Razy.779253 malicious file

The Razy.779253 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Razy.779253 virus can do?

CAPE extracted potentially suspicious content
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Razy.779253?


File Info:
name: 65AA3E7DE00EDA905836.mlw
path: /opt/CAPEv2/storage/binaries/4ac1e9cd0838bd4dded92c6fb9c17b9bf653003d3e2c00e17db8ebec375cda72
crc32: FC4705BF
md5: 65aa3e7de00eda9058367ffd3de7752b
sha1: d07584019e3fa1b8092cfbbda1c699ec934d0ed7
sha256: 4ac1e9cd0838bd4dded92c6fb9c17b9bf653003d3e2c00e17db8ebec375cda72
sha512: bb5d7d670840cd7791d884db0777d7a3a6d389f6aa44fa5d66f62f376a9f4c23e5e8841dc52c234e82f45a45ed626c3d60d07ee7d8e8a35bd4ffc4792fdfc951
ssdeep: 6144:llzdTZ4rjNxG/i/OfFGr61xz8lZXklVK1KZ7gAHK5oILOM:lV/4rjvGiO9C6yZ03K14RKGhM
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T190B49DB1BD52986ECA6E0675406A85C0FBF716C73F948B0F71AB530C0E11A1BAB73247
sha3_384: 9ef85267c4997f295497dcf1aae21a23e201f2cf7cb770f3f7ce44ad68b1b918e6b15584433047d69efa6913aa30a89b
ep_bytes: ff250020400000000000000000000000
timestamp: 2020-10-26 15:15:45

Version Info:
Translation: 0x0000 0x04b0
Comments: Domutirikagy
CompanyName: 1x!-9pd:0{4e8n[#6z
FileDescription: Hulaevonywushoba
FileVersion: 8.13.17.22
InternalName: ebyjon.exe
LegalCopyright: Copyright © 1999 - 2020
OriginalFilename: ebyjon.exe
ProductName: Hulaevonywushoba
ProductVersion: 8.13.17.22
Assembly Version: 0.0.0.0

Razy.779253 also known as:

Bkav	W32.AIDetectMalware.CS
Lionic	Trojan.MSIL.Agensla.i!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Razy.779253
Skyhigh	PWS-FCRY!65AA3E7DE00E
McAfee	PWS-FCRY!65AA3E7DE00E
Cylance	unsafe
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Trojan ( 00571d321 )
Alibaba	TrojanPSW:MSIL/CryptInject.8c8d4175
K7GW	Trojan ( 00571d321 )
CrowdStrike	win/malicious_confidence_100% (W)
BitDefenderTheta	Gen:NN.ZemsilF.36680.Gm0@aK7CJEe
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Kryptik.YIT
Cynet	Malicious (score: 100)
APEX	Malicious
ClamAV	Win.Trojan.Noon-9850822-0
Kaspersky	HEUR:Trojan-PSW.MSIL.Agensla.gen
BitDefender	Gen:Variant.Razy.779253
NANO-Antivirus	Trojan.Win32.Agensla.iaxrhp
Avast	Win32:TrojanX-gen [Trj]
Tencent	Msil.Trojan-QQPass.QQRob.Jqil
Emsisoft	Gen:Variant.Razy.779253 (B)
F-Secure	Heuristic.HEUR/AGEN.1309269
VIPRE	Gen:Variant.Razy.779253
Sophos	Mal/Generic-S
Ikarus	Trojan.MSIL.Inject
GData	Gen:Variant.Razy.779253
Jiangmin	Trojan.PSW.MSIL.awlr
Varist	W32/MSIL_Kryptik.BZH.gen!Eldorado
Avira	HEUR/AGEN.1309269
Kingsoft	malware.kb.c.997
Arcabit	Trojan.Razy.DBE3F5
ZoneAlarm	HEUR:Trojan-PSW.MSIL.Agensla.gen
Microsoft	Trojan:MSIL/CryptInject.PK!MTB
Google	Detected
AhnLab-V3	Malware/Win32.RL_Generic.C4236397
VBA32	TScope.Trojan.MSIL
MAX	malware (ai score=83)
Malwarebytes	Trojan.Crypt.MSIL
Panda	Trj/GdSda.A
Rising	Malware.Obfus/MSIL@AI.100 (RDM.MSIL2:VoQe0xFoGhcFFvCqGri97Q)
Yandex	Trojan.Igent.bUHEOP.84
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.74499699.susgen
Fortinet	MSIL/Kryptik.YIT!tr
AVG	Win32:TrojanX-gen [Trj]
Cybereason	malicious.19e3fa
DeepInstinct	MALICIOUS

How to remove Razy.779253?

Razy.779253 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X