b54da987a3e8feefcf0bab2254bc4cd0bc9472db586983dfa852df5b5f31b246

Analysis

max time kernel
169s
max time network
47s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
25-11-2022 19:32

Target

盘管计算书/18650风量/AHU-3 18650前表冷.pdf
Size

22KB
MD5

70d465803e80cb934d6da27b83165d4b
SHA1

a0ead57605ff9a4318a538681cf52608ef89ebc9
SHA256

16b50ccafa5f83f145067d2bbbbcf639d72e72d2f67df45fee9cbbbeff9d9244
SHA512

3e9aa7f28b232fe6a07d7c3243f479e90a23d4d84a4bbc243b74c8733cf7b945b352261e73fb1647eb1c829bcb9cd9fe182b7adf24d49d0fc1f1a31e3aa1935e
SSDEEP

384:y6nM7CU2kIeLwcgVJsuySPOUqwanGKAfJeF21OX7KXlcc:RnM7Cje0cQJsiO+aGKwQFHLKXl3

Score

1^/10

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1448 AcroRd32.exe
1448 AcroRd32.exe
1448 AcroRd32.exe
1448 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\盘管计算书\18650风量\AHU-3 18650前表冷.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1448

memory/1448-54-0x0000000075921000-0x0000000075923000-memory.dmp

Filesize
8KB

Download