Gridinsoft Logo
File Icon

The Fusion.exe File Analysis

Updated 1 second ago
Checked by Malware Check
Fusion.exe

Technical Analysis

File Name Fusion.exe
File Type
Win32 EXE
Magic Bytes PE32+ executable (GUI) x86-64, for MS Windows
SSDEEP Hash
49152:EGYwsoPQ0l291V4ybVNuNoYTpCDxDeTzhpCK:wyibT4oY1eeTzC
Scanner Version 1.0.218.174
Database Version 2025-06-19 21:00:24 UTC
⚠

Suspicious File Detected

Detected by 25 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.

Lazy is a Trojan designed to download and install additional malware payloads on infected systems while operating with stealth techniques.
35%
Detection Rate
3,426,816
File Size (bytes)
25/72
Engines Detected
2025-06-19
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
1f9cc0ff9bf9bbdd52b961933285fb53
SHA1
420f2872fbb25bb509aa2e8fbc555ffda5c1602d
SHA256
ca701405b44618e10573cea1aeec9ec36e44a0761b1e6e134765fe2ac096e963
SHA512
ad0fc6cfcc0fdc9d7a7a550445219519a899d7d48e8aa5389ea7d22f1f0d984bbea83648cb64a9c42bd2018a558cfa6a057c1299da43abcbca25fa67f19d0799
ImpHash
b80e830ef0e8eb20b61a59cfba4243e4

Security Engines with Detections (25 of 72)

Bkav
W64.AIDetectMalware Malicious
Lionic
Trojan.Win32.Generic.4!c Malicious
Elastic
malicious (moderate confidence) Malicious
MicroWorld-eScan
Gen:Variant.Lazy.442953 Malicious
ALYac
Gen:Variant.Lazy.442953 Malicious
Cylance
Unsafe Malicious
Sangfor
Trojan.Win32.Lazy.Vcsa Malicious
CrowdStrike
win/malicious_confidence_70% (W) Malicious
Symantec
ML.Attribute.HighConfidence Malicious
TrendMicro-HouseCall
TROJ_GEN.R002H09FF25 Malicious
Paloalto
generic.ml Malicious
BitDefender
Gen:Variant.Lazy.442953 Malicious
Avast
Win64:MalwareX-gen [Misc] Malicious
Emsisoft
Gen:Variant.Lazy.442953 (B) Malicious
VIPRE
Gen:Variant.Lazy.442953 Malicious
McAfeeD
ti!CA701405B446 Malicious
CTX
exe.trojan.lazy Malicious
GData
Gen:Variant.Lazy.442953 Malicious
Arcabit
Trojan.Lazy.D6C249 Malicious
Microsoft
Trojan:Win32/Wacatac.B!ml Malicious
TrellixENS
Artemis!1F9CC0FF9BF9 Malicious
MaxSecure
Trojan.Malware.300983.susgen Malicious
Fortinet
W32/PossibleThreat Malicious
AVG
Win64:MalwareX-gen [Misc] Malicious
DeepInstinct
MALICIOUS Malicious
47 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

▼
Icon
Hash: e25d1cc545b98ad40308a83cea4fb32f
Fuzzy: bd5380067a97f53cc55454c9a7389ef9
dHash: f0dc3e9787b6d4f0
Image Base 0x140000000
Entry Point 0x140163068
Compilation Time 2025-06-14 22:07:34
Checksum 0x00000000 (Actual: 0x00352123)
OS Version 6.0
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
PDB Path C:\Users\DEV\source\repos\Fusion\build\Fusion.pdb
Digital Signature No valid SignedData structure was found.
Imports 12 libraries
Exports 0 functions
Resources 9 Resources
Sections 11 Sections

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 1,673,558 bytes 1,673,728 bytes 6.77 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 4681398450CEC6880C15E834C954A845
.rdata 0x0019a000 274,848 bytes 274,944 bytes 5.89 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 9D8A4F29DA23842FD850168F882FB4DB
.data 0x001de000 508,156 bytes 451,072 bytes 6.85 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE FC25D03398043E1E43C083D384FEB70E
.pdata 0x0025b000 50,316 bytes 50,688 bytes 6.07 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 012C07DA1340A09CFFD856B21CD671EB
.00cfg 0x00268000 56 bytes 512 bytes 0.47 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 9E1A2756174B1E0A2754653E9EFE9065
.gxfg 0x00269000 11,568 bytes 11,776 bytes 5.16 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 2AA629FFEAF2DC6B58AAF2B352EE0552
.retplne 0x0026c000 156 bytes 512 bytes 1.19 (Normal) 0x00000000 8B9AE47FB3104884F126FE65091065BF
.tls 0x0026d000 9 bytes 512 bytes 0.02 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 1F354D76203061BFDD5A53DAE48D5435
_RDATA 0x0026e000 500 bytes 512 bytes 4.15 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 2500E07DFB1888B51F82AD7BC85A58F3
.rsrc 0x0026f000 925,696 bytes 925,696 bytes 5.50 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ DA372DEFDBC28F217608D3D724570BCD
.reloc 0x00351000 35,376 bytes 35,840 bytes 5.44 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 5C8C3058179FD29B51B09F37817308B4
Entropy Analysis Alert

2 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 9 (925,078 bytes)
Resource Type Count Total Size Percentage
TEXTFILE 1 881,739 bytes
95.3%
RT_ICON 6 42,663 bytes
4.6%
RT_GROUP_ICON 1 90 bytes
0%
RT_MANIFEST 1 586 bytes
0.1%

Certificate Chain Analysis

▼
No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
25 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware