Bulz.505623 malicious file

The Bulz.505623 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Bulz.505623 virus can do?

Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Bulz.505623?


File Info:
crc32: 56E539E4
md5: 267188288ddcd95ec79fca2b3c0ed42c
name: 267188288DDCD95EC79FCA2B3C0ED42C.mlw
sha1: 633d648b28dcd519d41695796b68cbb654922486
sha256: 68967d28efc64f6ebfa53f56646974cf0ad04d0a7ac0ea3cfd806ce1ed7ff62b
sha512: 86f5db78fed061aee2f5c5b0ff3d6d1dcc0a99a46457b29b1ab2e385584dabfa618f1d373262ec58aed195de9896d2df7a76d1d8e374c1930aa5f809c02bab07
ssdeep: 3072:COWdlkeoxWqywIlSZ3kXkvtmvCSdaVaEcs+9cZO088TOUA4OWvqJhja:GrmElCUkFmzslcJ9se6Q1
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2021
Assembly Version: 1.0.0.0
InternalName: Defender.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: WindowsFormsApp1
ProductVersion: 1.0.0.0
FileDescription: WindowsFormsApp1
OriginalFilename: Defender.exe

Bulz.505623 also known as:

Elastic	malicious (high confidence)
ALYac	Gen:Variant.Bulz.505623
Sangfor	Trojan.Win32.Save.a
BitDefender	Gen:Variant.Bulz.505623
Cybereason	malicious.b28dcd
ESET-NOD32	a variant of MSIL/Filecoder.LU
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan-Ransom.MSIL.Tear.gen
MicroWorld-eScan	Gen:Variant.Bulz.505623
Tencent	Msil.Trojan.Tear.Hqvh
Ad-Aware	Gen:Variant.Bulz.505623
BitDefenderTheta	Gen:NN.ZemsilF.34058.kq0@aGb1Yh
FireEye	Generic.mg.267188288ddcd95e
Emsisoft	Gen:Variant.Bulz.505623 (B)
SentinelOne	Static AI – Suspicious PE
eGambit	Unsafe.AI_Score_95%
Microsoft	Backdoor:Win32/Bladabindi!ml
Arcabit	Trojan.Bulz.D7B717
GData	Gen:Variant.Bulz.505623
MAX	malware (ai score=87)
Ikarus	Trojan.Dropper
MaxSecure	Trojan.Malware.300983.susgen
Qihoo-360	HEUR/QVM03.0.25AD.Malware.Gen

How to remove Bulz.505623?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Bulz.505623 malicious file