Should I remove “Fugrafa.256142”?

The Fugrafa.256142 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Fugrafa.256142 virus can do?

• SetUnhandledExceptionFilter detected (possible anti-debug)
• Executed a command line with /C or /R argument to terminate command shell on completion which can be used to hide execution
• Dynamic (imported) function loading detected
• Network anomalies occured during the analysis.
• Reads data out of its own binary image
• A process created a hidden window
• Drops a binary and executes it
• Authenticode signature is invalid
• A ping command was executed with the -n argument possibly to delay analysis
• Uses Windows utilities for basic functionality
• Created a process from a suspicious location
• Uses suspicious command line tools or Windows utilities

How to determine Fugrafa.256142?

File Info:
name: 52D18F904D73207ED79D.mlw
path: /opt/CAPEv2/storage/binaries/cd445e9f0596bcc7a5a382b9acb601b6c28e7b9c51f9203060e6dc917b160e8e
crc32: 2544F6B6
md5: 52d18f904d73207ed79d854fca0d2625
sha1: 15c0eea33b3c8eb146e01e1632687898c14e0c36
sha256: cd445e9f0596bcc7a5a382b9acb601b6c28e7b9c51f9203060e6dc917b160e8e
sha512: 2cf564679b97c87fc41344d60560b1ca640740ad1400ac04e4f792f7975c0a08ef9260117f5c8d3e7d7cb030aea87b76b0f86f4b30e63cdb455ed041502ee184
ssdeep: 768:RO69nbjUU9xjXvKBBW5bAzz+zq2H3FdqXkU7u7rfDd:RwUDjSBBW+v+zq2TIPKfbd
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1F7C27DC3FA510832DF5444B520B21EB8C3BA7865BBA98AB39F11FA1129D1451D6362FF
sha3_384: d02d1570136f6843102510d91684ba59ed491ac9feca20ef9ad870d77cc7581cda80451a3aa9cb0537e6151745825275
ep_bytes: e8b1020000e974feffff558becff7508
timestamp: 2020-12-13 23:46:04

Version Info:
0: [No Data]

Fugrafa.256142 also known as:

How to remove Fugrafa.256142?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.