Trojan Graftor – dplaysvr.exe – 18813e2e82d06fc3382b256d96caba88

Trojan Graftor
Also known as: Trojan Agent
SHA256: 56f96d8bff0239af5d0a2e3e96d440d3dbc710f5c457aafd6b8fb4e8cd2c9e78
SHA1: 95fb70945c43413770efab8d5284295de9187f32
MD5: 18813e2e82d06fc3382b256d96caba88
File size: 153088 bytes

Created files:

%AppData%\dplaysvr.exe – Trojan Graftor
%AppData%\dplayx.dll – Trojan Graftor

Trojan Graftor created autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\dplaysvr: %AppData%\dplaysvr.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\dplaysvr: %AppData%\dplaysvr.exe