Fugrafa.195929 malicious file

The Fugrafa.195929 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Fugrafa.195929 virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Dynamic (imported) function loading detected
Presents an Authenticode digital signature
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Fugrafa.195929?


File Info:
name: CFC1A6A2971C95B98C2C.mlw
path: /opt/CAPEv2/storage/binaries/2064d5143605a89101b48e80a1927fab9e4b0bf3fe170fd2eb51bd9a238f854d
crc32: 47EC3F6F
md5: cfc1a6a2971c95b98c2c0dc4cf54e817
sha1: ee7f572a94f7f46de2e82a6aa31b188422fa22aa
sha256: 2064d5143605a89101b48e80a1927fab9e4b0bf3fe170fd2eb51bd9a238f854d
sha512: ebebd547b9ec1692db92b780ab5af59875d7f13e16c7ccf262da565eba5b4800784174457ac9cff9c2602a067117d7d834e65d9274f8d7192da6d402dde645fd
ssdeep: 12288:Mvws7vwsDT7CWlTJivUsd7pB4tfYBLmtR5lKGNA++:M3b7CWlTJissd7pB4qBLi5lKG6++
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T12CB46B22EB95C973C7A302309D76FB7F916DFB950931412B639C5A9C1EB06A17A32307
sha3_384: 0cde83d4a5fffc9a1ae2689792008468633e8cd960fa90ee3d871d9317a0407ead62918b00b117d8a3f4cab8f56c9a8b
ep_bytes: e8a5060000e974feffff558beceb0dff
timestamp: 2020-12-09 13:07:56

Version Info:
Comments: Java Access Bridge
CompanyName: Oracle Corporation
FileDescription: Java(TM) Platform SE binary
FileVersion: 8.0.2810.9
Full Version: 1.8.0_281-b09
InternalName: jabswitch
LegalCopyright: Copyright © 2020
OriginalFilename: jabswitch.exe
ProductName: Java(TM) Platform SE 8
ProductVersion: 8.0.2810.9
Translation: 0x0409 0x04b0

Fugrafa.195929 also known as:

Bkav	W32.AIDetect.malware2
Elastic	malicious (high confidence)
DrWeb	Win32.HLLW.Autoruner.547
MicroWorld-eScan	Gen:Variant.Fugrafa.195929
FireEye	Gen:Variant.Fugrafa.195929
McAfee	Artemis!CFC1A6A2971C
Cylance	Unsafe
Symantec	ML.Attribute.HighConfidence
TrendMicro-HouseCall	WORM_AUTORUN.SMF
ClamAV	Win.Malware.Generic-9863791-0
BitDefender	Gen:Variant.Fugrafa.195929
Avast	Win32:VB-FBX
Ad-Aware	Gen:Variant.Fugrafa.195929
Emsisoft	Gen:Variant.Fugrafa.195929 (B)
TrendMicro	WORM_AUTORUN.SMF
McAfee-GW-Edition	BehavesLike.Win32.CoinMiner.gh
Sophos	Generic ML PUA (PUA)
SentinelOne	Static AI – Suspicious PE
GData	Win32.Trojan.PSE.1H53702
Jiangmin	Packed.Krap.gvuk
MAX	malware (ai score=89)
Arcabit	Trojan.Fugrafa.D2FD59
Microsoft	Trojan:Win32/Woreflint.A!cl
Cynet	Malicious (score: 100)
VBA32	Worm.AutoRun
ALYac	Gen:Variant.Fugrafa.195929
Malwarebytes	Malware.AI.3696146603
APEX	Malicious
Rising	Worm.VB!1.DA41 (CLASSIC)
Ikarus	Trojan.Dropper
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/Autorun.BJD!tr
AVG	Win32:VB-FBX
CrowdStrike	win/malicious_confidence_70% (W)

How to remove Fugrafa.195929?

Fugrafa.195929 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X