Categories: Malware

What is “Midie.124942”?

The Midie.124942 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Midie.124942 virus can do?

Behavioural detection: Executable code extraction – unpacking
Sample contains Overlay data
Presents an Authenticode digital signature
CAPE extracted potentially suspicious content
Authenticode signature is invalid

How to determine Midie.124942?


File Info:
name: F305956C3386BD5B2C8F.mlwpath: /opt/CAPEv2/storage/binaries/70eb66da6f6670c6cab9ae08a9ae28fcc10ea75d1936da31cfe0adfda9e3575bcrc32: D4787194md5: f305956c3386bd5b2c8f7ddfa67470bfsha1: 06fb782efca22f30baf9ad9332acdfc93739160bsha256: 70eb66da6f6670c6cab9ae08a9ae28fcc10ea75d1936da31cfe0adfda9e3575bsha512: 9301ffc71431a6685ce8cac6355d1e635e7bac084324d2512a03e85d5eaab89059bfc39c7aa80663c93d373549ba53523ee24fc601f6bb3cc01d501da9252f68ssdeep: 6144:Xw2XSFKfXJQN4VxDLxCmdUZ/c+uucY5nO09pmw57y:kFexDLxCmdUZ/c+uucY5nO09pmw5+type: PE32 executable (console) Intel 80386, for MS Windowstlsh: T139445A39D8709929EA4D7FF09BF39B9828596E2007480597BE0E0E458F5FFF46067293sha3_384: 1d9c7ca78fcd1378ebee8d6334715efe8a5dd25fc91f51f5b07d2e4c8b27438621200c8828916cb412f7d0f7679cbe66ep_bytes: e807300000e9a4feffff3b0d04b14300timestamp: 2023-06-11 09:52:05
Version Info:
Comments: Il s'agit d'une application légitime.CompanyName: Schneider Electric SEFileDescription: Schneider Electric SE ProduitFileVersion: 381InternalName: ApplicationInterneLegalCopyright: Droit d'auteur Â© Schneider Electric SE Tous droits réservés.LegalTrademarks: Marques déposées Â© Schneider Electric SEOriginalFilename: app.exeProductName: ApplicationProductVersion: 381Translation: 0x0407 0x04b0

Midie.124942 also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Midie.124942
ALYac	Gen:Trojan.Heur2.FU.pq2@amE9uZpi
Malwarebytes	Malware.AI.219555532
VIPRE	Gen:Variant.Midie.124942
Sangfor	Trojan.Win32.Save.a
Cybereason	malicious.c3386b
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/GenKryptik.GKPI
APEX	Malicious
Kaspersky	VHO:Backdoor.Win32.Convagent.gen
BitDefender	Gen:Variant.Midie.124942
Avast	Win32:PWSX-gen [Trj]
Emsisoft	Gen:Variant.Midie.124942 (B)
McAfee-GW-Edition	BehavesLike.Win32.Generic.dh
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.f305956c3386bd5b
SentinelOne	Static AI – Malicious PE
GData	Gen:Variant.Midie.124942
Google	Detected
MAX	malware (ai score=85)
Arcabit	Trojan.Midie.D1E80E
ZoneAlarm	VHO:Backdoor.Win32.Convagent.gen
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
Cylance	unsafe
Ikarus	AdWare.Lollipop
MaxSecure	Spy.W32.Stealer.gen_269358
BitDefenderTheta	AI:Packer.07719ED820
AVG	Win32:PWSX-gen [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_90% (D)