Adware.Fugrafa.59450 (B) (file analysis)

The Adware.Fugrafa.59450 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Adware.Fugrafa.59450 (B) virus can do?

• SetUnhandledExceptionFilter detected (possible anti-debug)
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Possible date expiration check, exits too soon after checking local time
• Guard pages use detected – possible anti-debugging.
• Dynamic (imported) function loading detected
• CAPE extracted potentially suspicious content
• Authenticode signature is invalid
• Collects and encrypts information about the computer likely to send to C2 server

How to determine Adware.Fugrafa.59450 (B)?

File Info:
name: EF3B3BAC0534F3EBE6AF.mlw
path: /opt/CAPEv2/storage/binaries/7d42829fc9d18dce2a3ebbd467df78a8ab7487371ad36389d591ff1b9333208f
crc32: 3BED468E
md5: ef3b3bac0534f3ebe6afb94eb309edfb
sha1: d9e6772040eb77b77328cbbf970af1427b1a001a
sha256: 7d42829fc9d18dce2a3ebbd467df78a8ab7487371ad36389d591ff1b9333208f
sha512: 8c098bccebba2f4df8624830c88e936f8620233bfbfebec5bbf76eba2b951e2698f124c83cf4940ca107f9eb8b25fb6127b7cccbe29060b8534b74592409bc57
ssdeep: 49152:EIuxkM+DBI2hRjNPDtdNvQfhEdYVZZbDSVqoZjcNH7E51bwL957:VuOHdIcRjNtdNvQfCdmDS9jc9Eez
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T168063902938C5BADF66220B6D0997D3718E41E38134F84FBC3C69EDB5190AD066B9F5B
sha3_384: 1f22c3a0e1f83eb9d562a82fc3a9cc07644c911e6d1aa7b0b0e0a311e92c289cde289ba0b3d9662fac333c9f02d35762
ep_bytes: e8d1220100e97ffeffff558bec568b75
timestamp: 2022-04-22 21:42:27

Version Info:
FileVersion: 1.0.8147.26466
ProductVersion: 1.0.8147.26466
Translation: 0x0409 0x04b0

Adware.Fugrafa.59450 (B) also known as:

How to remove Adware.Fugrafa.59450 (B)?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.