Bulz.656420 (file analysis)

The Bulz.656420 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.656420 virus can do?

Presents an Authenticode digital signature
Anomalous binary characteristics

How to determine Bulz.656420?


File Info:
crc32: A25801A6
md5: 958ad714efa274e3392ef032560845b7
name: 958AD714EFA274E3392EF032560845B7.mlw
sha1: 3e1ed273dac5ec38945b54f79c655eb4da5266fd
sha256: 48249c3d6d6a4376f5e149f3964d1ff80c60ce2e58ab69cf84282ab001bdb5f9
sha512: 8bfb22881c356db1c0429875518b10df9cbd8defd49348b76172a7cc76bde05df847870eebcb0d4f7b272764b1153692942899b8402676972cc42ad9f1e69c51
ssdeep: 49152:jzqFExqSjHJ3uTFxhrFzesDUcf2myTp6VPcTTJT:xHbsDuT
type: PE32+ executable (GUI) x86-64, for MS Windows

Version Info:
LegalCopyright: Copyright 2021 Google LLC. All rights reserved.
InternalName: chrome_exe
CompanyShortName: Google
FileVersion: 92.0.4515.159
CompanyName: Google LLC
ProductShortName: Chrome
ProductName: Google Chrome
LastChange: 0185b8a19c88c5dfd3e6c0da6686d799e9bc3b52-refs/branch-heads/4515@#2052
ProductVersion: 92.0.4515.159
FileDescription: Google Chrome
OriginalFilename: chrome.exe
Official Build: 1
Translation: 0x0409 0x04b0

Bulz.656420 also known as:

Lionic	Trojan.Win32.Bulz.4!c
DrWeb	BackDoor.Bifrost.491
ALYac	Gen:Variant.Bulz.656420
Cybereason	malicious.4efa27
Cyren	W32/Bifrost.H.gen!Eldorado
Symantec	Trojan.Gen.MBT
Avast	Win32:Agent-ADAT [Drp]
ClamAV	Win.Trojan.Bifrose-9900238-0
BitDefender	Gen:Variant.Bulz.656420
NANO-Antivirus	Trojan.Win32.Bifrose.jaoc
ViRobot	Trojan.Win32.Z.Bifrose.2491184
MicroWorld-eScan	Gen:Variant.Bulz.656420
Ad-Aware	Gen:Variant.Bulz.656420
Sophos	Mal/Generic-S
TrendMicro	TROJ_GEN.R002C0DKI21
McAfee-GW-Edition	BehavesLike.Win64.Dropper.vh
FireEye	Gen:Variant.Bulz.656420
Emsisoft	Gen:Variant.Bulz.656420 (B)
Jiangmin	Trojan.Agent.dqac
Avira	BDS/Poison.mon
Antiy-AVL	Trojan/Generic.ASMalwS.34B5BE1
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Gen:Variant.Bulz.656420
McAfee	Artemis!958AD714EFA2
MAX	malware (ai score=82)
VBA32	BScope.Backdoor.Bifrose
Malwarebytes	Malware.AI.2770810630
TrendMicro-HouseCall	TROJ_GEN.R002C0DKI21
Yandex	Trojan.GenAsa!HFnuTkRa15o
Ikarus	Virus.Win32.CeeInject
Fortinet	W32/PossibleThreat
AVG	Win32:Agent-ADAT [Drp]

How to remove Bulz.656420?

Bulz.656420 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X