Automated Malware Analysis IOC Report for

Details

Filetype:	PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	7.989803849260268
Filename:	file.exe
Filesize:	413224
MD5:	77011ba24d1088a963898abc72c6e129
SHA1:	08a84da40cb625471026568b2399538399b44f98
SHA256:	3b914f143432c17ca607ba232ba0122f78096dc04dd7ce3d297ed0036f3b1545
SHA512:	91e07652791eb55cc4684a97daa119cea2608e03b213675b43751aac9682955e6f36dc7b0ebf471778063182312abbc1dfb9925f95c29399daaeac614c933ba6
SSDEEP:	12288:uJ8GsZTOusN+VVrto1ma41z1esugf9xmolEO:uJ8vTOFN+VVZo1ma4B1eQ/met
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...@#.f.............................<... ...@....@.. ....................................`................................

Signature Hits	Behavior Group	Mitre Attack
Multi AV Scanner detection for submitted file	AV Detection
.NET source code contains very large array initializations	System Summary	Disable or Modify Tools
Allocates memory in foreign processes	HIPS / PFW / Operating System Protection Evasion
Contains functionality to inject code into remote processes	HIPS / PFW / Operating System Protection Evasion
Injects a PE file into a foreign processes	HIPS / PFW / Operating System Protection Evasion
Writes to foreign memory regions	HIPS / PFW / Operating System Protection Evasion
Allocates memory with a write watch (potentially for evading sandboxes)	Malware Analysis System Evasion
Contains long sleeps (>= 3 min)	Malware Analysis System Evasion
Creates a process in suspended mode (likely to inject code)	HIPS / PFW / Operating System Protection Evasion
May sleep (evasive loops) to hinder dynamic analysis	Malware Analysis System Evasion
PE / OLE file has an invalid certificate	System Summary
Queries the volume information (name, serial number etc) of a device	Language, Device and Operating System Detection	Native API
Sample file is different than original file name gathered from version info	System Summary
Uses 32bit PE files	Compliance, System Summary	Masquerading
Binary may include packed or encrypted code	Data Obfuscation	Software Packing
PE file has an executable .text section which is very likely to contain packed code (zlib compression ratio < 0.3)	System Summary
Contains functionality to modify the execution of threads in other processes
Contains medium sleeps (>= 30s)	Malware Analysis System Evasion	Virtualization/Sandbox Evasion
Creates files inside the user directory	System Summary	Masquerading
Creates guard pages, often used to prevent reverse engineering and debugging	Anti Debugging	Disable or Modify Tools
Disables application error messsages (SetErrorMode)	Hooking and other Techniques for Hiding and Protection
PE file has an executable .text section and no other executable section	System Summary
Parts of this applications are using the .NET runtime (Probably coded in C#)	System Summary
Reads software policies	System Summary
Sample is known by Antivirus	System Summary
Tries to load missing DLLs	System Summary	DLL Side-Loading
PE file contains a debug data directory	System Summary
Contains modern PE file flags such as dynamic base (ASLR) or NX	Compliance, System Summary
PE file contains a COM descriptor data directory	System Summary

Details

File:	C:\ProgramData\AFIDGDBGCA.exe
Category:	dropped
Dump:	AFIDGDBGCA.exe.3.dr
ID:	dr_23
Target ID:	3
Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	5.587298385417451
Encrypted:	false
Ssdeep:	768:0Z7bBiDrq+NhJvjhTxhi8DD08T10DnS1RW:0ZErqqTxhZDA8TKS1RW
Size:	26112
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Machine Learning detection for dropped file	AV Detection
Sigma detected: New RUN Key Pointing to Suspicious Folder	System Summary
Allocates memory with a write watch (potentially for evading sandboxes)	Malware Analysis System Evasion	Virtualization/Sandbox Evasion
Contains long sleeps (>= 3 min)	Malware Analysis System Evasion	Virtualization/Sandbox Evasion
Creates a process in suspended mode (likely to inject code)	HIPS / PFW / Operating System Protection Evasion	Process Injection
Creates a start menu entry (Start Menu\Programs\Startup)	Boot Survival	Registry Run Keys / Startup Folder
Drops PE files	Persistence and Installation Behavior
Drops PE files to the application program directory (C:\ProgramData)	Persistence and Installation Behavior
Queries the volume information (name, serial number etc) of a device	Language, Device and Operating System Detection	System Information Discovery
Sigma detected: CurrentVersion Autorun Keys Modification	System Summary
Sigma detected: Startup Folder File Write	System Summary
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder
Contains medium sleeps (>= 30s)	Malware Analysis System Evasion	Virtualization/Sandbox Evasion
Creates an autostart registry key	Boot Survival	Registry Run Keys / Startup Folder
Disables application error messsages (SetErrorMode)	Hooking and other Techniques for Hiding and Protection
Spawns processes	System Summary	Process Injection
Tries to load missing DLLs	System Summary	DLL Side-Loading

Details

File:	C:\ProgramData\BFIIEHJDBK.exe
Category:	dropped
Dump:	BFIIEHJDBK.exe.3.dr
ID:	dr_25
Target ID:	3
Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Type:	PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	7.988522009011023
Encrypted:	false
Ssdeep:	6144:uXfqISDaHCXsYQkiJ0j0Zt/d/WCIRibFrzae5LpVGbM/5Pg+rq8ZrPbXbCEO:uCvXsWtI/dVHbdastVG2ycWEO
Size:	377384
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Allocates memory in foreign processes	HIPS / PFW / Operating System Protection Evasion	Process Injection
Injects a PE file into a foreign processes	HIPS / PFW / Operating System Protection Evasion	Process Injection
Writes to foreign memory regions	HIPS / PFW / Operating System Protection Evasion	Process Injection
Allocates memory with a write watch (potentially for evading sandboxes)	Malware Analysis System Evasion	Virtualization/Sandbox Evasion
Contains long sleeps (>= 3 min)	Malware Analysis System Evasion	Virtualization/Sandbox Evasion
Creates a process in suspended mode (likely to inject code)	HIPS / PFW / Operating System Protection Evasion	Process Injection
Drops PE files	Persistence and Installation Behavior
Drops PE files to the application program directory (C:\ProgramData)	Persistence and Installation Behavior
Queries the volume information (name, serial number etc) of a device	Language, Device and Operating System Detection	System Information Discovery
Contains medium sleeps (>= 30s)	Malware Analysis System Evasion	Virtualization/Sandbox Evasion
Disables application error messsages (SetErrorMode)	Hooking and other Techniques for Hiding and Protection
Spawns processes	System Summary	Process Injection
Tries to load missing DLLs	System Summary	DLL Side-Loading

Details

File:	C:\ProgramData\freebl3.dll
Category:	dropped
Dump:	freebl3.dll.3.dr
ID:	dr_12
Target ID:	3
Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Entropy:	6.872871740790978
Encrypted:	false
Ssdeep:	12288:4gPbPpxMofhPNN0+RXBrp3M5pzRN4l2SQ+PEu9tUs/abAQb51FW/IzkOfWPO9UN7:4gPbPp9NNP0BgInfW2WMC4M+hW
Size:	685392
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Drops PE files to the application program directory (C:\ProgramData)	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\ProgramData\mozglue.dll
Category:	dropped
Dump:	mozglue.dll.3.dr
ID:	dr_13
Target ID:	3
Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Entropy:	6.833616094889818
Encrypted:	false
Ssdeep:	12288:BlSyAom/gcRKMdRm4wFkRHuyG4RRGJVDjMk/x21R8gY/r:BKgcRKMdRm4wFkVVDGJVv//x21R8br
Size:	608080
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Drops PE files to the application program directory (C:\ProgramData)	Persistence and Installation Behavior

Details

File:	C:\ProgramData\nss3.dll
Category:	dropped
Dump:	nss3.dll.3.dr
ID:	dr_17
Target ID:	3
Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Entropy:	6.787733948558952
Encrypted:	false
Ssdeep:	49152:fECf12gikHlnKGxJRIB+y5nvxnaOSJ3HFNWYrVvE4CQsgzMmQfTU1NrWmy4KoAzh:J7Tf8J1Q+SS5/nr
Size:	2046288
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Drops PE files to the application program directory (C:\ProgramData)	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\ProgramData\softokn3.dll
Category:	dropped
Dump:	softokn3.dll.3.dr
ID:	dr_15
Target ID:	3
Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Entropy:	6.727482641240852
Encrypted:	false
Ssdeep:	6144:/yF/zX2zfRkU62THVh/T2AhZxv6A31obD6Hq/8jis+FvtVRpsAAs0o8OqTYz+xnU:/yRzX2zfRkX2T1h/SA5PF9m8jJqKYz+y
Size:	257872
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Drops PE files to the application program directory (C:\ProgramData)	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\file.exe.log
Category:	modified
Dump:	file.exe.log.0.dr
ID:	dr_1
Target ID:	0
Process:	C:\Users\user\Desktop\file.exe
Type:	CSV text
Entropy:	5.353683843266035
Encrypted:	false
Ssdeep:	12:Q3La/KDLI4MWuPTAOKbbDLI4MWuPJKAVKhav:ML9E4KlKDE4KhKiKhk
Size:	425
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Multi AV Scanner detection for submitted file	AV Detection
PE / OLE file has an invalid certificate	System Summary
Sample file is different than original file name gathered from version info	System Summary
Uses 32bit PE files	Compliance, System Summary
Binary may include packed or encrypted code	Data Obfuscation	Obfuscated Files or Information Software Packing
PE file has an executable .text section which is very likely to contain packed code (zlib compression ratio < 0.3)	System Summary	Software Packing
Creates files inside the user directory	System Summary	Masquerading
PE file has an executable .text section and no other executable section	System Summary
Parts of this applications are using the .NET runtime (Probably coded in C#)	System Summary
Sample is known by Antivirus	System Summary
PE file contains a debug data directory	System Summary
Contains modern PE file flags such as dynamic base (ASLR) or NX	Compliance, System Summary
PE file contains a COM descriptor data directory	System Summary

Details

File:	C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\66f4247d51812_lfdsjna[1].exe
Category:	dropped
Dump:	66f4247d51812_lfdsjna[1].exe.3.dr
ID:	dr_26
Target ID:	3
Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Type:	PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	7.988522009011023
Encrypted:	false
Ssdeep:	6144:uXfqISDaHCXsYQkiJ0j0Zt/d/WCIRibFrzae5LpVGbM/5Pg+rq8ZrPbXbCEO:uCvXsWtI/dVHbdastVG2ycWEO
Size:	377384
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior

Details

File:	C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\66f424e80b9cc_idsmds[1].exe
Category:	dropped
Dump:	66f424e80b9cc_idsmds[1].exe.3.dr
ID:	dr_24
Target ID:	3
Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	5.587298385417451
Encrypted:	false
Ssdeep:	768:0Z7bBiDrq+NhJvjhTxhi8DD08T10DnS1RW:0ZErqqTxhZDA8TKS1RW
Size:	26112
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Machine Learning detection for dropped file	AV Detection
Drops PE files	Persistence and Installation Behavior

Details

File:	C:\Users\user\AppData\Local\Temp\Malewmf\FDWDZ.exe
Category:	dropped
Dump:	FDWDZ.exe.7.dr
ID:	dr_1034
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	5.587298385417451
Encrypted:	false
Ssdeep:	768:0Z7bBiDrq+NhJvjhTxhi8DD08T10DnS1RW:0ZErqqTxhZDA8TKS1RW
Size:	26112
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Machine Learning detection for dropped file	AV Detection
Allocates memory with a write watch (potentially for evading sandboxes)	Malware Analysis System Evasion	Virtualization/Sandbox Evasion
Creates a process in suspended mode (likely to inject code)	HIPS / PFW / Operating System Protection Evasion	Process Injection
Drops PE files	Persistence and Installation Behavior
Enables debug privileges	Anti Debugging
Queries the volume information (name, serial number etc) of a device	Language, Device and Operating System Detection	System Information Discovery
Disables application error messsages (SetErrorMode)	Hooking and other Techniques for Hiding and Protection
Spawns processes	System Summary	Process Injection
Tries to load missing DLLs	System Summary	DLL Side-Loading

Details

File:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Category:	dropped
Dump:	MFDBG.exe.6.dr
ID:	dr_27
Target ID:	6
Process:	C:\ProgramData\AFIDGDBGCA.exe
Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	5.587298385417451
Encrypted:	false
Ssdeep:	768:0Z7bBiDrq+NhJvjhTxhi8DD08T10DnS1RW:0ZErqqTxhZDA8TKS1RW
Size:	26112
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Machine Learning detection for dropped file	AV Detection
Sigma detected: New RUN Key Pointing to Suspicious Folder	System Summary
Abnormal high CPU Usage	System Summary
Allocates memory with a write watch (potentially for evading sandboxes)	Malware Analysis System Evasion	Virtualization/Sandbox Evasion
Checks if the current process is being debugged	Anti Debugging	Security Software Discovery Virtualization/Sandbox Evasion
Contains long sleeps (>= 3 min)	Malware Analysis System Evasion	Virtualization/Sandbox Evasion
Creates a process in suspended mode (likely to inject code)	HIPS / PFW / Operating System Protection Evasion	Process Injection
Drops PE files	Persistence and Installation Behavior
Enables debug privileges	Anti Debugging
Found a high number of Window / User specific system calls (may be a loop to detect user behavior)	Malware Analysis System Evasion
One or more processes crash	System Summary
Queries the volume information (name, serial number etc) of a device	Language, Device and Operating System Detection	System Information Discovery
Sample execution stops while process was sleeping (likely an evasion)	Malware Analysis System Evasion
Shows file infection / information gathering behavior (enumerates multiple directory for files)	Spreading, Stealing of Sensitive Information	File and Directory Discovery
Sigma detected: CurrentVersion Autorun Keys Modification	System Summary
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder
Contains medium sleeps (>= 30s)	Malware Analysis System Evasion	Virtualization/Sandbox Evasion
Creates mutexes	System Summary
Disables application error messsages (SetErrorMode)	Hooking and other Techniques for Hiding and Protection
Spawns processes	System Summary	Process Injection
Tries to load missing DLLs	System Summary	DLL Side-Loading
Uses Microsoft Silverlight	System Summary

Details

File:	C:\ProgramData\IIIEBGCBGIDH\AFIDGD
Category:	dropped
Dump:	AFIDGD.3.dr
ID:	dr_9
Target ID:	3
Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 38, cookie 0x1f, schema 4, UTF-8, version-valid-for 1
Entropy:	0.5407252242845243
Encrypted:	false
Ssdeep:	96:OgWyejzH+bDoYysX0IxQzZkHtpVJNlYDLjGQLBE3CeE0kE:OJhH+bDo3iN0Z2TVJkXBBE3yb
Size:	155648
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\ProgramData\IIIEBGCBGIDH\BFIIEH
Category:	dropped
Dump:	BFIIEH.3.dr
ID:	dr_8
Target ID:	3
Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Entropy:	0.6732424250451717
Encrypted:	false
Ssdeep:	24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
Size:	20480
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\ProgramData\IIIEBGCBGIDH\CBKJKJ
Category:	dropped
Dump:	CBKJKJ.3.dr
ID:	dr_4
Target ID:	3
Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 4, database pages 5, cookie 0x3, schema 4, UTF-8, version-valid-for 4
Entropy:	0.8439810553697228
Encrypted:	false
Ssdeep:	24:TLyAF1kwNbXYFpFNYcw+6UwcQVXH5fBO9p7n52GmCWGf+dyMDCFVE1:TeAFawNLopFgU10XJBOB2Gbf+ba+
Size:	20480
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\ProgramData\IIIEBGCBGIDH\ECGIII
Category:	dropped
Dump:	ECGIII.3.dr
ID:	dr_6
Target ID:	3
Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 20, cookie 0xb, schema 4, UTF-8, version-valid-for 1
Entropy:	0.8553638852307782
Encrypted:	false
Ssdeep:	48:2x7BA+IIF7CVEq8Ma0D0HOlf/6ykwp1EUwMHZq10bvJKLkw8s8LKvUf9KVyJ7h/f:QNDCn8MouB6wz8iZqmvJKLPeymwil
Size:	40960
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\ProgramData\IIIEBGCBGIDH\EHJDHJ
Category:	dropped
Dump:	EHJDHJ.3.dr
ID:	dr_18
Target ID:	3
Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Type:	SQLite 3.x database, user version 12, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 3, database pages 3, cookie 0x1, schema 4, UTF-8, version-valid-for 3
Entropy:	0.08235737944063153
Encrypted:	false
Ssdeep:	12:DQAsfWk73Fmdmc/OPVJXfPNn43etRRfYR5O8atLqxeYaNcDakMG/lO:DQAsff32mNVpP965Ra8KN0MG/lO
Size:	98304
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\ProgramData\IIIEBGCBGIDH\EHJDHJ-shm
Category:	dropped
Dump:	EHJDHJ-shm.3.dr
ID:	dr_19
Target ID:	3
Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Type:	data
Entropy:	0.017262956703125623
Encrypted:	false
Ssdeep:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
Size:	32768
Whitelisted:	true
Reputation:	timeout

Details

File:	C:\ProgramData\IIIEBGCBGIDH\EHJKFC
Category:	dropped
Dump:	EHJKFC.3.dr
ID:	dr_11
Target ID:	3
Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 8, database pages 89, cookie 0x36, schema 4, UTF-8, version-valid-for 8
Entropy:	1.121297215059106
Encrypted:	false
Ssdeep:	384:72qOB1nxCkvSAELyKOMq+8yC8F/YfU5m+OlT:qq+n0E9ELyKOMq+8y9/Ow
Size:	196608
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\ProgramData\IIIEBGCBGIDH\GCGHCB
Category:	dropped
Dump:	GCGHCB.3.dr
ID:	dr_7
Target ID:	3
Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 3, database pages 52, cookie 0x21, schema 4, UTF-8, version-valid-for 3
Entropy:	1.136413900497188
Encrypted:	false
Ssdeep:	192:ZWTblyVZTnGtgTgabTanQeZVuSVumZa6cV/04:MnlyfnGtxnfVuSVumEHV84
Size:	106496
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\ProgramData\IIIEBGCBGIDH\HDHJEB
Category:	dropped
Dump:	HDHJEB.3.dr
ID:	dr_10
Target ID:	3
Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 25, cookie 0xe, schema 4, UTF-8, version-valid-for 1
Entropy:	0.8746135976761988
Encrypted:	false
Ssdeep:	96:O8mmwLCn8MouB6wzFlOqUvJKLReZff44EK:O8yLG7IwRWf4
Size:	51200
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\ProgramData\IIIEBGCBGIDH\IJEGDB
Category:	dropped
Dump:	IJEGDB.3.dr
ID:	dr_22
Target ID:	3
Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Type:	ASCII text, with very long lines (1743), with CRLF line terminators
Entropy:	5.512408163813622
Encrypted:	false
Ssdeep:	192:nnPOeRnWYbBp6RJ0aX+H6SEXKxkHWNBw8D4Sl:PeegJUaJHEw90
Size:	9504
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\ProgramData\IIIEBGCBGIDH\JKKEHJ
Category:	dropped
Dump:	JKKEHJ.3.dr
ID:	dr_20
Target ID:	3
Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Type:	SQLite 3.x database, user version 75, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 2, database pages 46, cookie 0x26, schema 4, UTF-8, version-valid-for 2
Entropy:	0.03859996294213402
Encrypted:	false
Ssdeep:	192:58rJQaXoMXp0VW9FxWHxDSjENbx56p3DisuwAyHI:58r54w0VW3xWdkEFxcp3y/y
Size:	5242880
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\ProgramData\IIIEBGCBGIDH\JKKEHJ-shm
Category:	dropped
Dump:	JKKEHJ-shm.3.dr
ID:	dr_21
Target ID:	3
Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Type:	data
Entropy:	0.017262956703125623
Encrypted:	false
Ssdeep:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
Size:	32768
Whitelisted:	true
Reputation:	timeout

