b54da987a3e8feefcf0bab2254bc4cd0bc9472db586983dfa852df5b5f31b246

Analysis

max time kernel
265s
max time network
407s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
25-11-2022 19:32

Target

盘管计算书/18650风量/AHU-3 18650中表冷（调了冷量，管径不够）.pdf
Size

22KB
MD5

e68e80020bea640834ae85be0a12351b
SHA1

110d4612d3763ac6eabe4a729bc0e80a159f472a
SHA256

0dbbe8b1fab437b5f6018a7fa9ac736f95728e08ded869e4a84ed68bc1c87975
SHA512

1c1a1a61353ce803a9db257484270fa3d3dfcc67d55df2aade28cf9a9ed3da8fd60b0430e44f508daaa7021d769b06ea0ee0b113c7a6a8567236954f56dfcab5
SSDEEP

384:y6M7CU2kIeLwcgVJsuySPOUqwanGKAfJeEBuTqpNZXJnP7SMqcT:FM7Cje0cQJsiO+aGKwQsuC7SMqg

Score

1^/10

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

588 AcroRd32.exe
588 AcroRd32.exe
588 AcroRd32.exe
588 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\盘管计算书\18650风量\AHU-3 18650中表冷（调了冷量，管径不够）.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:588

memory/588-54-0x00000000759F1000-0x00000000759F3000-memory.dmp

Filesize
8KB

Download