Fragtor.332424 (B) (file analysis)

The Fragtor.332424 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Fragtor.332424 (B) virus can do?

The binary contains an unknown PE section name indicative of packing
The executable is compressed using UPX
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Fragtor.332424 (B)?


File Info:
name: EE31B8B141A384BADA0F.mlw
path: /opt/CAPEv2/storage/binaries/c1c3bfaf1926ad819a7a43c01b41a9b949e5c88101f901cad78f98ae63433cee
crc32: A309B390
md5: ee31b8b141a384bada0fd8cfeeb2b723
sha1: d1435836bd2fa3736ec1a0a922d17c22653b533c
sha256: c1c3bfaf1926ad819a7a43c01b41a9b949e5c88101f901cad78f98ae63433cee
sha512: 760cd33a2c13e1f51d0b44db02aa207a8a6a7df89dc6ca277ee0cfb7b2e505a9c1201451c4bf795e43acc3ebd9c934647b43c6eee881736d5b631ce1a76a56a1
ssdeep: 3072:dJ/jbGreAvHYcc2vPeLAOvsDTPjq7cempcTnLqenWhCTpu+BnuR2JoutUbB:zoeAv4cc2vPchvsD1lpwBnu+oSU
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T19174A2457BF0FC67E5795A320AB6D3B02A72BC64AE61831F3486231E1D71290BD3537A
sha3_384: 6ae716906a272ae2207191b23c69aa61b3a45348c9390b144779243bd3926bf07076e3e6ac2e4b3f51168b3a760d2ad2
ep_bytes: 60be00204b008dbe00f0f4ff5789e58d
timestamp: 2009-03-24 17:52:37

Version Info:
CompanyName: Digital River, Inc.
FileDescription: Digital River Download Manager
FileVersion: 1.0.0
InternalName: Digital River Download Manager
LegalCopyright: © Digital River, Inc.
OriginalFilename: DldManager.exe
ProductName: Digital River Download Manager
ProductVersion: 1.0.0
Translation: 0x0409 0x04e4

Fragtor.332424 (B) also known as:

Bkav	W32.AIDetectMalware
MicroWorld-eScan	Gen:Variant.Fragtor.332424
FireEye	Gen:Variant.Fragtor.332424
ALYac	Gen:Variant.Fragtor.332424
Cylance	unsafe
Sangfor	Suspicious.Win32.Save.a
Cyren	W32/Autorun.GK.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (moderate confidence)
APEX	Malicious
Cynet	Malicious (score: 100)
BitDefender	Gen:Variant.Fragtor.332424
Avast	Win32:Malware-gen
Emsisoft	Gen:Variant.Fragtor.332424 (B)
McAfee-GW-Edition	BehavesLike.Win32.Generic.ft
Sophos	Generic ML PUA (PUA)
SentinelOne	Static AI – Suspicious PE
GData	Gen:Variant.Fragtor.332424
Antiy-AVL	Trojan/Win32.SGeneric
Arcabit	Trojan.Fragtor.D51288
Microsoft	Trojan:Win32/Wacatac.B!ml
Google	Detected
McAfee	Artemis!EE31B8B141A3
MAX	malware (ai score=80)
Malwarebytes	Generic.Malware.AI.DDS
TrendMicro-HouseCall	TROJ_GEN.R002H09H623
Fortinet	W32/ULPM.16C0!tr
AVG	Win32:Malware-gen
DeepInstinct	MALICIOUS

How to remove Fragtor.332424 (B)?

Fragtor.332424 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X