Malware

Tedy.57394 (file analysis)

Malware Removal

The Tedy.57394 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Tedy.57394 virus can do?

  • Presents an Authenticode digital signature
  • Authenticode signature is invalid
  • Anomalous binary characteristics
  • Binary compilation timestomping detected

How to determine Tedy.57394?


File Info:

name: 4C5B1171AD2D73FE48AA.mlw
path: /opt/CAPEv2/storage/binaries/4d1e3e89235c728f0838ef5120d365d3751a62fce07187722cf308ef86560620
crc32: B2D41417
md5: 4c5b1171ad2d73fe48aacf4f903cdef3
sha1: d1540102dfa550eb0ac9435e4b383c7bb1d1b4d9
sha256: 4d1e3e89235c728f0838ef5120d365d3751a62fce07187722cf308ef86560620
sha512: c68c972937c46a0665cb7eeaba6675547bffb83bfa8e994fe9c99b8d510dbeaf907d27937cc4c381262be128821c5b2d044e3a903e16a99f9d188a295556d70a
ssdeep: 6144:hJT/4DO/B52pRr3zmiTVVmVVV8VVNVVVcVVVxVVVPVVlVVVRVVVtVVWV60jVLVVg:hJj4DO/B52nZPCDEpUE9QDV9U11S9b
type: PE32+ executable (console) x86-64, for MS Windows
tlsh: T15F654E03D504A712F85C15707CE08A671DE3ADD598424A76F397BFAE983BEC36BC1225
sha3_384: 76adf70439a0482e35620e0363deec1aaa7a6f9269c441131c0ddf36e2a2f0837e7e5fb7a64147776d3d7ce2e29a119d
ep_bytes: 4883ec28e8db0500004883c428e95afe
timestamp: 2080-06-22 19:24:22

Version Info:

CompanyName: Microsoft Corporation
FileDescription: Microsoft Malware Protection DLP Command Line Utility
FileVersion: 4.18.2102.3 (WinBuild.160101.0800)
InternalName: MpDlpCmd
LegalCopyright: © Microsoft Corporation. All rights reserved.
OriginalFilename: MpDlpCmd.exe
ProductName: Microsoft® Windows® Operating System
ProductVersion: 4.18.2102.3
Translation: 0x0409 0x04b0

Tedy.57394 also known as:

LionicTrojan.Win32.Tedy.4!c
MicroWorld-eScanGen:Variant.Tedy.57394
FireEyeGen:Variant.Tedy.57394
ALYacGen:Variant.Tedy.57394
ZillyaWorm.AutoRun.Win32.180132
ClamAVWin.Worm.Mabezat-5431
BitDefenderGen:Variant.Tedy.57394
Ad-AwareGen:Variant.Tedy.57394
McAfee-GW-EditionArtemis
EmsisoftGen:Variant.Tedy.57394 (B)
JiangminPacked.Krap.gvvn
GridinsoftRansom.Win64.Sabsik.sa
MicrosoftTrojan:Win32/Wacatac.B!ml
GDataGen:Variant.Tedy.57394
CynetMalicious (score: 100)
McAfeeArtemis!4C5B1171AD2D
MAXmalware (ai score=87)
TrendMicro-HouseCallTROJ_GEN.R03BH09L221
IkarusExploit.Win32.RpcDcom
FortinetPossibleThreat.PALLAS.H
MaxSecureTrojan.Malware.121218.susgen

How to remove Tedy.57394?

Tedy.57394 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment