What is “Bulz.256694”?

The Bulz.256694 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.256694 virus can do?

Presents an Authenticode digital signature
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Bulz.256694?


File Info:
name: 3625EED31B0F40744922.mlw
path: /opt/CAPEv2/storage/binaries/b7c22f5484b1d732be6c81645a0efd111d17bb46b7a7dcab27c8983538f3d7da
crc32: E183C693
md5: 3625eed31b0f407449228c0d8e942206
sha1: 1268c7300c7062a41ccb33a224b0c58ab462040d
sha256: b7c22f5484b1d732be6c81645a0efd111d17bb46b7a7dcab27c8983538f3d7da
sha512: 449c89bdedb57d887ac52e8dc9ab8466c660f85580d1e4f5f080a017b65ca3f15578698d6eb131af07ab088eb003feac5bc3d6b11c3ec2d9611d2835b290dafa
ssdeep: 384:xpfqnWbKN1a5cI1anYPLMcB16EeMeFTpq8dA8qX33Tpq8dA8qX3:bq3na5TU55lHdA9jHdA9
type: PE32+ executable (console) x86-64, for MS Windows
tlsh: T17E2308037E18A4A3E01B867847D6D7F49437FAB56AF5030B78A803582F917502FE639D
sha3_384: 525b96e03c243441188ee7047d10ba594db2ebe890573bd8c5658b8c6528095e4a8555ad0a1fd0ab928082179e14bf25
ep_bytes: 4883ec28e88f0200004883c428e99efd
timestamp: 2013-10-08 13:07:50

Version Info:
CompanyName: Oracle Corporation
FileDescription: Java(TM) Platform SE binary
FileVersion: 7.0.450.18
Full Version: 1.7.0_45-b18
InternalName: rmid
LegalCopyright: Copyright © 2013
OriginalFilename: rmid.exe
ProductName: Java(TM) Platform SE 7 U45
ProductVersion: 7.0.450.18
Translation: 0x0000 0x04b0

Bulz.256694 also known as:

Lionic	Riskware.Win32.Bulz.1!c
MicroWorld-eScan	Gen:Variant.Bulz.256694
FireEye	Gen:Variant.Bulz.256694
McAfee	Artemis!3625EED31B0F
BitDefender	Gen:Variant.Bulz.256694
Cybereason	malicious.31b0f4
TrendMicro-HouseCall	TROJ_GEN.R002H09L721
Ad-Aware	Gen:Variant.Bulz.256694
Emsisoft	Gen:Variant.Bulz.256694 (B)
McAfee-GW-Edition	BehavesLike.Win64.Generic.pz
APEX	Malicious
MAX	malware (ai score=88)
Gridinsoft	Ransom.Win64.Sabsik.sa
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Gen:Variant.Bulz.256694
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Bulz.256694
Ikarus	not-a-virus:RiskTool.Win32.IMEStartup
Fortinet	Riskware/Application
AVG	FileRepMalware
Avast	FileRepMalware
CrowdStrike	win/malicious_confidence_80% (W)

How to remove Bulz.256694?

Bulz.256694 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X