Bulz.352316 (file analysis)

The Bulz.352316 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.352316 virus can do?

The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

How to determine Bulz.352316?


File Info:
crc32: 231EFF92
md5: fb59689cd3a1273e4af4f309434b7909
name: FB59689CD3A1273E4AF4F309434B7909.mlw
sha1: ffcb7242f989deb6a30542cfbd088c57df3a743b
sha256: 642e7c5b6904fe50c539440104b792feece1754c754b69e4d369ad494222cb78
sha512: 28242d1437648a911f3c62ffd019896a56024a224b2752c680f5b35e536bb9f89fcd7743768db0c20320e12f7da6b4b20935948eacfc6e5eba1496f989eaf5c9
ssdeep: 6144:KWACGLF7s/ZmwA5Ywv1z0W+p7PnkU9Nj5k5EmO9G/dNRbvvGwZsUlmE8B4zpEtf:gAVUvR0BLkWmRJCwZsCC4CHXSJ0
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 Microsoft 2014
Assembly Version: 1.0.0.0
InternalName: PropertyInfo.exe
FileVersion: 1.0.0.0
CompanyName: Microsoft
LegalTrademarks: 
Comments: 
ProductName: WinClient
ProductVersion: 1.0.0.0
FileDescription: WinClient
OriginalFilename: PropertyInfo.exe

Bulz.352316 also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Bulz.352316
FireEye	Generic.mg.fb59689cd3a1273e
ALYac	Gen:Variant.Bulz.352316
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
BitDefender	Gen:Variant.Bulz.352316
Cybereason	malicious.2f989d
Cyren	W32/MSIL_Kryptik.DGI.gen!Eldorado
Symantec	Trojan.Gen.2
Avast	Win32:RATX-gen [Trj]
Kaspersky	HEUR:Trojan-PSW.MSIL.Agensla.gen
Ad-Aware	Gen:Variant.Bulz.352316
Emsisoft	Gen:Variant.Bulz.352316 (B)
McAfee-GW-Edition	BehavesLike.Win32.Fareit.gc
SentinelOne	Static AI – Malicious PE
Sophos	ML/PE-A
Ikarus	Win32.Outbreak
MaxSecure	Trojan.Malware.300983.susgen
Avira	TR/Redcap.plywy
Microsoft	Trojan:Win32/AgentTesla!ml
Arcabit	Trojan.Bulz.D5603C
ZoneAlarm	HEUR:Trojan-PSW.MSIL.Agensla.gen
GData	Gen:Variant.Bulz.352316
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Lokibot.C4344709
McAfee	Artemis!FB59689CD3A1
MAX	malware (ai score=80)
Malwarebytes	Malware.AI.1881095700
APEX	Malicious
Fortinet	MSIL/Kryptik.ZTA!tr
AVG	Win32:RATX-gen [Trj]
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_90% (D)
Qihoo-360	Win32/Backdoor.Rat.HwMAePQA

How to remove Bulz.352316?

Bulz.352316 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X