What is “Fragtor.502785”?

The Fragtor.502785 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Fragtor.502785 virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Fragtor.502785?


File Info:
name: AEF12BA27926A8914CC5.mlw
path: /opt/CAPEv2/storage/binaries/4470a19c7c0f213dce0fd078af2e010d4796320644106cbd2613e16ca4d38110
crc32: AE55EE73
md5: aef12ba27926a8914cc5d61333ae40aa
sha1: 35cf30ebdd2063e18cfcc26028e897ffbfba4a3c
sha256: 4470a19c7c0f213dce0fd078af2e010d4796320644106cbd2613e16ca4d38110
sha512: f39ded6a357b1da072ace574e8cbdd4b9300e1e21a6f8048124c03142704f59b06697b82501e7c88a271330ddc723cb65aa40ff3ad671671fe49e50fea9caba2
ssdeep: 384:9kS0X4qx4ceCjCtZwlMFXgmPeuaBU3losjuzZ6UwYRGZqY7Pu3uWgQDcfkD3R5:fet3+tZ2M5PP3lLuzZPKqwu+WHYf63R5
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T175E2C8997E448CEBD560573894E7D7763A7CF081CA234B62F650B7308A337A5219B22F
sha3_384: 2ce903ac96a76eeb0e7bc80e0912d05993facee0a8e2e4fbdb00e1d75bd7edc6990bc438fa188d9deff7066dcbd8c2b3
ep_bytes: 57565383ec108b5c24248b7424208b7c
timestamp: 2024-02-09 08:48:29

Version Info:
0: [No Data]

Fragtor.502785 also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Fragtor.502785
Skyhigh	BehavesLike.Win32.Injector.nm
McAfee	GenericRXWN-OT!AEF12BA27926
Sangfor	Suspicious.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Agent_AGen.DEA
Cynet	Malicious (score: 99)
BitDefender	Gen:Variant.Fragtor.502785
Avast	Win32:TrojanX-gen [Trj]
Emsisoft	Gen:Variant.Fragtor.502785 (B)
F-Secure	Trojan.TR/Agent_AGen.erfmw
DrWeb	BACKDOOR.Trojan
VIPRE	Gen:Variant.Fragtor.502785
FireEye	Gen:Variant.Fragtor.502785
Sophos	Mal/Generic-S
Ikarus	Trojan.Win32.Agent
GData	Gen:Variant.Fragtor.502785
Google	Detected
Avira	TR/Agent_AGen.erfmw
Antiy-AVL	Trojan/Win32.Wacatac
Arcabit	Trojan.Fragtor.D7AC01
Microsoft	Trojan:Win32/Wacatac.B!ml
AhnLab-V3	Trojan/Win.Generic.R634643
MAX	malware (ai score=82)
Cylance	unsafe
Rising	Trojan.Agent!8.B1E (TFE:5:kKo2SF7M8TD)
Fortinet	W32/Agent.DDP!tr
BitDefenderTheta	Gen:NN.ZedlaF.36744.c46@aCJ5@bi
AVG	Win32:TrojanX-gen [Trj]
DeepInstinct	MALICIOUS

How to remove Fragtor.502785?

Fragtor.502785 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X