b54da987a3e8feefcf0bab2254bc4cd0bc9472db586983dfa852df5b5f31b246

Analysis

max time kernel
169s
max time network
59s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
25-11-2022 19:32

Target

盘管计算书/17000风量/组装间机组参数.pdf
Size

87KB
MD5

88204654dd6fef02b0d2e646941d28a2
SHA1

9c04d4264f6bd3d4d9d24c663269c9482afb0bbf
SHA256

42be82deb70ab5f78840c9bc861a4523c010adde674be2ae8a684d157a22514b
SHA512

d7bdd4d1e5d27a90210affe9bf97e00c67e32507e0c6922ff5743747c183b2fd96955be1513a8d19ec7e9557948c0aaedb401c1bf0ff0aaf473dccbe915ad5be
SSDEEP

1536:8efWSQNAfo7rjg6a/A0I0TlsXaNfyxDVt0kxXmEg0cnjswYFXyFz8rV:dJQmov/a/jT+uAptm3hnjvYFiFz8R

Score

1^/10

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

2020 AcroRd32.exe
2020 AcroRd32.exe
2020 AcroRd32.exe
2020 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\盘管计算书\17000风量\组装间机组参数.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2020

memory/2020-54-0x0000000075E31000-0x0000000075E33000-memory.dmp

Filesize
8KB

Download