Tedy.191246 (file analysis)

The Tedy.191246 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Tedy.191246 virus can do?

CAPE extracted potentially suspicious content
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Tedy.191246?


File Info:
name: 7B8B727529EA38734039.mlw
path: /opt/CAPEv2/storage/binaries/def31b004dc8e08809cceee9f7e04a8cee5516ec966e39066fcde18fd63e6441
crc32: D75951A0
md5: 7b8b727529ea3873403921d3b8dfbf50
sha1: c5ff24934793567c9cf8828de99cd187ba76a32a
sha256: def31b004dc8e08809cceee9f7e04a8cee5516ec966e39066fcde18fd63e6441
sha512: 7c5c9b15de8bd6c49f5728c85313e1278e33e188ec51e32c61be46bad5c88d58414fcf8cbc27a6ca3e5dc346000794e3cc34360f432c7ef79dfc2b213a0d760a
ssdeep: 3072:F3zR4AqwliF5mPWlInCCoWTnXlxfsyNFsWbsWBbU3ypAPcm+:huVuaIzTHskIWlUipA
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T109F35C15B6EC864EC39D1375F5F709E092F1AA0B7685C6AF2C091AD93E4B3B25C4026F
sha3_384: 109ef0d28e2ffc9a3de9446034fc3f1dfde7947fc6f094603fc14a18eef86f2edc0ab298b2c7a59abdcd073d03efae7e
ep_bytes: ff250020400000000000000000000000
timestamp: 2022-08-24 20:06:52

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: PA编辑器
FileVersion: 6.6.6.6
InternalName: PA编辑器.exe
LegalCopyright: Copyright ©  2022
LegalTrademarks: 
OriginalFilename: PA编辑器.exe
ProductName: PA编辑器
ProductVersion: 6.6.6.6
Assembly Version: 6.6.6.6

Tedy.191246 also known as:

Bkav	W32.AIDetectNet.01
Lionic	Trojan.Win32.Tedy.4!c
MicroWorld-eScan	Gen:Variant.Tedy.191246
FireEye	Generic.mg.7b8b727529ea3873
McAfee	RDN/Real Protect-LS
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
TrendMicro-HouseCall	TROJ_GEN.R002H09HO22
BitDefender	Gen:Variant.Tedy.191246
Ad-Aware	Gen:Variant.Tedy.191246
Sophos	Generic ML PUA (PUA)
VIPRE	Gen:Variant.Tedy.191246
McAfee-GW-Edition	Artemis!Trojan
SentinelOne	Static AI – Malicious PE
Trapmine	suspicious.low.ml.score
Emsisoft	Gen:Variant.Tedy.191246 (B)
GData	Gen:Variant.Tedy.191246
Antiy-AVL	Trojan/Generic.ASMalwS.720E
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Tedy.191246
Malwarebytes	Malware.Heuristic.1001
APEX	Malicious
Rising	Trojan.Generic/MSIL@AI.90 (RDM.MSIL:/riDOsP6RxSD6vlC/7eaAg)
MAX	malware (ai score=84)
CrowdStrike	win/malicious_confidence_90% (W)

How to remove Tedy.191246?

Tedy.191246 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X