Bulz.427657 (file analysis)

The Bulz.427657 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.427657 virus can do?

Presents an Authenticode digital signature
Anomalous binary characteristics

How to determine Bulz.427657?


File Info:
crc32: CF2F5787
md5: a1d2913d23151b60fc1ccda4125f7096
name: A1D2913D23151B60FC1CCDA4125F7096.mlw
sha1: 801b41e1ba122f7a4edcee4428082c8634a3f7ff
sha256: 6fe4d129ddd8057ddd0936523accbc6e4bb41e95869efc0bf76e94b7e312e406
sha512: 595fd2f39da57bd5e27eb23011a5efc6757a41f9dc3a01cdaf6794ace08110063bcfb3efacdb9873fa2afc9676e9c54d5910c6cf3158fcab9ff22634a8cbef84
ssdeep: 24576:rRXD2aewsAj6gHF8z3j5D7JaT+KVvrSrtUxW7:rHljLHF+3j5D78OBU6
type: PE32+ executable (GUI) x86-64, for MS Windows

Version Info:
LegalCopyright: xa91999-2018 Jonathan Bennett & AutoIt Team
InternalName: Au3Info.exe
FileVersion: 3, 3, 14, 5
CompanyName: AutoIt Team
Comments: http://www.autoitscript.com/autoit3/
ProductName: Au3Info
ProductVersion: 3, 3, 14, 5
FileDescription: Au3Info
OriginalFilename: Au3Info.exe
Translation: 0x0809 0x04b0

Bulz.427657 also known as:

Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Bulz.427657
Cylance	Unsafe
Sangfor	Trojan.Win32.Wacatac.B
CrowdStrike	win/malicious_confidence_60% (W)
Alibaba	Virus:Win32/Ransomware.38770300
Cybereason	malicious.d23151
Cyren	W64/Ipamor.BF.gen!Eldorado
Symantec	Trojan.Gen.MBT
APEX	Malicious
Avast	Win64:Malware-gen
ClamAV	Win.Ransomware.WannaCry-9856297-0
BitDefender	Gen:Variant.Bulz.427657
MicroWorld-eScan	Gen:Variant.Bulz.427657
Ad-Aware	Gen:Variant.Bulz.427657
Sophos	Generic ML PUA (PUA)
McAfee-GW-Edition	BehavesLike.Win64.HLLP.th
FireEye	Generic.mg.a1d2913d23151b60
Emsisoft	Gen:Variant.Bulz.427657 (B)
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Gen:Variant.Bulz.427657
McAfee	Artemis!A1D2913D2315
MAX	malware (ai score=85)
VBA32	Trojan.Downloader
TrendMicro-HouseCall	TROJ_GEN.R03BH0CE321
Ikarus	Virus.Win32.VB
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W64/Ipamor.959B!tr
AVG	Win64:Malware-gen
Paloalto	generic.ml
Qihoo-360	Win64/Trojan.Generic.HgEASUEA

How to remove Bulz.427657?

Bulz.427657 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X