What is “Bulz.448275”?

The Bulz.448275 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.448275 virus can do?

The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

How to determine Bulz.448275?


File Info:
crc32: C0D03692
md5: 734dcc6ee873ad6667d9cad4e5040134
name: 734DCC6EE873AD6667D9CAD4E5040134.mlw
sha1: 205b63e53d5789f469bdfafdfb553e74b967f5df
sha256: cce12e2162f90a88715e50bfa993e9d3233fecaf608fb18cda68f0154f0e1d5b
sha512: 61b9dd380effc682868ee45d7c1a789a6f516409586f93908a3cbc222300afaa8bc309719e68a63dd0c2095955138c9f75b041dbd0b234ff824d21c8949e7ea5
ssdeep: 24576:sCoLASBuls9O+ITcyZwBCrKaPW1P6GT4g6T98UAKL4M:22s9OjAyuBQNP6p6T6ZE
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2020
Assembly Version: 1.0.0.0
InternalName: x5979x6303Y6x516ckOcx884c.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: POSCashSystem
ProductVersion: 1.0.0.0
FileDescription: POSCashSystem
OriginalFilename: x5979x6303Y6x516ckOcx884c.exe

Bulz.448275 also known as:

Elastic	malicious (high confidence)
DrWeb	Trojan.Inject4.10928
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Bulz.448275
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_80% (D)
K7GW	Trojan ( 0057b56d1 )
Cyren	W32/MSIL_Kryptik.DOX.gen!Eldorado
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of MSIL/GenKryptik.FELC
APEX	Malicious
Avast	Win32:RATX-gen [Trj]
Kaspersky	HEUR:Trojan-PSW.MSIL.Agensla.gen
BitDefender	Gen:Variant.Bulz.448275
MicroWorld-eScan	Gen:Variant.Bulz.448275
Ad-Aware	Gen:Variant.Bulz.448275
Sophos	ML/PE-A
McAfee-GW-Edition	Artemis
FireEye	Generic.mg.734dcc6ee873ad66
Emsisoft	Gen:Variant.Bulz.448275 (B)
SentinelOne	Static AI – Malicious PE
Arcabit	Trojan.Bulz.D6D713
ZoneAlarm	HEUR:Trojan-PSW.MSIL.Agensla.gen
GData	Gen:Variant.Bulz.448275
AhnLab-V3	Trojan/Win.AgentTesla.C4439224
McAfee	GenericRXOI-EJ!734DCC6EE873
MAX	malware (ai score=80)
Malwarebytes	Trojan.MalPack.FVTN
Panda	Trj/GdSda.A
AVG	Win32:RATX-gen [Trj]

How to remove Bulz.448275?

Bulz.448275 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X