Fragtor.503122 (file analysis)

The Fragtor.503122 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Fragtor.503122 virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Fragtor.503122?


File Info:
name: 170272B293F9951E9129.mlw
path: /opt/CAPEv2/storage/binaries/edc82586ecbf6af517a95caae7ed3fde7cf7c0cdbf4aba877b896efb0dabf452
crc32: 0A006400
md5: 170272b293f9951e9129c78425aef701
sha1: 47b95e7b944d0218bc6fdfa750281738806696ff
sha256: edc82586ecbf6af517a95caae7ed3fde7cf7c0cdbf4aba877b896efb0dabf452
sha512: 610ee72060dce6f33fbd867fa573de29eccbca8d37c7b4d5b0c5f16cf8ea2d890b477a7d3ca0d2dc756600b2a5ac14c2c7ab368f64aa8811a91285a3d1ff4938
ssdeep: 768:OGSHj7pZ2bqcPP3lLuzZPKqM1pIPYEpoR5:OxHj7psqcPP3lLuBZM1xEw
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T1DFE2D959BE444CEBE950173984E7CB76267CF140CE234B62F660BB308B23795619B26F
sha3_384: b0b39ca589549826aa28e334aa7c2c876f38fcd9698dbc8f852b451d48bb7af315939105a5914eb302687bd9071cc5c7
ep_bytes: 57565383ec108b5c24248b7424208b7c
timestamp: 2024-02-09 03:06:08

Version Info:
0: [No Data]

Fragtor.503122 also known as:

MicroWorld-eScan	Gen:Variant.Fragtor.503122
FireEye	Gen:Variant.Fragtor.503122
Skyhigh	BehavesLike.Win32.Injector.nm
McAfee	GenericRXWN-OT!170272B293F9
Sangfor	Trojan.Win32.Agent.Vsz0
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Trojan:Win32/Fsysna.7a1f54ac
BitDefenderTheta	Gen:NN.ZedlaF.36744.c46@aukIOun
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Agent_AGen.DDZ
Cynet	Malicious (score: 99)
Kaspersky	Trojan.Win32.Fsysna.jezp
BitDefender	Gen:Variant.Fragtor.503122
Avast	Win32:MalwareX-gen [Trj]
Rising	Trojan.Agent!8.B1E (CLOUD)
Emsisoft	Gen:Variant.Fragtor.503122 (B)
F-Secure	Trojan.TR/Agent_AGen.rhbfk
VIPRE	Gen:Variant.Fragtor.503122
Sophos	Mal/Generic-S
GData	Gen:Variant.Fragtor.503122
Google	Detected
Avira	TR/Agent_AGen.rhbfk
MAX	malware (ai score=82)
Antiy-AVL	Trojan/Win32.Fsysna
Arcabit	Trojan.Fragtor.D7AD52
ZoneAlarm	Trojan.Win32.Fsysna.jezp
Microsoft	Trojan:Win32/Wacatac.B!ml
AhnLab-V3	Trojan/Win.Generic.R634546
Cylance	unsafe
Panda	Trj/Chgt.AD
Tencent	Win32.Trojan.Fsysna.Ewnw
Ikarus	Trojan.Win32.Agent
Fortinet	W32/Agent_AGen.DDZ!tr
AVG	Win32:MalwareX-gen [Trj]
DeepInstinct	MALICIOUS

How to remove Fragtor.503122?

Fragtor.503122 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X