3884f38ff5273fc57e48e4ccc70c4c5bc40110891ab197ea7c0766e75eba86a3

Analysis

max time kernel
150s
max time network
45s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
08-09-2022 10:28

Target

3班C类论文/A_19300180149_庞越楚_19300180153_陈怡行_19300180139_吴江宁.pdf
Size

1.5MB
MD5

99a507efdf9d93214e91c51d755d773d
SHA1

819625245190cdfceb598914c8426e1f2ce629af
SHA256

4de7a0e5aaed01bd8458ab33052cea079eabf485a49039281fcd7c8359d89b0c
SHA512

56d789fc2ba0b913d92310ec82da627a2d2ffd9449e87f0c46c9227189e78a503aa9bfad2a745cc3a5f58accfad4664504902c16cc90ee540cb7e9163e9b9914
SSDEEP

24576:JsKVZ4anbxwRDJineT3arE6U2/ZxV20X8xeik5NgEknGtXJnI4Uhw9Nv:TH4a6RFineT3qhlx5TkQZnGSR

Score

1^/10

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1140 AcroRd32.exe
1140 AcroRd32.exe
1140 AcroRd32.exe
1140 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3班C类论文\A_19300180149_庞越楚_19300180153_陈怡行_19300180139_吴江宁.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1140

memory/1140-54-0x0000000075F51000-0x0000000075F53000-memory.dmp

Filesize
8KB

Download