Fragtor.332424 (file analysis)

The Fragtor.332424 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Fragtor.332424 virus can do?

The binary contains an unknown PE section name indicative of packing
The executable is compressed using UPX
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Fragtor.332424?


File Info:
name: A6532A5191DA5CE032B7.mlw
path: /opt/CAPEv2/storage/binaries/4276e87e21f06b22f641bf180e314c69d207ad44a77426a41cbaf00024dafe7a
crc32: 43E2F8CB
md5: a6532a5191da5ce032b71993511f6f08
sha1: c723158dccb058e66c1e30a9f3e7b410ce88c7b0
sha256: 4276e87e21f06b22f641bf180e314c69d207ad44a77426a41cbaf00024dafe7a
sha512: 8c638747b02203b5cbf348830fb8fa82c14bb58d31e7465e6bc410b999c35c009a97f70eb9aa2c07c1512a270e2d1cbff1be3aecff6e660072c5a1c31a5216f6
ssdeep: 3072:SJ/jbGreAvHYcc2vPeLAOvsDAGjq7cempcTnLqenWhCTpu+BnuR2JoutUbB:coeAv4cc2vPchvsDflpwBnu+oSU
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T12274A1457BF0FC67E5795A320AB6D3B02A72BC64AE61831F3486231E1D71290BD3537A
sha3_384: b8e0cd48ed708e604d1edb8caf49c58f1a7b9edb93b52c51a6322746a55e196dd22d405e7e689498cdfe1bd52b80e1c9
ep_bytes: 60be00204b008dbe00f0f4ff5789e58d
timestamp: 2009-03-24 17:52:37

Version Info:
CompanyName: Digital River, Inc.
FileDescription: Digital River Download Manager
FileVersion: 1.0.0
InternalName: Digital River Download Manager
LegalCopyright: © Digital River, Inc.
OriginalFilename: DldManager.exe
ProductName: Digital River Download Manager
ProductVersion: 1.0.0
Translation: 0x0409 0x04e4

Fragtor.332424 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (moderate confidence)
MicroWorld-eScan	Gen:Variant.Fragtor.332424
FireEye	Gen:Variant.Fragtor.332424
McAfee	RDN/Generic.dx
Malwarebytes	Generic.Malware.AI.DDS
Sangfor	Suspicious.Win32.Save.a
Alibaba	Trojan:Win32/Generic.1a1c6140
Arcabit	Trojan.Fragtor.D51288
Cyren	W32/Autorun.GK.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Cynet	Malicious (score: 100)
BitDefender	Gen:Variant.Fragtor.332424
Avast	Win32:Malware-gen
Emsisoft	Gen:Variant.Fragtor.332424 (B)
McAfee-GW-Edition	BehavesLike.Win32.Generic.ft
Sophos	Generic ML PUA (PUA)
SentinelOne	Static AI – Suspicious PE
Antiy-AVL	Trojan/Win32.SGeneric
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Gen:Variant.Fragtor.332424
Google	Detected
AhnLab-V3	Malware/Win.Generic.C5255275
MAX	malware (ai score=84)
Cylance	unsafe
TrendMicro-HouseCall	TROJ_GEN.R002H06EB23
Fortinet	W32/ULPM.16C0!tr
AVG	Win32:Malware-gen
DeepInstinct	MALICIOUS

How to remove Fragtor.332424?

Fragtor.332424 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X