Should I remove “Bulz.508572”?

The Bulz.508572 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.508572 virus can do?

Authenticode signature is invalid
Anomalous binary characteristics
Binary compilation timestomping detected

How to determine Bulz.508572?


File Info:
name: 8376D6623FF14674C78C.mlw
path: /opt/CAPEv2/storage/binaries/d35d488e8d1206395d0c4e32554b07dc2bd2fa5e54743ef64a5eda0ad5b12099
crc32: A58F32D2
md5: 8376d6623ff14674c78cd0c46059ec60
sha1: ab28b53698acc8ac8b472bc5a1b612ea7211e7c2
sha256: d35d488e8d1206395d0c4e32554b07dc2bd2fa5e54743ef64a5eda0ad5b12099
sha512: 225262d0508ee030e891708539c998730152573f935c7dd6780908521510bad0b50933351a13fc0ee547bb137b165cbee3364f3721a8173609717b36551c2053
ssdeep: 96:zEUCh2aSXMgpXbTG2smH/KksubSRnna8fYneNMkRNbN2nz68I9elSqRzNt:nUKjpXu2sVrRnna8f7MyRoz6p9bs
type: PE32+ executable (console) x86-64, for MS Windows
tlsh: T1E002C70997D49721F5BA8336ADB39300D337F6E6C9379B1E91FE001B2F6724006827A2
sha3_384: 9587265832db9e3cac1c3be4550170dafaf2c2a60b0ab3d7d554879619d4fe1c0c55db6c735a1d48d7ee008d7057936e
ep_bytes: 4d5a90000300000004000000ffff0000
timestamp: 2069-05-29 07:57:49

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: LolAder
FileVersion: 1.0.0.0
InternalName: LolAder.exe
LegalCopyright: Copyright ©  2022
LegalTrademarks: 
OriginalFilename: LolAder.exe
ProductName: LolAder
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Bulz.508572 also known as:

Cynet	Malicious (score: 100)
VIPRE	Gen:Variant.Bulz.508572
Elastic	malicious (high confidence)
BitDefender	Gen:Variant.Bulz.508572
MicroWorld-eScan	Gen:Variant.Bulz.508572
Ad-Aware	Gen:Variant.Bulz.508572
Emsisoft	Gen:Variant.Bulz.508572 (B)
FireEye	Gen:Variant.Bulz.508572
Avira	HEUR/AGEN.1208634
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Arcabit	Trojan.Bulz.D7C29C
GData	Gen:Variant.Bulz.508572
Acronis	suspicious
MAX	malware (ai score=88)
Rising	Trojan.Generic/MSIL@AI.97 (RDM.MSIL:mWicZXvINmA0TML9t8vXrA)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
CrowdStrike	win/malicious_confidence_90% (D)

How to remove Bulz.508572?

Bulz.508572 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X