b54da987a3e8feefcf0bab2254bc4cd0bc9472db586983dfa852df5b5f31b246

Analysis

max time kernel
208s
max time network
35s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
25-11-2022 19:32

Target

盘管计算书/30000风量/AHU-1 30000后表冷.pdf
Size

22KB
MD5

b70fd1790fe94d47ab9fba31d283bc98
SHA1

1a0c3933e55ddda8a425bafcddf2dc4bca522c02
SHA256

bb4197576a4d72660d28b39bd2d12587e365de6ea25ef1c1bd7b20e0ef27bf97
SHA512

b9cd0ba58ce94df21e017efe387d4d98b2175754264db9b9ec4c68c9e57c46ed425a6ca940384d9393413a16f179a359c4832c5d7217c97ac852d33809739953
SSDEEP

384:yFM7CU2kIeLwcgVJsuySPOUqwanGKAfJeZUcAyRkI0eQyc8:EM7Cje0cQJsiO+aGKwQZUcmLy3

Score

1^/10

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1188 AcroRd32.exe
1188 AcroRd32.exe
1188 AcroRd32.exe
1188 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\盘管计算书\30000风量\AHU-1 30000后表冷.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1188

memory/1188-54-0x0000000074DA1000-0x0000000074DA3000-memory.dmp

Filesize
8KB

Download