Malware

Bulz.898513 removal instruction

Malware Removal

The Bulz.898513 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Bulz.898513 virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Dynamic (imported) function loading detected
  • Presents an Authenticode digital signature
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Bulz.898513?


File Info:

name: 35D1BD06D2408D6618DA.mlw
path: /opt/CAPEv2/storage/binaries/36a82bc14e13af9b7390e437d3359a2d70c56f34bf653f1ce1579e1f298435af
crc32: A3655F8B
md5: 35d1bd06d2408d6618da014a96dc01fc
sha1: 9158840b68d921c572ccd12d253e6081c5134a0e
sha256: 36a82bc14e13af9b7390e437d3359a2d70c56f34bf653f1ce1579e1f298435af
sha512: e40b24b72c99fffa9ff8a330fa861e57909aa849ec1e83dca43492c93414ddd3579a5e7bfa47ff2d1ffe84c9dea4fb8ed44f500f30349c267cd2233fa2890fba
ssdeep: 24576:p7coALfPi1dJU43I98U7nYYJ2tHhADSANLHgZpJEMLWF3tm7s7xmDtaLg/DRZhfs:pw/4MnYYJ2ZhqSGLHkJEMISSxmDta40
type: PE32+ executable (GUI) x86-64, for MS Windows
tlsh: T17E65AE23E79094B2C523123089A9B271F3BAFD654711474B676C9E192E72AF07E3C727
sha3_384: fb5ab7c0032a6986046de670ec9c0214f5746934f924279b08fa3da748f0d6ab495474c8bc8c439d3ecc059e946d351b
ep_bytes: 4883ec28e85b0200004883c428e97afe
timestamp: 2021-08-11 22:26:42

Version Info:

CompanyName: Microsoft Corporation
FileDescription: Microsoft Edge
FileVersion: 92.0.902.73
InternalName: cookie_exporter_exe
LegalCopyright: Copyright Microsoft Corporation. All rights reserved.
OriginalFilename: cookie_exporter.exe
ProductName: Microsoft Edge
ProductVersion: 92.0.902.73
CompanyShortName: Microsoft
ProductShortName: Microsoft Edge
LastChange: cad199e39220991414cd71868a619fff614880c7
Official Build: 1
Translation: 0x0409 0x04b0

Bulz.898513 also known as:

LionicTrojan.Win32.Bulz.4!c
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Bulz.898513
FireEyeGen:Variant.Bulz.898513
McAfeeArtemis!35D1BD06D240
CylanceUnsafe
CyrenW64/Bulz.BT.gen!Eldorado
TrendMicro-HouseCallTROJ_GEN.R03BH09L321
ClamAVWin.Trojan.Blackie-9838328-0
BitDefenderGen:Variant.Bulz.898513
AvastFileRepMalware
EmsisoftGen:Variant.Bulz.898513 (B)
McAfee-GW-EditionBehavesLike.Win64.BadFile.th
SentinelOneStatic AI – Suspicious PE
GDataGen:Variant.Bulz.898513
JiangminPacked.Krap.gvuw
MAXmalware (ai score=83)
Antiy-AVLTrojan/Generic.ASMalwS.349521C
GridinsoftRansom.Win64.Sabsik.sa
MicrosoftTrojan:Win32/Wacatac.B!ml
CynetMalicious (score: 100)
ALYacGen:Variant.Bulz.861609
IkarusTrojan.Agent
FortinetW64/Bulz.BT!tr
AVGFileRepMalware

How to remove Bulz.898513?

Bulz.898513 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment