Fragtor.158799 (file analysis)

The Fragtor.158799 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Fragtor.158799 virus can do?

• A file was accessed within the Public folder.
• Sample contains Overlay data
• Reads data out of its own binary image
• Drops a binary and executes it
• Authenticode signature is invalid
• CAPE detected the embedded win api malware family
• Deletes executed files from disk
• Anomalous binary characteristics
• Yara detections observed in process dumps, payloads or dropped files

How to determine Fragtor.158799?

File Info:
name: 1A5B4E5B68E18F056385.mlw
path: /opt/CAPEv2/storage/binaries/4abef93f898ecb068044162b52f245648f1dde4e9e7657fa4a6ee7c7b7653837
crc32: EEA45F96
md5: 1a5b4e5b68e18f056385fa388aa61bfe
sha1: 6941aea1f39305d2914112a0af45bb0164940580
sha256: 4abef93f898ecb068044162b52f245648f1dde4e9e7657fa4a6ee7c7b7653837
sha512: 39a3edcad9b496ff4462ed1aee46a36f700bbbb04f62a539b0e55f6285907ad7f7e2cc5d3bbea5b64696f3d994ba10a806c12b3bdd4a021d4ee6401ee6d34903
ssdeep: 98304:UCPtGScACFCAjdqE5agTHSpOgEUKAMzwO63JEgIYfO:jfcXFCKqgaUywg0Ovm
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T10A063344F976BA52CA748331914586866B77EC765760832F7ECFB98F6C302408B9BE31
sha3_384: 9dadaf3503455e68ec0d1d3b23572ba406842e5e7815ce9272f11459ad68818dcef0a00aa6e0485f75eadc584b8fd83b
ep_bytes: e8fb2e0000e916feffff558bec83ec04
timestamp: 2009-11-06 19:53:27

Version Info:
Comments: Created with Setup Factory 8.0
FileDescription: Setup Application
FileVersion: 8.2.1.0
InternalName: suf80_launch
LegalCopyright: Setup Engine Copyright © 2004-2009 Indigo Rose Corporation
LegalTrademarks: Setup Factory is a trademark of Indigo Rose Corporation.
OriginalFilename: suf80_launch.exe
ProductName: Setup Factory 8.0 Runtime
ProductVersion: 8.2.1.0
Translation: 0x0409 0x04e4

Fragtor.158799 also known as:

How to remove Fragtor.158799?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.