Details

File:	C:\ProgramData\IIIEBGCBGIDH\KJKFBA
Category:	dropped
Dump:	KJKFBA.3.dr
ID:	dr_5
Target ID:	3
Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 39, cookie 0x20, schema 4, UTF-8, version-valid-for 1
Entropy:	0.5394293526345721
Encrypted:	false
Ssdeep:	96:AquejzH+bF+UIYysX0IxQzh/tsV0NifLjLqLy0e9S8E:AqtH+bF+UI3iN0RSV0k3qLyj9
Size:	159744
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MFDBG.exe_2017157e86b42cec1a418c847f3f981ae2c1db2_c2730a42_0e2b0d95-fc98-451a-8906-69b50f3e30c8\Report.wer
Category:	dropped
Dump:	Report.wer.19.dr
ID:	dr_1060
Target ID:	19
Process:	C:\Windows\SysWOW64\WerFault.exe
Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Entropy:	0.9334593914162794
Encrypted:	false
Ssdeep:	192:Zp/o9TB70BU/JNea6DkzuiFUZ24IO8Jo:vo9TOBU/JNea+kzuiFUY4IO8Jo
Size:	65536
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MFDBG.exe_2017157e86b42cec1a418c847f3f981ae2c1db2_c2730a42_1ddf9044-8c44-443c-9fbe-d70a22bf2f5d\Report.wer
Category:	dropped
Dump:	Report.wer.23.dr
ID:	dr_1061
Target ID:	23
Process:	C:\Windows\SysWOW64\WerFault.exe
Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Entropy:	0.9332780233989901
Encrypted:	false
Ssdeep:	192:+0WEo39B70BU/JNea6DkzuiFUZ24IO8Jo:RHo39OBU/JNea+kzuiFUY4IO8Jo
Size:	65536
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\ProgramData\Microsoft\Windows\WER\Temp\WER1AF4.tmp.dmp
Category:	dropped
Dump:	WER1AF4.tmp.dmp.19.dr
ID:	dr_1057
Target ID:	19
Process:	C:\Windows\SysWOW64\WerFault.exe
Type:	Mini DuMP crash report, 15 streams, Wed Sep 25 16:01:17 2024, 0x1205a4 type
Entropy:	4.132385299005449
Encrypted:	false
Ssdeep:	1536:CzCz3+onztThM/CuoSVXcGquBojRlYpN4uE2aOIWKIayCXmCD7UiLTgjYva7nMPN:CzCCeZ5y4o4uEqInIf+7UiLTg1n8lmC
Size:	187580
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\ProgramData\Microsoft\Windows\WER\Temp\WER1F6A.tmp.WERInternalMetadata.xml
Category:	dropped
Dump:	WER1F6A.tmp.WERInternalMetadata.xml.19.dr
ID:	dr_1058
Target ID:	19
Process:	C:\Windows\SysWOW64\WerFault.exe
Type:	XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
Entropy:	3.695550911601559
Encrypted:	false
Ssdeep:	192:R6l7wVeJad66Z6YEIX6SU0MgmfZVxprn89bftisf61m:R6lXJQ6k6YEY6SU0MgmfLkfLfx
Size:	8376
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\ProgramData\Microsoft\Windows\WER\Temp\WER2007.tmp.xml
Category:	dropped
Dump:	WER2007.tmp.xml.19.dr
ID:	dr_1059
Target ID:	19
Process:	C:\Windows\SysWOW64\WerFault.exe
Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Entropy:	4.46457490343451
Encrypted:	false
Ssdeep:	96:uIjfxI7O27V/J9J1mKn1rdTJIjzKKzNTd:uIdYO27j9J1d1rd9gzKKz3
Size:	4726
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\ProgramData\Microsoft\Windows\WER\Temp\WER430E.tmp.dmp
Category:	dropped
Dump:	WER430E.tmp.dmp.23.dr
ID:	dr_1062
Target ID:	23
Process:	C:\Windows\SysWOW64\WerFault.exe
Type:	Mini DuMP crash report, 15 streams, Wed Sep 25 16:01:27 2024, 0x1205a4 type
Entropy:	4.153802852432503
Encrypted:	false
Ssdeep:	1536:bzUuq6UtTvDM/C1DmSVXJtquBojRlpN4uE2aOGWQ04CD/UiLTg5+eIj1AP9Wa1CU:bzMoyOZ4uEqGOz/UiLTg5+/oSpt/
Size:	187032
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\ProgramData\Microsoft\Windows\WER\Temp\WER44E3.tmp.WERInternalMetadata.xml
Category:	dropped
Dump:	WER44E3.tmp.WERInternalMetadata.xml.23.dr
ID:	dr_1063
Target ID:	23
Process:	C:\Windows\SysWOW64\WerFault.exe
Type:	XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
Entropy:	3.6968912975849246
Encrypted:	false
Ssdeep:	192:R6l7wVeJwS65b6YEI9SUWMgmfZVxpry89bbksfXtpm:R6lXJV65b6YEiSUWMgmfLHbXfXK
Size:	8378
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\ProgramData\Microsoft\Windows\WER\Temp\WER4504.tmp.xml
Category:	dropped
Dump:	WER4504.tmp.xml.23.dr
ID:	dr_1064
Target ID:	23
Process:	C:\Windows\SysWOW64\WerFault.exe
Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Entropy:	4.463184593439932
Encrypted:	false
Ssdeep:	48:cvIwWl8zsTiJg77aI9kHWpW8VYjEYm8M4J9EiEJEO7F/7+q8vnEJEOE9ndD1IjEy:uIjfTwI7O27VsJ9J1gKn19TJIjzKKzfd
Size:	4726
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\ProgramData\msvcp140.dll
Category:	dropped
Dump:	msvcp140.dll.3.dr
ID:	dr_14
Target ID:	3
Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Entropy:	6.673992339875127
Encrypted:	false
Ssdeep:	12288:McPa9C9VbL+3Omy5CvyOvzeOKdqhUgiW6QR7t5s03Ooc8dHkC2esGAWf:McPa90Vbky5CvyUeOKn03Ooc8dHkC2eN
Size:	450024
Whitelisted:	true
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Drops PE files to the application program directory (C:\ProgramData)	Persistence and Installation Behavior

Details

File:	C:\ProgramData\vcruntime140.dll
Category:	dropped
Dump:	vcruntime140.dll.3.dr
ID:	dr_16
Target ID:	3
Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Entropy:	6.920480786566406
Encrypted:	false
Ssdeep:	1536:lw2886xv555et/MCsjw0BuRK3jteo3ecbA2W86b+Ld:lw28V55At/zqw+Iq9ecbA2W8H
Size:	80880
Whitelisted:	true
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Drops PE files to the application program directory (C:\ProgramData)	Persistence and Installation Behavior

Details

File:	C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\AFIDGDBGCA.exe.log
Category:	dropped
Dump:	AFIDGDBGCA.exe.log.6.dr
ID:	dr_29
Target ID:	6
Process:	C:\ProgramData\AFIDGDBGCA.exe
Type:	CSV text
Entropy:	5.353683843266035
Encrypted:	false
Ssdeep:	12:Q3La/KDLI4MWuPTAOKbbDLI4MWuPJKAVKhav:ML9E4KlKDE4KhKiKhk
Size:	425
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\BFIIEHJDBK.exe.log
Category:	modified
Dump:	BFIIEHJDBK.exe.log.10.dr
ID:	dr_1056
Target ID:	10
Process:	C:\ProgramData\BFIIEHJDBK.exe
Type:	CSV text
Entropy:	5.353683843266035
Encrypted:	false
Ssdeep:	12:Q3La/KDLI4MWuPTAOKbbDLI4MWuPJKAVKhav:ML9E4KlKDE4KhKiKhk
Size:	425
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\76561199780418869[1].htm
Category:	dropped
Dump:	76561199780418869[1].htm.3.dr
ID:	dr_3
Target ID:	3
Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Type:	HTML document, Unicode text, UTF-8 text, with very long lines (3070), with CRLF, LF line terminators
Entropy:	5.398120749804286
Encrypted:	false
Ssdeep:	768:udpqme0Ih3tAA6WG+2fcDAhTBv++nIjBtPF5zfJkPVoEAdLTBv++nIjBtPF5x2S+:ud8me0Ih3tAA6WG+2FhTBv++nIjBtPFf
Size:	34725
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Local\Temp\delays.tmp
Category:	dropped
Dump:	delays.tmp.3.dr
ID:	dr_2
Target ID:	3
Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Type:	ISO-8859 text, with very long lines (65536), with no line terminators
Entropy:	0.0
Encrypted:	false
Ssdeep:	3:qQQt:rQt
Size:	1048575
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Creates temporary files	System Summary

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0023ffb71eba4e1cb3248efd79b484ea.lnk
Category:	dropped
Dump:	MFDBG_0023ffb71eba4e1cb3248efd79b484ea.lnk.7.dr
ID:	dr_72
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:38 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.916653434069287
Encrypted:	false
Ssdeep:	24:8dLP2Bf/P48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8dLE3FEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0026f6b6a8d748459d8150753df23a97.lnk
Category:	dropped
Dump:	MFDBG_0026f6b6a8d748459d8150753df23a97.lnk.7.dr
ID:	dr_898
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:03 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.914254167044569
Encrypted:	false
Ssdeep:	24:8z2BfQ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8z89EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_00bfecaf73094e878a5af9b7d9e38368.lnk
Category:	dropped
Dump:	MFDBG_00bfecaf73094e878a5af9b7d9e38368.lnk.7.dr
ID:	dr_603
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:40 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.919821898322078
Encrypted:	false
Ssdeep:	24:8nqBfX48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8oP9EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_00d2931cb2094505a48961cfb41751e0.lnk
Category:	dropped
Dump:	MFDBG_00d2931cb2094505a48961cfb41751e0.lnk.7.dr
ID:	dr_565
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:29 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.925832967071939
Encrypted:	false
Ssdeep:	24:8guBfs8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:89hEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_00f2168cdcc94d39bf8f091230064796.lnk
Category:	dropped
Dump:	MFDBG_00f2168cdcc94d39bf8f091230064796.lnk.7.dr
ID:	dr_295
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:49 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9202427458243285
Encrypted:	false
Ssdeep:	24:8kBf48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8KFEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_00fbb61619df4192a7334ef38985b634.lnk
Category:	dropped
Dump:	MFDBG_00fbb61619df4192a7334ef38985b634.lnk.7.dr
ID:	dr_513
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:29 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920490762804278
Encrypted:	false
Ssdeep:	24:8PrBfeQ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8Pd2FEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0126a68cb4674577b660915e3c740a3d.lnk
Category:	dropped
Dump:	MFDBG_0126a68cb4674577b660915e3c740a3d.lnk.7.dr
ID:	dr_876
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:55 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.925969656937663
Encrypted:	false
Ssdeep:	24:8VMBfi8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:80HEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_012f6936ca4e4256add324c8edda1db3.lnk
Category:	dropped
Dump:	MFDBG_012f6936ca4e4256add324c8edda1db3.lnk.7.dr
ID:	dr_766
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:49 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.919367222952355
Encrypted:	false
Ssdeep:	24:8D3Bfk8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8DRpEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_013ffea819fc488093d47d9790d75aaf.lnk
Category:	dropped
Dump:	MFDBG_013ffea819fc488093d47d9790d75aaf.lnk.7.dr
ID:	dr_52
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:38 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9221894859636945
Encrypted:	false
Ssdeep:	24:8d33Bf/P48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8dB3FEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0160d5de6c8c4bbc801e10bf876a823c.lnk
Category:	dropped
Dump:	MFDBG_0160d5de6c8c4bbc801e10bf876a823c.lnk.7.dr
ID:	dr_558
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:29 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9278401001591705
Encrypted:	false
Ssdeep:	24:8aQBfT8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8ae4EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_017fa5d396194af19dcc5236e5b29d92.lnk
Category:	dropped
Dump:	MFDBG_017fa5d396194af19dcc5236e5b29d92.lnk.7.dr
ID:	dr_212
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:45 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.911766924007552
Encrypted:	false
Ssdeep:	24:8djBfTf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8dloEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_01cf196c2a88464e9a34157d562c1349.lnk
Category:	dropped
Dump:	MFDBG_01cf196c2a88464e9a34157d562c1349.lnk.7.dr
ID:	dr_914
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:56 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.916385656445523
Encrypted:	false
Ssdeep:	24:8LBfc8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:89REvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_02cb9f4d6fc040b6ae59df078e9bcc8a.lnk
Category:	dropped
Dump:	MFDBG_02cb9f4d6fc040b6ae59df078e9bcc8a.lnk.7.dr
ID:	dr_552
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:29 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.933251297912542
Encrypted:	false
Ssdeep:	24:8BBfT8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8b4EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_03e36d0ecf614d36ba2e60f94a9ece69.lnk
Category:	dropped
Dump:	MFDBG_03e36d0ecf614d36ba2e60f94a9ece69.lnk.7.dr
ID:	dr_707
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:47 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.925537740641915
Encrypted:	false
Ssdeep:	24:8VUBfE8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8IpEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_03f97da98eae4ee19e93e8a0f04394be.lnk
Category:	dropped
Dump:	MFDBG_03f97da98eae4ee19e93e8a0f04394be.lnk.7.dr
ID:	dr_612
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:41 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.926077985621727
Encrypted:	false
Ssdeep:	24:8CBf/8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8w8EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_04510135bc394ae98e381acc422fdf08.lnk
Category:	dropped
Dump:	MFDBG_04510135bc394ae98e381acc422fdf08.lnk.7.dr
ID:	dr_641
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:46 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.917236634164601
Encrypted:	false
Ssdeep:	24:8OBfW8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8kDEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0498fd5f48fb4885a8109f022e193290.lnk
Category:	dropped
Dump:	MFDBG_0498fd5f48fb4885a8109f022e193290.lnk.7.dr
ID:	dr_528
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:29 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.91558170401599
Encrypted:	false
Ssdeep:	24:8iuBfeQ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8/2FEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_04b028c6990e4b1b874066f8f0f873cb.lnk
Category:	dropped
Dump:	MFDBG_04b028c6990e4b1b874066f8f0f873cb.lnk.7.dr
ID:	dr_343
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:08 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.922269453466103
Encrypted:	false
Ssdeep:	24:8GBff8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8McEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_05659bc9617443d88ae159c9914f8cc6.lnk
Category:	dropped
Dump:	MFDBG_05659bc9617443d88ae159c9914f8cc6.lnk.7.dr
ID:	dr_329
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:58 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.932586198791694
Encrypted:	false
Ssdeep:	24:8SrBfq8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8SdPEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_056f4e21de7d4dd2b443ff41996ce8bc.lnk
Category:	dropped
Dump:	MFDBG_056f4e21de7d4dd2b443ff41996ce8bc.lnk.7.dr
ID:	dr_178
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:47 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.919870455545258
Encrypted:	false
Ssdeep:	24:8/BfX8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8JUEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_05ea30d6f5ef46958187b25f1b0dbc6c.lnk
Category:	dropped
Dump:	MFDBG_05ea30d6f5ef46958187b25f1b0dbc6c.lnk.7.dr
ID:	dr_850
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:54 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.93082408425425
Encrypted:	false
Ssdeep:	24:8nocQBfAP8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8oR9EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_066c526578dd43c093e1070c0cb937dc.lnk
Category:	dropped
Dump:	MFDBG_066c526578dd43c093e1070c0cb937dc.lnk.7.dr
ID:	dr_1030
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:19 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9283968705959555
Encrypted:	false
Ssdeep:	24:8YuBfWQ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8YEeFEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_06e0ce16b560480792c95aa5a3e89526.lnk
Category:	dropped
Dump:	MFDBG_06e0ce16b560480792c95aa5a3e89526.lnk.7.dr
ID:	dr_78
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:43 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.915775493609067
Encrypted:	false
Ssdeep:	24:8dBfHf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8PMEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0750a30d92154d3ca6b8e779743e66d4.lnk
Category:	dropped
Dump:	MFDBG_0750a30d92154d3ca6b8e779743e66d4.lnk.7.dr
ID:	dr_459
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:03 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.916797281922948
Encrypted:	false
Ssdeep:	24:80BfpcH8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8aDEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_084228d3e4bf4430b3854a978df5792c.lnk
Category:	dropped
Dump:	MFDBG_084228d3e4bf4430b3854a978df5792c.lnk.7.dr
ID:	dr_467
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:13 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9260435362672705
Encrypted:	false
Ssdeep:	24:8R2BfD8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8R8oEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0887c9c6d5cc4300b9da1db26fe67395.lnk
Category:	dropped
Dump:	MFDBG_0887c9c6d5cc4300b9da1db26fe67395.lnk.7.dr
ID:	dr_852
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:51 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.921706449412313
Encrypted:	false
Ssdeep:	24:8yBfk8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8gJEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0895a488cf93466ab016c865a4a0c5e6.lnk
Category:	dropped
Dump:	MFDBG_0895a488cf93466ab016c865a4a0c5e6.lnk.7.dr
ID:	dr_832
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:54 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920735366805985
Encrypted:	false
Ssdeep:	24:82Bf48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:88lEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_08a307037ceb4fa6aa56b8eced834adf.lnk
Category:	dropped
Dump:	MFDBG_08a307037ceb4fa6aa56b8eced834adf.lnk.7.dr
ID:	dr_341
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:59 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.92377562610447
Encrypted:	false
Ssdeep:	24:8NBfMS8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8/U/EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_08c9236b4ab1429e88c261c9f120271b.lnk
Category:	dropped
Dump:	MFDBG_08c9236b4ab1429e88c261c9f120271b.lnk.7.dr
ID:	dr_57
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:43 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.932461344650656
Encrypted:	false
Ssdeep:	24:8yBf48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8gFEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_09e50c98426c4eeca5d412e74fb2d16f.lnk
Category:	dropped
Dump:	MFDBG_09e50c98426c4eeca5d412e74fb2d16f.lnk.7.dr
ID:	dr_446
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:27 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.919621962522534
Encrypted:	false
Ssdeep:	24:8oBf38EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8mEEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0a8a709dd8ac460984cfc07235012609.lnk
Category:	dropped
Dump:	MFDBG_0a8a709dd8ac460984cfc07235012609.lnk.7.dr
ID:	dr_768
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:49 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.918364428351097
Encrypted:	false
Ssdeep:	24:8RBfk8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8rpEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0ab5bb689a6d4ae8955247ec37018340.lnk
Category:	dropped
Dump:	MFDBG_0ab5bb689a6d4ae8955247ec37018340.lnk.7.dr
ID:	dr_726
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:44 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923542443279368
Encrypted:	false
Ssdeep:	24:8d9Bfxf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8dvJEEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0ab8ea171e8243469c2c754631e52cee.lnk
Category:	dropped
Dump:	MFDBG_0ab8ea171e8243469c2c754631e52cee.lnk.7.dr
ID:	dr_906
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:56 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.922087390896633
Encrypted:	false
Ssdeep:	24:8UBfw8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:86tEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0af5661d04c74b5f8975ca4e2e62331a.lnk
Category:	dropped
Dump:	MFDBG_0af5661d04c74b5f8975ca4e2e62331a.lnk.7.dr
ID:	dr_387
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:10 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.92377562610447
Encrypted:	false
Ssdeep:	24:8XBf68EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8xfEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0b5b2533a3ac4c3189deda99baa0dc1c.lnk
Category:	dropped
Dump:	MFDBG_0b5b2533a3ac4c3189deda99baa0dc1c.lnk.7.dr
ID:	dr_988
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:04 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.912915124582998
Encrypted:	false
Ssdeep:	24:87krBfPf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:87kdUEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0ba6b6d446c64694abb540400f906e7a.lnk
Category:	dropped
Dump:	MFDBG_0ba6b6d446c64694abb540400f906e7a.lnk.7.dr
ID:	dr_215
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:48 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920253669173619
Encrypted:	false
Ssdeep:	24:82BfmQ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:88eFEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0bdb13bc00134dd8b40635247050e8af.lnk
Category:	dropped
Dump:	MFDBG_0bdb13bc00134dd8b40635247050e8af.lnk.7.dr
ID:	dr_152
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:46 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.913861804383643
Encrypted:	false
Ssdeep:	24:8TBfx8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8VeEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0bfc554575be487e9d4ac3d0f424a6f7.lnk
Category:	dropped
Dump:	MFDBG_0bfc554575be487e9d4ac3d0f424a6f7.lnk.7.dr
ID:	dr_198
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:45 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.912040695338846
Encrypted:	false
Ssdeep:	24:8d7BfMYH8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8dtUJEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0c1030fd26594fa6a4b6d656fb63271c.lnk
Category:	dropped
Dump:	MFDBG_0c1030fd26594fa6a4b6d656fb63271c.lnk.7.dr
ID:	dr_1009
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:17 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9213010575518945
Encrypted:	false
Ssdeep:	24:8zrBfy8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8Z3EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0c23a828c8de478f93ed9adde970860f.lnk
Category:	dropped
Dump:	MFDBG_0c23a828c8de478f93ed9adde970860f.lnk.7.dr
ID:	dr_146
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:47 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920734288136755
Encrypted:	false
Ssdeep:	24:8lQBfT+8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8leLTEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0cb77311e7aa434aa0619eca44e984c2.lnk
Category:	dropped
Dump:	MFDBG_0cb77311e7aa434aa0619eca44e984c2.lnk.7.dr
ID:	dr_789
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:44 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.925118729885995
Encrypted:	false
Ssdeep:	24:8N+BfDf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8NUbEEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0d9997c727da4cbc934cde76e76ae7bd.lnk
Category:	dropped
Dump:	MFDBG_0d9997c727da4cbc934cde76e76ae7bd.lnk.7.dr
ID:	dr_769
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:49 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923198514181955
Encrypted:	false
Ssdeep:	24:8PcQBfk8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8PRpEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0dbe8d31b1f64e87bcac58c788856af8.lnk
Category:	dropped
Dump:	MFDBG_0dbe8d31b1f64e87bcac58c788856af8.lnk.7.dr
ID:	dr_478
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:27 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.929727068837653
Encrypted:	false
Ssdeep:	24:8VBfs48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8X09EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0de92f1dfdea40e0b5980f80b7ca0856.lnk
Category:	dropped
Dump:	MFDBG_0de92f1dfdea40e0b5980f80b7ca0856.lnk.7.dr
ID:	dr_137
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:44 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9283968705959555
Encrypted:	false
Ssdeep:	24:8EBfLf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8qQEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0df31e6159844471917aa5b468c1a0d4.lnk
Category:	dropped
Dump:	MFDBG_0df31e6159844471917aa5b468c1a0d4.lnk.7.dr
ID:	dr_1032
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:19 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.922805953791028
Encrypted:	false
Ssdeep:	24:88BfWQ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8yeFEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0f2fbab088b34e2e946694c2bdad81f7.lnk
Category:	dropped
Dump:	MFDBG_0f2fbab088b34e2e946694c2bdad81f7.lnk.7.dr
ID:	dr_298
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:57 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.926367123878952
Encrypted:	false
Ssdeep:	24:8bBfC8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8NnEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0f3557b56bb74e6c835515f8b8da6a63.lnk
Category:	dropped
Dump:	MFDBG_0f3557b56bb74e6c835515f8b8da6a63.lnk.7.dr
ID:	dr_609
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:41 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.921976644624323
Encrypted:	false
Ssdeep:	24:81BfD8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:834EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0f4f09629b044095b2c2d8514fe27aae.lnk
Category:	dropped
Dump:	MFDBG_0f4f09629b044095b2c2d8514fe27aae.lnk.7.dr
ID:	dr_1045
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:19 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.924254897294499
Encrypted:	false
Ssdeep:	24:8dmBfiH8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8dsTEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0f856c5c1ccf40e8a13ae5e3d64a92ae.lnk
Category:	dropped
Dump:	MFDBG_0f856c5c1ccf40e8a13ae5e3d64a92ae.lnk.7.dr
ID:	dr_131
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:39 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923798385178446
Encrypted:	false
Ssdeep:	24:8RBfJ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8rGEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0f902f5ded5c463eb6252444234c0ff8.lnk
Category:	dropped
Dump:	MFDBG_0f902f5ded5c463eb6252444234c0ff8.lnk.7.dr
ID:	dr_605
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:40 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923454456081033
Encrypted:	false
Ssdeep:	24:8WBfL8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8cgEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0fb315597ae64c82a9ea286fb2140973.lnk
Category:	dropped
Dump:	MFDBG_0fb315597ae64c82a9ea286fb2140973.lnk.7.dr
ID:	dr_678
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:46 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.924622503040698
Encrypted:	false
Ssdeep:	24:8PnBf68EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8PBfEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0fb7008bb14643e3967b8666d7dfdbc3.lnk
Category:	dropped
Dump:	MFDBG_0fb7008bb14643e3967b8666d7dfdbc3.lnk.7.dr
ID:	dr_351
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:09 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9252165706184785
Encrypted:	false
Ssdeep:	24:8YrBf98EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8YdCEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0fcd9c36c6d245cb9a89b597594f583f.lnk
Category:	dropped
Dump:	MFDBG_0fcd9c36c6d245cb9a89b597594f583f.lnk.7.dr
ID:	dr_566
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:29 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.927987713374184
Encrypted:	false
Ssdeep:	24:8HBfs8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8hhEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0ff1f78d298144e6a12594af4c5a587d.lnk
Category:	dropped
Dump:	MFDBG_0ff1f78d298144e6a12594af4c5a587d.lnk.7.dr
ID:	dr_32
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:38 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.930824084254248
Encrypted:	false
Ssdeep:	24:862BfD8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8684EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_10335b045df1435f8b92f4e3fcb30c9d.lnk
Category:	dropped
Dump:	MFDBG_10335b045df1435f8b92f4e3fcb30c9d.lnk.7.dr
ID:	dr_384
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:02 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920216947675123
Encrypted:	false
Ssdeep:	24:8PBfI48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8Zg9EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_10ff187488354e6a8586d97929bdf097.lnk
Category:	dropped
Dump:	MFDBG_10ff187488354e6a8586d97929bdf097.lnk.7.dr
ID:	dr_346
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:09 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.925128583420144
Encrypted:	false
Ssdeep:	24:8FQBf98EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8FeCEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_110ad5517e144a7e9d563e2784c75f1c.lnk
Category:	dropped
Dump:	MFDBG_110ad5517e144a7e9d563e2784c75f1c.lnk.7.dr
ID:	dr_288
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:49 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9180370247106575
Encrypted:	false
Ssdeep:	24:8oBf48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8mFEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_11799185fc1f4c72ae6760a10b880fb8.lnk
Category:	dropped
Dump:	MFDBG_11799185fc1f4c72ae6760a10b880fb8.lnk.7.dr
ID:	dr_1042
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:19 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.930824084254248
Encrypted:	false
Ssdeep:	24:8x2Bfh48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8ip9EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_11e55ab694b84ae39d1d70d36346c7f7.lnk
Category:	dropped
Dump:	MFDBG_11e55ab694b84ae39d1d70d36346c7f7.lnk.7.dr
ID:	dr_428
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:27 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.930392167958501
Encrypted:	false
Ssdeep:	24:8dBfs48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8P09EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_1248f0a9b74d43e4afa62aedaa31bdc1.lnk
Category:	dropped
Dump:	MFDBG_1248f0a9b74d43e4afa62aedaa31bdc1.lnk.7.dr
ID:	dr_370
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:10 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9283968705959555
Encrypted:	false
Ssdeep:	24:8EBf68EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8qfEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_1268b632f8a44fa0a43a56efe8e39c7d.lnk
Category:	dropped
Dump:	MFDBG_1268b632f8a44fa0a43a56efe8e39c7d.lnk.7.dr
ID:	dr_800
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:53 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9193648053641095
Encrypted:	false
Ssdeep:	24:88Bf08EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8y5EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_12d3601bc4e04eb2a66b725b27cb3e12.lnk
Category:	dropped
Dump:	MFDBG_12d3601bc4e04eb2a66b725b27cb3e12.lnk.7.dr
ID:	dr_718
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:43 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.931168013351661
Encrypted:	false
Ssdeep:	24:85QBfh8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:80OEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_12ec37742f864ed480cbe9730af6e432.lnk
Category:	dropped
Dump:	MFDBG_12ec37742f864ed480cbe9730af6e432.lnk.7.dr
ID:	dr_238
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:45 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.914811838094553
Encrypted:	false
Ssdeep:	24:8YrBfMYH8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8QUJEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_131c60e5b15e4197ac6c9d59ffc22e72.lnk
Category:	dropped
Dump:	MFDBG_131c60e5b15e4197ac6c9d59ffc22e72.lnk.7.dr
ID:	dr_662
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:42 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.92361390502073
Encrypted:	false
Ssdeep:	24:8xaBfo8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8KFEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_1361a9306afd4495b1706a355e9b75b1.lnk
Category:	dropped
Dump:	MFDBG_1361a9306afd4495b1706a355e9b75b1.lnk.7.dr
ID:	dr_333
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:58 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.918132315341136
Encrypted:	false
Ssdeep:	24:8iBf78EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8QQEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_1373f035626f48c68023adc8da133265.lnk
Category:	dropped
Dump:	MFDBG_1373f035626f48c68023adc8da133265.lnk.7.dr
ID:	dr_431
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:02 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.925969656937661
Encrypted:	false
Ssdeep:	24:8p2Bfx+8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:86tEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_13829206482944ba94f10a9207cd1486.lnk
Category:	dropped
Dump:	MFDBG_13829206482944ba94f10a9207cd1486.lnk.7.dr
ID:	dr_579
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:30 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.918256099667033
Encrypted:	false
Ssdeep:	24:8lQBfU98EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8Y5EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_13fffdb5eac447e99773b3b45b652315.lnk
Category:	dropped
Dump:	MFDBG_13fffdb5eac447e99773b3b45b652315.lnk.7.dr
ID:	dr_250
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:46 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.922559844719637
Encrypted:	false
Ssdeep:	24:8aBfZ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8YWEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_14662e32a3fc4e91a626d2db03168433.lnk
Category:	dropped
Dump:	MFDBG_14662e32a3fc4e91a626d2db03168433.lnk.7.dr
ID:	dr_998
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:16 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923434114595304
Encrypted:	false
Ssdeep:	24:82Bfm8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:88zEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_14dac3ce017647e79dec85e0cd0db19e.lnk
Category:	dropped
Dump:	MFDBG_14dac3ce017647e79dec85e0cd0db19e.lnk.7.dr
ID:	dr_845
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:51 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.925105824346166
Encrypted:	false
Ssdeep:	24:8yBf28EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8gzEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_14decc4e96ed4e5b9bf70a433d322544.lnk
Category:	dropped
Dump:	MFDBG_14decc4e96ed4e5b9bf70a433d322544.lnk.7.dr
ID:	dr_336
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:58 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.925702024758104
Encrypted:	false
Ssdeep:	24:8JBfVkD8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8zt9EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_14f213e4955340d38f94a90e47c50a0c.lnk
Category:	dropped
Dump:	MFDBG_14f213e4955340d38f94a90e47c50a0c.lnk.7.dr
ID:	dr_515
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:29 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923653189551678
Encrypted:	false
Ssdeep:	24:85QBfeQ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:85e2FEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_152a351b394a40a5a7ec41a18d7d5598.lnk
Category:	dropped
Dump:	MFDBG_152a351b394a40a5a7ec41a18d7d5598.lnk.7.dr
ID:	dr_269
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:49 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9238863723767805
Encrypted:	false
Ssdeep:	24:8bBfiD8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8NaQEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_154aaa05028a4d2baf6fc7edb815a863.lnk
Category:	dropped
Dump:	MFDBG_154aaa05028a4d2baf6fc7edb815a863.lnk.7.dr
ID:	dr_237
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:48 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.915828886008739
Encrypted:	false
Ssdeep:	24:8qBfRo8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8ojEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_156f6c1646d74b83a60a72b2da68cefb.lnk
Category:	dropped
Dump:	MFDBG_156f6c1646d74b83a60a72b2da68cefb.lnk.7.dr
ID:	dr_59
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:43 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9303577186040455
Encrypted:	false
Ssdeep:	24:8wBf48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8+FEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_1572f0d6def74c8b9a8c2ab8f738dcc2.lnk
Category:	dropped
Dump:	MFDBG_1572f0d6def74c8b9a8c2ab8f738dcc2.lnk.7.dr
ID:	dr_305
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:57 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.921524386842845
Encrypted:	false
Ssdeep:	24:8XvuBftAp8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8XvE1FEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_15a5390a7709403fb8940c6b32290678.lnk
Category:	dropped
Dump:	MFDBG_15a5390a7709403fb8940c6b32290678.lnk.7.dr
ID:	dr_589
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:30 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.911383615913923
Encrypted:	false
Ssdeep:	24:8HuBfU98EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8HE5EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_162de57ea6f24e7a90bf4b6e4db896c6.lnk
Category:	dropped
Dump:	MFDBG_162de57ea6f24e7a90bf4b6e4db896c6.lnk.7.dr
ID:	dr_916
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:03 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.922212245037672
Encrypted:	false
Ssdeep:	24:8zBf048EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8189EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_163453e47915407487c8012c3b0b8886.lnk
Category:	dropped
Dump:	MFDBG_163453e47915407487c8012c3b0b8886.lnk.7.dr
ID:	dr_1044
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:19 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.924119555201882
Encrypted:	false
Ssdeep:	24:8CP3BfiH8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8cTEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_16dd13ce59324b0e95b10c49a9ccafe3.lnk
Category:	dropped
Dump:	MFDBG_16dd13ce59324b0e95b10c49a9ccafe3.lnk.7.dr
ID:	dr_177
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:47 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.918108341007813
Encrypted:	false
Ssdeep:	24:8rBfX8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8dUEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_173784ed6f54426c9d319eed40ed4d66.lnk
Category:	dropped
Dump:	MFDBG_173784ed6f54426c9d319eed40ed4d66.lnk.7.dr
ID:	dr_196
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:45 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.918802432819645
Encrypted:	false
Ssdeep:	24:8zBfMYH8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:81UJEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_175258981218482392f94ab8cdd0a237.lnk
Category:	dropped
Dump:	MFDBG_175258981218482392f94ab8cdd0a237.lnk.7.dr
ID:	dr_328
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:58 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9283968705959555
Encrypted:	false
Ssdeep:	24:82Bfq8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:88PEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_178eb77d58384158806409ff03619423.lnk
Category:	dropped
Dump:	MFDBG_178eb77d58384158806409ff03619423.lnk.7.dr
ID:	dr_486
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:27 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923602069296046
Encrypted:	false
Ssdeep:	24:8iBfp8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8QGEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_17be51334fde4f488a4c866cb50e34e9.lnk
Category:	dropped
Dump:	MFDBG_17be51334fde4f488a4c866cb50e34e9.lnk.7.dr
ID:	dr_725
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:44 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.92663475605851
Encrypted:	false
Ssdeep:	24:8VCuBfxf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8xJEEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_17de32bcc23b4dcaa3a902bd1942a737.lnk
Category:	dropped
Dump:	MFDBG_17de32bcc23b4dcaa3a902bd1942a737.lnk.7.dr
ID:	dr_77
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:43 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.921488453125169
Encrypted:	false
Ssdeep:	24:8w3BfHf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8wRMEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_1837830c56874e25a20bd682c58ad6ba.lnk
Category:	dropped
Dump:	MFDBG_1837830c56874e25a20bd682c58ad6ba.lnk.7.dr
ID:	dr_229
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:48 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.921979062212568
Encrypted:	false
Ssdeep:	24:8+BfRo8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8UjEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_188c5308975b46f296a177de1c21edb3.lnk
Category:	dropped
Dump:	MFDBG_188c5308975b46f296a177de1c21edb3.lnk.7.dr
ID:	dr_978
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:15 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.917247071448771
Encrypted:	false
Ssdeep:	24:8VauBfa8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8pPEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_18b1294b41b545ada25225da5339abb6.lnk
Category:	dropped
Dump:	MFDBG_18b1294b41b545ada25225da5339abb6.lnk.7.dr
ID:	dr_254
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:45 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.915632620793748
Encrypted:	false
Ssdeep:	24:8lBfr8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8ngEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_18e21aa91d9e42afb346847e0034a929.lnk
Category:	dropped
Dump:	MFDBG_18e21aa91d9e42afb346847e0034a929.lnk.7.dr
ID:	dr_541
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:14 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920251397029579
Encrypted:	false
Ssdeep:	24:8X2Bf6D8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8X8yQEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_18e3d52c42d74610b232ef29524a7823.lnk
Category:	dropped
Dump:	MFDBG_18e3d52c42d74610b232ef29524a7823.lnk.7.dr
ID:	dr_437
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:11 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923273595840463
Encrypted:	false
Ssdeep:	24:8PTBfo+8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:89gTEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_18fb834304c54685b0e967622adbd5cc.lnk
Category:	dropped
Dump:	MFDBG_18fb834304c54685b0e967622adbd5cc.lnk.7.dr
ID:	dr_635
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:46 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9207977301821915
Encrypted:	false
Ssdeep:	24:8YBfZ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8WWEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_199ec838092845d0a92b256eb88cbb80.lnk
Category:	dropped
Dump:	MFDBG_199ec838092845d0a92b256eb88cbb80.lnk.7.dr
ID:	dr_423
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:03 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920740521753759
Encrypted:	false
Ssdeep:	24:8d+2BfpcH8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8d+8DEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_1a114f13273641958bf32a2ad7e8d16e.lnk
Category:	dropped
Dump:	MFDBG_1a114f13273641958bf32a2ad7e8d16e.lnk.7.dr
ID:	dr_863
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:03 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.919832386273658
Encrypted:	false
Ssdeep:	24:8lBfQ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8n9EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_1b25ec17ce5a44f4846821525408d97b.lnk
Category:	dropped
Dump:	MFDBG_1b25ec17ce5a44f4846821525408d97b.lnk.7.dr
ID:	dr_824
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:54 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9227306641685304
Encrypted:	false
Ssdeep:	24:8UBf48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:86lEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_1c1ad77e28df4c92ac4458387a7ebf7d.lnk
Category:	dropped
Dump:	MFDBG_1c1ad77e28df4c92ac4458387a7ebf7d.lnk.7.dr
ID:	dr_105
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:46 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.916544959941015
Encrypted:	false
Ssdeep:	24:8XBfx8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8xeEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_1c48adb6b07f46e989aadb091d958cd9.lnk
Category:	dropped
Dump:	MFDBG_1c48adb6b07f46e989aadb091d958cd9.lnk.7.dr
ID:	dr_73
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:38 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.92729985517936
Encrypted:	false
Ssdeep:	24:8oBfz8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8mIEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_1c655eb927524ceca6e55b5e0a24bbfa.lnk
Category:	dropped
Dump:	MFDBG_1c655eb927524ceca6e55b5e0a24bbfa.lnk.7.dr
ID:	dr_833
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:49 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.927964954300206
Encrypted:	false
Ssdeep:	24:8BBf78EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8bAEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_1c99ad6a211e464e85eabbafc66e6856.lnk
Category:	dropped
Dump:	MFDBG_1c99ad6a211e464e85eabbafc66e6856.lnk.7.dr
ID:	dr_309
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:58 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.921201869046302
Encrypted:	false
Ssdeep:	24:8dX2Bf78EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8dX8QEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_1cf9e50f61fc4cbbb151f7acef4a8614.lnk
Category:	dropped
Dump:	MFDBG_1cf9e50f61fc4cbbb151f7acef4a8614.lnk.7.dr
ID:	dr_293
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:49 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.91838095380807
Encrypted:	false
Ssdeep:	24:88Bf48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8yFEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_1d272941c88943d28e67fe6f5764521a.lnk
Category:	dropped
Dump:	MFDBG_1d272941c88943d28e67fe6f5764521a.lnk.7.dr
ID:	dr_499
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:13 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.924802527552808
Encrypted:	false
Ssdeep:	24:8d92BfK8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8d98/EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_1d34563310da464693c502a2dec1a3c5.lnk
Category:	dropped
Dump:	MFDBG_1d34563310da464693c502a2dec1a3c5.lnk.7.dr
ID:	dr_159
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:39 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9176341011058895
Encrypted:	false
Ssdeep:	24:8HuBfJ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8kGEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_1d5498d13aca48509f25b0861cdf1bc9.lnk
Category:	dropped
Dump:	MFDBG_1d5498d13aca48509f25b0861cdf1bc9.lnk.7.dr
ID:	dr_70
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:38 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9175811470120365
Encrypted:	false
Ssdeep:	24:8t2Bf/P48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8t83FEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_1d618fc12b5f496dae00b66e5e85e854.lnk
Category:	dropped
Dump:	MFDBG_1d618fc12b5f496dae00b66e5e85e854.lnk.7.dr
ID:	dr_185
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:44 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.924872641521066
Encrypted:	false
Ssdeep:	24:8VRrBfLf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8RQEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_1e0b86547848468ab107236cb5d3ea51.lnk
Category:	dropped
Dump:	MFDBG_1e0b86547848468ab107236cb5d3ea51.lnk.7.dr
ID:	dr_485
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:13 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.930088871165142
Encrypted:	false
Ssdeep:	24:8WQBfK8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8We/EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_1e4f7deb02074fa3a783f50355d230bc.lnk
Category:	dropped
Dump:	MFDBG_1e4f7deb02074fa3a783f50355d230bc.lnk.7.dr
ID:	dr_352
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:58 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.927299855179359
Encrypted:	false
Ssdeep:	24:8Hf3Bfq8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8/RPEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_1e78f59b8a4e4ecfbd11468042e23394.lnk
Category:	dropped
Dump:	MFDBG_1e78f59b8a4e4ecfbd11468042e23394.lnk.7.dr
ID:	dr_202
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:45 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.911987157494967
Encrypted:	false
Ssdeep:	24:8DcQBfMYH8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:89UJEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_1e87d1c6f4d246c1b33392c295ce841c.lnk
Category:	dropped
Dump:	MFDBG_1e87d1c6f4d246c1b33392c295ce841c.lnk.7.dr
ID:	dr_67
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:38 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.928754907562093
Encrypted:	false
Ssdeep:	24:81Bfs8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:83REvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_1e9490372e78474980811a0c919205ad.lnk
Category:	dropped
Dump:	MFDBG_1e9490372e78474980811a0c919205ad.lnk.7.dr
ID:	dr_972
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:15 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.921506513612769
Encrypted:	false
Ssdeep:	24:8fbrBfa8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8fRPEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_1eb00320055e4ff2b3796223c471b3f9.lnk
Category:	dropped
Dump:	MFDBG_1eb00320055e4ff2b3796223c471b3f9.lnk.7.dr
ID:	dr_182
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:47 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.91125861632868
Encrypted:	false
Ssdeep:	24:8FrBfX8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8jUEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_1eb15896d185444992553a3fa42934f1.lnk
Category:	dropped
Dump:	MFDBG_1eb15896d185444992553a3fa42934f1.lnk.7.dr
ID:	dr_120
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:43 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.919726338587723
Encrypted:	false
Ssdeep:	24:8xBfHf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8LMEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_1eef1bb6ca384e7c925b6ea88854f55a.lnk
Category:	dropped
Dump:	MFDBG_1eef1bb6ca384e7c925b6ea88854f55a.lnk.7.dr
ID:	dr_853
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:54 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.927964954300209
Encrypted:	false
Ssdeep:	24:88BfAP8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8y9EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_1f0852fa96024e14ad6549f37d2c17d2.lnk
Category:	dropped
Dump:	MFDBG_1f0852fa96024e14ad6549f37d2c17d2.lnk.7.dr
ID:	dr_55
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:38 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920859287721997
Encrypted:	false
Ssdeep:	24:82QBf/P48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8j3FEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_1f7a1a8b0062413392706f479948069b.lnk
Category:	dropped
Dump:	MFDBG_1f7a1a8b0062413392706f479948069b.lnk.7.dr
ID:	dr_208
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:45 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920068904261817
Encrypted:	false
Ssdeep:	24:8AQBfTf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:81oEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_20590dd78b8d48d48753c3023cdd70e6.lnk
Category:	dropped
Dump:	MFDBG_20590dd78b8d48d48753c3023cdd70e6.lnk.7.dr
ID:	dr_864
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:56 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.936110427866583
Encrypted:	false
Ssdeep:	24:8JBfh48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8z59EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_20893546e01442aa8a32f9ec1c4e0b0c.lnk
Category:	dropped
Dump:	MFDBG_20893546e01442aa8a32f9ec1c4e0b0c.lnk.7.dr
ID:	dr_122
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:39 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.926634756058511
Encrypted:	false
Ssdeep:	24:8l2Bfz8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8+IEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_20d84ac4d2b342b0aa531f776e52a3c4.lnk
Category:	dropped
Dump:	MFDBG_20d84ac4d2b342b0aa531f776e52a3c4.lnk.6.dr
ID:	dr_28
Target ID:	6
Process:	C:\ProgramData\AFIDGDBGCA.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:00 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.924102979077503
Encrypted:	false
Ssdeep:	24:8OBfU24p8EvT9peyRcgKERRhWRO2RaRAqiVDi0RTp1A6ZL/qygm:8kSOEvZ0yRvDeO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Creates a start menu entry (Start Menu\Programs\Startup)	Boot Survival	Registry Run Keys / Startup Folder
Sigma detected: Startup Folder File Write	System Summary
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_20f03ec0b722450f8dd89b1eba645eb7.lnk
Category:	dropped
Dump:	MFDBG_20f03ec0b722450f8dd89b1eba645eb7.lnk.7.dr
ID:	dr_1006
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:17 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.928075700572519
Encrypted:	false
Ssdeep:	24:8qBf88EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8oxEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_21008fa5f369418a83927c48a54051b0.lnk
Category:	dropped
Dump:	MFDBG_21008fa5f369418a83927c48a54051b0.lnk.7.dr
ID:	dr_671
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:43 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.925048615917735
Encrypted:	false
Ssdeep:	24:8yBfEO8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8guEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_2163a7223a6d43fc877b75e98211f266.lnk
Category:	dropped
Dump:	MFDBG_2163a7223a6d43fc877b75e98211f266.lnk.7.dr
ID:	dr_432
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:11 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.92848485779429
Encrypted:	false
Ssdeep:	24:8FTBfh8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8neEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_2182f53ca8264112a0e527424c9a9a95.lnk
Category:	dropped
Dump:	MFDBG_2182f53ca8264112a0e527424c9a9a95.lnk.7.dr
ID:	dr_285
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:57 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923951600501139
Encrypted:	false
Ssdeep:	24:8kBfv8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8KcEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_21d7c090312c48a7b9cf962dcad548e2.lnk
Category:	dropped
Dump:	MFDBG_21d7c090312c48a7b9cf962dcad548e2.lnk.7.dr
ID:	dr_425
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:03 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.919066394414648
Encrypted:	false
Ssdeep:	24:8RBfpcH8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8rDEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_21e0c757cea14017992818e4a2592990.lnk
Category:	dropped
Dump:	MFDBG_21e0c757cea14017992818e4a2592990.lnk.7.dr
ID:	dr_175
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:44 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.930158985133399
Encrypted:	false
Ssdeep:	24:8ScrBfHf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8SEcEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_2200ecc666094f32bf69a139fc26da7c.lnk
Category:	dropped
Dump:	MFDBG_2200ecc666094f32bf69a139fc26da7c.lnk.7.dr
ID:	dr_111
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:46 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923638936238747
Encrypted:	false
Ssdeep:	24:8f3BfJ48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8fRPEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_223e055859ff4a2080a36903d49f4b7e.lnk
Category:	dropped
Dump:	MFDBG_223e055859ff4a2080a36903d49f4b7e.lnk.7.dr
ID:	dr_418
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:11 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923468563949759
Encrypted:	false
Ssdeep:	24:8ITBfh8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8QeEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_228ff654ed1442e68ea2c0cc1796b64c.lnk
Category:	dropped
Dump:	MFDBG_228ff654ed1442e68ea2c0cc1796b64c.lnk.7.dr
ID:	dr_209
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:48 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.922496402674199
Encrypted:	false
Ssdeep:	24:83Bfn+8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8RLEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_2347fea100734ee0ae0ded8fe7a4f34e.lnk
Category:	dropped
Dump:	MFDBG_2347fea100734ee0ae0ded8fe7a4f34e.lnk.7.dr
ID:	dr_464
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:13 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.917597038051575
Encrypted:	false
Ssdeep:	24:84Bf+p8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:82GOEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_23588ea9485f496b87ff0b9bcc9a8dfe.lnk
Category:	dropped
Dump:	MFDBG_23588ea9485f496b87ff0b9bcc9a8dfe.lnk.7.dr
ID:	dr_397
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:11 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.926634756058511
Encrypted:	false
Ssdeep:	24:88TBfR8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:80+EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_2449ebff3d0342809b461ac476d9e135.lnk
Category:	dropped
Dump:	MFDBG_2449ebff3d0342809b461ac476d9e135.lnk.7.dr
ID:	dr_290
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:49 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9142937206793915
Encrypted:	false
Ssdeep:	24:8pBf48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8TFEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_24850184da384182af130a506458430e.lnk
Category:	dropped
Dump:	MFDBG_24850184da384182af130a506458430e.lnk.7.dr
ID:	dr_142
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:47 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.924258517211643
Encrypted:	false
Ssdeep:	24:8OBfT+8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8kLTEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_2495ad6eb6c04a91947a4896bfa62d50.lnk
Category:	dropped
Dump:	MFDBG_2495ad6eb6c04a91947a4896bfa62d50.lnk.7.dr
ID:	dr_165
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:40 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9175147036283295
Encrypted:	false
Ssdeep:	24:84QBfO8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:84erEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_24ac443d2e0543d7a176f5ad68801ef8.lnk
Category:	dropped
Dump:	MFDBG_24ac443d2e0543d7a176f5ad68801ef8.lnk.7.dr
ID:	dr_382
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:01 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.918387187425075
Encrypted:	false
Ssdeep:	24:8DBfI48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8Fg9EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_251e0feac337452ea9a3169ac053df76.lnk
Category:	dropped
Dump:	MFDBG_251e0feac337452ea9a3169ac053df76.lnk.7.dr
ID:	dr_69
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:43 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.92848485779429
Encrypted:	false
Ssdeep:	24:8NxBfs8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8NLREvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_252b751644c84b8aaee2587b9058c7fb.lnk
Category:	dropped
Dump:	MFDBG_252b751644c84b8aaee2587b9058c7fb.lnk.7.dr
ID:	dr_709
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:47 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.927066672354258
Encrypted:	false
Ssdeep:	24:82BfE8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:88pEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_256a01d75cad480b8dc3e5fad50d3a0a.lnk
Category:	dropped
Dump:	MFDBG_256a01d75cad480b8dc3e5fad50d3a0a.lnk.7.dr
ID:	dr_401
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:02 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.924551471497629
Encrypted:	false
Ssdeep:	24:8TBfA8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8VdEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_256b7bc30da443a3af04f1c3149f2a81.lnk
Category:	dropped
Dump:	MFDBG_256b7bc30da443a3af04f1c3149f2a81.lnk.7.dr
ID:	dr_981
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:15 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.921025894649633
Encrypted:	false
Ssdeep:	24:8h+2Bfa8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8XPEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_25ced2b584d447acb28fde4d126499f1.lnk
Category:	dropped
Dump:	MFDBG_25ced2b584d447acb28fde4d126499f1.lnk.7.dr
ID:	dr_207
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:48 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923826600915897
Encrypted:	false
Ssdeep:	24:8puBfn+8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8mLEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_26af247b45b143ea82fed89871923c33.lnk
Category:	dropped
Dump:	MFDBG_26af247b45b143ea82fed89871923c33.lnk.7.dr
ID:	dr_606
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:40 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.917269830522748
Encrypted:	false
Ssdeep:	24:8r2BfL8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:84gEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_26cb77f1a171417098d3a031bf651def.lnk
Category:	dropped
Dump:	MFDBG_26cb77f1a171417098d3a031bf651def.lnk.7.dr
ID:	dr_42
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:38 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.930912071452583
Encrypted:	false
Ssdeep:	24:8ZBfD8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8D4EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_26deddffc048422cb7362cc2220c0e60.lnk
Category:	dropped
Dump:	MFDBG_26deddffc048422cb7362cc2220c0e60.lnk.7.dr
ID:	dr_419
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:02 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.915335995923209
Encrypted:	false
Ssdeep:	24:8NEBfI48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8Nqg9EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_27ff181837674c12a40a7a802a421fbd.lnk
Category:	dropped
Dump:	MFDBG_27ff181837674c12a40a7a802a421fbd.lnk.7.dr
ID:	dr_150
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:46 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.917963145381048
Encrypted:	false
Ssdeep:	24:8brBfx8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8ReEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_28308894d2144ef6a4a1b0d5ee7d9390.lnk
Category:	dropped
Dump:	MFDBG_28308894d2144ef6a4a1b0d5ee7d9390.lnk.7.dr
ID:	dr_416
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:11 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.925503291287459
Encrypted:	false
Ssdeep:	24:8bTBfh8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:85eEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_2831be15071d42308233777dc82adb4e.lnk
Category:	dropped
Dump:	MFDBG_2831be15071d42308233777dc82adb4e.lnk.7.dr
ID:	dr_266
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:57 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.926512319505719
Encrypted:	false
Ssdeep:	24:843BfC8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8AnEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_2885827e0b50446290c9ce877a79cdbd.lnk
Category:	dropped
Dump:	MFDBG_2885827e0b50446290c9ce877a79cdbd.lnk.7.dr
ID:	dr_825
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:50 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.919590063270081
Encrypted:	false
Ssdeep:	24:8VVBff48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8ZdEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_2956732345a64f45a41c26ae3f9e4552.lnk
Category:	dropped
Dump:	MFDBG_2956732345a64f45a41c26ae3f9e4552.lnk.7.dr
ID:	dr_905
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:56 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920939255224405
Encrypted:	false
Ssdeep:	24:8YBfw8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8WtEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_29b24e1c6c1c43a288d9c283f8316a0d.lnk
Category:	dropped
Dump:	MFDBG_29b24e1c6c1c43a288d9c283f8316a0d.lnk.7.dr
ID:	dr_973
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:04 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.917666082204692
Encrypted:	false
Ssdeep:	24:8LBfEf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:89BEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_29de0dc500d74b0caf6a45f5f38f068f.lnk
Category:	dropped
Dump:	MFDBG_29de0dc500d74b0caf6a45f5f38f068f.lnk.7.dr
ID:	dr_806
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:49 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.921348412446175
Encrypted:	false
Ssdeep:	24:87BfY8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8tVEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_29f81ffa4fed49818b8cc6194da7fb76.lnk
Category:	dropped
Dump:	MFDBG_29f81ffa4fed49818b8cc6194da7fb76.lnk.7.dr
ID:	dr_128
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:46 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.912244885472966
Encrypted:	false
Ssdeep:	24:8zBfx8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:81eEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_2aaea246648a4eaf81e7829ad8e44566.lnk
Category:	dropped
Dump:	MFDBG_2aaea246648a4eaf81e7829ad8e44566.lnk.7.dr
ID:	dr_567
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:29 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.925969656937661
Encrypted:	false
Ssdeep:	24:8ABfs8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8OhEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_2acd699e30f547bba6c5603397c6e190.lnk
Category:	dropped
Dump:	MFDBG_2acd699e30f547bba6c5603397c6e190.lnk.7.dr
ID:	dr_325
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:58 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.926342880441755
Encrypted:	false
Ssdeep:	24:8hBfT8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:87YEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_2b1ba1ac1b8b442181a0edc59e0eac91.lnk
Category:	dropped
Dump:	MFDBG_2b1ba1ac1b8b442181a0edc59e0eac91.lnk.7.dr
ID:	dr_388
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:10 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.924872641521066
Encrypted:	false
Ssdeep:	24:8ABf68EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8OfEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_2ba7287bdf2b4a3192f7826d32a65806.lnk
Category:	dropped
Dump:	MFDBG_2ba7287bdf2b4a3192f7826d32a65806.lnk.7.dr
ID:	dr_733
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:48 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.926332994295779
Encrypted:	false
Ssdeep:	24:8nBf/8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8B8EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_2c40a17545ac4a53a053a59f40ef1a37.lnk
Category:	dropped
Dump:	MFDBG_2c40a17545ac4a53a053a59f40ef1a37.lnk.7.dr
ID:	dr_358
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:59 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.918607746744673
Encrypted:	false
Ssdeep:	24:8RBfo8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8rFEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_2c5a1009d2ad444da718f27a1de15b67.lnk
Category:	dropped
Dump:	MFDBG_2c5a1009d2ad444da718f27a1de15b67.lnk.7.dr
ID:	dr_245
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:49 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.925969656937661
Encrypted:	false
Ssdeep:	24:8MrBfiD8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8MdaQEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_2cbed55d522c412f8d89f39321ac9868.lnk
Category:	dropped
