What is “Bulz.336232”?

The Bulz.336232 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.336232 virus can do?

The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

How to determine Bulz.336232?


File Info:
crc32: 10F3DD97
md5: d8804ff0248f060eb9acea11264c0a32
name: D8804FF0248F060EB9ACEA11264C0A32.mlw
sha1: e5e5af93b3a3b2bb8bf2908698beffc8998dced6
sha256: e474cac15d34ec9eb797b3071b8ca42d69fbf1f38fa67a22eedcff1e6a754525
sha512: 6f98cbfc5f806fe9d21aff6272d47fc2177d3680dc394eb33c2bdb4e322167887037c901b166a24a4aede02d8a7e18605b4ec80ff7bd39f385984917dd28508d
ssdeep: 3072:FNTe4INJa4UOBl57n60DLGfkZoFHiC8vNZ1ntnOOEYjODCQOz32yL:FdkNl520DyhJiNZLhE7M2yL
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright Java xa9  2021
Assembly Version: 1.0.0.0
InternalName: TOJA Browser.exe
FileVersion: 1.0.0.0
CompanyName: Abra-Knowledge
LegalTrademarks: 
Comments: TOJA Browser is a Web Browser written in C# using Visual Studio 2017
ProductName: TOJA Browser
ProductVersion: 1.0.0.0
FileDescription: TOJA Browser
OriginalFilename: TOJA Browser.exe

Bulz.336232 also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Bulz.336232
FireEye	Generic.mg.d8804ff0248f060e
McAfee	RDN/Generic.dx
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
BitDefender	Gen:Variant.Bulz.336232
Cybereason	malicious.0248f0
BitDefenderTheta	Gen:NN.ZemsilF.34590.vq2@aWvEgOj
Cyren	W32/MSIL_Kryptik.BUN.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	FileRepMalware
Kaspersky	HEUR:Trojan.Win32.Generic
Alibaba	Trojan:MSIL/Kryptik.3128ce68
Ad-Aware	Gen:Variant.Bulz.336232
Sophos	ML/PE-A
F-Secure	Trojan.TR/Dropper.Gen
McAfee-GW-Edition	BehavesLike.Win32.Generic.ft
Emsisoft	Gen:Variant.Bulz.336232 (B)
Avira	TR/Dropper.Gen
MAX	malware (ai score=83)
Microsoft	Backdoor:Win32/Bladabindi!ml
Arcabit	Trojan.Bulz.D52168
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Gen:Variant.Bulz.336232
Cynet	Malicious (score: 90)
Malwarebytes	Malware.AI.900399328
ESET-NOD32	a variant of MSIL/Kryptik.IRC
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_100%
Fortinet	MSIL/Injector.SES!tr
AVG	FileRepMalware
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_90% (W)
Qihoo-360	HEUR/QVM03.0.8A54.Malware.Gen

How to remove Bulz.336232?

Bulz.336232 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X