Tedy.180594 (file analysis)

The Tedy.180594 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Tedy.180594 virus can do?

Authenticode signature is invalid

How to determine Tedy.180594?


File Info:
name: 3D7DE48B20AE668ECA37.mlw
path: /opt/CAPEv2/storage/binaries/2b776d27b2a3c7d168703236e039405283d67476944d08633d7cc72ad5a7e6ef
crc32: F9F0FE24
md5: 3d7de48b20ae668eca37d1a35b88c9dc
sha1: ca05f74b8365560ae2f7a07605575ff06c60bf95
sha256: 2b776d27b2a3c7d168703236e039405283d67476944d08633d7cc72ad5a7e6ef
sha512: fe4e9d12a2d5ff31c936042860938b601952b192116cc8eefb1d010bcecd3fc4a7b1f013c7ad84ad6c807b0f0a69a94c1b9e5801c4985922981a6247d2ae6ef3
ssdeep: 3072:swyZ/pf1vSA7X/U59O30HQF9y1YzIJwQoLBLSDvfTGmBM1:Z4vSAY59OEHa9y1UIhoLBGDvLGmK1
type: PE32+ executable (GUI) x86-64, for MS Windows
tlsh: T1D6F32927B65660FDC06FC0B082674972BB727D990B326AFF169472392D396E03E3D644
sha3_384: bc3b18086190da865a0db179033a070bf3aa2050bbbe9b100ef918af9035588f44c8a4e6653e2a8755707c933b351a08
ep_bytes: 4883ec28e8ef0200004883c428e972fe
timestamp: 2022-07-29 07:25:02

Version Info:
0: [No Data]

Tedy.180594 also known as:

Lionic	Trojan.Win64.Shlem.4!c
Cynet	Malicious (score: 99)
ALYac	Gen:Variant.Tedy.180594
Cylance	Unsafe
VIPRE	Gen:Variant.Tedy.180594
Sangfor	Trojan.Win64.Shlem.V9xc
K7AntiVirus	Riskware ( 0040eff71 )
BitDefender	Gen:Variant.Tedy.180594
K7GW	Riskware ( 0040eff71 )
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (moderate confidence)
Kaspersky	Trojan.Win64.Shlem.ask
Alibaba	Trojan:Win64/Shlem.89a633e1
MicroWorld-eScan	Gen:Variant.Tedy.180594
Avast	Win64:TrojanX-gen [Trj]
Rising	Trojan.Generic!8.C3 (CLOUD)
Ad-Aware	Gen:Variant.Tedy.180594
Emsisoft	Gen:Variant.Tedy.180594 (B)
TrendMicro	TROJ_GEN.R002C0PGV22
McAfee-GW-Edition	RDN/Generic.dx
FireEye	Gen:Variant.Tedy.180594
Sophos	Mal/Generic-S
Avira	TR/AD.MeterpreterSC.uidpm
Antiy-AVL	Trojan/Win64.Shlem
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Trojan.Tedy.D2C172
ZoneAlarm	Trojan.Win64.Shlem.ask
GData	Gen:Variant.Tedy.180594
AhnLab-V3	Trojan/Win.Generic.C5218447
Acronis	suspicious
McAfee	RDN/Generic.dx
MAX	malware (ai score=81)
Malwarebytes	Trojan.ShellCode
TrendMicro-HouseCall	TROJ_GEN.R002C0PGV22
Tencent	Win64.Trojan.Shlem.Swhl
MaxSecure	Trojan.Malware.186387305.susgen
Fortinet	W32/PossibleThreat
AVG	Win64:TrojanX-gen [Trj]
Panda	Trj/Chgt.AD
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Tedy.180594?

Tedy.180594 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X