropperX-gen [Drp]
MaxSecure	Trojan.Malware.300983.susgen

How to remove Bulz.155351?

Bulz.155351 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X