91b82611b21bf9b93959caa9f41e02d1cfe589ffba89ebbd37ddc99d70203340

Analysis

max time kernel
153s
max time network
41s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
27-10-2022 03:38

Target

册2 相关支持性材料/4-2-1 国内流行病学数据或销量数据等支撑材料/年用药时长.pdf
Size

737KB
MD5

010d197c38036295b7c3767f955d39df
SHA1

629f479d41957f7557416fbdb058607eb0cae4cf
SHA256

2cf511f4c564a19b427c10dfdf0992bbea4b88a9476b206795793c5b2d2b8fc8
SHA512

435fd106285ffe4944362fd05d7cc22eae200be18d719e23175e314dd8d0dfd7629f092d1aabf57e69e65106a859a05b3f38b39e0bd0bde1a573142be1e7a06a
SSDEEP

12288:AKtfclNlmJRl1jlBlMlGl+l0cSlaSlOllldglOSlBG3l7la/lQlolulfgb3GWjWg:AKthJMjJoUaIbD3oxPRXT3D

Score

1^/10

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1384 AcroRd32.exe
1384 AcroRd32.exe
1384 AcroRd32.exe
1384 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\册2 相关支持性材料\4-2-1 国内流行病学数据或销量数据等支撑材料\年用药时长.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1384

memory/1384-54-0x0000000076701000-0x0000000076703000-memory.dmp

Filesize
8KB

Download