b54da987a3e8feefcf0bab2254bc4cd0bc9472db586983dfa852df5b5f31b246

Analysis

max time kernel
187s
max time network
34s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
25-11-2022 19:32

Target

盘管计算书/20000风量/AHU-1 20000风量前表冷（调了冷量）.pdf
Size

22KB
MD5

eaf89a0c70a0cb4aae74e1d95e8db8d0
SHA1

f3d715ca9cd20133fd62ee5fe73065a33991dbe1
SHA256

9beafaf31d2d05b67ee4190437e0ed3375fad472207947c38407ad6fddc38fde
SHA512

05b678904bc3ba9c7492ca517e4de5b562e1c8ff7cce0ba0c359e02a89baa1af8505ac5dfece3927380ec7e2f48dc7a63b5cda616ae493f471db97125174ea6c
SSDEEP

384:yfiM7CU2kIeLwcgVJsuySPOUqwanGKAfJes+1OX7KXlcrT:CiM7Cje0cQJsiO+aGKwQCLKXlM

Score

1^/10

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

316 AcroRd32.exe
316 AcroRd32.exe
316 AcroRd32.exe
316 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\盘管计算书\20000风量\AHU-1 20000风量前表冷（调了冷量）.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:316

memory/316-54-0x0000000075FF1000-0x0000000075FF3000-memory.dmp

Filesize
8KB

Download