Razy.948256 malicious file

The Razy.948256 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Razy.948256 virus can do?

Presents an Authenticode digital signature
Reads data out of its own binary image
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Razy.948256?


File Info:
crc32: 9FEF1F42
md5: 9b50c0c959b5a4a3888b624f24617316
name: 9B50C0C959B5A4A3888B624F24617316.mlw
sha1: a4549bb72ef408ff3aff961d87af0b758de74770
sha256: 4594fb67653337444fcfdbc6c47b5b49f31d31f3a9320278b86c07fb3a652349
sha512: bbc929cefe1027c856d5163f1e9df330e5de5c4e4d2286bf71e2621f729c2fdfa301de5a813bebbe4d824a2993a3aea4d159114a7971276b5c5eabdd04dc2670
ssdeep: 24576:1lwB6FsMfvSsD4aC65+t0pOdRd2eLfU3+:0k5lD4feODQeLfUO
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright 2010-2012 Adobe Systems Incorporated.  All rights reserved.
InternalName: Eula.exe
FileVersion: 11.0.0.379
CompanyName: Adobe Systems Incorporated
ProductName: EULA
ProductVersion: 11.0.0.379
FileDescription: Eula display
OriginalFilename: Eula.exe
Translation: 0x0409 0x04e4

Razy.948256 also known as:

Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
Cybereason	malicious.72ef40
Cyren	W32/Pajetbin.G.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Dropper.Ausiv-9876732-0
BitDefender	Gen:Variant.Razy.948256
MicroWorld-eScan	Gen:Variant.Razy.948256
Sophos	Generic ML PUA (PUA)
McAfee-GW-Edition	BehavesLike.Win32.CoinMiner.dh
FireEye	Generic.mg.9b50c0c959b5a4a3
Emsisoft	Gen:Variant.Razy.948256 (B)
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1143149
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Trojan.Razy.DE7820
GData	Gen:Variant.Razy.948256
McAfee	RDN/Generic.com
MAX	malware (ai score=89)
Ikarus	Virus.Win32.VB
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/AutoRun.9412!tr
AVG	Win32:Malware-gen

How to remove Razy.948256?

Razy.948256 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X