Tedy.378819 (file analysis)

The Tedy.378819 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Tedy.378819 virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Tedy.378819?


File Info:
name: EEF837DFEDD4A1C9D516.mlw
path: /opt/CAPEv2/storage/binaries/da38b339c5cc4d58207c3dc89dab573da42aed3b1d6930e212e7a40c27e0137d
crc32: 6E994D81
md5: eef837dfedd4a1c9d516f439ace8a4ac
sha1: 16435466c3927844ac4538394ea6a8254c54221f
sha256: da38b339c5cc4d58207c3dc89dab573da42aed3b1d6930e212e7a40c27e0137d
sha512: 014967d2a638252a41e1b6a4fe61e7aabe0651da598b45532b4ecb8fd61c56faf63e0f4dce1bc75bf35b5ddcd64f350d6d8c4a3f4b87e833bcf16bb83bf5f762
ssdeep: 384:FXB/0+VW8hLmNXF+48bmkxTg+5ACDeHBmM1wPhrQ/mB/D23YZjV:38apgXF+48KkxTgU9aohdB/Drl
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T125131944B280C037F8EA01FFEEFE4CF5452CDD241F5A51E7A2D780E92A511DB2139A9A
sha3_384: 103ce348c9c5b74241cec222a7c29b12b99aefc5340a202c8bcb7dff20b1587b70d493c3ccc9352591ffc29745082797
ep_bytes: e973190000e995480000e9f9210000e9
timestamp: 2022-05-31 04:31:39

Version Info:
0: [No Data]

Tedy.378819 also known as:

MicroWorld-eScan	Gen:Variant.Tedy.378819
FireEye	Gen:Variant.Tedy.378819
ALYac	Gen:Variant.Tedy.378819
VIPRE	Gen:Variant.Tedy.378819
Sangfor	Trojan.Win32.Agent.Vum9
Symantec	Heur.AdvML.L
Elastic	malicious (moderate confidence)
APEX	Malicious
Cynet	Malicious (score: 100)
BitDefender	Gen:Variant.Tedy.378819
McAfee-GW-Edition	BehavesLike.Win32.Generic.pt
Emsisoft	Gen:Variant.Tedy.378819 (B)
Antiy-AVL	Trojan/Win32.PossibleThreat
Arcabit	Trojan.Tedy.D5C7C3
AhnLab-V3	Malware/Win.Generic.C5183328
McAfee	RDN/Generic.dx
MAX	malware (ai score=84)
VBA32	BScope.Trojan.Dynamer
Rising	Trojan.Generic@AI.100 (RDML:GeBhOS4Mv3fPayBFFFdhqw)
SentinelOne	Static AI – Suspicious PE
Fortinet	W32/PossibleThreat
DeepInstinct	MALICIOUS

How to remove Tedy.378819?

Tedy.378819 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X