About “Bulz.747273” infection

The Bulz.747273 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.747273 virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine Bulz.747273?


File Info:
name: 32EE3745CD7A219D9096.mlw
path: /opt/CAPEv2/storage/binaries/9d38024b0f569f382308f0b33a1ff70327d308f303af7270c4dfe73e6176ed64
crc32: 380B532E
md5: 32ee3745cd7a219d90963f862e95921f
sha1: a4760684ec548ac761456cfaa8003c8bea5606f9
sha256: 9d38024b0f569f382308f0b33a1ff70327d308f303af7270c4dfe73e6176ed64
sha512: 462fb654bfa0c68debdcc2f638def5b16cfb5788da77c696851d1b6bf5ab623250dd8af2de64b8dc772da4618a772a2134d9a714a4cff3ba49d0feba4e1cd80a
ssdeep: 768:GFSHmHTfZG7Kz+2WPx2oha/jiqvMAXqy0kKh0qlxv7U7hleL9+93NlDsQbjN:loVbjWPkohGmyfabJv7yleLcKap
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1C8338D46F2A67500F77E4A3AD47A0250D7B772430833D7AE2EBE099A473B5448E6DF21
sha3_384: d713f1cad786435128fbbe5b7d07a96c4685fd31a42fce640ada392badcbcb88163a9ed9af71030c05284a394ab5ba67
ep_bytes: ff250020400000000000000000000000
timestamp: 2055-01-21 16:55:32

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: OnlyfansSearcher
FileVersion: 1.0.0.0
InternalName: OnlyfansSearcher.exe
LegalCopyright: Copyright ©  2021
LegalTrademarks: 
OriginalFilename: OnlyfansSearcher.exe
ProductName: OnlyfansSearcher
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Bulz.747273 also known as:

MicroWorld-eScan	Gen:Variant.Bulz.747273
FireEye	Gen:Variant.Bulz.747273
ALYac	Gen:Variant.Bulz.747273
Sangfor	Trojan.Win32.Sabsik.FL
CrowdStrike	win/malicious_confidence_100% (W)
Symantec	ML.Attribute.HighConfidence
TrendMicro-HouseCall	TROJ_GEN.R002H06AT22
BitDefender	Gen:Variant.Bulz.747273
Avast	Win32:Malware-gen
Emsisoft	Gen:Variant.Bulz.747273 (B)
McAfee-GW-Edition	GenericRXQI-FI!32EE3745CD7A
SentinelOne	Static AI – Malicious PE
Sophos	Mal/Generic-S
APEX	Malicious
Microsoft	Trojan:Script/Phonzy.C!ml
GData	Gen:Variant.Bulz.747273
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win.FI.C4703889
McAfee	GenericRXQI-FI!32EE3745CD7A
MAX	malware (ai score=86)
Malwarebytes	Backdoor.NanoCore
Fortinet	PossibleThreat
AVG	Win32:Malware-gen

How to remove Bulz.747273?

Bulz.747273 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X