Graftor.733503 (file analysis)

The Graftor.733503 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Graftor.733503 virus can do?

Executable code extraction
Reads data out of its own binary image
Unconventionial language used in binary resources: Korean
The binary likely contains encrypted or compressed data.
Attempts to modify proxy settings

How to determine Graftor.733503?


File Info:
crc32: C7359287
md5: eb6ea6c72a2291b53ea4a66c5242042c
name: patcher.exe
sha1: 2d8dc70a2e3ae53884cc53e7fe4d2cd0247bb65a
sha256: 1a8791e710672b65466f9260f4f9cc91400a40fb0fade091c6a0c13e3d1559cb
sha512: 1533f914d0337d61a4fc1226f34343ac99ba3c657523ff62367ca735c39329892e4b97268d56e21f0382b1c32337b9e7eea147aa8219fc60c446be3c841556cf
ssdeep: 6144:xKc20RdpZio1AzWDyaZwmbHr2WDHzxYAO4LTBXoZFHnIXR+b:zRdpUnzWDyaCmbSWDHSaLThoZF2Rm
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: (c) Barunson Interactive.  All rights reserved.
InternalName: Patcher.exe
FileVersion: 1.1.3.6
CompanyName: Barunson Interactive
ProductName: Dragonica Patcher
ProductVersion: 1.1.3.6
FileDescription: Dragonica Patcher
OriginalFilename: Patcher.exe
Translation: 0x0412 0x04b0

Graftor.733503 also known as:

Bkav	W32.AIDetectVM.malware1
MicroWorld-eScan	Gen:Variant.Graftor.733503
FireEye	Gen:Variant.Graftor.733503
McAfee	Artemis!EB6EA6C72A22
Cybereason	malicious.a2e3ae
Arcabit	Trojan.Graftor.DB313F
APEX	Malicious
Paloalto	generic.ml
BitDefender	Gen:Variant.Graftor.733503
Rising	Malware.Heuristic!ET#80% (RDMK:cmRtazp5QmDR+uy5gGJpEqfv+Bjm)
Ad-Aware	Gen:Variant.Graftor.733503
F-Secure	Trojan.TR/Crypt.ASPM.Gen
Trapmine	malicious.high.ml.score
Emsisoft	Gen:Variant.Graftor.733503 (B)
SentinelOne	DFI – Malicious PE
Avira	TR/Crypt.ASPM.Gen
Endgame	malicious (high confidence)
Microsoft	PUA:Win32/Caypnamer.A!ml
AegisLab	Trojan.Win32.Graftor.4!c
Cynet	Malicious (score: 85)
AhnLab-V3	Malware/Win32.Generic.C4080524
BitDefenderTheta	Gen:NN.ZexaF.34138.zC0baGQF83dG
ALYac	Gen:Variant.Graftor.733503
MAX	malware (ai score=88)
VBA32	BScope.Trojan.Agent
TrendMicro-HouseCall	TROJ_GEN.R002H09GP20
Ikarus	Trojan.Crypt
eGambit	Unsafe.AI_Score_92%
GData	Gen:Variant.Graftor.733503
AVG	Win32:Malware-gen
CrowdStrike	win/malicious_confidence_70% (W)
Qihoo-360	Generic/HEUR/QVM13.0.CF5B.Malware.Gen

How to remove Graftor.733503?

Graftor.733503 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X