Should I remove “Application.Graftor.938737”?

The Application.Graftor.938737 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Application.Graftor.938737 virus can do?

• Executable code extraction
• Presents an Authenticode digital signature
• Creates RWX memory
• A process attempted to delay the analysis task.
• Attempts to connect to a dead IP:Port (7 unique times)
• Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
• Reads data out of its own binary image
• HTTP traffic contains suspicious features which may be indicative of malware related traffic
• Performs some HTTP requests
• Unconventionial binary language: Chinese (Simplified)
• Unconventionial language used in binary resources: Chinese (Simplified)
• The binary likely contains encrypted or compressed data.
• The executable is compressed using UPX
• Steals private information from local Internet browsers
• Attempts to modify proxy settings

Related domains:

How to determine Application.Graftor.938737?

File Info:
crc32: A10076F3
md5: 318ea0f7472e59005bb42daa75e46c47
name: 318EA0F7472E59005BB42DAA75E46C47.mlw
sha1: 36d2a56b873501953119d97e41c3cd9405319c69
sha256: 77b467ae559487a55481d3bcc2e91a4afaa272f03c2ee825b21c5a52f5ce7013
sha512: 7b0839459af1e7d45c93be647608e47738a5aefc2bab8bcab583378ca63ad8432c84efe4004e26b7dafb91556b3c6e50b375ba1366425b35096ac054994f4556
ssdeep: 12288:4TF6pFUbPe+gVZ1xqX0DOklX7h8Fwi2i5mi1pciT05rW4uB1LoLD3nH:cciAV4clNxo5N1SHW4yEH
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:
LegalCopyright: Copyright (C) 2021
InternalName: SEMx667ax80fdx4e0bx8f7dx5668.exe
FileVersion: 6.0.0.0616
ProductName: SEMx667ax80fdx4e0bx8f7dx5668.exe
FileDescription: _
OriginalFilename: SEMx667ax80fdx4e0bx8f7dx5668.exe
Translation: 0x0804 0x04b0

Application.Graftor.938737 also known as:

How to remove Application.Graftor.938737?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.