Razy.972745 (file analysis)

The Razy.972745 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Razy.972745 virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Razy.972745?


File Info:
name: 4A7E524BD4338D430AE7.mlw
path: /opt/CAPEv2/storage/binaries/d29d1426b694ecd9186f26ed39dbef8dd7c7c96079ca0884898cfeb55f3fa947
crc32: 91540F23
md5: 4a7e524bd4338d430ae758f6d3f5cb7d
sha1: 23e35292f83ca1d2ba7e65900725e1f54eb04c49
sha256: d29d1426b694ecd9186f26ed39dbef8dd7c7c96079ca0884898cfeb55f3fa947
sha512: fb05c349817017504c346ea6a6b8fae443a0c4e4109afceb419f2e0ed9644a1d2277cbd41b83c9fd222ba73f685d0f0782b6b958260410a6c6eca7f92173eca0
ssdeep: 12288:RlGXd4OvXkLGHj0qTDzBkUsslGXd4OvXkLGHj0qTDzBkOslGt:zGmA0UTPBk/OGmA0UTPBkOOGt
type: PE32+ executable (GUI) x86-64, for MS Windows
tlsh: T165D49C25B6C1C032E4A310B146B587BA9A7EBCB22395B4CF8BC51D761F706D1EA3531E
sha3_384: 27ebb7621574f776bfea506976b979419d9eda903b8c3e15cc79b3729be8a614655a3cfbb0a89c3e8133c82b86ec12fe
ep_bytes: ffd6682008430068fd03000053ffd668
timestamp: 2021-02-19 13:48:07

Version Info:
0: [No Data]

Razy.972745 also known as:

MicroWorld-eScan	Gen:Variant.Razy.972745
ALYac	Gen:Variant.Razy.972745
Cybereason	malicious.bd4338
Cyren	W32/Cause.A
ClamAV	Win.Trojan.FuBu-1
BitDefender	Gen:Variant.Razy.972745
Avast	Win32:Shodi
Ad-Aware	Gen:Variant.Razy.972745
Sophos	Generic ML PUA (PUA)
DrWeb	Win32.HLLP.Shohdi.61457
FireEye	Generic.mg.4a7e524bd4338d43
Emsisoft	Gen:Variant.Razy.972745 (B)
GData	Gen:Variant.Razy.972745
Antiy-AVL	Trojan/Generic.ASCommon.208
Arcabit	Trojan.Razy.DED7C9
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 100)
MAX	malware (ai score=88)
VBA32	Virus.Win32.HLLP.Shodi.a
Ikarus	HLLP.Win32.Shodi
eGambit	Unsafe.AI_Score_96%
Fortinet	W64/Razy.9701I!tr
AVG	Win32:Shodi

How to remove Razy.972745?

Razy.972745 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X