Dump:	MFDBG_2cbed55d522c412f8d89f39321ac9868.lnk.7.dr
ID:	dr_1019
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:18 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920859287721996
Encrypted:	false
Ssdeep:	24:8o0Bfa8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8oavEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_2d17ebd4f0fd45728dab120f4579b2ef.lnk
Category:	dropped
Dump:	MFDBG_2d17ebd4f0fd45728dab120f4579b2ef.lnk.7.dr
ID:	dr_820
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:54 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9227306641685304
Encrypted:	false
Ssdeep:	24:8trBf48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:87lEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_2d563d8c2cf147e2848d99c369d44af0.lnk
Category:	dropped
Dump:	MFDBG_2d563d8c2cf147e2848d99c369d44af0.lnk.7.dr
ID:	dr_971
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:04 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.917955271129327
Encrypted:	false
Ssdeep:	24:8/BfBf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8JyEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_2d863333e68f4e76898d425612a971bf.lnk
Category:	dropped
Dump:	MFDBG_2d863333e68f4e76898d425612a971bf.lnk.7.dr
ID:	dr_872
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:55 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.925216570618479
Encrypted:	false
Ssdeep:	24:8BaBfi8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:86HEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_2dd3288fe7794fb086adda81182f90e3.lnk
Category:	dropped
Dump:	MFDBG_2dd3288fe7794fb086adda81182f90e3.lnk.7.dr
ID:	dr_86
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:43 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.930158985133401
Encrypted:	false
Ssdeep:	24:81Bfs8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:83REvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_2e454b5e306c41c4b97ca312c15e652b.lnk
Category:	dropped
Dump:	MFDBG_2e454b5e306c41c4b97ca312c15e652b.lnk.7.dr
ID:	dr_489
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:13 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.922142131069412
Encrypted:	false
Ssdeep:	24:8VzBfK8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8f/EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_2e94137938c948be9a58dce5fbcb31de.lnk
Category:	dropped
Dump:	MFDBG_2e94137938c948be9a58dce5fbcb31de.lnk.7.dr
ID:	dr_621
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:41 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.925023137539813
Encrypted:	false
Ssdeep:	24:8ZuBfo8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8ZEFEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_2ebdfa23ed814906b21b57c280ad73e9.lnk
Category:	dropped
Dump:	MFDBG_2ebdfa23ed814906b21b57c280ad73e9.lnk.7.dr
ID:	dr_904
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:03 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.921558836197302
Encrypted:	false
Ssdeep:	24:8aBfk8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8YJEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_2ef9de1d0e93471b966fe31aae29341d.lnk
Category:	dropped
Dump:	MFDBG_2ef9de1d0e93471b966fe31aae29341d.lnk.7.dr
ID:	dr_482
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:13 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.922576515620813
Encrypted:	false
Ssdeep:	24:8UBfD8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:86oEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_2fa145309ed94639bda6744445de00f6.lnk
Category:	dropped
Dump:	MFDBG_2fa145309ed94639bda6744445de00f6.lnk.7.dr
ID:	dr_615
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:40 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.914558313783719
Encrypted:	false
Ssdeep:	24:8P/rBfX48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:89P9EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_2fbb0e41109d4b4794dc2aaeeb0b0d7a.lnk
Category:	dropped
Dump:	MFDBG_2fbb0e41109d4b4794dc2aaeeb0b0d7a.lnk.7.dr
ID:	dr_835
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:49 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.928272016454919
Encrypted:	false
Ssdeep:	24:8dJBfl8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8dzqEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_2fbf244e3203484b8a123b43825e10ef.lnk
Category:	dropped
Dump:	MFDBG_2fbf244e3203484b8a123b43825e10ef.lnk.7.dr
ID:	dr_792
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:49 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.922124257839336
Encrypted:	false
Ssdeep:	24:8ABf98EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8OyEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_301b2044a3774d16b16cf2ecb28bc225.lnk
Category:	dropped
Dump:	MFDBG_301b2044a3774d16b16cf2ecb28bc225.lnk.7.dr
ID:	dr_993
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:16 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920939255224405
Encrypted:	false
Ssdeep:	24:8+Bfm8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8UzEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3034e684b8c54b1881579152b6953520.lnk
Category:	dropped
Dump:	MFDBG_3034e684b8c54b1881579152b6953520.lnk.7.dr
ID:	dr_398
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:00 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9282110426651355
Encrypted:	false
Ssdeep:	24:8TQBfs68EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8TecEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3039dbe15e784bf4822f2683bdcef2ea.lnk
Category:	dropped
Dump:	MFDBG_3039dbe15e784bf4822f2683bdcef2ea.lnk.7.dr
ID:	dr_60
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:43 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.92849654807477
Encrypted:	false
Ssdeep:	24:8cBf48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8SFEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_305792d13f0e478db4e1573b21322d35.lnk
Category:	dropped
Dump:	MFDBG_305792d13f0e478db4e1573b21322d35.lnk.7.dr
ID:	dr_94
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:43 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.921809623148604
Encrypted:	false
Ssdeep:	24:8mBfHf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8sMEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_30c3c723f2c44cb390101a7e9170f1b7.lnk
Category:	dropped
Dump:	MFDBG_30c3c723f2c44cb390101a7e9170f1b7.lnk.7.dr
ID:	dr_995
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:16 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9214222917757855
Encrypted:	false
Ssdeep:	24:8QBfm8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8ezEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_311f5edb333e411fbe2ea302372108f6.lnk
Category:	dropped
Dump:	MFDBG_311f5edb333e411fbe2ea302372108f6.lnk.7.dr
ID:	dr_473
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:27 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9218399547586005
Encrypted:	false
Ssdeep:	24:88uBfp8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8pGEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3160f6c96ad24cf8a52bfde3f07fefe9.lnk
Category:	dropped
Dump:	MFDBG_3160f6c96ad24cf8a52bfde3f07fefe9.lnk.7.dr
ID:	dr_1053
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:01 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9311680133516615
Encrypted:	false
Ssdeep:	24:8EBfrp8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8qyEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_317ff03745ab418aaf4afb1fbe011bcf.lnk
Category:	dropped
Dump:	MFDBG_317ff03745ab418aaf4afb1fbe011bcf.lnk.7.dr
ID:	dr_509
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:29 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923417158940038
Encrypted:	false
Ssdeep:	24:86Bf/8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:84MEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_31a0135710cf4b2fa0d72d5daacd26f3.lnk
Category:	dropped
Dump:	MFDBG_31a0135710cf4b2fa0d72d5daacd26f3.lnk.7.dr
ID:	dr_917
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:03 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.922487595197454
Encrypted:	false
Ssdeep:	24:80Bf048EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8a89EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_31b320fcfe0249259c538a0c1c850df0.lnk
Category:	dropped
Dump:	MFDBG_31b320fcfe0249259c538a0c1c850df0.lnk.7.dr
ID:	dr_770
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:52 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.925662594782951
Encrypted:	false
Ssdeep:	24:8EaTBfP8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8tsEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_31c840a66c0847ada49ec5a24154fd25.lnk
Category:	dropped
Dump:	MFDBG_31c840a66c0847ada49ec5a24154fd25.lnk.7.dr
ID:	dr_205
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:45 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.92256623188837
Encrypted:	false
Ssdeep:	24:8NPQBfTf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8NPeoEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_31dcb974a5324a8fbebc633cece0d9af.lnk
Category:	dropped
Dump:	MFDBG_31dcb974a5324a8fbebc633cece0d9af.lnk.7.dr
ID:	dr_264
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:45 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.910526831556501
Encrypted:	false
Ssdeep:	24:8RBf38EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8rEEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_31e18ed0470f42538adb897bd0ba4a22.lnk
Category:	dropped
Dump:	MFDBG_31e18ed0470f42538adb897bd0ba4a22.lnk.7.dr
ID:	dr_892
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:03 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9121708824836885
Encrypted:	false
Ssdeep:	24:8gBfQ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8u9EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_321e09d47d76471ba25696f79c68308d.lnk
Category:	dropped
Dump:	MFDBG_321e09d47d76471ba25696f79c68308d.lnk.7.dr
ID:	dr_206
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:48 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.92063461065794
Encrypted:	false
Ssdeep:	24:8yBfn+8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8gLEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_327b3ce9535747efb2a68d2d5427ac22.lnk
Category:	dropped
Dump:	MFDBG_327b3ce9535747efb2a68d2d5427ac22.lnk.7.dr
ID:	dr_1046
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:01 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.921910986301671
Encrypted:	false
Ssdeep:	24:8UBfrp8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:86yEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_329c1bce5ecc419e85564291b3c2664a.lnk
Category:	dropped
Dump:	MFDBG_329c1bce5ecc419e85564291b3c2664a.lnk.7.dr
ID:	dr_359
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:00 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.917181843324414
Encrypted:	false
Ssdeep:	24:84Bfo8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:82FEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_32a771c4b8ba4aaca08a780459678c06.lnk
Category:	dropped
Dump:	MFDBG_32a771c4b8ba4aaca08a780459678c06.lnk.7.dr
ID:	dr_983
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:15 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.92251554183103
Encrypted:	false
Ssdeep:	24:8EBfa8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8qPEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_32fb5e1915b64ce9b10b3ce066c7433f.lnk
Category:	dropped
Dump:	MFDBG_32fb5e1915b64ce9b10b3ce066c7433f.lnk.7.dr
ID:	dr_966
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:15 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.921506513612769
Encrypted:	false
Ssdeep:	24:8iBfa8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8QPEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_33019e8cf42748649f1f3ffa83db429f.lnk
Category:	dropped
Dump:	MFDBG_33019e8cf42748649f1f3ffa83db429f.lnk.7.dr
ID:	dr_189
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:44 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.929493886012552
Encrypted:	false
Ssdeep:	24:8QBfLf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8eQEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3354f9313b5f4aa4bbdd9b81fe30cb29.lnk
Category:	dropped
Dump:	MFDBG_3354f9313b5f4aa4bbdd9b81fe30cb29.lnk.7.dr
ID:	dr_538
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:29 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.919807790453352
Encrypted:	false
Ssdeep:	24:8VQBfeQ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8o2FEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3356faa26ec946bfbdf809cb586a83df.lnk
Category:	dropped
Dump:	MFDBG_3356faa26ec946bfbdf809cb586a83df.lnk.7.dr
ID:	dr_943
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:14 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9249606287194005
Encrypted:	false
Ssdeep:	24:8F9Bfs8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8ZBEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_33582365577540858ffc866599620807.lnk
Category:	dropped
Dump:	MFDBG_33582365577540858ffc866599620807.lnk.7.dr
ID:	dr_517
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:29 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.926512319505719
Encrypted:	false
Ssdeep:	24:8lBfeQ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8n2FEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3387e19066864f919738274f26e2507f.lnk
Category:	dropped
Dump:	MFDBG_3387e19066864f919738274f26e2507f.lnk.7.dr
ID:	dr_102
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:46 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.912543296422426
Encrypted:	false
Ssdeep:	24:8aBfx8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8YeEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_33ea00c4b32e405198b8a47f1065de49.lnk
Category:	dropped
Dump:	MFDBG_33ea00c4b32e405198b8a47f1065de49.lnk.7.dr
ID:	dr_194
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:40 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.92764378427677
Encrypted:	false
Ssdeep:	24:8gnQBfJ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8gneGEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_33ff2882aef7466398085e48878a9d41.lnk
Category:	dropped
Dump:	MFDBG_33ff2882aef7466398085e48878a9d41.lnk.7.dr
ID:	dr_774
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:49 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.921692341543588
Encrypted:	false
Ssdeep:	24:8ABfk8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8OpEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_34268db02fa248cdb69ee5b1b5e2d999.lnk
Category:	dropped
Dump:	MFDBG_34268db02fa248cdb69ee5b1b5e2d999.lnk.7.dr
ID:	dr_458
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:12 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.925537740641915
Encrypted:	false
Ssdeep:	24:8xvTBfo+8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8xdgTEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_346f3918d0634cfca92221133c7ac173.lnk
Category:	dropped
Dump:	MFDBG_346f3918d0634cfca92221133c7ac173.lnk.7.dr
ID:	dr_772
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:49 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.918168112468699
Encrypted:	false
Ssdeep:	24:8YBfk8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8WpEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_348a223f8378481dbef68349d3ac1106.lnk
Category:	dropped
Dump:	MFDBG_348a223f8378481dbef68349d3ac1106.lnk.7.dr
ID:	dr_592
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:30 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9129722450168165
Encrypted:	false
Ssdeep:	24:88BfU98EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8y5EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_349f03554fc44ee38a696afc314394fa.lnk
Category:	dropped
Dump:	MFDBG_349f03554fc44ee38a696afc314394fa.lnk.7.dr
ID:	dr_648
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:41 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.927643784276771
Encrypted:	false
Ssdeep:	24:8aBfUp8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8Y8OEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_34d321d26e9942bf84ff6a8494cdc02f.lnk
Category:	dropped
Dump:	MFDBG_34d321d26e9942bf84ff6a8494cdc02f.lnk.7.dr
ID:	dr_123
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:39 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.92544975344358
Encrypted:	false
Ssdeep:	24:8z2Bfz8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8AIEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_35018bb600c2418ab931bbf1dc9fdd21.lnk
Category:	dropped
Dump:	MFDBG_35018bb600c2418ab931bbf1dc9fdd21.lnk.7.dr
ID:	dr_587
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:30 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.93116801335166
Encrypted:	false
Ssdeep:	24:84Bfs8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:82hEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_35423a6549fb4761beb31802871d049e.lnk
Category:	dropped
Dump:	MFDBG_35423a6549fb4761beb31802871d049e.lnk.7.dr
ID:	dr_191
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:39 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923542443279367
Encrypted:	false
Ssdeep:	24:8E4BfJ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8tGEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_355f22a4cf3a4347a4e9cc438f4e54ec.lnk
Category:	dropped
Dump:	MFDBG_355f22a4cf3a4347a4e9cc438f4e54ec.lnk.7.dr
ID:	dr_157
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:39 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9222325865234
Encrypted:	false
Ssdeep:	24:83Bfz8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8RYEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_356a0e5fb5b841049dd65b87d1702598.lnk
Category:	dropped
Dump:	MFDBG_356a0e5fb5b841049dd65b87d1702598.lnk.7.dr
ID:	dr_323
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:57 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.926722743256845
Encrypted:	false
Ssdeep:	24:87Bfv8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8tcEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_35c071a677804ae8852ef53d3a62ce6c.lnk
Category:	dropped
Dump:	MFDBG_35c071a677804ae8852ef53d3a62ce6c.lnk.7.dr
ID:	dr_374
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:10 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.928396870595955
Encrypted:	false
Ssdeep:	24:8FZBf68EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:81fEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_35c33106b4e845f8a0d9197a5d660dd1.lnk
Category:	dropped
Dump:	MFDBG_35c33106b4e845f8a0d9197a5d660dd1.lnk.7.dr
ID:	dr_798
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:49 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920018214204478
Encrypted:	false
Ssdeep:	24:8HBf98EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8hyEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_36146b4b6a0144a3ba3f80ae43eebb5b.lnk
Category:	dropped
Dump:	MFDBG_36146b4b6a0144a3ba3f80ae43eebb5b.lnk.7.dr
ID:	dr_819
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:50 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.915263464366705
Encrypted:	false
Ssdeep:	24:8tBff48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8fdEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_361a76f0633d4b059b2c6dbb17bb8c14.lnk
Category:	dropped
Dump:	MFDBG_361a76f0633d4b059b2c6dbb17bb8c14.lnk.7.dr
ID:	dr_659
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:42 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923542443279367
Encrypted:	false
Ssdeep:	24:81Bfo8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:83FEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3623cbf1a6574ca9b15da0fa16784166.lnk
Category:	dropped
Dump:	MFDBG_3623cbf1a6574ca9b15da0fa16784166.lnk.7.dr
ID:	dr_508
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:14 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923775626104468
Encrypted:	false
Ssdeep:	24:8NerBf6D8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8NedyQEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_36994fe5130b48e98424709ce450a37a.lnk
Category:	dropped
Dump:	MFDBG_36994fe5130b48e98424709ce450a37a.lnk.7.dr
ID:	dr_114
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:44 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.918629323171126
Encrypted:	false
Ssdeep:	24:8JBfHf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8zMEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_37433ec343d64efbb15c2b16c2dd5166.lnk
Category:	dropped
Dump:	MFDBG_37433ec343d64efbb15c2b16c2dd5166.lnk.7.dr
ID:	dr_246
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:46 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.915564924413736
Encrypted:	false
Ssdeep:	24:8NBfZ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8/WEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_374622c17dc3459ba021387188de3181.lnk
Category:	dropped
Dump:	MFDBG_374622c17dc3459ba021387188de3181.lnk.7.dr
ID:	dr_463
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:03 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.914862958350184
Encrypted:	false
Ssdeep:	24:8+BfpcH8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8UDEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_375a627c251d46d69691fa62cca36310.lnk
Category:	dropped
Dump:	MFDBG_375a627c251d46d69691fa62cca36310.lnk.7.dr
ID:	dr_523
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:14 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.919586297908731
Encrypted:	false
Ssdeep:	24:8UBf6D8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:86yQEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_379aff873bf34c41997d462a91f61e20.lnk
Category:	dropped
Dump:	MFDBG_379aff873bf34c41997d462a91f61e20.lnk.7.dr
ID:	dr_491
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:28 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.925969656937662
Encrypted:	false
Ssdeep:	24:85Bf/8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8jMEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_37bb5516687f4f8ca361b5f9d1ca7e73.lnk
Category:	dropped
Dump:	MFDBG_37bb5516687f4f8ca361b5f9d1ca7e73.lnk.7.dr
ID:	dr_1039
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:19 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.928396870595955
Encrypted:	false
Ssdeep:	24:8X2Bfh48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8X8p9EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_37c3097e41c6405a869d0fca4833f92f.lnk
Category:	dropped
Dump:	MFDBG_37c3097e41c6405a869d0fca4833f92f.lnk.7.dr
ID:	dr_457
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:03 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.918243194127207
Encrypted:	false
Ssdeep:	24:8QBfpcH8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8eDEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_37c3d651e5464e1a8f93b92872d6fab9.lnk
Category:	dropped
Dump:	MFDBG_37c3d651e5464e1a8f93b92872d6fab9.lnk.7.dr
ID:	dr_544
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:14 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.917923860850101
Encrypted:	false
Ssdeep:	24:8F6Bf6D8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8qyQEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_37c435e0121e45be88bc6e53ffd4373d.lnk
Category:	dropped
Dump:	MFDBG_37c435e0121e45be88bc6e53ffd4373d.lnk.7.dr
ID:	dr_651
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:43 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.925969656937662
Encrypted:	false
Ssdeep:	24:8wrBfOD8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:84bEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_38298c94303845dabef0ef3d2061c2aa.lnk
Category:	dropped
Dump:	MFDBG_38298c94303845dabef0ef3d2061c2aa.lnk.7.dr
ID:	dr_434
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:11 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.929493886012551
Encrypted:	false
Ssdeep:	24:8V8TBfh8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8+eEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_384967abfee24ca3bf46115a1bdeeeb6.lnk
Category:	dropped
Dump:	MFDBG_384967abfee24ca3bf46115a1bdeeeb6.lnk.7.dr
ID:	dr_409
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:02 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.918872496120494
Encrypted:	false
Ssdeep:	24:8VBfA8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8XdEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_387638beaa9e4d2492bd9c3e22b77280.lnk
Category:	dropped
Dump:	MFDBG_387638beaa9e4d2492bd9c3e22b77280.lnk.7.dr
ID:	dr_84
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:43 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9301589851334
Encrypted:	false
Ssdeep:	24:8NsBfs8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8NiREvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_38dbc749f0574866bee5744ec345225d.lnk
Category:	dropped
Dump:	MFDBG_38dbc749f0574866bee5744ec345225d.lnk.7.dr
ID:	dr_982
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:15 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.921074597317021
Encrypted:	false
Ssdeep:	24:8IBfa8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8GPEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_39431f53dde1461c996e0f3ab846c86c.lnk
Category:	dropped
Dump:	MFDBG_39431f53dde1461c996e0f3ab846c86c.lnk.7.dr
ID:	dr_184
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:47 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.910329555612827
Encrypted:	false
Ssdeep:	24:8BBfX8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8bUEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3979334167864863a57920f4bc132fbe.lnk
Category:	dropped
Dump:	MFDBG_3979334167864863a57920f4bc132fbe.lnk.7.dr
ID:	dr_294
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:49 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.917159084250437
Encrypted:	false
Ssdeep:	24:8fBf48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8pFEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_39b8fd73fd004e2f9b55e62d9a2687fb.lnk
Category:	dropped
Dump:	MFDBG_39b8fd73fd004e2f9b55e62d9a2687fb.lnk.7.dr
ID:	dr_758
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:44 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923133286057597
Encrypted:	false
Ssdeep:	24:8hBfDf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:87bEEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3a0ebaad8f7d400cb50f7febdb7fcdbd.lnk
Category:	dropped
Dump:	MFDBG_3a0ebaad8f7d400cb50f7febdb7fcdbd.lnk.7.dr
ID:	dr_692
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:43 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923817793439152
Encrypted:	false
Ssdeep:	24:83Bfn8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8RUEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3a46624ee443411291a380da9d23d7e2.lnk
Category:	dropped
Dump:	MFDBG_3a46624ee443411291a380da9d23d7e2.lnk.7.dr
ID:	dr_422
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:03 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920324846160894
Encrypted:	false
Ssdeep:	24:8uBfZ48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8ER9EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3a595a8a8ebd4756b96803b373510079.lnk
Category:	dropped
Dump:	MFDBG_3a595a8a8ebd4756b96803b373510079.lnk.7.dr
ID:	dr_199
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:48 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.925401050776191
Encrypted:	false
Ssdeep:	24:8CBfn+8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8wLEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3a7247fbce8d411485c351e38ee16606.lnk
Category:	dropped
Dump:	MFDBG_3a7247fbce8d411485c351e38ee16606.lnk.7.dr
ID:	dr_415
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:11 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.931921099670845
Encrypted:	false
Ssdeep:	24:8ikTBfh8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:89eEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3a9f19ff780043248b18a6cf0ff3ea09.lnk
Category:	dropped
Dump:	MFDBG_3a9f19ff780043248b18a6cf0ff3ea09.lnk.7.dr
ID:	dr_969
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:04 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.92478465432273
Encrypted:	false
Ssdeep:	24:8NLBfTf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8N9IEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3ac9ff2f16234acf89b88865079d203b.lnk
Category:	dropped
Dump:	MFDBG_3ac9ff2f16234acf89b88865079d203b.lnk.7.dr
ID:	dr_1052
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:01 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.925969656937662
Encrypted:	false
Ssdeep:	24:8GBfrp8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8MyEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3accd03748f54c528a9bb703e22497ab.lnk
Category:	dropped
Dump:	MFDBG_3accd03748f54c528a9bb703e22497ab.lnk.7.dr
ID:	dr_716
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:43 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.927211867981024
Encrypted:	false
Ssdeep:	24:8tuBfh8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:86OEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3b2ca82c9e764c84b8e582ee151362e4.lnk
Category:	dropped
Dump:	MFDBG_3b2ca82c9e764c84b8e582ee151362e4.lnk.7.dr
ID:	dr_377
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:59 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.916119226594865
Encrypted:	false
Ssdeep:	24:8nBfJ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8BWEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3b87b2a493de457ea11bc6d57803e75e.lnk
Category:	dropped
Dump:	MFDBG_3b87b2a493de457ea11bc6d57803e75e.lnk.7.dr
ID:	dr_1020
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:18 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920427371426249
Encrypted:	false
Ssdeep:	24:80QBfa8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:80evEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3bc012404d3548978ef29715e2d65876.lnk
Category:	dropped
Dump:	MFDBG_3bc012404d3548978ef29715e2d65876.lnk.7.dr
ID:	dr_701
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:48 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.919789999069627
Encrypted:	false
Ssdeep:	24:86q2BfP8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:86FMEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3bcce15872974d5ca19532a77e5d4f93.lnk
Category:	dropped
Dump:	MFDBG_3bcce15872974d5ca19532a77e5d4f93.lnk.7.dr
