b952dc3d8816b9113da25c037e16fd24c1644848a28969029958455f690ac402

Analysis

max time kernel
151s
max time network
44s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
10-10-2022 11:48

Target

GRE Analytical Writing LYL/新GRE官方题库翻译 Argument部分.pdf
Size

1.7MB
MD5

b849eb1cd4eff3f4620954aca864e157
SHA1

fc652796acc181c273178ff28d644326e680faa4
SHA256

bf3d9d4d69e2a0ee25add9946afbf831a7baafeb4841da2ff09c8073536b3682
SHA512

25e6d7acaf91ac2c2f086cd4478fc70dfce97371f142ba3b5c0caa89e41930336d4e1f3633adc43d9dfba0cd482858f8c6b7e4f092568fe2f50b4bd58eb1a288
SSDEEP

49152:FGXveWJXfJE9su6BU9KliY9yB9x6oioE3g9:sTJgsu6BU9emooh9

Score

1^/10

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1388 AcroRd32.exe
1388 AcroRd32.exe
1388 AcroRd32.exe
1388 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\GRE Analytical Writing LYL\新GRE官方题库翻译 Argument部分.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1388

memory/1388-54-0x00000000768A1000-0x00000000768A3000-memory.dmp

Filesize
8KB

Download