Trojan Graftor – uninst.exe – f5f01d57283a7a9d8c491d57f449015e

Trojan Graftor
Also known as: Trojan Agent
SHA256: 8b32886fb36eb8546b7f4ad6e25c11cedcd5f156da5631d04c6381289ba22e04
SHA1: ece542a18027be19fa5506096fba18e84a1999de
MD5: f5f01d57283a7a9d8c491d57f449015e
File size: 127801 bytes

Created files:

%Program Files%\wemakeppop\uninst.exe – Trojan Graftor
%Program Files%\wemakeppop\wemakeppop.exe – Trojan Graftor
%Program Files%\wemakeppop\wemakeppopmds.exe – Trojan Graftor

Trojan Graftor created autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\wemakeppop: %Program Files%\wemakeppop\wemakeppop.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\wemakeppopmds: %Program Files%\wemakeppop\wemakeppopmds.exe