Malware

Should I remove “Midie.96846”?

Malware Removal

The Midie.96846 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Midie.96846 virus can do?

  • CAPE extracted potentially suspicious content
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Checks the version of Bios, possibly for anti-virtualization
  • Detects VirtualBox through the presence of a registry key
  • Attempted to write directly to a physical drive
  • Anomalous binary characteristics

How to determine Midie.96846?


File Info:

name: 1F88546CBFB2930EA405.mlw
path: /opt/CAPEv2/storage/binaries/92abc983d2604dc0e22ebda83bd944eaf75426f728b11c8115105a408e8b9958
crc32: 21D07429
md5: 1f88546cbfb2930ea405aecd7f61e76f
sha1: 1882d84b9c41f3b22a27b2373f0196f1627d0a3a
sha256: 92abc983d2604dc0e22ebda83bd944eaf75426f728b11c8115105a408e8b9958
sha512: fc0b6077913ce1b18bdd7e315d2b943dd41d0fc0797b1a46ea66a8cad3da3f7fb133e7309f5365f44c0902d1ed1da7fd3c6c5add375649fcf763fc0e9271748f
ssdeep: 24576:hExgMC3tB3jTBmijYMdpVQ1HwnV+zAJNgdv5pjXz1Q54zdQcim0QCodC:hEu3lmkYMdpVKHwnE8TKpjXz1QyRQcip
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T198553341502A4E2ED94CA131271FC6D3BEF6A7F0649C42758DFFD0CBAE62B182B9D461
sha3_384: 0b7ff2a3809a3b413d521fbeb905ea1676672d552415d3bc0da4d9709ec6a01e0d5ecf49ef8f928e921d7ddcc4b44a19
ep_bytes: e84b0100005389e3538b73088b7b10fc
timestamp: 2020-06-21 10:18:36

Version Info:

Translation: 0x0000 0x04b0
FileDescription:
FileVersion: 0.0.0.0
InternalName: WindowsApplication1.exe
LegalCopyright:
OriginalFilename: WindowsApplication1.exe
ProductVersion: 0.0.0.0
Assembly Version: 0.0.0.0

Midie.96846 also known as:

BkavW32.AIDetect.malware1
LionicTrojan.Win32.Convagent.trYj
AVGWin32:Trojan-gen
tehtrisGeneric.Malware
MicroWorld-eScanGen:Variant.Midie.96846
FireEyeGeneric.mg.1f88546cbfb2930e
ALYacGen:Variant.Midie.96846
CylanceUnsafe
ZillyaTrojan.Themida.Win32.56627
SangforSuspicious.Win32.Save.a
AlibabaPacked:Win32/Themida.f5dc0675
Cybereasonmalicious.cbfb29
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Packed.Themida.HKD
CynetMalicious (score: 100)
APEXMalicious
Paloaltogeneric.ml
KasperskyVHO:Trojan.MSIL.Convagent.gen
BitDefenderGen:Variant.Midie.96846
NANO-AntivirusVirus.Win32.Gen-Crypt.ccnc
AvastWin32:Trojan-gen
TencentWin32.Trojan.Crypt.Ckjl
Ad-AwareGen:Variant.Midie.96846
EmsisoftGen:Variant.Midie.96846 (B)
VIPREGen:Variant.Midie.96846
TrendMicroTROJ_GEN.R002C0WFU22
McAfee-GW-EditionBehavesLike.Win32.PWSZbot.tc
Trapminesuspicious.low.ml.score
SophosMal/Generic-S
IkarusTrojan.SuspectCRC
GDataGen:Variant.Midie.96846
AviraTR/Crypt.XPACK.Gen
MAXmalware (ai score=84)
KingsoftWin32.Heur.KVMH008.a.(kcloud)
ZoneAlarmVHO:Trojan.MSIL.Convagent.gen
MicrosoftTrojanDownloader:Win32/Emotet!ml
GoogleDetected
Acronissuspicious
McAfeeArtemis!1F88546CBFB2
VBA32BScope.Trojan.Tiggre
MalwarebytesMalware.Heuristic.1003
TrendMicro-HouseCallTROJ_GEN.R002C0WFU22
RisingTrojan.Generic@AI.100 (RDML:7EsZmagRmmTH36rVj/w/eA)
YandexTrojan.Themida!ZinvSTIW/bU
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.11196064.susgen
FortinetW32/PossibleThreat
BitDefenderThetaGen:NN.ZexaF.34646.oD0@aGGtTIgi
ZonerProbably Heur.ExeHeaderL
CrowdStrikewin/malicious_confidence_90% (W)

How to remove Midie.96846?

Midie.96846 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment