b54da987a3e8feefcf0bab2254bc4cd0bc9472db586983dfa852df5b5f31b246

Analysis

max time kernel
273s
max time network
403s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
25-11-2022 19:32

Target

盘管计算书/17000风量/AHU-4 17000后表冷.pdf
Size

22KB
MD5

c881d5c91be0f29d32d64cc32c90e12e
SHA1

5354b30b223e132bd5cd073bc8b6fa6b436fb32d
SHA256

714ed73567673dfa78dac544d0c190a36465951da418838519305c11796ec7f7
SHA512

75a50f49b28cc0286b74cbde858ee76051a4444efbe65e1ff7fa70e79b184c1c15b0a687df52d7dc82c66d45bad7ee4fc75d949d62140c448d8af15834790e30
SSDEEP

384:yegJSM7CU2kIeLwcgVJsuySPOUqwanGKAfJedZJcAyRkI0eQycv:oSM7Cje0cQJsiO+aGKwQfJcmLyA

Score

1^/10

Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

AcroRd32.exe

pid process

1120 AcroRd32.exe
1120 AcroRd32.exe
1120 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\盘管计算书\17000风量\AHU-4 17000后表冷.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1120

memory/1120-54-0x0000000075FF1000-0x0000000075FF3000-memory.dmp

Filesize
8KB

Download