b952dc3d8816b9113da25c037e16fd24c1644848a28969029958455f690ac402

Analysis

max time kernel
150s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
10-10-2022 11:48

Target

GRE Analytical Writing LYL/新GRE官方题库翻译 Issue部分.pdf
Size

993KB
MD5

6c9db5bf3c1aa592fef6fea9079848e5
SHA1

c7c0f1d2565816378ba6d4d7815d1e74cd537d34
SHA256

93c2f5dea0d222ebeece0a7a325c47d6f29f3f563c2b5929c1429e2f6478caa6
SHA512

ebac611db7c0fc92c9b747929e9a9d276b35b9ea8745f6f409c7f1a1e65f903fd31584c6a6809013a2ffc185384aa3d69bf44d90806d285c36b3b4311e3e988e
SSDEEP

12288:oVkwCZt+tvL+u4W/SayXqAVMGVrOoliFkRxIlAj/bPQ+P8I/T6wJsbjLN9rjoE3s:okIau4Wwa/GVrSazImXQo6bvoE3gzcm

Score

1^/10

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1336 AcroRd32.exe
1336 AcroRd32.exe
1336 AcroRd32.exe
1336 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\GRE Analytical Writing LYL\新GRE官方题库翻译 Issue部分.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1336

memory/1336-54-0x00000000762D1000-0x00000000762D3000-memory.dmp

Filesize
8KB

Download