Bulz.911846 (file analysis)

The Bulz.911846 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.911846 virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Bulz.911846?


File Info:
name: 118CFEC1E161AEE4B5BC.mlw
path: /opt/CAPEv2/storage/binaries/6977e2d5e2cacf0b55754399854f0858f4e4c87df140fc2afd2defe2423fc7d6
crc32: 1A4733A8
md5: 118cfec1e161aee4b5bc8668ddb87055
sha1: 5cf6eb3f52229edc2604444752a70df26bc2e358
sha256: 6977e2d5e2cacf0b55754399854f0858f4e4c87df140fc2afd2defe2423fc7d6
sha512: 978e6086d2d0a79bd47589b0a9bace17203140400824b6cfde761e1fdca9ff73fa534deb5f2db671118348244c18b7f2be903cf4fec905b83cd492a6f0600cdb
ssdeep: 12288:8yfPmUXUMOnAF99q4yNcDWSjEZvYkpC7:m5AF99q4yNcIZvYYg
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1789423B122708394DDE62338B9F9D12B33B9BE201465D1086AE18D6F7D33B764266FD1
sha3_384: ebc96faa46b20fc512b6ffb3fd1a9484f97b58d8b59ea93857c0e8a7f553dcb37cde853dff45f6ac4e9a76b9ec50e3e8
ep_bytes: ff250020400000000000000000000000
timestamp: 2022-01-07 14:24:09

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: FolderSizeViewer
FileVersion: 1.0.0.0
InternalName: JitHelpe.exe
LegalCopyright: Copyright ©  2017
LegalTrademarks: 
OriginalFilename: JitHelpe.exe
ProductName: FolderSizeViewer
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Bulz.911846 also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Bulz.911846
FireEye	Generic.mg.118cfec1e161aee4
ALYac	Gen:Variant.Bulz.911846
Malwarebytes	MachineLearning/Anomalous.95%
Cybereason	malicious.f52229
Cyren	W32/MSIL_Kryptik.GIM.gen!Eldorado
Symantec	Scr.Malcode!gdn30
ESET-NOD32	a variant of MSIL/Kryptik.ADXR
APEX	Malicious
Paloalto	generic.ml
Kaspersky	HEUR:Trojan-PSW.MSIL.Agensla.gen
BitDefender	Gen:Variant.Bulz.911846
Avast	Win32:PWSX-gen [Trj]
Ad-Aware	Gen:Variant.Bulz.911846
Emsisoft	Gen:Variant.Bulz.911846 (B)
McAfee-GW-Edition	BehavesLike.Win32.Generic.gc
Sophos	Troj/MSIL-SDM
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
GData	Gen:Variant.Bulz.911846
McAfee	Artemis!118CFEC1E161
MAX	malware (ai score=81)
Cylance	Unsafe
Rising	Malware.Obfus/MSIL@AI.90 (RDM.MSIL:/3ZlRcMGb5etKmTsPptbtw)
SentinelOne	Static AI – Suspicious PE
Fortinet	W32/Malicious_Behavior.SBX
AVG	Win32:PWSX-gen [Trj]
CrowdStrike	win/malicious_confidence_70% (W)

How to remove Bulz.911846?

Bulz.911846 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X