ID:	dr_330
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:58 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.932586198791694
Encrypted:	false
Ssdeep:	24:8mBfq8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8sPEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3c0142ef50e04ca38e14956468f4c0e6.lnk
Category:	dropped
Dump:	MFDBG_3c0142ef50e04ca38e14956468f4c0e6.lnk.7.dr
ID:	dr_239
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:48 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.915331741588633
Encrypted:	false
Ssdeep:	24:8uBfRo8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8EjEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3c0fd36dda7941b998820329efb93acb.lnk
Category:	dropped
Dump:	MFDBG_3c0fd36dda7941b998820329efb93acb.lnk.7.dr
ID:	dr_241
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:48 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9177897340168295
Encrypted:	false
Ssdeep:	24:8V2BfRo8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8yjEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3c35da0d3a634504b60c74f5c85e9e18.lnk
Category:	dropped
Dump:	MFDBG_3c35da0d3a634504b60c74f5c85e9e18.lnk.7.dr
ID:	dr_781
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:52 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.916385656445523
Encrypted:	false
Ssdeep:	24:8lTBfP8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8HsEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3c42ddcfca544b71a6ff903ec414a81b.lnk
Category:	dropped
Dump:	MFDBG_3c42ddcfca544b71a6ff903ec414a81b.lnk.7.dr
ID:	dr_704
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:51 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.932586198791694
Encrypted:	false
Ssdeep:	24:8dGBfbl8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8dM+EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3ca168637422496ea382d83828dbc519.lnk
Category:	dropped
Dump:	MFDBG_3ca168637422496ea382d83828dbc519.lnk.7.dr
ID:	dr_125
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:39 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.922465769348501
Encrypted:	false
Ssdeep:	24:88Bfz8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8yYEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3cd2a756f7db46e18e341fb3aaaeab68.lnk
Category:	dropped
Dump:	MFDBG_3cd2a756f7db46e18e341fb3aaaeab68.lnk.7.dr
ID:	dr_1015
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:18 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.921544728328576
Encrypted:	false
Ssdeep:	24:8QBfm4p8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8e+9EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3cebe032c2004d3ca923f92db332dbde.lnk
Category:	dropped
Dump:	MFDBG_3cebe032c2004d3ca923f92db332dbde.lnk.7.dr
ID:	dr_286
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:49 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.917900334844935
Encrypted:	false
Ssdeep:	24:8aBf48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8YFEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3cf4fb2bc9104c2ea61a56deb9ec2079.lnk
Category:	dropped
Dump:	MFDBG_3cf4fb2bc9104c2ea61a56deb9ec2079.lnk.7.dr
ID:	dr_280
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:46 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9207977301821915
Encrypted:	false
Ssdeep:	24:83BfZ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8RWEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3d1202fecf3848458b701ff631d999a4.lnk
Category:	dropped
Dump:	MFDBG_3d1202fecf3848458b701ff631d999a4.lnk.7.dr
ID:	dr_530
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:29 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.919142691332504
Encrypted:	false
Ssdeep:	24:8QBfeQ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8e2FEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3d7121072a974d4ba4c6c74759e32cbc.lnk
Category:	dropped
Dump:	MFDBG_3d7121072a974d4ba4c6c74759e32cbc.lnk.7.dr
ID:	dr_311
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:51 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.92474778738003
Encrypted:	false
Ssdeep:	24:8VkBfX8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8YEEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3de4ac887e5e4b0f9bb997dc3648a320.lnk
Category:	dropped
Dump:	MFDBG_3de4ac887e5e4b0f9bb997dc3648a320.lnk.7.dr
ID:	dr_940
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:14 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9286528124950335
Encrypted:	false
Ssdeep:	24:87Bfs8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8tBEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3e80e2e5fb5a4b12923ba288d4966d27.lnk
Category:	dropped
Dump:	MFDBG_3e80e2e5fb5a4b12923ba288d4966d27.lnk.7.dr
ID:	dr_427
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:03 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.919410323512061
Encrypted:	false
Ssdeep:	24:8BrBfpcH8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8BdDEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3e8a65bbcd4441aa9dd1fb02379a9873.lnk
Category:	dropped
Dump:	MFDBG_3e8a65bbcd4441aa9dd1fb02379a9873.lnk.7.dr
ID:	dr_658
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:46 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.919788701963929
Encrypted:	false
Ssdeep:	24:8hBfW8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:87DEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3ec4d02d64774ed19afa29e8bb8ddc6c.lnk
Category:	dropped
Dump:	MFDBG_3ec4d02d64774ed19afa29e8bb8ddc6c.lnk.7.dr
ID:	dr_963
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:15 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.917061243517952
Encrypted:	false
Ssdeep:	24:8aBfa8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8YPEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3f1cc971813b4e2f95fd307f918411dc.lnk
Category:	dropped
Dump:	MFDBG_3f1cc971813b4e2f95fd307f918411dc.lnk.7.dr
ID:	dr_363
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:00 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.925118729885994
Encrypted:	false
Ssdeep:	24:8XBfs68EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8xcEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3f3cb5a6943a491b965f0530dee379e1.lnk
Category:	dropped
Dump:	MFDBG_3f3cb5a6943a491b965f0530dee379e1.lnk.7.dr
ID:	dr_562
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:29 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.927964954300205
Encrypted:	false
Ssdeep:	24:8/3BfT8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8p4EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3f3f9ac6e3ab487097cc9adaef965328.lnk
Category:	dropped
Dump:	MFDBG_3f3f9ac6e3ab487097cc9adaef965328.lnk.7.dr
ID:	dr_47
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:43 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.930824084254249
Encrypted:	false
Ssdeep:	24:8MBf48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8CFEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3f9202cec72e438cbd8a0c078bd82628.lnk
Category:	dropped
Dump:	MFDBG_3f9202cec72e438cbd8a0c078bd82628.lnk.7.dr
ID:	dr_670
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:43 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.925713715038583
Encrypted:	false
Ssdeep:	24:8LBfEO8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:89uEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3fc05f65dca84656a4aacd75dc3872b6.lnk
Category:	dropped
Dump:	MFDBG_3fc05f65dca84656a4aacd75dc3872b6.lnk.7.dr
ID:	dr_628
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:41 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.925412886500877
Encrypted:	false
Ssdeep:	24:8QBfo8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8eFEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_40b6f18e54b2471991f41946e627e51c.lnk
Category:	dropped
Dump:	MFDBG_40b6f18e54b2471991f41946e627e51c.lnk.7.dr
ID:	dr_186
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:47 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.911025433503579
Encrypted:	false
Ssdeep:	24:8wBfX8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8+UEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_40e8e66f6f5f454f830c63105cd778b4.lnk
Category:	dropped
Dump:	MFDBG_40e8e66f6f5f454f830c63105cd778b4.lnk.7.dr
ID:	dr_902
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:03 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9245514714976295
Encrypted:	false
Ssdeep:	24:8QBfk8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8eJEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_40fdeba305c74ab88f8877c5c349f3a4.lnk
Category:	dropped
Dump:	MFDBG_40fdeba305c74ab88f8877c5c349f3a4.lnk.7.dr
ID:	dr_233
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:45 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.912643605410565
Encrypted:	false
Ssdeep:	24:84BfMYH8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:82UJEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4110fbc2a9a24799b424846e53bf2ecb.lnk
Category:	dropped
Dump:	MFDBG_4110fbc2a9a24799b424846e53bf2ecb.lnk.7.dr
ID:	dr_667
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:42 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.918528567023081
Encrypted:	false
Ssdeep:	24:83Bfk8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8RJEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_414c8d90d7bf4038a28de19b75266a1a.lnk
Category:	dropped
Dump:	MFDBG_414c8d90d7bf4038a28de19b75266a1a.lnk.7.dr
ID:	dr_836
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:54 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.918921198787882
Encrypted:	false
Ssdeep:	24:8lBfMMQ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8nUEEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4155d6b509314764b9e68f209c1753ba.lnk
Category:	dropped
Dump:	MFDBG_4155d6b509314764b9e68f209c1753ba.lnk.7.dr
ID:	dr_957
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:04 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.918233340593056
Encrypted:	false
Ssdeep:	24:8OBfEf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8kBEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_41ba0acbe88b40cf809fc414601da6b5.lnk
Category:	dropped
Dump:	MFDBG_41ba0acbe88b40cf809fc414601da6b5.lnk.7.dr
ID:	dr_192
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:39 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.924207542400216
Encrypted:	false
Ssdeep:	24:8z3BfJ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8zRGEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_41e771998a3d42459107096c082683ba.lnk
Category:	dropped
Dump:	MFDBG_41e771998a3d42459107096c082683ba.lnk.7.dr
ID:	dr_470
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:13 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.921953885550347
Encrypted:	false
Ssdeep:	24:8mBfD8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8soEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_42852e33a6874da9aea0a730db7a07e0.lnk
Category:	dropped
Dump:	MFDBG_42852e33a6874da9aea0a730db7a07e0.lnk.7.dr
ID:	dr_649
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:43 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9305029142308126
Encrypted:	false
Ssdeep:	24:8SQBfOD8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8SebEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_42e2f6256bc14d96987f9396ff0b3301.lnk
Category:	dropped
Dump:	MFDBG_42e2f6256bc14d96987f9396ff0b3301.lnk.7.dr
ID:	dr_326
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:58 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.926342880441755
Encrypted:	false
Ssdeep:	24:8PBfT8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8ZYEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_42f35c5caf9d47c89b2408d45e466bb1.lnk
Category:	dropped
Dump:	MFDBG_42f35c5caf9d47c89b2408d45e466bb1.lnk.7.dr
ID:	dr_870
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:55 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.927387842377694
Encrypted:	false
Ssdeep:	24:8tBfi8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8fHEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_431c3b09a093492886dfae8495a104f9.lnk
Category:	dropped
Dump:	MFDBG_431c3b09a093492886dfae8495a104f9.lnk.7.dr
ID:	dr_348
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:09 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.926546768860175
Encrypted:	false
Ssdeep:	24:8/QBf98EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8mCEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_431f20aebb464a7dafd02b01abed7f17.lnk
Category:	dropped
Dump:	MFDBG_431f20aebb464a7dafd02b01abed7f17.lnk.7.dr
ID:	dr_694
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:43 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923152694318305
Encrypted:	false
Ssdeep:	24:88aBfn8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8XUEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_437c5f910d80453887604fbfe53cb29d.lnk
Category:	dropped
Dump:	MFDBG_437c5f910d80453887604fbfe53cb29d.lnk.7.dr
ID:	dr_890
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:56 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.930699230113212
Encrypted:	false
Ssdeep:	24:86Bfh48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8459EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_43fdf89f4bd34e69965ecc7f228a2f4f.lnk
Category:	dropped
Dump:	MFDBG_43fdf89f4bd34e69965ecc7f228a2f4f.lnk.7.dr
ID:	dr_504
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:14 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920126542888543
Encrypted:	false
Ssdeep:	24:8orBf6D8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8odyQEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_443706702bc64a6084280292c3047e4a.lnk
Category:	dropped
Dump:	MFDBG_443706702bc64a6084280292c3047e4a.lnk.7.dr
ID:	dr_392
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:11 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9205953261269935
Encrypted:	false
Ssdeep:	24:8PBfR8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8Z+EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_447d2d7f00ca4f0f88eb0d71af9cd4eb.lnk
Category:	dropped
Dump:	MFDBG_447d2d7f00ca4f0f88eb0d71af9cd4eb.lnk.7.dr
ID:	dr_689
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:43 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.926810730455179
Encrypted:	false
Ssdeep:	24:8wBfEO8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8+uEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_44a0fbf134ef4451b2d0e46686ba226e.lnk
Category:	dropped
Dump:	MFDBG_44a0fbf134ef4451b2d0e46686ba226e.lnk.7.dr
ID:	dr_736
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:51 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.922752490017483
Encrypted:	false
Ssdeep:	24:8V3TBf8+8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8TETEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_450bf0bac6be499eaaf0e4e92ff92060.lnk
Category:	dropped
Dump:	MFDBG_450bf0bac6be499eaaf0e4e92ff92060.lnk.7.dr
ID:	dr_106
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:44 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.926853831014886
Encrypted:	false
Ssdeep:	24:8SrBfwof8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8SdWEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4527a32bf1aa4a009adfb4b7179d7c0b.lnk
Category:	dropped
Dump:	MFDBG_4527a32bf1aa4a009adfb4b7179d7c0b.lnk.7.dr
ID:	dr_168
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:47 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.922015783711064
Encrypted:	false
Ssdeep:	24:87BfmQ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8teFEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_452f4c914300411b8166c6c455c85ed3.lnk
Category:	dropped
Dump:	MFDBG_452f4c914300411b8166c6c455c85ed3.lnk.7.dr
ID:	dr_688
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:47 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.92729985517936
Encrypted:	false
Ssdeep:	24:8gBfE8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8upEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_456f6da790d04496875aace54b4628ce.lnk
Category:	dropped
Dump:	MFDBG_456f6da790d04496875aace54b4628ce.lnk.7.dr
ID:	dr_880
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:03 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923076077629164
Encrypted:	false
Ssdeep:	24:8kBf048EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8K89EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_45786d1e8d45453bbf81248f437fb1d4.lnk
Category:	dropped
Dump:	MFDBG_45786d1e8d45453bbf81248f437fb1d4.lnk.7.dr
ID:	dr_314
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:50 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.925844802796627
Encrypted:	false
Ssdeep:	24:8pBfX8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8TEEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_45d635f61f244d119a123fafcd607c28.lnk
Category:	dropped
Dump:	MFDBG_45d635f61f244d119a123fafcd607c28.lnk.7.dr
ID:	dr_516
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:29 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9233320195282415
Encrypted:	false
Ssdeep:	24:8UBfeQ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:862FEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_462c9bd944434f13b040b4da0ac1aa02.lnk
Category:	dropped
Dump:	MFDBG_462c9bd944434f13b040b4da0ac1aa02.lnk.7.dr
ID:	dr_366
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:09 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.926546768860176
Encrypted:	false
Ssdeep:	24:8eBfW8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:80DEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_46690152aed24097b2a8d73b0c9fb17b.lnk
Category:	dropped
Dump:	MFDBG_46690152aed24097b2a8d73b0c9fb17b.lnk.7.dr
ID:	dr_45
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:43 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.928740799693369
Encrypted:	false
Ssdeep:	24:8fBf48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8pFEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_466ee1e20e234bdeae7b754f21f52882.lnk
Category:	dropped
Dump:	MFDBG_466ee1e20e234bdeae7b754f21f52882.lnk.7.dr
ID:	dr_287
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:49 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.921473266587212
Encrypted:	false
Ssdeep:	24:8ABf48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8OFEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_46837c03827945b88da679bb510c6712.lnk
Category:	dropped
Dump:	MFDBG_46837c03827945b88da679bb510c6712.lnk.7.dr
ID:	dr_732
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:48 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920909960817723
Encrypted:	false
Ssdeep:	24:8xBf/8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8L8EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4718545bcb024f5fa8cb12241d96da27.lnk
Category:	dropped
Dump:	MFDBG_4718545bcb024f5fa8cb12241d96da27.lnk.7.dr
ID:	dr_594
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:30 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920018214204478
Encrypted:	false
Ssdeep:	24:89BfU98EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8v5EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_476d3cd0c57f4e6e97af8426fd53b501.lnk
Category:	dropped
Dump:	MFDBG_476d3cd0c57f4e6e97af8426fd53b501.lnk.7.dr
ID:	dr_522
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:14 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.924872641521064
Encrypted:	false
Ssdeep:	24:8VurBf6D8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:84dyQEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_48b929ee2c064d2abc6cfa78f2c6a596.lnk
Category:	dropped
Dump:	MFDBG_48b929ee2c064d2abc6cfa78f2c6a596.lnk.7.dr
ID:	dr_274
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:49 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.929493886012551
Encrypted:	false
Ssdeep:	24:81BfiD8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:83aQEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_48fe1bbd544c43dea45168e0e6b3ce89.lnk
Category:	dropped
Dump:	MFDBG_48fe1bbd544c43dea45168e0e6b3ce89.lnk.7.dr
ID:	dr_132
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:39 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.922357440664436
Encrypted:	false
Ssdeep:	24:80BfJ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8aGEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_49f7c38a3dc947d78bcbf25b163a87d8.lnk
Category:	dropped
Dump:	MFDBG_49f7c38a3dc947d78bcbf25b163a87d8.lnk.7.dr
ID:	dr_36
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:42 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.924463484299294
Encrypted:	false
Ssdeep:	24:8HBfu8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8h7EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4a6fb8d778114e668acde82e743ef28d.lnk
Category:	dropped
Dump:	MFDBG_4a6fb8d778114e668acde82e743ef28d.lnk.7.dr
ID:	dr_654
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:46 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.917449475503971
Encrypted:	false
Ssdeep:	24:8ZrBfW8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:83DEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4b04f8268a4a4b9fb20032b6d752fbcc.lnk
Category:	dropped
Dump:	MFDBG_4b04f8268a4a4b9fb20032b6d752fbcc.lnk.7.dr
ID:	dr_690
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:47 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.931921099670846
Encrypted:	false
Ssdeep:	24:8ABfE8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8OpEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4b0ffb83282a4951bd88c047f7463230.lnk
Category:	dropped
Dump:	MFDBG_4b0ffb83282a4951bd88c047f7463230.lnk.7.dr
ID:	dr_160
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:39 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.92596965693766
Encrypted:	false
Ssdeep:	24:81BfJ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:83GEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4b256af91ac447138d3f1ef4c329441f.lnk
Category:	dropped
Dump:	MFDBG_4b256af91ac447138d3f1ef4c329441f.lnk.7.dr
ID:	dr_344
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:08 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9258816697393275
Encrypted:	false
Ssdeep:	24:8frBf98EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8FCEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4b395487681745e1a61a89a418797192.lnk
Category:	dropped
Dump:	MFDBG_4b395487681745e1a61a89a418797192.lnk.7.dr
ID:	dr_580
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:30 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.909496647235442
Encrypted:	false
Ssdeep:	24:84BfU98EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:825EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4b7024b7a59844cf920940e805d6e1ec.lnk
Category:	dropped
Dump:	MFDBG_4b7024b7a59844cf920940e805d6e1ec.lnk.7.dr
ID:	dr_821
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:50 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.916977021680968
Encrypted:	false
Ssdeep:	24:87lBff48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8LdEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4b917c3aaed948ec9692b663ff65ec36.lnk
Category:	dropped
Dump:	MFDBG_4b917c3aaed948ec9692b663ff65ec36.lnk.7.dr
ID:	dr_440
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:12 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.924352738026983
Encrypted:	false
Ssdeep:	24:8ATBfo+8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8ogTEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4c2f51caa23a4c02868a318247d6d956.lnk
Category:	dropped
Dump:	MFDBG_4c2f51caa23a4c02868a318247d6d956.lnk.7.dr
ID:	dr_1043
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:19 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9234685639497595
Encrypted:	false
Ssdeep:	24:82BfiH8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:88TEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4cb4d055ba10431681a85cd1553f5794.lnk
Category:	dropped
Dump:	MFDBG_4cb4d055ba10431681a85cd1553f5794.lnk.7.dr
ID:	dr_91
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:38 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923286501380291
Encrypted:	false
Ssdeep:	24:81Bf/P48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:833FEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4cceea8106cf449babcf5c092e075541.lnk
Category:	dropped
Dump:	MFDBG_4cceea8106cf449babcf5c092e075541.lnk.7.dr
ID:	dr_1014
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:18 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9246598001816935
Encrypted:	false
Ssdeep:	24:80Bfm4p8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8a+9EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4cdd88f0999f4aa38b5c88e5da7e8106.lnk
Category:	dropped
Dump:	MFDBG_4cdd88f0999f4aa38b5c88e5da7e8106.lnk.7.dr
ID:	dr_697
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:48 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9269085711876635
Encrypted:	false
Ssdeep:	24:8aBfP8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8YMEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4d48fbfe1f12496ab3947f5bbbc4db22.lnk
Category:	dropped
Dump:	MFDBG_4d48fbfe1f12496ab3947f5bbbc4db22.lnk.7.dr
ID:	dr_571
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:30 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.926057644135997
Encrypted:	false
Ssdeep:	24:8NtBfs8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8NfhEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4d49cfd3987844adb8498a4ed0d8649a.lnk
Category:	dropped
Dump:	MFDBG_4d49cfd3987844adb8498a4ed0d8649a.lnk.7.dr
ID:	dr_563
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:29 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.930912071452582
Encrypted:	false
Ssdeep:	24:8DuBfT8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8DE4EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4d90184c109d4336866939af57cf9070.lnk
Category:	dropped
Dump:	MFDBG_4d90184c109d4336866939af57cf9070.lnk.7.dr
ID:	dr_368
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:10 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.930824084254249
Encrypted:	false
Ssdeep:	24:82BfW8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:88DEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4dd0c19e1acc4d559883fba05dd1b6b8.lnk
Category:	dropped
Dump:	MFDBG_4dd0c19e1acc4d559883fba05dd1b6b8.lnk.7.dr
ID:	dr_444
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:27 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.926546768860175
Encrypted:	false
Ssdeep:	24:8Fo2Bfs48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8S809EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4deb145ba5ad41b7b07a33fdc013e3b8.lnk
Category:	dropped
Dump:	MFDBG_4deb145ba5ad41b7b07a33fdc013e3b8.lnk.7.dr
ID:	dr_714
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:43 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.929405898814216
Encrypted:	false
Ssdeep:	24:8nBfh8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8BOEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4e08ddd482b14a1798350d15b6817c8e.lnk
Category:	dropped
Dump:	MFDBG_4e08ddd482b14a1798350d15b6817c8e.lnk.7.dr
ID:	dr_272
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:49 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.92760691733407
Encrypted:	false
Ssdeep:	24:81BfiD8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:83aQEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4e6d00d8ae154c67a16b94aaca016867.lnk
Category:	dropped
Dump:	MFDBG_4e6d00d8ae154c67a16b94aaca016867.lnk.7.dr
ID:	dr_1027
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:18 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.921350901408294
Encrypted:	false
Ssdeep:	24:8IBfB8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8GOEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4e793b3746d0411f8b7ffa7c049bace9.lnk
Category:	dropped
Dump:	MFDBG_4e793b3746d0411f8b7ffa7c049bace9.lnk.7.dr
ID:	dr_113
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:46 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920919846963698
Encrypted:	false
Ssdeep:	24:8QuBfJ48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8QEPEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4e7a97950c2f45119f82a8bf5ce76c26.lnk
Category:	dropped
Dump:	MFDBG_4e7a97950c2f45119f82a8bf5ce76c26.lnk.7.dr
ID:	dr_193
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:40 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.919932715968261
Encrypted:	false
Ssdeep:	24:8fFBfJ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8/GEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4eb51f2ec09843a98b52d8590b1bc326.lnk
Category:	dropped
Dump:	MFDBG_4eb51f2ec09843a98b52d8590b1bc326.lnk.7.dr
ID:	dr_263
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:48 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920117891683293
Encrypted:	false
Ssdeep:	24:8QBfY8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8eFEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4ed775f1e87545de8158b854ee35e90e.lnk
Category:	dropped
Dump:	MFDBG_4ed775f1e87545de8158b854ee35e90e.lnk.7.dr
ID:	dr_414
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:11 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.929493886012551
Encrypted:	false
Ssdeep:	24:8PTBfh8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:89eEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4edd4e7600f44da18fdec4c841f392e5.lnk
Category:	dropped
Dump:	MFDBG_4edd4e7600f44da18fdec4c841f392e5.lnk.7.dr
ID:	dr_583
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:30 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.925811555771069
Encrypted:	false
Ssdeep:	24:8bBfs8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8NhEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4f96466b2ed940b2acfd32267540576b.lnk
Category:	dropped
Dump:	MFDBG_4f96466b2ed940b2acfd32267540576b.lnk.7.dr
ID:	dr_923
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:04 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.926202839762764
Encrypted:	false
Ssdeep:	24:85Bf8f8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8jZEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4fc701fb25354012b006fe86bdef5b2d.lnk
Category:	dropped
Dump:	MFDBG_4fc701fb25354012b006fe86bdef5b2d.lnk.7.dr
ID:	dr_848
