Dropped Files | ZeroBOX

Name	5526f49f2347e3bb_details.pdf Submit file
Filepath	C:\ProgramData\Details.pdf
Size	64.0B
Processes	3052 (rundll32.exe)
Type	PDF document, version 1.5
MD5	`b6dbd8ddb78aff836dce563b5d967c47`
SHA1	`4ea5ea7f7a98f0a8cf565a4950242be4b6688f64`
SHA256	`5526f49f2347e3bb6575b3e903d080f217b6dc8d6767bbb953389142d083fe39`
CRC32	`032751B1`
ssdeep	`3:IkvDvbGRqUpxXEjEXA4wS:ImbpU/EjEQu`
Yara	PDF_Format_Z - PDF Format
VirusTotal	Search for analysis

Name	b5ed8f412f12ad3c_winmanaged.dll Submit file
Filepath	C:\ProgramData\WinManaged.dll
Size	267.0KB
Processes	296 (curl.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`d30631ba67a28a6e4ab0c4e9584e26c2`
SHA1	`1ad78ae19fa9b411b3386f7eae884aa5efceaeb6`
SHA256	`b5ed8f412f12ad3c9d5a45b4ae5677f2dc907272de8ebb6c49ae897e11503d4f`
CRC32	`1035610D`
ssdeep	`3072:2b549m8ARBBkZaqVW8qR7uzRdEK5K3xUpZ+jpupwMG7ZcWiqbMT3wAkI6K+9tE5:2ba88sPkIqVtZVK3CgOVWsTAZjE5`
Yara	IsPE32 - (no description) OS_Processor_Check_Zero - OS Processor Check Malicious_Library_Zero - Malicious_Library UPX_Zero - UPX packed file IsDLL - (no description) PE_Header_Zero - PE File Signature
VirusTotal	Search for analysis