b54da987a3e8feefcf0bab2254bc4cd0bc9472db586983dfa852df5b5f31b246

Analysis

max time kernel
150s
max time network
49s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
25-11-2022 19:32

Target

盘管计算书/17000风量/AHU-4 17000前表冷（调了冷量）.pdf
Size

22KB
MD5

21ea2de4d55734f673a8e5d1437f1015
SHA1

0bb532adc91d2863356b061bcbc881caf5b0a091
SHA256

84cd854c82a3ecf76c09ad3da38fd7b1f423c3b203d84178451aa03740bfccfc
SHA512

7b16a206e1391d95a8e6deeaa844ad676dbe72b3f561b758e8059c1ed5dec56beacff8f1caf0b15d292b19597862fabb9240f1da13500e6dea74ba33d67c37a8
SSDEEP

384:yHIgBU9M7CU2kIeLwcgVJsuySPOUqwanGKAfJeN1OX7KXlcM:mU9M7Cje0cQJsiO+aGKwQiLKXln

Score

1^/10

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1368 AcroRd32.exe
1368 AcroRd32.exe
1368 AcroRd32.exe
1368 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\盘管计算书\17000风量\AHU-4 17000前表冷（调了冷量）.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1368

memory/1368-54-0x0000000074E41000-0x0000000074E43000-memory.dmp

Filesize
8KB

Download