Lazy.99113 (file analysis)

The Lazy.99113 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Lazy.99113 virus can do?

Dynamic (imported) function loading detected
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine Lazy.99113?


File Info:
name: 98375CDED1FC5338BEEE.mlw
path: /opt/CAPEv2/storage/binaries/49b4e2da85168705a3456ba3a41c97d21bc90fdce3e8bde5a60dfd082f82203e
crc32: 4386F6AF
md5: 98375cded1fc5338beeedffd702519b9
sha1: b7563e9c2019ecb0d6d7be8f968c4ce5da029695
sha256: 49b4e2da85168705a3456ba3a41c97d21bc90fdce3e8bde5a60dfd082f82203e
sha512: c4ae9204f2e9ef2e83bf8b07df8228c752fc812583881036aab24dc50ae4314a1084bbe2bbb95867ef10f0f21428b4b07e6e0d87cb07bf6d6bc806cc63a84980
ssdeep: 384:QIgZhJ40sI/AFn2GC+d44uqIG+GeBLI9Hj7EYVbzRU5WaHZmMM4glmKtakNZj:QIOsnFn2GW4eG+Ghj7EYRUvemepZj
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T169C238A517DC8126CDEF453CD453434243B0E19C7AA3F7B24BCCA6D62E53B6306856E6
sha3_384: c897223286970a298e1b0d437da6b5dc92453942434fe5fb4b89b15f167b40f3857641f5adcea62defdcd72be8e3e5b6
ep_bytes: ff250020400000000000000000000000
timestamp: 2103-12-20 12:52:08

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: DeadSnake
FileVersion: 1.0.0.0
InternalName: DeadSnake.exe
LegalCopyright: 
LegalTrademarks: 
OriginalFilename: DeadSnake.exe
ProductName: 
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Lazy.99113 also known as:

Bkav	W32.AIDetectNet.01
Lionic	Trojan.Win32.Lazy.4!c
MicroWorld-eScan	Gen:Variant.Lazy.99113
FireEye	Generic.mg.98375cded1fc5338
ALYac	Gen:Variant.Lazy.99113
Sangfor	Trojan.Win32.Wacatac.B
Alibaba	Trojan:MSIL/KeyLogger.8dd99e95
Cybereason	malicious.c2019e
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (moderate confidence)
ESET-NOD32	a variant of MSIL/Spy.Keylogger.FAX
APEX	Malicious
Paloalto	generic.ml
BitDefender	Gen:Variant.Lazy.99113
Avast	Win32:SpywareX-gen [Trj]
Ad-Aware	Gen:Variant.Lazy.99113
Emsisoft	Gen:Variant.Lazy.99113 (B)
TrendMicro	TROJ_GEN.R002C0PFQ22
McAfee-GW-Edition	RDN/Generic PWS.y
SentinelOne	Static AI – Malicious PE
GData	Gen:Variant.Lazy.99113
Avira	TR/Spy.KeyLogger.vjznk
MAX	malware (ai score=87)
Arcabit	Trojan.Lazy.D18329
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win.FIPI.C4934500
McAfee	RDN/Generic PWS.y
TrendMicro-HouseCall	TROJ_GEN.R002C0PFQ22
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	PossibleThreat
BitDefenderTheta	Gen:NN.ZemsilF.34742.bm0@amPGVoo
AVG	Win32:SpywareX-gen [Trj]
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Lazy.99113?

Lazy.99113 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X