What is “Ser.Lazy.2084”?

The Ser.Lazy.2084 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ser.Lazy.2084 virus can do?

The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Ser.Lazy.2084?


File Info:
name: 99C772E71FE5963FA070.mlw
path: /opt/CAPEv2/storage/binaries/b505130d5de2f09e24b1d0065a3fa166fb064fe9151b2e5624f74cf993cfcd8b
crc32: C26F38F9
md5: 99c772e71fe5963fa07041428022309b
sha1: 9df6ae0006258368e014640709a47beb747c842f
sha256: b505130d5de2f09e24b1d0065a3fa166fb064fe9151b2e5624f74cf993cfcd8b
sha512: 31ee04c788178402b4e59e5f65b2ee619939ad3ad76b94b3f0bd7c4fe652a17a603a41fff685a7713e367d1488334bb407b3aaf95647138bbe4225db69746aa8
ssdeep: 196608:b3wDPwjToIAy0UG4W0xIeuck0PYl25Eq/76KN:MDPcTZU4WQ3vE07
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T12E66333315A971C4C6F8D9328537FEC073FA539ECE81A8B4A6D95CC12A119E6D713A83
sha3_384: e3c6b209ec26c4698d8219174096b2b408ee475c37213ac9cf49a2411922db6fccbb0310209321a5e0077c1a59eb0ac4
ep_bytes: 688d4bfe4c9cf6442404790f90442404
timestamp: 2022-11-04 20:16:06

Version Info:
CompanyName: A.S.L Software
FileDescription: ExEinfo PE - Win32 exe identifier
FileVersion: 0.0.6.5
InternalName: ExeinfoPE.exe
LegalCopyright: A.S.L Soft
LegalTrademarks: 
OriginalFilename: ExeinfoPE.exe
ProductName: Exeinfo PE by A.S.L
ProductVersion: 1.0.0.0
Comments: www.exeinfo.xn.pl
PrivateBuild: 2021
SpecialBuild: 
Translation: 0x0409 0x04e4

Ser.Lazy.2084 also known as:

Bkav	W32.AIDetect.malware1
tehtris	Generic.Malware
MicroWorld-eScan	Gen:Variant.Ser.Lazy.2084
ALYac	Gen:Variant.Ser.Lazy.2084
Cylance	Unsafe
Cybereason	malicious.006258
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
APEX	Malicious
Kaspersky	UDS:DangerousObject.Multi.Generic
BitDefender	Gen:Variant.Ser.Lazy.2084
Ad-Aware	Gen:Variant.Ser.Lazy.2084
Emsisoft	Gen:Variant.Ser.Lazy.2084 (B)
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.99c772e71fe5963f
Sophos	Generic ML PUA (PUA)
SentinelOne	Static AI – Suspicious PE
GData	Gen:Variant.Ser.Lazy.2084
MAX	malware (ai score=89)
Arcabit	Trojan.Ser.Lazy.D824
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 100)
Acronis	suspicious
VBA32	BScope.TrojanDownloader.Smoke
Malwarebytes	Malware.Heuristic.1003
Rising	Trojan.Generic@AI.89 (RDML:xndGYVnRXgwO/CuCf9v7YQ)
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Ser.Lazy.2084?

Ser.Lazy.2084 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X