Categories: Malware

Ursu.738340 (file analysis)

The Ursu.738340 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Ursu.738340 virus can do?

The binary likely contains encrypted or compressed data.
Anomalous binary characteristics

How to determine Ursu.738340?


File Info:
crc32: 470FEA16md5: 7c568ee935767ae59e803c3a8ea7bf3dname: ippp.exesha1: ed5412052a2f96efbb98be26cf4fe02a305dab73sha256: c5fd6e3df2a4288a705978c7dd2c4e160babde4d05605f11c40ed952a86604c9sha512: aa997b0587a8422bd4e7b3d9fa0c3a8eed1d1e41825008f1575c8ba45b59ce390153e350792d41f2bcaf672578d451051d86ec4ac37ddde511f193dbf4859587ssdeep: 98304:YTzhtrg0KDvR6lh1Z+Tzhtrg0KDvR6lh1Z3Tzhtrg0KDvR6lh1ZOKe:mzhJg0YemzhJg0YedzhJg0Yeutype: PE32+ executable (GUI) x86-64 Mono/.Net assembly, for MS Windows
Version Info:
Translation: 0x0000 0x04b0LegalCopyright: Copyright 2010 Google Inc. All rights reserved.Assembly Version: 0.0.0.0InternalName: ippp.exeFileVersion: 67.0.3396.99CompanyName: Google Inc.Comments: Google ChromeProductName: Google ChromeProductVersion: 67.0.3396.99FileDescription: chrome_exeOriginalFilename: ippp.exe

Ursu.738340 also known as:

MicroWorld-eScan	Gen:Variant.Ursu.738340
FireEye	Generic.mg.7c568ee935767ae5
ALYac	Gen:Variant.Ursu.738340
BitDefender	Gen:Variant.Ursu.738340
Cybereason	malicious.52a2f9
Symantec	Trojan.Gen.2
APEX	Malicious
Avast	Win64:Trojan-gen
GData	Gen:Variant.Ursu.738340
Kaspersky	HEUR:Trojan.MSIL.Miner.gen
Ad-Aware	Gen:Variant.Ursu.738340
Sophos	Mal/Generic-S
F-Secure	Heuristic.HEUR/AGEN.1106074
Invincea	heuristic
McAfee-GW-Edition	Artemis
Trapmine	malicious.high.ml.score
Emsisoft	Gen:Variant.Ursu.738340 (B)
Webroot	W32.Malware.Heur
Avira	HEUR/AGEN.1106074
Endgame	malicious (high confidence)
Arcabit	Trojan.Ursu.DB4424
ZoneAlarm	HEUR:Trojan.MSIL.Miner.gen
Microsoft	Trojan:Win32/Wacatac.C!ml
McAfee	Artemis!7C568EE93576
MAX	malware (ai score=86)
ESET-NOD32	a variant of MSIL/CoinMiner.BDX
SentinelOne	DFI – Malicious PE
eGambit	Unsafe.AI_Score_99%
AVG	Win64:Trojan-gen
CrowdStrike	win/malicious_confidence_70% (D)