Fragtor.45078 (file analysis)

The Fragtor.45078 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Fragtor.45078 virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Creates RWX memory
• Dynamic (imported) function loading detected
• Enumerates running processes
• Expresses interest in specific running processes
• CAPE extracted potentially suspicious content
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Creates a copy of itself

How to determine Fragtor.45078?

File Info:
name: 49E915CA17F74AC3FD98.mlw
path: /opt/CAPEv2/storage/binaries/e782a707d4659864daaa1ae1cbb368b39822bb1dbf80c13e8e88772711ac4886
crc32: BA9931E2
md5: 49e915ca17f74ac3fd9823d492ae1984
sha1: 5b88f514056bed7faba040ab51e8d08ac11e89ac
sha256: e782a707d4659864daaa1ae1cbb368b39822bb1dbf80c13e8e88772711ac4886
sha512: 794ec4e083bd34d62604d6e8d82ef96d994ee7ab5c8c2ccacddf05b9ec0683aab5aa00dfe859fa584ee9addd142d19a7879727426c8a636e78b9b7bed6db957d
ssdeep: 6144:kiDQXHeH6vmyHeHi1MI4dHeHmBmEHeHFMAGHeHixP2HeHAsm8HeHzVHeHIgIVTnz:5DWm1glMNP2mIVTPUVg3b
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T18ED47C116946823AC980173345283ABD63A8FF33732E31C7DEC87F553AB27DA1635996
sha3_384: 93d7c359f7a611e920c100944bf725f28c455586c6d4c6c3d84e407fb4d88ba0ebfe500e50ac44a53bf336db23eb5cb3
ep_bytes: 558bec6aff6820c9460068a4a3460064
timestamp: 2021-11-25 00:18:06

Version Info:
CompanyName: Paragon Software GmbH
FileDescription: A part of Paragon System Utilities
FileVersion: 10,2,1,1326
InternalName: advlauncher
LegalCopyright: Copyright (c) 1994-2017 Paragon Software GmbH, All rights reserved.
OriginalFilename: advlauncher.exe
ProductName: Paragon Backup & Recovery™ 16 Free
ProductVersion: 10.2.1.1326
Translation: 0x0000 0x04b0

Fragtor.45078 also known as:

How to remove Fragtor.45078?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.