b54da987a3e8feefcf0bab2254bc4cd0bc9472db586983dfa852df5b5f31b246

Analysis

max time kernel
151s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
25-11-2022 19:32

Target

盘管计算书/30000风量/AHU-1 30000前表冷（调了冷量）.pdf
Size

22KB
MD5

e54b2d8f228732c20e61c7922339f571
SHA1

d36ecd6239acc0af2cf16a0ded3debaa68eed073
SHA256

40e49bd329630d43be8e528e83bfd26e3fc425617cb9dcad0b556e4a71a5787d
SHA512

4e10323691578f99034422d3421e241b7f8269be78774e231e700981ec9b42c0d747df39d81d014703a84a646055bb0f5ca0919ea387a53e74b08259d328c9a8
SSDEEP

384:y9mokM7CU2kIeLwcgVJsuySPOUqwanGKAfJeC1OX7KXlc5:2mbM7Cje0cQJsiO+aGKwQbLKXl6

Score

1^/10

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1880 AcroRd32.exe
1880 AcroRd32.exe
1880 AcroRd32.exe
1880 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\盘管计算书\30000风量\AHU-1 30000前表冷（调了冷量）.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1880

memory/1880-54-0x0000000075201000-0x0000000075203000-memory.dmp

Filesize
8KB

Download