Graftor.535737 (file analysis)

The Graftor.535737 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Graftor.535737 virus can do?

• Possible date expiration check, exits too soon after checking local time
• A process created a hidden window
• Drops a binary and executes it
• The binary likely contains encrypted or compressed data.
• The executable is compressed using UPX
• Uses Windows utilities for basic functionality
• Network activity detected but not expressed in API logs

How to determine Graftor.535737?

File Info:
crc32: 738F53D1
md5: 03d11e8016a7e7cf17908c56b63386c1
name: 03D11E8016A7E7CF17908C56B63386C1.mlw
sha1: 28ad1adde4e5e35b4129f8b44505eb3fef420706
sha256: 5b9059e9cb5a2d855e3fbd569fdd37a9c52e8dc1c1357f267db65ce1c7095552
sha512: 5323c58ac34d5eb07799dabc42c374faef9ad2cecf1bfc859667652ca302150ae5aa8e4c1ede215451e4634be6e3e7b093e7f87aa27d56a3cf5a6b22d71adc06
ssdeep: 12288:COD9bHl0X/3OKSm2HNCjQgg+1wZkrIn4AnxLGBCol/L4WlL2oSgO63Va:5bku1EPKZznx6B3lk4rN3Va
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:
0: [No Data]

Graftor.535737 also known as:

How to remove Graftor.535737?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.