Ursu.821710 malicious file

The Ursu.821710 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ursu.821710 virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine Ursu.821710?


File Info:
name: 01D897CC63E67CEC41DE.mlw
path: /opt/CAPEv2/storage/binaries/f55158467a46bd04bf75989ba946beaee63c32bb829be21dd5bae878a5cc9a30
crc32: 80406976
md5: 01d897cc63e67cec41deac9f82f3b2c3
sha1: 047fe658892743860a340af036a319668f45edc3
sha256: f55158467a46bd04bf75989ba946beaee63c32bb829be21dd5bae878a5cc9a30
sha512: 172f64b32a80bfc93aa13f3a887e5a962ed7e5f91b9d5e68b29684ad11b0458941d739f1f9e33a25fb9798ccca6dff0c4af0d4df332c84661912380c346347c0
ssdeep: 1536:t1hoLhqlo+Vt+Yigq/KehttAJm9W7wUSYEQaYiI0qnLeT/5mVcl:CLgglSe1ZYEQ4I058Y
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1F0833A1332709A68C0295776DC6F5F884BB1B8479A12D61F3FE8ED5E0EF2B027643265
sha3_384: 8a46837eee37a2be86081e0dcb6399ec18117dd73ccce04b2b663f5d2d01e11754010b61bd8d1373f974eaf57984e92d
ep_bytes: ff250020400000000000000000000000
timestamp: 2057-07-28 01:12:22

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: Icon Generator
FileVersion: 1.0.0.0
InternalName: Icon Generator.exe
LegalCopyright: Copyright ©  2021
LegalTrademarks: 
OriginalFilename: Icon Generator.exe
ProductName: Icon Generator
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Ursu.821710 also known as:

Lionic	Trojan.Win32.Ursu.4!c
MicroWorld-eScan	Gen:Variant.Ursu.821710
FireEye	Gen:Variant.Ursu.821710
ALYac	Gen:Variant.Ursu.821710
Cybereason	malicious.c63e67
TrendMicro-HouseCall	TROJ_GEN.R002H09L621
BitDefender	Gen:Variant.Ursu.821710
Ad-Aware	Gen:Variant.Ursu.821710
McAfee-GW-Edition	Artemis
Emsisoft	Gen:Variant.Ursu.821710 (B)
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
GData	Gen:Variant.Ursu.821710
Cynet	Malicious (score: 100)
McAfee	Artemis!01D897CC63E6
MAX	malware (ai score=80)
APEX	Malicious
MaxSecure	Trojan.Malware.300983.susgen

How to remove Ursu.821710?

Ursu.821710 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X