Categories: Malware

Application.Razy.944506 removal tips

The Application.Razy.944506 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Application.Razy.944506 virus can do?

Behavioural detection: Executable code extraction – unpacking
SetUnhandledExceptionFilter detected (possible anti-debug)
Dynamic (imported) function loading detected
Yara rule detections observed from a process memory dump/dropped files/CAPE
Creates RWX memory
NtSetInformationThread: attempt to hide thread from debugger
The binary contains an unknown PE section name indicative of packing
Executable file is packed/obfuscated with Themida
Authenticode signature is invalid
Uses Windows utilities for basic functionality
Detects Sandboxie through the presence of a library
Checks the version of Bios, possibly for anti-virtualization
Detects VirtualBox through the presence of a registry key
Anomalous binary characteristics

How to determine Application.Razy.944506?


File Info:
name: 89B843D594F71D3E03C9.mlwpath: /opt/CAPEv2/storage/binaries/5afd9c3fe6f11c71a18310269a76dde770bb70d38815904d658d4fa4f7aab590crc32: 278BE88Bmd5: 89b843d594f71d3e03c943b891dcba87sha1: 5a1074332332b27669ad762713e512d8769f2007sha256: 5afd9c3fe6f11c71a18310269a76dde770bb70d38815904d658d4fa4f7aab590sha512: d3d786d7a90ea1cf3b0190ef7cd7ecb6281393b799a125fb8e15a1aa48f23ab65c2619afd18e78ea473b9a95fcc727f2c72b22d3f2c156a5d8a521c3e501f7e6ssdeep: 49152:WG9uUE71eP46AGD4h2KUrMXBBpA6PjVcowT6I17iyEPl6ul:buUE67hKUrMxBHP5cptpjEPEqtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T115F59EF6770BE2EFC15A0C74EA01AF0BE92433D19215D511E96A787CCA03D96738AF49sha3_384: fe41da3bff663bce81e81c50339dc991de540fefc80c6efc108a84f64f36fc20433421162b5b765fe2d57b61f7f97695ep_bytes: 55e919ac0200e9e71af9ffe900000000timestamp: 2012-11-16 22:57:03
Version Info:
CompanyName: Google LLCFileDescription: Google InstallerFileVersion: 1.3.34.11InternalName: Google UpdateLegalCopyright: Copyright 2018 Google LLCOriginalFilename: GoogleUpdate.exeProductName: Google UpdateProductVersion: 1.3.34.11Translation: 0x0400 0x04b0

Application.Razy.944506 also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Application.Razy.944506
FireEye	Generic.mg.89b843d594f71d3e
ALYac	Gen:Variant.Application.Razy.944506
Cylance	Unsafe
BitDefender	Gen:Variant.Application.Razy.944506
Cybereason	malicious.594f71
BitDefenderTheta	Gen:NN.ZexaF.34182.x70@auT9oJnO
Cyren	W32/CoinMiner.DR.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ClamAV	Win.Malware.Razy-9882105-0
Kaspersky	UDS:Trojan.BAT.Runner.ct
APEX	Malicious
McAfee-GW-Edition	BehavesLike.Win32.Obfuscated.wh
Emsisoft	Gen:Variant.Application.Razy.944506 (B)
Ikarus	Trojan.Crypt
MaxSecure	Trojan.Malware.300983.susgen
Avira	TR/Crypt.ZPACK.Gen2
MAX	malware (ai score=72)
GData	Gen:Variant.Application.Razy.944506
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Gen.RL_Reputation.R366812
McAfee	GenericRXAA-AA!89B843D594F7
Malwarebytes	Trojan.MalPack.Themida
Panda	Trj/Genetic.gen
Rising	Malware.Heuristic!ET#96% (RDMK:cmRtazrfuEQrkv2GTxuaAJGLB8Tf)
SentinelOne	Static AI – Suspicious PE
Fortinet	W32/Agent.D694!tr
AVG	Win32:MalwareX-gen [Trj]
Avast	Win32:MalwareX-gen [Trj]
CrowdStrike	win/malicious_confidence_100% (D)