Midie.116808 (file analysis)

The Midie.116808 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Midie.116808 virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Sample contains Overlay data
• Presents an Authenticode digital signature
• Reads data out of its own binary image
• Drops a binary and executes it
• The binary contains an unknown PE section name indicative of packing
• Authenticode signature is invalid
• Deletes executed files from disk

How to determine Midie.116808?

File Info:
name: 61876307939D2E2C1F04.mlw
path: /opt/CAPEv2/storage/binaries/ea67cfde39009e72db76694af175315d6bd7814391cea93499efe45d1f058479
crc32: AF3EB3C6
md5: 61876307939d2e2c1f04d6ec35caf2e7
sha1: 4d1c2c24d3871f77d6134ca0d725257272b85791
sha256: ea67cfde39009e72db76694af175315d6bd7814391cea93499efe45d1f058479
sha512: 242795fb71b81c19911bfd06e7e77981b125de44c2c110ba4305c528cad1ec976982bb7310283e63dab980694ac72f07e1b862751c5b84f67882a3bef042dfba
ssdeep: 24576:A7FUDowAyrTVE3U5Fm8b331dDa6Z3muzTt6CexTdBmV5x7awFhJdNo69lOy7KTi7:ABuZrEUZnLD37zT4CQdBa55DdN7POGjH
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1B3B5D03FF268A13EC56A1B3205B38220997BBA61781A8C1F57FC344DCF765601E3B656
sha3_384: 103d97f2637bc2843af05a7399f7d8bca36c4eae2b643035c2ab268082ea48d29537d94a47df8e6897877be69d4387ab
ep_bytes: 558bec83c4a453565733c08945c48945
timestamp: 2022-04-14 16:10:23

Version Info:
Comments: This installation was built with Inno Setup.
CompanyName:                                                             
FileDescription: okafwof0kgs Setup                                           
FileVersion:                     
LegalCopyright:                                                                                                     
OriginalFileName:                                                   
ProductName: okafwof0kgs                                                 
ProductVersion: 101.100.02                                        
Translation: 0x0000 0x04b0

Midie.116808 also known as:

How to remove Midie.116808?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.