Bulz.197963 malicious file

The Bulz.197963 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.197963 virus can do?

Dynamic (imported) function loading detected
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine Bulz.197963?


File Info:
name: 2CED05F3F1713B094627.mlw
path: /opt/CAPEv2/storage/binaries/3f09e18ad72e576c0280febca7a3e935cc048d17c3bfd002466f2b099a1133b9
crc32: E09DC6A0
md5: 2ced05f3f1713b09462749452fa4efd1
sha1: 25cb219c0d919c2309a65dfaa206119a2acb1269
sha256: 3f09e18ad72e576c0280febca7a3e935cc048d17c3bfd002466f2b099a1133b9
sha512: ae8252a82675be90d423c8062a67e9c5db807a77685a459605e9c516107a4e0c4917b71672229b14ecfef1240c382a94426d5a3639955ff1ebc7253538054a46
ssdeep: 3072:P5rhQHmMCyUpVoLgbWuxiUDwkgAwYdhQHmMCymqqY:oCyUpVpbrxiUDP9gCyNq
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1C8E48F0A3F85392EF2F7FC3965D0F80CB722CE599A468D468A72347D593766DB5A0032
sha3_384: a1f56f7c9744a55214a786d5639394465298176acdcb0a508877d88986d887c27a39972317369e994c30b2f9d51cb7fd
ep_bytes: ff250020400000000000000000000000
timestamp: 2039-10-24 08:35:08

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: EternityLauncher
FileVersion: 1.0.0.0
InternalName: EternityLauncher.exe
LegalCopyright: Copyright ©  2020
LegalTrademarks: 
OriginalFilename: EternityLauncher.exe
ProductName: EternityLauncher
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Bulz.197963 also known as:

Lionic	Trojan.Win32.Bulz.4!c
MicroWorld-eScan	Gen:Variant.Bulz.197963
FireEye	Gen:Variant.Bulz.197963
ALYac	Gen:Variant.Bulz.197963
Cylance	Unsafe
Sangfor	Hacktool.MSIL.CryptInject.mt
Cybereason	malicious.3f1713
BitDefenderTheta	Gen:NN.ZemsilF.34182.Pm0@aiFZU9l
APEX	Malicious
BitDefender	Gen:Variant.Bulz.197963
McAfee-GW-Edition	Artemis!Trojan
Emsisoft	Gen:Variant.Bulz.197963 (B)
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Gen:Variant.Bulz.197963
McAfee	Artemis!2CED05F3F171
MAX	malware (ai score=84)
Malwarebytes	Generic.Malware/Suspicious
Rising	Trojan.Generic/MSIL@AI.100 (RDM.MSIL:S3OKvXaLQB4kda4VY+Q31A)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.109859595.susgen
Fortinet	PossibleThreat

How to remove Bulz.197963?

Bulz.197963 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X