Malware

Graftor.946921 (file analysis)

Malware Removal

The Graftor.946921 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Graftor.946921 virus can do?

  • Executable code extraction
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Graftor.946921?


File Info:

crc32: F8E2823C
md5: 872332643f4ff1090f8b42b81a67c2c7
name: 872332643F4FF1090F8B42B81A67C2C7.mlw
sha1: f49f8055c40659f6d1f7bb4e58dd3779f8a5e541
sha256: 158a60140819d10217b10f5df9b0cb6045595ae5a7cc8e97bafbb66d7c2a5ac5
sha512: 0d3cd770945651e9c79379190cdd6b110fc79f5baabe11916e54e9cf1708cb3e781de0ccbb88f3c8b96864b91b01a19cedecb48a522520d47c447e2f9bcd8f99
ssdeep: 3072:eR8o3Ci/c5LuZjHg2PDesjVk8jcZubbidHv/:W/c5LuZP7esjVkAnit
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0804 0x04b0
InternalName: SelfCert
FileVersion: 2.00.0022
CompanyName: Microsoft Corporation
ProductName: SelfCert
ProductVersion: 2.00.0022
FileDescription: x521bx5efax81eax884cx7b7ex7f72x5f0fx6570x7801x8bc1x4e66
OriginalFilename: SelfCert.exe

Graftor.946921 also known as:

BkavW32.AIDetect.malware1
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
ALYacGen:Variant.Graftor.946921
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaTrojan:Win32/Sality.56e4a389
Cybereasonmalicious.43f4ff
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:Sality [Inf]
BitDefenderGen:Variant.Graftor.946921
NANO-AntivirusVirus.Win32.Virut-Gen.bwpxnc
MicroWorld-eScanGen:Variant.Graftor.946921
Ad-AwareGen:Variant.Graftor.946921
SophosGeneric ML PUA (PUA)
ComodoMalware@#2i0go6t15cdty
BitDefenderThetaGen:NN.ZevbaF.34170.im1@aiH5aykb
McAfee-GW-EditionBehavesLike.Win32.Generic.ch
FireEyeGeneric.mg.872332643f4ff109
EmsisoftGen:Variant.Graftor.946921 (B)
SentinelOneStatic AI – Malicious PE
AviraTR/Patched.Ren.Gen
MicrosoftTrojan:Win32/Wacatac.B!ml
ArcabitTrojan.Graftor.DE72E9
GDataGen:Variant.Graftor.946921
Acronissuspicious
McAfeeArtemis!872332643F4F
MAXmalware (ai score=89)
YandexTrojan.Inject!zbtB9UnM6Eg
IkarusWin32.Sality
AVGWin32:Sality [Inf]
Paloaltogeneric.ml

How to remove Graftor.946921?

Graftor.946921 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment