Razy.766145 (file analysis)

The Razy.766145 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Razy.766145 virus can do?

Executable code extraction
Presents an Authenticode digital signature
Creates RWX memory
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Razy.766145?


File Info:
crc32: 41612EE8
md5: 06f02760b4dcd1b8951b7df6e40ca11a
name: upload_file
sha1: 0d8fb8f893f3c69d6e432c41ec59d8ee74cd5eaa
sha256: 5694f91b4ded48c03a9a6d2be13f5d9300f873ee77ab4ac340facca786ef0f51
sha512: 7f0b55b9f2e3b6b9aaf62f9da92aee7a625786fa882108ac5fb0dedf5aa1aad66d7a1472bd13fef6edf424f87ad53d0469795abba072c85fd16b9854f3776fb8
ssdeep: 6144:NoPMXLGnQE9NphY64U/jMIuxF8RrnFnknZn3nRmn/nlnenvnxnGn5nPYnhnpanPs:mPMbGnLphKeMIuxKR0MOj
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 2016
InternalName: 360realpro.exe
FileVersion: 8,8,0,1000
OriginalFilename: 360realpro.exe
ProductVersion: 8,8,0,1000
Translation: 0x0409 0x04b0

Razy.766145 also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.44006533
Cylance	Unsafe
Sangfor	Malware
K7AntiVirus	Spyware ( 0040f0131 )
Alibaba	Trojan:Win32/GenKryptik.0c511935
K7GW	Spyware ( 0040f0131 )
CrowdStrike	win/malicious_confidence_100% (D)
Invincea	ML/PE-A
Symantec	Packed.Generic.459
Kaspersky	Trojan-Downloader.Win32.Zload.tk
BitDefender	Gen:Variant.Razy.766145
Ad-Aware	Trojan.GenericKD.44006533
McAfee-GW-Edition	Artemis!Trojan
FireEye	Generic.mg.06f02760b4dcd1b8
Emsisoft	Gen:Variant.Razy.766145 (B)
GData	Win32.Trojan-Downloader.ZLoader.R5J100
MAX	malware (ai score=85)
Antiy-AVL	GrayWare/Win32.Kryptik.ehls
ZoneAlarm	Trojan-Downloader.Win32.Zload.tk
Microsoft	Trojan:Win32/Wacatac.C!ml
Cynet	Malicious (score: 100)
Acronis	suspicious
McAfee	GenericRXAA-AA!06F02760B4DC
ESET-NOD32	a variant of Win32/GenKryptik.ETRL
Ikarus	Trojan.Win32.Krypt
eGambit	Unsafe.AI_Score_100%
Fortinet	W32/Zload.ETRL!tr.dldr
BitDefenderTheta	Gen:NN.ZedlaF.34282.Ay9@au6PXPji
AVG	FileRepMalware
Panda	Trj/GdSda.A

How to remove Razy.766145?

Razy.766145 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X