Heur.Tomegun.15 (B) (file analysis)

The Heur.Tomegun.15 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Heur.Tomegun.15 (B) virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
Authenticode signature is invalid

How to determine Heur.Tomegun.15 (B)?


File Info:
name: F7F812E713D8743B30D6.mlw
path: /opt/CAPEv2/storage/binaries/8b839fe18fea76ebc06b3c51098efcf22d2d3036b441be7ea101dc7da3c781b4
crc32: C6D437CB
md5: f7f812e713d8743b30d6ebf78d8ab522
sha1: c3ee2752b1d21571b834b26fc219b6f7bd7dbc81
sha256: 8b839fe18fea76ebc06b3c51098efcf22d2d3036b441be7ea101dc7da3c781b4
sha512: c42e752a2568874c473e3b2d020f61944dedfd1c84f996be51ce955998f6ec36449fdf74b8dad3180208d137a6bb767829f100b732158786df89ed4044582bc2
ssdeep: 384:7mIPJPRoBua/BIIAWcif5rdaAxmlpNxEw4EnBMZIwpvwBwq6uQaKw9PUwq6uQaKW:zJ6BWch47lDjyZIDPeP9
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T17D14C40033F88B2AD9B97BF468B2529003B57D1AA431E71E5DC574CEAA7BF000651F6B
sha3_384: 96d7f9b21bda5bdd869c2eaeecd48441b9b206c629ebbd4995eaa87bafb9b6f11938d18cf7a6ff37c781fd3ff4d54901
ep_bytes: ff250020400000000000000000000000
timestamp: 2021-12-05 15:32:29

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: UDP Flooder
FileVersion: 1.0.0.0
InternalName: UDP Flooder.exe
LegalCopyright: Copyright ©  2017
LegalTrademarks: 
OriginalFilename: UDP Flooder.exe
ProductName: UDP Flooder
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Heur.Tomegun.15 (B) also known as:

Lionic	Trojan.Win32.Tomegun.4!c
MicroWorld-eScan	Gen:Heur.Tomegun.15
FireEye	Gen:Heur.Tomegun.15
ALYac	Gen:Heur.Tomegun.15
Cybereason	malicious.713d87
BitDefenderTheta	Gen:NN.ZemsilCO.34084.mm0@a4EKSxk
Symantec	ML.Attribute.HighConfidence
TrendMicro-HouseCall	TROJ_GEN.R002H06L521
BitDefender	Gen:Heur.Tomegun.15
Avast	Win32:Malware-gen
Ad-Aware	Gen:Heur.Tomegun.15
Sophos	Mal/Generic-R
McAfee-GW-Edition	GenericRXHW-ZW!F7F812E713D8
Emsisoft	Gen:Heur.Tomegun.15 (B)
Ikarus	Gen.Tomegun
GData	Gen:Heur.Tomegun.15
Antiy-AVL	Trojan/Generic.ASMalwS.34E7330
Gridinsoft	Ransom.Win32.Wacatac.sa
Arcabit	Trojan.Tomegun.15
Microsoft	Trojan:Win32/Wacatac.B!ml
McAfee	GenericRXHW-ZW!F7F812E713D8
MAX	malware (ai score=81)
SentinelOne	Static AI – Suspicious PE
Fortinet	PossibleThreat
AVG	Win32:Malware-gen
MaxSecure	Trojan.Malware.300983.susgen

How to remove Heur.Tomegun.15 (B)?

Heur.Tomegun.15 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X