Should I remove “Bulz.548815”?

The Bulz.548815 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.548815 virus can do?

Sample contains Overlay data
CAPE extracted potentially suspicious content
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Bulz.548815?


File Info:
name: 6A8F4625D8AA46C98A5A.mlw
path: /opt/CAPEv2/storage/binaries/e31576040c96351de61998e863ff7eaead30bf0929d1a9ea3a2084ff42093a5e
crc32: 30280BE7
md5: 6a8f4625d8aa46c98a5ad2ed1493ba1f
sha1: 127be28a49ea28b20429fe7fe13daec7bb451cdd
sha256: e31576040c96351de61998e863ff7eaead30bf0929d1a9ea3a2084ff42093a5e
sha512: 246815ef81f4c1e9dc064a0505905592d683f7d38187b782ef470f5ea3d89a2a7d9e2287a7a6a2ebc34e70b71a010971690a57649d6a19c9df9c53601427114a
ssdeep: 3072:L46yoD29R4+M9GT58KSK1eQY3noVQvoaRwMHdnV5QJscpl1zlsRgLhLOx8vMapsd:ZyrR4vK1eQY3nok1nV5QJscpl1zlsRgq
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T171044928B3E54169F6B747356DF64132D672FC131E22E76E2B4DD3680F21A848E22763
sha3_384: c1ddf95abafb5ab47d04a410d6ae1f09c5397819b70c879bdf3d170509e632ce26e9b5d7472d32f995e3280f08d15e6a
ep_bytes: ff250020400000000000000000000000
timestamp: 2007-10-24 03:31:10

Version Info:
CompanyName: Microsoft Corporation
FileDescription: Microsoft .NET Assembly Registration Utility
FileVersion: 2.0.50727.1433 (REDBITS.050727-1400)
InternalName: RegAsm.exe
LegalCopyright: © Microsoft Corporation.  All rights reserved.
OriginalFilename: RegAsm.exe
ProductName: Microsoft® .NET Framework
ProductVersion: 2.0.50727.1433
Comments: Flavor=Retail
Translation: 0x0409 0x04b0

Bulz.548815 also known as:

Bkav	W32.AIDetectMalware.CS
Lionic	Trojan.Win32.Generic.4!c
MicroWorld-eScan	Gen:Variant.Bulz.548815
FireEye	Gen:Variant.Bulz.548815
Skyhigh	BehavesLike.Win32.Generic.cm
McAfee	Artemis!6A8F4625D8AA
Sangfor	Trojan.Win32.Agent.V0zb
Cybereason	malicious.5d8aa4
Elastic	malicious (high confidence)
APEX	Malicious
BitDefender	Gen:Variant.Bulz.548815
Emsisoft	Gen:Variant.Bulz.548815 (B)
VIPRE	Gen:Variant.Bulz.548815
Varist	W32/CoinMiner.DQ.gen!Eldorado
Kingsoft	malware.kb.c.746
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Trojan.Bulz.D85FCF
GData	Gen:Variant.Bulz.548815
Google	Detected
ALYac	Gen:Variant.Bulz.548815
MAX	malware (ai score=86)
Cylance	unsafe
SentinelOne	Static AI – Malicious PE
Fortinet	W32/SPNR.15EG12!tr
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_70% (D)
alibabacloud	Trojan:Win/Bulz

How to remove Bulz.548815?

Bulz.548815 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X