Multiple VM analysis reports the 7za.exe file to contain TWO MALWARE instances.
This version of 7za.exe is also very outdated.
I wouldn't run this on my computer.
This is a legitimate, official 7-Zip binary.
The detections you’re referring to are generic machine-learning heuristics from low-reputation scanners, which are well known for false positives - especially on standalone utilities like 7za.exe.
When scanned with reputable vendors (ESET, Malwarebytes, Kaspersky, Defender, etc.), the file comes back clean with zero detections.
ML-only flags without signature or behavior confirmation aren’t meaningful evidence of malware. They simply indicate “unknown binary,” not malicious behavior.
As for being “outdated”: older ≠ malicious. This specific build is commonly bundled and redistributed unchanged, and its hash matches known-good releases.
If anyone has a behavioral analysis, confirmed signature hit, or sandbox detonation showing malicious activity, I’m happy to review it. Otherwise, this is just a textbook false positive.