Heur.Munp.1 (file analysis)

The Heur.Munp.1 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Heur.Munp.1 virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Sample contains Overlay data
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• The binary contains an unknown PE section name indicative of packing
• Authenticode signature is invalid
• Uses Windows utilities to create a scheduled task
• CAPE detected the embedded win api malware family
• Uses suspicious command line tools or Windows utilities
• Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Heur.Munp.1?

File Info:
name: 7703ED4A1E1E5A789D32.mlw
path: /opt/CAPEv2/storage/binaries/b5fc294c068af9304fa8146ead42934ac292f230ca89931ff85051e4b2ec0291
crc32: 36B25C55
md5: 7703ed4a1e1e5a789d32cbebb3f99287
sha1: 354f5b2e529ab39965fa24fb7df41219c4fc71f1
sha256: b5fc294c068af9304fa8146ead42934ac292f230ca89931ff85051e4b2ec0291
sha512: 54af83e8769da83be61e7b6af943b33566b82ae488a6ed21f5d45faaa2bf1415327255b266faf3d7815d03540606ccab3ac59e4a079c9bb7e3533307109af0c4
ssdeep: 196608:lQG0f1Al7YaphUfU4fGvczYoezBOB9k51JNCIcz8:lQ1fGxpqfU4cc3gBCczr
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T15F86339AC2D77733F0EBB9F8A693546AC711FC60392D303E458BA841D6670D918DFA12
sha3_384: 0221ddd4ce8c6d05d9605796d758e14baf1e3c05a17554dca2fb2e1025dc8020284f2b2bca1a4020de5ed10d87b8d2d4
ep_bytes: 558bec83c4cc53565733c08945f08945
timestamp: 2024-01-29 03:05:42

Version Info:
Comments: This installation was built with Inno Setup: http://www.innosetup.com
CompanyName:                                                             
FileDescription: DJ Midi Keyboard Setup                                      
FileVersion:                     
LegalCopyright:                                                                                                     
Translation: 0x0409 0x04e4

Heur.Munp.1 also known as:

How to remove Heur.Munp.1?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.