Lazy.342728 (file analysis)

The Lazy.342728 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Lazy.342728 virus can do?

• Behavioural detection: Executable code extraction – unpacking
• CAPE extracted potentially suspicious content
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Lazy.342728?

File Info:
name: E7CF0235061C98A06E00.mlw
path: /opt/CAPEv2/storage/binaries/9741c3a46be468cff4b6ca5b4d0500182182382e8c56cfca3edac0301267f5f2
crc32: EF04E771
md5: e7cf0235061c98a06e0019ff35088789
sha1: a228fe0c4503b21803c80cd6b125f4f873a22658
sha256: 9741c3a46be468cff4b6ca5b4d0500182182382e8c56cfca3edac0301267f5f2
sha512: d4d934d77298e546376fbc9b33fec7f88635c96e26079b905758402baeab90986a0bf502e1cfb195f28c5b4f68fa2a6e3a7293e57b0886af188b51b179230adc
ssdeep: 24576:qTyfiD4jBr22smnkqnYvx5IOPQAYjoBYd6YTekB7N5qu2Bcjf59SD:f68bxSQAJsRekBeZm
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1BD65CF52B6D245B2F54201F506ABE73EBE39B2029724CAC3D3E0DC5859522E1EA3F35D
sha3_384: db9690c3f9c5de68d3dd6a48d6799aca3c0717ea538ac91939051e68c2b9ae42c1eec35b5140fcb4c2ddc9612122ef22
ep_bytes: e856020000e97afeffff558becff7508
timestamp: 2022-10-28 17:25:25

Version Info:
CompanyName: Simon Tatham
ProductName: PuTTY suite
FileDescription: SSH, Telnet, Rlogin, and SUPDUP client
InternalName: PuTTY
OriginalFilename: PuTTY
FileVersion: Release 0.78 (with embedded help)
ProductVersion: Release 0.78
LegalCopyright: Copyright © 1997-2022 Simon Tatham.
Translation: 0x0809 0x04b0

Lazy.342728 also known as:

How to remove Lazy.342728?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.