b54da987a3e8feefcf0bab2254bc4cd0bc9472db586983dfa852df5b5f31b246

Analysis

max time kernel
150s
max time network
41s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
25-11-2022 19:32

Target

盘管计算书/20000风量/AHU-1 20000风量后表冷.pdf
Size

22KB
MD5

5ad96eb5d2e3d8088b37630741d1ec68
SHA1

f2477794c468cf1da5b6b845cfbecf2068faf631
SHA256

19b8243fa2b2dc130a8aecced59e8bb770afbcf029bc70a9786b8d4634ed685c
SHA512

e1b128f9be165ebf676300b625996e00bf974c5fdea4c032f7312c0263d257e9a6b25afd0e92d0c7e752a7ac013b7968abccd28637717d8c4af312562d739b53
SSDEEP

384:yGalM7CU2kIeLwcgVJsuySPOUqwanGKAfJe3mcAyRkI0eQycP:wlM7Cje0cQJsiO+aGKwQ2cmLyY

Score

1^/10

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

2036 AcroRd32.exe
2036 AcroRd32.exe
2036 AcroRd32.exe
2036 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\盘管计算书\20000风量\AHU-1 20000风量后表冷.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2036

memory/2036-54-0x0000000075C61000-0x0000000075C63000-memory.dmp

Filesize
8KB

Download