The 7-Zip File Analysis

Updated on 2024-05-15 (7 months ago)

Online Virus Checker	v.1.0.175.174
DB Version:	2024-05-15 13:00:35

The 7-Zip Is Suspicious

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.

Lazy is a trojan virus designed to secretly download and install additional malware onto an infected computer. It operates stealthily, posing a serious threat to the affected system's security by facilitating the deployment of various harmful payloads.

File	LunaTranslator.exe
Checked	2024-05-15 10:51:01
Type	Win32 EXE
Threat	Trojan Lazy
MD5	61a1bbfb307c91e14217d74b3922c6b8
SHA1	8c75284fb3d1fb7ac106ae95edb377523486119f
SHA256	24495dbb311e8ca4d779d78445bf60c387aee949cc89395a51230e985dfa20d2
SHA512	a4e220656da228b2564625a8fb7100ee401acb1819b9a132054185d77054268994a13e3cf12b48e567d0c5713e7d485a71edcb441a44bbc62bdfe599f6a87c0f
Imphash	340b26a6ac96e1f65d062cee2842c6ed
File Size	36374231 bytes

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Start by downloading Gridinsoft Anti-Malware to your computer.
Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
Click on the "Standard Scan" button.
After the scanning process is finished, click on "Clean Now" to remove any detected threats.
If prompted, restart your system to complete the removal process.

File Version Information

CompanyName	Igor Pavlov
FileDescription	7z SFX
FileVersion	23.01
InternalName	7z.sfx
LegalCopyright	Copyright (c) 1999-2023 Igor Pavlov
OriginalFilename	7z.sfx.exe
ProductName	7-Zip
ProductVersion	23.01
Translation	0x0409 0x04b0

Portable Executable Info

	e70ab6434b901bf0d86cad4f2e381b4b c0aeeb48c2783a270a993faae44e6ec1 00b28eabababa600
Image Base:	0x00400000
Entry Point:	0x00428a0c
Compilation:	2023-06-20 08:00:00
Checksum:	0x00000000 (Actual: 0x022b324b)
OS Version:	4.0
PEiD:	PE32 executable (GUI) Intel 80386, for MS Windows
Sign:	The PE file does not contain a certificate table.
Sections:	5
Imports:	OLEAUT32, ole32, USER32, SHELL32, MSVCRT, KERNEL32,
Exports:	0
Resources:	25

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Entropy
.text	0x00001000	0x0002aa95	0x0002ac00	32fb13d1bb5d9cdf2f8d066145e81c5f	6.68
.rdata	0x0002c000	0x000068ba	0x00006a00	a23f4ce8060784f45a3ea69b24c23654	4.55
.data	0x00033000	0x00004574	0x00000200	0c6a2e98156b659471ee020aedf0cca0	3.50
.sxdata	0x00038000	0x00000004	0x00000200	480f8419371f2eeea1f4e90c192f696c	0.02
.rsrc	0x00039000	0x000026c0	0x00002800	71212e2c0be2015918038f969631d524	3.81

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

5 4 3 2 1