Bulz.258058 malicious file

The Bulz.258058 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.258058 virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine Bulz.258058?


File Info:
name: 2AB8B6A95CB874C71512.mlw
path: /opt/CAPEv2/storage/binaries/799260b992c77e2e14f2d586665c570142d8425864455cab5f2575015cd0b87a
crc32: 273EDFDE
md5: 2ab8b6a95cb874c715125e7ff8cbebd5
sha1: 62a27e2ca05ac946782e2021a583f6f91ad0dcd7
sha256: 799260b992c77e2e14f2d586665c570142d8425864455cab5f2575015cd0b87a
sha512: c484f86da31540b7a652196d7e1d31422c56ae02750358cb65fcf85eb05f3b9a9a0062cdf444ff21337e6ad2439cf3de8875945d2e3fb54e7a66f35d07c8e586
ssdeep: 6144:4DQSvsqoBnyRevr4dE+6kKnJGD/xwx2fBPyhMZirwKOC5JlOalmBuCKcLYAEnhCJ:xbQdE+65GDZHZahMZ0zJlyBEAEnhC
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T1BED44A1023EC8626E2EE6739B83005199BFAF406F6BAD75F1E48D1B90D83BD05E10767
sha3_384: 5f04effe01d288f999a5fa68c1ca6d1afded229ac79364e0b338c5fbe8f1d7c72740937fffcd73452ddb02359c32dac0
ep_bytes: ff250020001000000000000000000000
timestamp: 2096-06-18 05:37:26

Version Info:
Translation: 0x0000 0x04b0
FileDescription:  
FileVersion: 0.0.0.0
InternalName: SystemApp.dll
LegalCopyright:  
OriginalFilename: SystemApp.dll
ProductVersion: 0.0.0.0
Assembly Version: 0.0.0.0

Bulz.258058 also known as:

Lionic	Trojan.Win32.Sidewinder.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Bulz.258058
FireEye	Gen:Variant.Bulz.258058
Skyhigh	Generic trojan.op
McAfee	Generic .op
Malwarebytes	Generic.Trojan.MSIL.DDS
VIPRE	Gen:Variant.Bulz.258058
Sangfor	Trojan.Win32.SideWinder.IOC
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Trojan:MSIL/Sidewinder.0bd3ac80
K7GW	Riskware ( 0040eff71 )
K7AntiVirus	Riskware ( 0040eff71 )
Symantec	Trojan Horse
tehtris	Generic.Malware
APEX	Malicious
BitDefender	Gen:Variant.Bulz.258058
Tencent	Msil.Trojan.Sidewinder.Rqil
Sophos	Mal/Generic-S
F-Secure	Trojan.TR/Agent.qxaoy
Zillya	Trojan.Agent.Win32.1665130
Emsisoft	Gen:Variant.Bulz.258058 (B)
Ikarus	Trojan.MSIL.Agent
Webroot	W32.Trojan.Gen
Avira	TR/Agent.qxaoy
Antiy-AVL	Trojan[APT]/Win32.Sidewinder
Kingsoft	MSIL.Trojan.Sidewinder.a
Xcitium	Malware@#3aq5u3yev8tri
Arcabit	Trojan.Bulz.D3F00A
ViRobot	Trojan.Win.Z.Sidewinder.616960
ZoneAlarm	Trojan.MSIL.Sidewinder.a
Varist	W32/Trojan.PGCI-6171
AhnLab-V3	Trojan/Win32.Agent.C4261869
ALYac	Trojan.Agent.Sidewinder
MAX	malware (ai score=100)
DeepInstinct	MALICIOUS
Cylance	unsafe
Rising	Stealer.[SideWinder]Agent!1.DA01 (CLASSIC)
MaxSecure	Trojan.Malware.119627888.susgen
Fortinet	W32/Trojan_Win32_SIDEWINDER.B
Panda	Trj/CI.A

How to remove Bulz.258058?

Bulz.258058 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X