Categories: Malware

Razy.605212 (file analysis)

The Razy.605212 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Razy.605212 virus can do?

Unconventionial language used in binary resources: Kannada
The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Razy.605212?


File Info:
crc32: 2B1B2C8Cmd5: f8deac861e2b9376496f4b6249d34ad3name: pf.exesha1: d2b5f7896351c04cb9638d39b8da7e0dc8f905b2sha256: 665f8b6400e251be9bf7dbaa99d9acbf369ee0d582fabc36ec99640e6c933ce3sha512: 1234baa960350e6ca69b87e79ce29305beac706cff46251eade58d854fed42865cdea348cdeec4fc07c752273e8038603007123a3f3973ab0ff201e01d714042ssdeep: 12288:cvB2YRh7LXK5pqKxOPuHacujE9Qr+0T44GtsMCj:cvB2ALXCqeB6cuj3+0T4ptWtype: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Version Info:
LegalCopyright: 2017 (c) Realtek Semiconductor.  All rights reserved.InternalName: RtHDVBgProc.exeFileVersion: 1, 0, 0, 276CompanyName: Realtek SemiconductorProductName: HD Audio Background ProcessProductVersion: 1, 0, 0, 276FileDescription: HD Audio Background ProcessOriginalFilename: RtHDVBgProc.exeTranslation: 0x0409 0x04e4

Razy.605212 also known as:

MicroWorld-eScan	Gen:Variant.Razy.605212
FireEye	Generic.mg.f8deac861e2b9376
CAT-QuickHeal	Trojanpws.Msil
Qihoo-360	Generic/Trojan.PSW.a72
McAfee	RDN/Generic PWS.y
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
AegisLab	Trojan.Win32.Generic.m0Hq
Sangfor	Malware
K7AntiVirus	Trojan ( 005585561 )
BitDefender	Gen:Variant.Razy.605212
K7GW	Trojan ( 005585561 )
CrowdStrike	win/malicious_confidence_100% (W)
Invincea	heuristic
BitDefenderTheta	Gen:NN.ZemsilF.34084.Hm0@aWoeZajG
ESET-NOD32	a variant of MSIL/Kryptik.SXL
TrendMicro-HouseCall	TROJ_GEN.R049C0GB220
Avast	Win32:CrypterX-gen [Trj]
GData	Gen:Variant.Razy.605212
Kaspersky	HEUR:Trojan-PSW.MSIL.Azorult.gen
Alibaba	Trojan:Win32/runner.ali1000123
NANO-Antivirus	Trojan.Win32.Kryptik.gyumuy
Rising	Trojan.Kryptik!8.8 (CLOUD)
Ad-Aware	Gen:Variant.Razy.605212
Sophos	Mal/Generic-S
F-Secure	Trojan.TR/Kryptik.zetmh
DrWeb	Trojan.DownLoader32.55562
Zillya	Trojan.Kryptik.Win32.1927816
TrendMicro	TROJ_GEN.R049C0GB220
McAfee-GW-Edition	BehavesLike.Win32.Generic.hc
SentinelOne	DFI – Malicious PE
Trapmine	malicious.high.ml.score
Emsisoft	Gen:Variant.Razy.605212 (B)
APEX	Malicious
Cyren	W32/Trojan.UFSB-7567
Jiangmin	Trojan.PSW.MSIL.qxf
Avira	TR/Kryptik.zetmh
Endgame	malicious (high confidence)
Arcabit	Trojan.Razy.D93C1C
AhnLab-V3	Trojan/Win32.Generic.R325472
ZoneAlarm	HEUR:Trojan-PSW.MSIL.Azorult.gen
Microsoft	Trojan:Win32/Occamy.C
VBA32	TScope.Trojan.MSIL
ALYac	Gen:Variant.Razy.605212
MAX	malware (ai score=83)
Malwarebytes	Trojan.Dropper
Panda	Trj/GdSda.A
Tencent	Msil.Trojan-qqpass.Qqrob.Egeo
Ikarus	Trojan.MSIL.Bamgadin
eGambit	Trojan.Generic
Fortinet	MSIL/Krytik.SHS!tr
AVG	Win32:CrypterX-gen [Trj]
Cybereason	malicious.96351c
Paloalto	generic.ml