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:54 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9188559706635235
Encrypted:	false
Ssdeep:	24:8C2BfAP8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8C89EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_503ca45bcc434106b7209a6b98512eb3.lnk
Category:	dropped
Dump:	MFDBG_503ca45bcc434106b7209a6b98512eb3.lnk.7.dr
ID:	dr_553
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:29 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9308240842542475
Encrypted:	false
Ssdeep:	24:8tBfT8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8f4EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_50520ba9219343a1af42f14da8c2b8d3.lnk
Category:	dropped
Dump:	MFDBG_50520ba9219343a1af42f14da8c2b8d3.lnk.7.dr
ID:	dr_908
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:56 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9214732665872125
Encrypted:	false
Ssdeep:	24:8prBfc8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8HREvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_5067cc420a5343b5b6a89c50eb309968.lnk
Category:	dropped
Dump:	MFDBG_5067cc420a5343b5b6a89c50eb309968.lnk.7.dr
ID:	dr_468
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:13 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.92110112175235
Encrypted:	false
Ssdeep:	24:8eBfD8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:80oEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_5134641573df41b69a45db2710390b5a.lnk
Category:	dropped
Dump:	MFDBG_5134641573df41b69a45db2710390b5a.lnk.7.dr
ID:	dr_647
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:46 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.919555519138829
Encrypted:	false
Ssdeep:	24:8DBfZ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8FWEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_515a65a7cfc64009b7177964872407ad.lnk
Category:	dropped
Dump:	MFDBG_515a65a7cfc64009b7177964872407ad.lnk.7.dr
ID:	dr_907
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:56 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.919909885520412
Encrypted:	false
Ssdeep:	24:8eBfc8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:80REvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_5168dff4b7a54dcfa42076af954117df.lnk
Category:	dropped
Dump:	MFDBG_5168dff4b7a54dcfa42076af954117df.lnk.7.dr
ID:	dr_361
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:00 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.925415304089124
Encrypted:	false
Ssdeep:	24:80rBfo8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8MFEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_5170b8dbaebf45ce8a1ad456acef273e.lnk
Category:	dropped
Dump:	MFDBG_5170b8dbaebf45ce8a1ad456acef273e.lnk.7.dr
ID:	dr_575
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:29 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923386810368428
Encrypted:	false
Ssdeep:	24:8xBfs8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8LhEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_5183c656c72d4385aa3e0f1a67f3e41e.lnk
Category:	dropped
Dump:	MFDBG_5183c656c72d4385aa3e0f1a67f3e41e.lnk.7.dr
ID:	dr_984
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:04 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923705512136212
Encrypted:	false
Ssdeep:	24:86BfEf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:84BEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_51c497206cfe4b6a88cb446b5426700c.lnk
Category:	dropped
Dump:	MFDBG_51c497206cfe4b6a88cb446b5426700c.lnk.7.dr
ID:	dr_39
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:42 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.917111729356154
Encrypted:	false
Ssdeep:	24:8HBfu8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8h7EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_51ead15895284fe1b6a9259d0b82fd09.lnk
Category:	dropped
Dump:	MFDBG_51ead15895284fe1b6a9259d0b82fd09.lnk.7.dr
ID:	dr_445
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:27 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.925625727840248
Encrypted:	false
Ssdeep:	24:8bBfs48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8N09EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_524d3051e8d14f5caafa690695967aa2.lnk
Category:	dropped
Dump:	MFDBG_524d3051e8d14f5caafa690695967aa2.lnk.7.dr
ID:	dr_669
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:42 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.921883798436816
Encrypted:	false
Ssdeep:	24:8/BfOD8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8JbEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_5255e2438f7f4b8ca3cb4586527a9db6.lnk
Category:	dropped
Dump:	MFDBG_5255e2438f7f4b8ca3cb4586527a9db6.lnk.7.dr
ID:	dr_910
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:56 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.916852022095727
Encrypted:	false
Ssdeep:	24:8YBfc8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8WREvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_5270da0043b64e0183907669373b7d08.lnk
Category:	dropped
Dump:	MFDBG_5270da0043b64e0183907669373b7d08.lnk.7.dr
ID:	dr_197
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:48 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.917087622509073
Encrypted:	false
Ssdeep:	24:8kBfn+8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8KLEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_53760ab30cf043c4af9bada38389c05d.lnk
Category:	dropped
Dump:	MFDBG_53760ab30cf043c4af9bada38389c05d.lnk.7.dr
ID:	dr_616
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:40 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.927545943544287
Encrypted:	false
Ssdeep:	24:8qBfV8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8oaEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_53d3c89dc4424804b83317bfe678ec0e.lnk
Category:	dropped
Dump:	MFDBG_53d3c89dc4424804b83317bfe678ec0e.lnk.7.dr
ID:	dr_127
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:39 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9207036548110565
Encrypted:	false
Ssdeep:	24:82crBfz8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:82EYEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_540c2958b8314be5b328c344aa93f2d0.lnk
Category:	dropped
Dump:	MFDBG_540c2958b8314be5b328c344aa93f2d0.lnk.7.dr
ID:	dr_511
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:14 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.922445427862772
Encrypted:	false
Ssdeep:	24:8UrBf6D8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:82yQEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_540ff8d72f27451d9f9e00e5e818e64b.lnk
Category:	dropped
Dump:	MFDBG_540ff8d72f27451d9f9e00e5e818e64b.lnk.7.dr
ID:	dr_277
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:49 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.925392545015147
Encrypted:	false
Ssdeep:	24:8FMBfiD8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8MaQEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_5460a2bf7e6f47bf9fc7ccb90ba44964.lnk
Category:	dropped
Dump:	MFDBG_5460a2bf7e6f47bf9fc7ccb90ba44964.lnk.7.dr
ID:	dr_1024
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:18 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.922390796391071
Encrypted:	false
Ssdeep:	24:8NMBfB8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8NCOEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_548377bfd9794007920c26508c996a95.lnk
Category:	dropped
Dump:	MFDBG_548377bfd9794007920c26508c996a95.lnk.7.dr
ID:	dr_353
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:09 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9265467688601765
Encrypted:	false
Ssdeep:	24:8V7QBf08EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8Be5EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_54972164e3014e05b7de17a649baed99.lnk
Category:	dropped
Dump:	MFDBG_54972164e3014e05b7de17a649baed99.lnk.7.dr
ID:	dr_599
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:40 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9188128701038165
Encrypted:	false
Ssdeep:	24:8zBfX48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:81P9EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_54fbac313657485f9eaac71717505b77.lnk
Category:	dropped
Dump:	MFDBG_54fbac313657485f9eaac71717505b77.lnk.7.dr
ID:	dr_433
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:02 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.92408268825918
Encrypted:	false
Ssdeep:	24:8CBfx+8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8wtEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_555ff2d3ba2c4c7089ed884259a7192f.lnk
Category:	dropped
Dump:	MFDBG_555ff2d3ba2c4c7089ed884259a7192f.lnk.7.dr
ID:	dr_85
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:43 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9219826821297135
Encrypted:	false
Ssdeep:	24:8jmBfs8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8jsREvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_5595a484252843aeb1678fc52c0d06b2.lnk
Category:	dropped
Dump:	MFDBG_5595a484252843aeb1678fc52c0d06b2.lnk.7.dr
ID:	dr_729
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:51 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920916496150429
Encrypted:	false
Ssdeep:	24:8wTBf88EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:84BEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_56382babef014f719181053cebe0c3c9.lnk
Category:	dropped
Dump:	MFDBG_56382babef014f719181053cebe0c3c9.lnk.7.dr
ID:	dr_1017
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:18 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.922719242991926
Encrypted:	false
Ssdeep:	24:8zQBfa8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8zevEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_5643f754e8f3473f8fc0013ba9102384.lnk
Category:	dropped
Dump:	MFDBG_5643f754e8f3473f8fc0013ba9102384.lnk.7.dr
ID:	dr_480
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:13 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.924946520850675
Encrypted:	false
Ssdeep:	24:8W3BfD8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8WRoEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_56a5c4ad6d724679a741e3ae0cf1b533.lnk
Category:	dropped
Dump:	MFDBG_56a5c4ad6d724679a741e3ae0cf1b533.lnk.7.dr
ID:	dr_389
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:10 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.921260425247841
Encrypted:	false
Ssdeep:	24:8EBf68EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8qfEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_56ae887caa6943d6bfec07cee43024bd.lnk
Category:	dropped
Dump:	MFDBG_56ae887caa6943d6bfec07cee43024bd.lnk.7.dr
ID:	dr_679
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:46 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9218395245603075
Encrypted:	false
Ssdeep:	24:8hwBf68EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8IfEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_5720857c4ea84b3782d304c5e8b4c355.lnk
Category:	dropped
Dump:	MFDBG_5720857c4ea84b3782d304c5e8b4c355.lnk.7.dr
ID:	dr_730
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:48 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.92448289256
Encrypted:	false
Ssdeep:	24:8KrBf/8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8Kd8EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_57c3dc2d73c84c13a5091468821d8546.lnk
Category:	dropped
Dump:	MFDBG_57c3dc2d73c84c13a5091468821d8546.lnk.7.dr
ID:	dr_1049
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:01 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.929493886012552
Encrypted:	false
Ssdeep:	24:8mBfrp8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8syEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_57e0d2016a914218b45233532074d823.lnk
Category:	dropped
Dump:	MFDBG_57e0d2016a914218b45233532074d823.lnk.7.dr
ID:	dr_896
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:03 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.915555070879585
Encrypted:	false
Ssdeep:	24:8iBfQ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8Q9EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_57fea6376c9e4a78bf84c4a0a9a453ff.lnk
Category:	dropped
Dump:	MFDBG_57fea6376c9e4a78bf84c4a0a9a453ff.lnk.7.dr
ID:	dr_653
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:43 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9311680133516615
Encrypted:	false
Ssdeep:	24:8V6QBfOD8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8hbEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_583a8ec6917c46d6a1e7f7687302b404.lnk
Category:	dropped
Dump:	MFDBG_583a8ec6917c46d6a1e7f7687302b404.lnk.7.dr
ID:	dr_795
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:53 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.913260147308232
Encrypted:	false
Ssdeep:	24:8d3BfMMQ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8dRUEEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_58711b9491e04bfabf2aa47c89faa2b9.lnk
Category:	dropped
Dump:	MFDBG_58711b9491e04bfabf2aa47c89faa2b9.lnk.7.dr
ID:	dr_590
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:30 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.912216669735515
Encrypted:	false
Ssdeep:	24:86BfU98EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:845EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_5888fc22552843898e92e4406b0fb584.lnk
Category:	dropped
Dump:	MFDBG_5888fc22552843898e92e4406b0fb584.lnk.7.dr
ID:	dr_306
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:58 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.921477031948563
Encrypted:	false
Ssdeep:	24:8CBftAp8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8w1FEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_58c29fcf7d974eb1ace4c8f81c3a58dc.lnk
Category:	dropped
Dump:	MFDBG_58c29fcf7d974eb1ace4c8f81c3a58dc.lnk.7.dr
ID:	dr_452
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:03 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920648863970871
Encrypted:	false
Ssdeep:	24:8TBff8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8VcEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_58c42a545d564e27969ab9dce5770b51.lnk
Category:	dropped
Dump:	MFDBG_58c42a545d564e27969ab9dce5770b51.lnk.7.dr
ID:	dr_151
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:44 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923775626104468
Encrypted:	false
Ssdeep:	24:8OBfyf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8kjEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_5949de9e80e0426d92467ac614e9b016.lnk
Category:	dropped
Dump:	MFDBG_5949de9e80e0426d92467ac614e9b016.lnk.7.dr
ID:	dr_886
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:56 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.928991855748545
Encrypted:	false
Ssdeep:	24:8D3Bfh48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8959EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_5950010671114ca3bec92a90e3030742.lnk
Category:	dropped
Dump:	MFDBG_5950010671114ca3bec92a90e3030742.lnk.7.dr
ID:	dr_954
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:04 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923022539785285
Encrypted:	false
Ssdeep:	24:8ZBfTf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8DIEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_596a51c75b284245b6d7fb1774bfd335.lnk
Category:	dropped
Dump:	MFDBG_596a51c75b284245b6d7fb1774bfd335.lnk.7.dr
ID:	dr_118
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:43 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.917927357107577
Encrypted:	false
Ssdeep:	24:8JBfHf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8zMEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_5987ffc54a344d27bd05434e61b1e5f0.lnk
Category:	dropped
Dump:	MFDBG_5987ffc54a344d27bd05434e61b1e5f0.lnk.7.dr
ID:	dr_539
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:14 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.92663475605851
Encrypted:	false
Ssdeep:	24:8bBf6D8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8NyQEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_59a1cababd08434283bbe01f6817b75e.lnk
Category:	dropped
Dump:	MFDBG_59a1cababd08434283bbe01f6817b75e.lnk.7.dr
ID:	dr_75
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:38 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.928630053421057
Encrypted:	false
Ssdeep:	24:8nuBfz8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8EIEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_59b3e256cf10419ab486cfc454574ff6.lnk
Category:	dropped
Dump:	MFDBG_59b3e256cf10419ab486cfc454574ff6.lnk.7.dr
ID:	dr_299
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:57 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.927930504945753
Encrypted:	false
Ssdeep:	24:8cBfC8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8SnEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_5a028a702a6640f7acff7c2467323130.lnk
Category:	dropped
Dump:	MFDBG_5a028a702a6640f7acff7c2467323130.lnk.7.dr
ID:	dr_355
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:09 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923022539785287
Encrypted:	false
Ssdeep:	24:85OBf08EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:825EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_5aa59bdb4e6d437fbffe16ea04a20d06.lnk
Category:	dropped
Dump:	MFDBG_5aa59bdb4e6d437fbffe16ea04a20d06.lnk.7.dr
ID:	dr_395
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:11 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.914362631265963
Encrypted:	false
Ssdeep:	24:8sTBfR8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8E+EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_5b92f74bd97942aaa30df068d6f5516f.lnk
Category:	dropped
Dump:	MFDBG_5b92f74bd97942aaa30df068d6f5516f.lnk.7.dr
ID:	dr_268
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:49 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.924872641521065
Encrypted:	false
Ssdeep:	24:8lQBfiD8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8leaQEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_5bbb0dc5e1d54152a78fd9850f5eefd7.lnk
Category:	dropped
Dump:	MFDBG_5bbb0dc5e1d54152a78fd9850f5eefd7.lnk.7.dr
ID:	dr_996
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:16 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923741176750014
Encrypted:	false
Ssdeep:	24:8d+2Bfm8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8d+8zEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_5bf3aa43aa3a46a7a07aa463eb27e702.lnk
Category:	dropped
Dump:	MFDBG_5bf3aa43aa3a46a7a07aa463eb27e702.lnk.7.dr
ID:	dr_376
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:10 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923650771963432
Encrypted:	false
Ssdeep:	24:8GBf68EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8MfEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_5c1d4789cb184dff809a6a949d62dbea.lnk
Category:	dropped
Dump:	MFDBG_5c1d4789cb184dff809a6a949d62dbea.lnk.7.dr
ID:	dr_68
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:38 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.930158985133399
Encrypted:	false
Ssdeep:	24:80Bfs8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8aREvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_5c4e0f9a1e55421b839e4b72638e678a.lnk
Category:	dropped
Dump:	MFDBG_5c4e0f9a1e55421b839e4b72638e678a.lnk.7.dr
ID:	dr_549
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:29 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.928754907562092
Encrypted:	false
Ssdeep:	24:892BfT8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8W4EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_5c5ad7e0f1a444bda6d918f3feb9d5fa.lnk
Category:	dropped
Dump:	MFDBG_5c5ad7e0f1a444bda6d918f3feb9d5fa.lnk.7.dr
ID:	dr_894
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:03 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.919079299954474
Encrypted:	false
Ssdeep:	24:8eBfQ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:809EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_5d203e1013ca4548a27c35aea21ff09b.lnk
Category:	dropped
Dump:	MFDBG_5d203e1013ca4548a27c35aea21ff09b.lnk.7.dr
ID:	dr_226
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:45 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9122889460939465
Encrypted:	false
Ssdeep:	24:8cBf38EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8SEEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_5d346d0d741a4345abfe7a9e685e7db6.lnk
Category:	dropped
Dump:	MFDBG_5d346d0d741a4345abfe7a9e685e7db6.lnk.7.dr
ID:	dr_986
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:04 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.92181854345773
Encrypted:	false
Ssdeep:	24:8FBfEf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8HBEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_5d3d5da592e84e35aca9d3e42ec61578.lnk
Category:	dropped
Dump:	MFDBG_5d3d5da592e84e35aca9d3e42ec61578.lnk.7.dr
ID:	dr_1013
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:18 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.924443214187436
Encrypted:	false
Ssdeep:	24:8UBfm4p8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:86+9EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_5d72fbb560364bf3a7bfbdb123f206d2.lnk
Category:	dropped
Dump:	MFDBG_5d72fbb560364bf3a7bfbdb123f206d2.lnk.7.dr
ID:	dr_869
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:55 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.931355678028811
Encrypted:	false
Ssdeep:	24:82Bfh48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8859EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_5d8f5953c6d34985acaf3120f05b0ee9.lnk
Category:	dropped
Dump:	MFDBG_5d8f5953c6d34985acaf3120f05b0ee9.lnk.7.dr
ID:	dr_347
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:09 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.922013511567024
Encrypted:	false
Ssdeep:	24:87Bf98EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8tCEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_5db781ebdf7f41e9a89c1395a24ec2c1.lnk
Category:	dropped
Dump:	MFDBG_5db781ebdf7f41e9a89c1395a24ec2c1.lnk.7.dr
ID:	dr_855
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:51 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9177386137611965
Encrypted:	false
Ssdeep:	24:8k3Bfk8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8kRJEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_5ed9c149a8cb45d2aaea0a7e041b1f45.lnk
Category:	dropped
Dump:	MFDBG_5ed9c149a8cb45d2aaea0a7e041b1f45.lnk.7.dr
ID:	dr_138
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:47 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.922064486378452
Encrypted:	false
Ssdeep:	24:8+BfT+8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8ULTEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_5f804fcbc7c04421b1ae15deadcb0f56.lnk
Category:	dropped
Dump:	MFDBG_5f804fcbc7c04421b1ae15deadcb0f56.lnk.7.dr
ID:	dr_955
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:04 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9197149174111185
Encrypted:	false
Ssdeep:	24:8XBfEf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8xBEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_60c356c487fa47da9f5a019a13016e95.lnk
Category:	dropped
Dump:	MFDBG_60c356c487fa47da9f5a019a13016e95.lnk.7.dr
ID:	dr_89
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:38 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.921612374041181
Encrypted:	false
Ssdeep:	24:8hBf/P48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:873FEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_60c812333ba048889aad874ab4c795e1.lnk
Category:	dropped
Dump:	MFDBG_60c812333ba048889aad874ab4c795e1.lnk.7.dr
ID:	dr_712
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:51 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.924254897294498
Encrypted:	false
Ssdeep:	24:8ABfbl8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8O+EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_60e052ecdb7c4773b1227a0a98bff165.lnk
Category:	dropped
Dump:	MFDBG_60e052ecdb7c4773b1227a0a98bff165.lnk.7.dr
ID:	dr_92
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:38 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.930824084254248
Encrypted:	false
Ssdeep:	24:8wBfz8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8+IEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_614952ebd8614c4cb19bbba1edc54b8f.lnk
Category:	dropped
Dump:	MFDBG_614952ebd8614c4cb19bbba1edc54b8f.lnk.7.dr
ID:	dr_814
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:44 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.919207919456863
Encrypted:	false
Ssdeep:	24:8aBfff8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8YXEEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_619adade9fcd4556955b07dab0c1407a.lnk
Category:	dropped
Dump:	MFDBG_619adade9fcd4556955b07dab0c1407a.lnk.7.dr
ID:	dr_276
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:49 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.929493886012551
Encrypted:	false
Ssdeep:	24:8vBfiD8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:85aQEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_61d647f50a394bc9a885c208aeddfbd9.lnk
Category:	dropped
Dump:	MFDBG_61d647f50a394bc9a885c208aeddfbd9.lnk.7.dr
ID:	dr_407
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:02 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.918796344646846
Encrypted:	false
Ssdeep:	24:8UBfI48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:86g9EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_61f06f1f6851440987a7c6baf885a997.lnk
Category:	dropped
Dump:	MFDBG_61f06f1f6851440987a7c6baf885a997.lnk.7.dr
ID:	dr_231
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:48 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.91838471916942
Encrypted:	false
Ssdeep:	24:8aBfRo8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8YjEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_61fb55bd339e4b75ad8453187fece2e0.lnk
Category:	dropped
Dump:	MFDBG_61fb55bd339e4b75ad8453187fece2e0.lnk.7.dr
ID:	dr_782
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:48 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.922678610687873
Encrypted:	false
Ssdeep:	24:8DBf98EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8FiEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_6218ea0af3fc4ab1b13cec68d9412c59.lnk
Category:	dropped
Dump:	MFDBG_6218ea0af3fc4ab1b13cec68d9412c59.lnk.7.dr
ID:	dr_317
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:50 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.92663475605851
Encrypted:	false
Ssdeep:	24:8LBfp8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:892EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_62485a558faa489389b600ab509d9769.lnk
Category:	dropped
Dump:	MFDBG_62485a558faa489389b600ab509d9769.lnk.7.dr
ID:	dr_655
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:46 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.917705417403049
Encrypted:	false
Ssdeep:	24:8mc3BfW8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8NRDEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_6378efeee73e4662b1fe15e111d6943a.lnk
Category:	dropped
Dump:	MFDBG_6378efeee73e4662b1fe15e111d6943a.lnk.7.dr
ID:	dr_53
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:43 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.934348313329139
Encrypted:	false
Ssdeep:	24:8mBfs8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8sREvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_6414d23d6a2f4ba2b0eb1fb22182b7f6.lnk
Category:	dropped
Dump:	MFDBG_6414d23d6a2f4ba2b0eb1fb22182b7f6.lnk.7.dr
ID:	dr_154
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:46 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.917963145381048
Encrypted:	false
Ssdeep:	24:8zBfx8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:81eEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_64334fbfc7d547ea8d7f4ad2357b0cc5.lnk
Category:	dropped
Dump:	MFDBG_64334fbfc7d547ea8d7f4ad2357b0cc5.lnk.7.dr
ID:	dr_665
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:42 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9233829943396685
Encrypted:	false
Ssdeep:	24:8NBfk8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8/JEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_6469fcb49e8b4c56ae439ea8f7f5d986.lnk
Category:	dropped
Dump:	MFDBG_6469fcb49e8b4c56ae439ea8f7f5d986.lnk.7.dr
ID:	dr_497
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:28 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923078814988694
Encrypted:	false
Ssdeep:	24:8EBfR48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8qnEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_64f68ea8e1144493abf1efec2d719ace.lnk
Category:	dropped
Dump:	MFDBG_64f68ea8e1144493abf1efec2d719ace.lnk.7.dr
ID:	dr_948
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:04 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.925537740641914
Encrypted:	false
Ssdeep:	24:8K3Bf8f8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8+ZEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_652900a696884fcbbf18df3336ca907e.lnk
Category:	dropped
Dump:	MFDBG_652900a696884fcbbf18df3336ca907e.lnk.7.dr
ID:	dr_970
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:15 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923933727271062
Encrypted:	false
Ssdeep:	24:8GBfa8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8MPEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_653d7d99d35b4f8789b77885fc100271.lnk
Category:	dropped
Dump:	MFDBG_653d7d99d35b4f8789b77885fc100271.lnk.7.dr
ID:	dr_130
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:39 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.926546768860175
Encrypted:	false
Ssdeep:	24:8IrBfJ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8AGEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_6540affff38a422ea9c3f7dfa44daa45.lnk
Category:	dropped
Dump:	MFDBG_6540affff38a422ea9c3f7dfa44daa45.lnk.7.dr
ID:	dr_61
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:43 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.93082408425425
Encrypted:	false
Ssdeep:	24:8QBf48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8eFEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_65ac9a878d964552aeb08efc909c80f0.lnk
Category:	dropped
Dump:	MFDBG_65ac9a878d964552aeb08efc909c80f0.lnk.7.dr
ID:	dr_93
