Dropped Files | ZeroBOX

Name	6e908377f3a3d965_gdi32.dll Submit file
Filepath	C:\Users\test22\AppData\Roaming\gdi32.dll
Size	166.0KB
Processes	2556 (87f3f2.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`5f12bee4a0ffc9e8d6cf4be6bd624e54`
SHA1	`bddd0cc23adc8b556abe6aba3323f114f8546e2f`
SHA256	`6e908377f3a3d96502efa18ea8b6420eea841c58bcd63bd74c6010cec0e72d8d`
CRC32	`CE9F33B9`
ssdeep	`3072:b5vVo31vQurcln4uNaSzSyiWJaq1/cyTh7GMbN:bkauMnHNx51kyF7GMbN`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer IsDLL - (no description) IsPE32 - (no description) Generic_Malware_Zero - Generic Malware UPX_Zero - UPX packed file OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis