What is “Fugrafa.293838”?

The Fugrafa.293838 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Fugrafa.293838 virus can do?

Sample contains Overlay data
Reads data out of its own binary image
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Fugrafa.293838?


File Info:
name: 66BF1294AB66BFF766D2.mlw
path: /opt/CAPEv2/storage/binaries/ab0f0034b0ddb4d224537cf7b56436d0d5d019ba5990c45d3f896f0eb7212fb6
crc32: 46DE930E
md5: 66bf1294ab66bff766d20feee44fbac4
sha1: 8165ff91d2a06c16ef6d08963d57ff0e7e14bae2
sha256: ab0f0034b0ddb4d224537cf7b56436d0d5d019ba5990c45d3f896f0eb7212fb6
sha512: d12a4689dc1691ea9236fa5de62b11aeb32f31aac353ccdc02e780bcb80a55327cb81d3a54606f4ed9be4b751f7feeb7dbbaeedf4b62f7b1b83d4ea91b679f8f
ssdeep: 24576:XEYYYYks0lCxAymb2+EGN2BAaIeYpgWKd:XEYYYYks0ZbV2BKpNKd
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1F615C1207981C53AEA7224324A78FBBB157FB5241B0965DF97981A3E2F341C22F3165F
sha3_384: 9acf20aba981fb7d472989530d8b6275508775dacb06509b5a4b922b5ed76ffaf54e6b368e0427de7394bbf76eb78137
ep_bytes: e87d070000e923feffffe934b2000068
timestamp: 2022-01-04 04:33:26

Version Info:
FileDescription: paint.net Setup
FileVersion: 4.306.8039.8199
InternalName: SetupSfx
LegalCopyright: Copyright © 2022 dotPDN LLC, Rick Brewster, and contributors. All Rights Reserved.
OriginalFilename: SetupSfx.exe
ProductName: paint.net
ProductVersion: 4.306.8039.8199
Translation: 0x0409 0x04b0

Fugrafa.293838 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Generic.4!c
MicroWorld-eScan	Gen:Variant.Fugrafa.293838
Skyhigh	BehavesLike.Win32.BadFile.cc
McAfee	Artemis!66BF1294AB66
BitDefender	Gen:Variant.Fugrafa.293838
VIPRE	Gen:Variant.Fugrafa.293838
FireEye	Gen:Variant.Fugrafa.293838
Emsisoft	Gen:Variant.Fugrafa.293838 (B)
Arcabit	Trojan.Fugrafa.D47BCE
GData	Gen:Variant.Fugrafa.293838
ALYac	Gen:Variant.Fugrafa.293838
MAX	malware (ai score=81)
DeepInstinct	MALICIOUS
Cylance	unsafe
TrendMicro-HouseCall	TROJ_GEN.R002H09J723
MaxSecure	Trojan.Malware.218218391.susgen

How to remove Fugrafa.293838?

Fugrafa.293838 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X