Lazy.259500 (file analysis)

The Lazy.259500 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Lazy.259500 virus can do?

• Sample contains Overlay data
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Authenticode signature is invalid
• Anomalous binary characteristics

How to determine Lazy.259500?

File Info:
name: 714BB237F6E1F80BDB42.mlw
path: /opt/CAPEv2/storage/binaries/cf3e5a65c7d6e5f1dbd51a3e3f881688ceb590f18287165a0759d284e4aed47c
crc32: E2598B10
md5: 714bb237f6e1f80bdb42393f3029eb5a
sha1: c6f27ba0ff6361157e0d6b543afefe26cc5bbc59
sha256: cf3e5a65c7d6e5f1dbd51a3e3f881688ceb590f18287165a0759d284e4aed47c
sha512: 4c282ab52b84e827907ade349c0dae4b88d8988e6a38cbdb7f32bc42317fbdca68ed3c8940dfa2ab9738349e4e98bfc89797ab30f20effeb13836e9c3a86ecd2
ssdeep: 6144:Pmkt55lGs9wnPyQKftoWCs1XUugT+7EFnpd74qWUdEMOv/oAxH6aH:+a5lGs9wPFKfaWz41idH9H
type: PE32+ executable (GUI) x86-64, for MS Windows
tlsh: T17954AF5973A40DF5E5A7C178CD6256A2EA73BC464E30C31F12E0836F6F23661AD2DB21
sha3_384: 19a93a397b9e36c128e6cdbb5d2cc5387e4e9c441d07a28fc8b51226597cd48faaa5522a629eceb171b3764f97f085c6
ep_bytes: e848feffffc82000004c897c24f84883
timestamp: 2015-07-30 12:24:57

Version Info:
CompanyName: Microsoft Corporation
FileDescription: Microsoft Office update uninstall exe
FileVersion: 16.0.4266.1001
InternalName: OARPMANY
LegalTrademarks1: Microsoft® is a registered trademark of Microsoft Corporation.
LegalTrademarks2: Windows® is a registered trademark of Microsoft Corporation.
OriginalFilename: OARPMANY.exe
ProductName: Microsoft Office 2016
ProductVersion: 16.0.4266.1001
MOSEVersion: BETA
Translation: 0x0000 0x04e4

Lazy.259500 also known as:

How to remove Lazy.259500?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.