Ursu.734352 (file analysis)

The Ursu.734352 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Ursu.734352 virus can do?

• Attempts to connect to a dead IP:Port (2 unique times)
• Presents an Authenticode digital signature
• Reads data out of its own binary image
• Performs some HTTP requests
• Attempts to create or modify system certificates
• Uses suspicious command line tools or Windows utilities

Related domains:

How to determine Ursu.734352?

File Info:
crc32: 2F1715CD
md5: 3f03cdef21514155c094a9f3089ad618
name: updata.exe
sha1: be27e62a2bd663c4b7b387ca773795b780439a73
sha256: efa4223d5ed34a1933758c18d94c572e8965f496d56790114160bfd04ceb40c1
sha512: 6059a7fe6e45f1c1e27f362b8f2fd3d757bc90ce3981002cc6d8b5ae4676a78fc1ae0f15f9ea6cad89326ded4e10916b22165d86586ed43a9c1d819b6096632f
ssdeep: 196608:4Zy1jM5h+5GLLXkYulqHI3a6rT5BdWii1Neqh5iuC1KstXdqpxq:4Zye5hMDYvIRHwmOkuCcstXdGxq
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 2020 Password Kernel
InternalName: pwordeu
FileVersion: 15
CompanyName: Password Kernel
ProductName: Password Kernel
ProductVersion: 15
FileDescription: Password Kernel Installer
OriginalFileName: pwordeu.exe
Translation: 0x0409 0x04b0

Ursu.734352 also known as:

How to remove Ursu.734352?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.