Ursu.764494 malicious file

The Ursu.764494 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ursu.764494 virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid

How to determine Ursu.764494?


File Info:
name: 6E1C036F3D36C62000AB.mlw
path: /opt/CAPEv2/storage/binaries/d76590cd825f475f3485e4765fcccf77fa18e80d5935d1a63539ba2bc09b0738
crc32: 56A02994
md5: 6e1c036f3d36c62000ab8f1f46d48df1
sha1: 8f1c8eed72961fe9c3ca3e3bbb804931baae74ca
sha256: d76590cd825f475f3485e4765fcccf77fa18e80d5935d1a63539ba2bc09b0738
sha512: 1b84529a6a1b4877e7cae416fc9e443b6bc0378b5ea6cd1a62d3f1102938c596b22df97c6eb2e0100bfa81ed9a81488802e0d0dd49e9b10e69fc07654937d1bc
ssdeep: 192:YXhG3SMEuBfqhIW1Pnaz3rSp2jkj9L2cIrckG:uhG3SMzfqrnaz3Op2jk0cIrck
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T18D12082557D0C276C9AA0E738C9396601B79E300C85BDF3E65CCB427CDA728587E3A31
sha3_384: 86a3206f0caaa8e940f5cca2f206b06bda75e726d22c4bb1a371df68070dfb745f031375e565fc9c48c1a6d44a1f592c
ep_bytes: ff250020400000000000000000000000
timestamp: 2017-06-23 12:13:30

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: CRACK
FileVersion: 1.0.0.0
InternalName: CRACK.exe
LegalCopyright: Copyright ©  2017
LegalTrademarks: 
OriginalFilename: CRACK.exe
ProductName: CRACK
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Ursu.764494 also known as:

Lionic	Trojan.Win32.Generic.4!c
MicroWorld-eScan	Gen:Variant.Ursu.764494
Skyhigh	Artemis
McAfee	Artemis!6E1C036F3D36
Cylance	unsafe
Arcabit	Trojan.Ursu.DBAA4E
APEX	Malicious
BitDefender	Gen:Variant.Ursu.764494
Emsisoft	Gen:Variant.Ursu.764494 (B)
VIPRE	Gen:Variant.Ursu.764494
FireEye	Gen:Variant.Ursu.764494
Sophos	CrackTool (PUA)
MAX	malware (ai score=88)
Antiy-AVL	Trojan/Win32.SGeneric
GData	Gen:Variant.Ursu.764494
ALYac	Gen:Variant.Ursu.764494
TrendMicro-HouseCall	TROJ_GEN.R002H09EC23
MaxSecure	Trojan.Malware.101040208.susgen
DeepInstinct	MALICIOUS

How to remove Ursu.764494?

Ursu.764494 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X