About “Bulz.308692” infection

The Bulz.308692 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.308692 virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid

How to determine Bulz.308692?


File Info:
name: 6EC5F6A0C9358E3D59AA.mlw
path: /opt/CAPEv2/storage/binaries/a5c492e09d2ae36ba3fe3faaa358e642da522fc81088f56e768fcf03ee96f976
crc32: 0D4D10B6
md5: 6ec5f6a0c9358e3d59aa19ad93f834c1
sha1: 77fd5afa151edeb22fadc86373eb981374e2b844
sha256: a5c492e09d2ae36ba3fe3faaa358e642da522fc81088f56e768fcf03ee96f976
sha512: ef9b58e021c0ee99e62dc0a194afb92bacdbaff3ade29313d62c80c83922b717242d49f1d8423b88082a2590f6f97fe06ffd7fcbf3651fbf0d39f521a51f14f9
ssdeep: 384:5l6/NVhXyjMqAXpxWo36414esMABRdEfSARAXVQof1ns6uV/jodoj7xLivyfkpym:qxyjM/WoK4aesMwRdyAvF97dO5iN3MD0
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1E1D22728A71C173FCADE2A7D8863834567F1C2A67242FF8F6C8C64A952673CD45407E6
sha3_384: 2130b865e0ce3c7a8bc79b42eeda13e7c364864725350479131a861a2425d5ef32a6381558545d0adbfefeb520342065
ep_bytes: ff250020400000000000000000000000
timestamp: 2018-05-17 09:09:57

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: Crypt
FileVersion: 1.0.0.0
InternalName: Crypt.exe
LegalCopyright: Copyright ©  2018
LegalTrademarks: 
OriginalFilename: Crypt.exe
ProductName: Crypt
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Bulz.308692 also known as:

Bkav	W32.AIDetectMalware.CS
MicroWorld-eScan	Gen:Variant.Bulz.308692
FireEye	Generic.mg.6ec5f6a0c9358e3d
Skyhigh	Artemis
ALYac	Gen:Variant.Bulz.308692
Cylance	unsafe
Sangfor	Trojan.Win32.Agent.Vgw4
CrowdStrike	win/malicious_confidence_90% (D)
Elastic	malicious (moderate confidence)
Avast	Win32:MalwareX-gen [Trj]
BitDefender	Gen:Variant.Bulz.308692
Emsisoft	Gen:Variant.Bulz.308692 (B)
VIPRE	Gen:Variant.Bulz.308692
Trapmine	malicious.high.ml.score
MAX	malware (ai score=80)
Kingsoft	malware.kb.c.998
Arcabit	Trojan.Bulz.D4B5D4
GData	Gen:Variant.Bulz.308692
McAfee	Artemis!6EC5F6A0C935
Rising	Malware.Obfus/MSIL@AI.97 (RDM.MSIL2:EIF/owPJssHapDtwQqXNEQ)
MaxSecure	Trojan.Malware.300983.susgen
BitDefenderTheta	Gen:NN.ZemsilF.36802.bm0@aSyITgj
AVG	Win32:MalwareX-gen [Trj]
DeepInstinct	MALICIOUS

How to remove Bulz.308692?

Bulz.308692 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X