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:38 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.925969656937663
Encrypted:	false
Ssdeep:	24:8NBfz8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8/IEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_65bbd61b5cbf407fa1e71132d5337de6.lnk
Category:	dropped
Dump:	MFDBG_65bbd61b5cbf407fa1e71132d5337de6.lnk.7.dr
ID:	dr_520
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:14 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9217803287419235
Encrypted:	false
Ssdeep:	24:8pBf6D8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8TyQEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_660b5e3813494fc4ac1080e4c880221a.lnk
Category:	dropped
Dump:	MFDBG_660b5e3813494fc4ac1080e4c880221a.lnk.7.dr
ID:	dr_554
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:29 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.929025102774101
Encrypted:	false
Ssdeep:	24:8zQBfT8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:864EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_66440b47f06c450b8dde09c2b58074a2.lnk
Category:	dropped
Dump:	MFDBG_66440b47f06c450b8dde09c2b58074a2.lnk.7.dr
ID:	dr_1012
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:17 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.926202839762762
Encrypted:	false
Ssdeep:	24:8VdBfm4p8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:81+9EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_665a7f1103ed406ca8444dcd1ae127b6.lnk
Category:	dropped
Dump:	MFDBG_665a7f1103ed406ca8444dcd1ae127b6.lnk.7.dr
ID:	dr_103
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:44 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.922863236289793
Encrypted:	false
Ssdeep:	24:82Bfwof8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:88WEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_667935b677aa419a9ccc9bb20f18bbc3.lnk
Category:	dropped
Dump:	MFDBG_667935b677aa419a9ccc9bb20f18bbc3.lnk.7.dr
ID:	dr_1002
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:16 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9283968705959555
Encrypted:	false
Ssdeep:	24:883Bf88EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8kxEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_6687244ea9274efda0ed1ec553695e5b.lnk
Category:	dropped
Dump:	MFDBG_6687244ea9274efda0ed1ec553695e5b.lnk.7.dr
ID:	dr_364
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:00 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.921302625194349
Encrypted:	false
Ssdeep:	24:8NjBfs68EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8NlcEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_66a36697849c4f9390c22ea0c739f308.lnk
Category:	dropped
Dump:	MFDBG_66a36697849c4f9390c22ea0c739f308.lnk.7.dr
ID:	dr_728
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:44 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.917934929643598
Encrypted:	false
Ssdeep:	24:8X3Bfbf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8XRjEEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_66a6195f571e477b92df0eb64afe2a46.lnk
Category:	dropped
Dump:	MFDBG_66a6195f571e477b92df0eb64afe2a46.lnk.7.dr
ID:	dr_807
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:53 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.921126919901555
Encrypted:	false
Ssdeep:	24:8hBf08EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:875EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_66dd904bad6a47eb9ab3842b34433239.lnk
Category:	dropped
Dump:	MFDBG_66dd904bad6a47eb9ab3842b34433239.lnk.7.dr
ID:	dr_180
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:47 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9103460810697985
Encrypted:	false
Ssdeep:	24:8/2BfX8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8/8UEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_673e9920e1864bde9fdd6f4566babc45.lnk
Category:	dropped
Dump:	MFDBG_673e9920e1864bde9fdd6f4566babc45.lnk.7.dr
ID:	dr_514
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:29 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920759610243181
Encrypted:	false
Ssdeep:	24:8BuBfeQ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8u2FEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_6750f6c862f449eab63fc6fbccc1a384.lnk
Category:	dropped
Dump:	MFDBG_6750f6c862f449eab63fc6fbccc1a384.lnk.7.dr
ID:	dr_315
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:50 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.919154381612984
Encrypted:	false
Ssdeep:	24:8hBfX8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:87EEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_67883e30f2764c568d3608717b127d8d.lnk
Category:	dropped
Dump:	MFDBG_67883e30f2764c568d3608717b127d8d.lnk.7.dr
ID:	dr_854
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:54 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923705512136212
Encrypted:	false
Ssdeep:	24:8uBfAP8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8E9EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_6793b2a388e9442293095ba70f5c583b.lnk
Category:	dropped
Dump:	MFDBG_6793b2a388e9442293095ba70f5c583b.lnk.7.dr
ID:	dr_79
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:43 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923667297420404
Encrypted:	false
Ssdeep:	24:8SBfkf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8ABEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_679b140d753d463fa5f7410c49b12ae5.lnk
Category:	dropped
Dump:	MFDBG_679b140d753d463fa5f7410c49b12ae5.lnk.7.dr
ID:	dr_1021
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:18 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.927661657506848
Encrypted:	false
Ssdeep:	24:8jBfa8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8lvEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_679da50a292449628d7cd03cf9bd3609.lnk
Category:	dropped
Dump:	MFDBG_679da50a292449628d7cd03cf9bd3609.lnk.7.dr
ID:	dr_1051
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:01 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.926313586035075
Encrypted:	false
Ssdeep:	24:8yBfrp8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8gyEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_67bc3ee56a074e4d8ce4a1bc0a653d8f.lnk
Category:	dropped
Dump:	MFDBG_67bc3ee56a074e4d8ce4a1bc0a653d8f.lnk.7.dr
ID:	dr_360
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:00 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923653189551679
Encrypted:	false
Ssdeep:	24:8tQBfo8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8teFEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_67e60396547d4079aafe6badebce7f06.lnk
Category:	dropped
Dump:	MFDBG_67e60396547d4079aafe6badebce7f06.lnk.7.dr
ID:	dr_394
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:11 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.925881669739327
Encrypted:	false
Ssdeep:	24:8aBfR8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8Y+EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_68bca215bc054f63830ea727f720feb9.lnk
Category:	dropped
Dump:	MFDBG_68bca215bc054f63830ea727f720feb9.lnk.7.dr
ID:	dr_724
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:43 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.930502914230813
Encrypted:	false
Ssdeep:	24:87Bfh8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8tOEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_68f8c22aaee34af38393ba46e9768cd0.lnk
Category:	dropped
Dump:	MFDBG_68f8c22aaee34af38393ba46e9768cd0.lnk.7.dr
ID:	dr_900
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:56 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.916544959941016
Encrypted:	false
Ssdeep:	24:852Bfc8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8qREvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_68fea3d63f5242439fa57f355898ecec.lnk
Category:	dropped
Dump:	MFDBG_68fea3d63f5242439fa57f355898ecec.lnk.7.dr
ID:	dr_862
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:03 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.913492077137026
Encrypted:	false
Ssdeep:	24:8gBff8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8ucEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_69c248046b8a40aa8d4c793a7b400958.lnk
Category:	dropped
Dump:	MFDBG_69c248046b8a40aa8d4c793a7b400958.lnk.7.dr
ID:	dr_756
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:43 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.917181843324414
Encrypted:	false
Ssdeep:	24:8PBfZf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8ZREEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_69cebec86d8043fe9184513c40fbbdf8.lnk
Category:	dropped
Dump:	MFDBG_69cebec86d8043fe9184513c40fbbdf8.lnk.7.dr
ID:	dr_838
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:54 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.91750301334785
Encrypted:	false
Ssdeep:	24:8KBfMMQ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8IUEEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_69d33ceb2f08449ba185957139ff0b71.lnk
Category:	dropped
Dump:	MFDBG_69d33ceb2f08449ba185957139ff0b71.lnk.7.dr
ID:	dr_734
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:51 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.926955926081947
Encrypted:	false
Ssdeep:	24:8mTBf8+8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8CETEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_69da4bdb24e54987959ce6874a5e3926.lnk
Category:	dropped
Dump:	MFDBG_69da4bdb24e54987959ce6874a5e3926.lnk.7.dr
ID:	dr_596
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:30 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.917159084250438
Encrypted:	false
Ssdeep:	24:8VJBfU98EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8J5EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_69fc8cf410144fb2a36262a25fbcaad0.lnk
Category:	dropped
Dump:	MFDBG_69fc8cf410144fb2a36262a25fbcaad0.lnk.7.dr
ID:	dr_887
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:56 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.930912071452584
Encrypted:	false
Ssdeep:	24:8bBfh48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8N59EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_6ab8f828c78a43ef9a67ab2e2e658d78.lnk
Category:	dropped
Dump:	MFDBG_6ab8f828c78a43ef9a67ab2e2e658d78.lnk.7.dr
ID:	dr_303
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:50 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.92377562610447
Encrypted:	false
Ssdeep:	24:8XBfp8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8x2EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_6acd36fce39f42b48c04491511b0f9cf.lnk
Category:	dropped
Dump:	MFDBG_6acd36fce39f42b48c04491511b0f9cf.lnk.7.dr
ID:	dr_645
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:46 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.918569249994543
Encrypted:	false
Ssdeep:	24:86BfZ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:84WEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_6afd23ddb9ec4076ae527f891f3fcebf.lnk
Category:	dropped
Dump:	MFDBG_6afd23ddb9ec4076ae527f891f3fcebf.lnk.7.dr
ID:	dr_244
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:46 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923656860136232
Encrypted:	false
Ssdeep:	24:8XBfZ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8xWEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_6b272fdc85144af495869368ff03d7c4.lnk
Category:	dropped
Dump:	MFDBG_6b272fdc85144af495869368ff03d7c4.lnk.7.dr
ID:	dr_805
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:53 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.913865461043917
Encrypted:	false
Ssdeep:	24:88Bf08EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8y5EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_6b3ba21ee3c44a63ac92142ea9b09592.lnk
Category:	dropped
Dump:	MFDBG_6b3ba21ee3c44a63ac92142ea9b09592.lnk.7.dr
ID:	dr_535
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:29 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920904805869949
Encrypted:	false
Ssdeep:	24:8lBfeQ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8n2FEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_6b8a5cb063d64055b2d3b4b5585506fd.lnk
Category:	dropped
Dump:	MFDBG_6b8a5cb063d64055b2d3b4b5585506fd.lnk.7.dr
ID:	dr_684
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:43 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.927322614253336
Encrypted:	false
Ssdeep:	24:8tBfOD8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8fbEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_6bc227b4bec442d0be4ecfb491c69c1f.lnk
Category:	dropped
Dump:	MFDBG_6bc227b4bec442d0be4ecfb491c69c1f.lnk.7.dr
ID:	dr_279
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:49 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923472329311109
Encrypted:	false
Ssdeep:	24:8dBfiD8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8PaQEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_6beaf90d0c264ae98376a118991ca6ad.lnk
Category:	dropped
Dump:	MFDBG_6beaf90d0c264ae98376a118991ca6ad.lnk.7.dr
ID:	dr_760
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:44 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.925304557816813
Encrypted:	false
Ssdeep:	24:8b42BfDf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8U8bEEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_6c35b3a9e1cc46efa939274e60f86470.lnk
Category:	dropped
Dump:	MFDBG_6c35b3a9e1cc46efa939274e60f86470.lnk.7.dr
ID:	dr_721
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:43 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.925695841808507
Encrypted:	false
Ssdeep:	24:8rBfh8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8dOEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_6c85892c17804b8e94ac47c1953de172.lnk
Category:	dropped
Dump:	MFDBG_6c85892c17804b8e94ac47c1953de172.lnk.7.dr
ID:	dr_441
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:12 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.927964954300208
Encrypted:	false
Ssdeep:	24:8NTBfo+8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8vgTEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_6c88f63d35a64e178ec22a3a96a18031.lnk
Category:	dropped
Dump:	MFDBG_6c88f63d35a64e178ec22a3a96a18031.lnk.7.dr
ID:	dr_342
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:59 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.928754907562094
Encrypted:	false
Ssdeep:	24:8B3BfG8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:83TEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_6ca734028ed64fbd9bbaf3728dcc773a.lnk
Category:	dropped
Dump:	MFDBG_6ca734028ed64fbd9bbaf3728dcc773a.lnk.7.dr
ID:	dr_685
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:43 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.932930127889107
Encrypted:	false
Ssdeep:	24:82BfOD8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:88bEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_6cc733e20d4b4acc8691209820ef34e2.lnk
Category:	dropped
Dump:	MFDBG_6cc733e20d4b4acc8691209820ef34e2.lnk.7.dr
ID:	dr_327
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:58 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.930824084254249
Encrypted:	false
Ssdeep:	24:8dQBfq8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8dePEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_6cc895eb70924c848955a6d0fdfcb55f.lnk
Category:	dropped
Dump:	MFDBG_6cc895eb70924c848955a6d0fdfcb55f.lnk.7.dr
ID:	dr_935
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:04 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.927299855179359
Encrypted:	false
Ssdeep:	24:81BfTf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:83IEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_6d35d3f78b844aeda57d5e1f351b7ccd.lnk
Category:	dropped
Dump:	MFDBG_6d35d3f78b844aeda57d5e1f351b7ccd.lnk.7.dr
ID:	dr_1038
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:19 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.929061969716803
Encrypted:	false
Ssdeep:	24:82Bfh48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:88p9EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_6d6340bdca4c4f0aacf69b49c204f7ab.lnk
Category:	dropped
Dump:	MFDBG_6d6340bdca4c4f0aacf69b49c204f7ab.lnk.7.dr
ID:	dr_817
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:45 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.912519790475865
Encrypted:	false
Ssdeep:	24:8qBf6lf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8o2EEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_6da02a19a8bc40f0af7b043022e0191c.lnk
Category:	dropped
Dump:	MFDBG_6da02a19a8bc40f0af7b043022e0191c.lnk.7.dr
ID:	dr_751
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:43 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.925579907976597
Encrypted:	false
Ssdeep:	24:8KBfn8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8IUEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_6db6193e78e742788bed73485bbe4374.lnk
Category:	dropped
Dump:	MFDBG_6db6193e78e742788bed73485bbe4374.lnk.7.dr
ID:	dr_430
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:11 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923022539785285
Encrypted:	false
Ssdeep:	24:8ksTBfh8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8heEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_6db8aa34a409419cb1df797123e6cc5f.lnk
Category:	dropped
Dump:	MFDBG_6db8aa34a409419cb1df797123e6cc5f.lnk.7.dr
ID:	dr_673
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:47 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920214099888585
Encrypted:	false
Ssdeep:	24:8XBf68EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8xfEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_6e0be7a3bdae4aa5a2102b875eb3dfe2.lnk
Category:	dropped
Dump:	MFDBG_6e0be7a3bdae4aa5a2102b875eb3dfe2.lnk.7.dr
ID:	dr_139
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:44 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9277317714751065
Encrypted:	false
Ssdeep:	24:8UBfLf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:86QEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_6e3b326f686849d3aaa87f9eb5bf5353.lnk
Category:	dropped
Dump:	MFDBG_6e3b326f686849d3aaa87f9eb5bf5353.lnk.7.dr
ID:	dr_576
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:30 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.926792857225103
Encrypted:	false
Ssdeep:	24:8NfQBfs8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8NGhEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_6eb0759fd2f543e3838e6f2895be0782.lnk
Category:	dropped
Dump:	MFDBG_6eb0759fd2f543e3838e6f2895be0782.lnk.7.dr
ID:	dr_396
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:00 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.924365643566811
Encrypted:	false
Ssdeep:	24:8XtuBfs68EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8XtEcEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_6fc910e111a642a9a0f17bb964eab590.lnk
Category:	dropped
Dump:	MFDBG_6fc910e111a642a9a0f17bb964eab590.lnk.7.dr
ID:	dr_76
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:46 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.926057644135996
Encrypted:	false
Ssdeep:	24:81rBfJ48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:81dPEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_6fe3d82c76944de08e96741a28572914.lnk
Category:	dropped
Dump:	MFDBG_6fe3d82c76944de08e96741a28572914.lnk.7.dr
ID:	dr_145
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:44 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.929493886012553
Encrypted:	false
Ssdeep:	24:8HBfLf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8hQEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_6ffecee680d44f3dbb0354407982b0b8.lnk
Category:	dropped
Dump:	MFDBG_6ffecee680d44f3dbb0354407982b0b8.lnk.7.dr
ID:	dr_851
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:51 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923468563949759
Encrypted:	false
Ssdeep:	24:8ABfk8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8OJEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_701fc54d7c224567958a2a6e6cb04b86.lnk
Category:	dropped
Dump:	MFDBG_701fc54d7c224567958a2a6e6cb04b86.lnk.7.dr
ID:	dr_119
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:46 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.918469901067678
Encrypted:	false
Ssdeep:	24:86BfJ48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:84PEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_7038b8cc706948a9b6654a9ead51cec2.lnk
Category:	dropped
Dump:	MFDBG_7038b8cc706948a9b6654a9ead51cec2.lnk.7.dr
ID:	dr_861
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:50 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.918221504868371
Encrypted:	false
Ssdeep:	24:823Bfk8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:82RJEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_704ca02e732642f4845851c027453a27.lnk
Category:	dropped
Dump:	MFDBG_704ca02e732642f4845851c027453a27.lnk.7.dr
ID:	dr_871
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:55 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.924528712423653
Encrypted:	false
Ssdeep:	24:8ArBfi8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8AdHEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_705faf3929974e2780877c7674fb5de5.lnk
Category:	dropped
Dump:	MFDBG_705faf3929974e2780877c7674fb5de5.lnk.7.dr
ID:	dr_443
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:27 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.929727068837652
Encrypted:	false
Ssdeep:	24:8wBfs48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8+09EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_70ad6c76cedc42058728a325eb078129.lnk
Category:	dropped
Dump:	MFDBG_70ad6c76cedc42058728a325eb078129.lnk.7.dr
ID:	dr_582
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:30 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.925811555771069
Encrypted:	false
Ssdeep:	24:88Bfs8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8yhEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_714f318456ee4fb28b7267a110e2bffc.lnk
Category:	dropped
Dump:	MFDBG_714f318456ee4fb28b7267a110e2bffc.lnk.7.dr
ID:	dr_174
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:47 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.919156653757023
Encrypted:	false
Ssdeep:	24:8JrBfmQ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8JdeFEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_71e11022ed01427f85e63a28b7279b2a.lnk
Category:	dropped
Dump:	MFDBG_71e11022ed01427f85e63a28b7279b2a.lnk.7.dr
ID:	dr_439
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:11 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.924528712423653
Encrypted:	false
Ssdeep:	24:81TBfo+8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:83gTEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_7209af5644af4813823ccf72f42388cf.lnk
Category:	dropped
Dump:	MFDBG_7209af5644af4813823ccf72f42388cf.lnk.7.dr
ID:	dr_543
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:14 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9114328484442895
Encrypted:	false
Ssdeep:	24:8VBf6D8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8XyQEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_72ac47fbe72f4a42aa09551c240e8901.lnk
Category:	dropped
Dump:	MFDBG_72ac47fbe72f4a42aa09551c240e8901.lnk.7.dr
ID:	dr_340
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:58 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.927731771475107
Encrypted:	false
Ssdeep:	24:8IBfMS8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8GU/EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_72bddf11b88741a08bd052931fb08fc1.lnk
Category:	dropped
Dump:	MFDBG_72bddf11b88741a08bd052931fb08fc1.lnk.7.dr
ID:	dr_447
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:27 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.928554971762548
Encrypted:	false
Ssdeep:	24:8ABf38EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8OEEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_72c51317af28424b97fdf3fc4c2df4fe.lnk
Category:	dropped
Dump:	MFDBG_72c51317af28424b97fdf3fc4c2df4fe.lnk.7.dr
ID:	dr_909
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:56 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.917539880290551
Encrypted:	false
Ssdeep:	24:8LBfc8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:89REvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_731a632d2ce24ba885663aa873733cb1.lnk
Category:	dropped
Dump:	MFDBG_731a632d2ce24ba885663aa873733cb1.lnk.7.dr
ID:	dr_188
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:47 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.926685730869938
Encrypted:	false
Ssdeep:	24:8SBfT+8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8ALTEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_7331b928e3044dbc8a29926e85c0d175.lnk
Category:	dropped
Dump:	MFDBG_7331b928e3044dbc8a29926e85c0d175.lnk.7.dr
ID:	dr_691
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:43 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.922533415061106
Encrypted:	false
Ssdeep:	24:8FBfEO8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8HuEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_733cf5b30cd64d09b446b08fddac3d25.lnk
Category:	dropped
Dump:	MFDBG_733cf5b30cd64d09b446b08fddac3d25.lnk.7.dr
ID:	dr_339
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:58 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.921243849123463
Encrypted:	false
Ssdeep:	24:86BfVkD8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:84t9EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_739749d2981443eda3e717f5ee3ca804.lnk
Category:	dropped
Dump:	MFDBG_739749d2981443eda3e717f5ee3ca804.lnk.7.dr
ID:	dr_210
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:45 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.91806984153792
Encrypted:	false
Ssdeep:	24:8tBfTf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8foEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_73f6562e1bec40298f564166282e74ad.lnk
Category:	dropped
Dump:	MFDBG_73f6562e1bec40298f564166282e74ad.lnk.7.dr
ID:	dr_284
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:57 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.929727068837652
Encrypted:	false
Ssdeep:	24:8eBfk8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:80JEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_744f5776c1cd4a76b913ccc1eb694b52.lnk
Category:	dropped
Dump:	MFDBG_744f5776c1cd4a76b913ccc1eb694b52.lnk.7.dr
ID:	dr_740
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:51 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.928271586256625
Encrypted:	false
Ssdeep:	24:8EkTBf8+8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8E8ETEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_758ebd1bfa024dbea04cb7f2a17ecc9e.lnk
Category:	dropped
Dump:	MFDBG_758ebd1bfa024dbea04cb7f2a17ecc9e.lnk.7.dr
ID:	dr_764
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:49 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920339384227913
Encrypted:	false
Ssdeep:	24:85aBfY8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:85YVEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_75e402a61dba44b782e9befef36bb5b7.lnk
Category:	dropped
Dump:	MFDBG_75e402a61dba44b782e9befef36bb5b7.lnk.7.dr
ID:	dr_875
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:51 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9254700949293095
Encrypted:	false
Ssdeep:	24:8tBf28EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8fzEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_766d0ac29ec54a0089f374c719c5177a.lnk
Category:	dropped
Dump:	MFDBG_766d0ac29ec54a0089f374c719c5177a.lnk.7.dr
ID:	dr_632
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:42 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.928095108833225
Encrypted:	false
Ssdeep:	24:80Bfo8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8aFEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_7698349428ef4dc780a3e1e7e9b7a5d7.lnk
Category:	dropped
Dump:	MFDBG_7698349428ef4dc780a3e1e7e9b7a5d7.lnk.7.dr
ID:	dr_429
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:02 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923454456081033
Encrypted:	false
Ssdeep:	24:8GBfx+8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8MtEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_77a25129c6d64ccbbfda9413779b332f.lnk
Category:	dropped
Dump:	MFDBG_77a25129c6d64ccbbfda9413779b332f.lnk.7.dr
ID:	dr_1007
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:17 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9211558619251266
Encrypted:	false
Ssdeep:	24:8V6Bfy8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8O3EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_77d818a226d64832bb5b21c3e03002ca.lnk
Category:	dropped
Dump:	MFDBG_77d818a226d64832bb5b21c3e03002ca.lnk.7.dr
ID:	dr_783
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:52 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923900480245505
Encrypted:	false
Ssdeep:	24:8F/qTTBfP8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8tqRsEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_78162a22b2ef4f0689da0a2ba73b1dbd.lnk
Category:	dropped
Dump:	MFDBG_78162a22b2ef4f0689da0a2ba73b1dbd.lnk.7.dr
ID:	dr_372
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:10 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923113015945739
Encrypted:	false
Ssdeep:	24:8qBf68EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8ofEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_786c94951cdf441d9c85dcf28e6f3c76.lnk
Category:	dropped
Dump:	MFDBG_786c94951cdf441d9c85dcf28e6f3c76.lnk.7.dr
ID:	dr_40
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:38 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.928396870595955
Encrypted:	false
Ssdeep:	24:8pBfD8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8T4EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_7888feb0a5fb47bbace9a40e1e8eb633.lnk
Category:	dropped
Dump:	MFDBG_7888feb0a5fb47bbace9a40e1e8eb633.lnk.7.dr
ID:	dr_922
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:04 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.922570282003808
Encrypted:	false
Ssdeep:	24:8nBfMN8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8BUaEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_790afdb9b26a4938a832a6e29bf2fc3b.lnk
Category:	dropped
Dump:	MFDBG_790afdb9b26a4938a832a6e29bf2fc3b.lnk.7.dr
ID:	dr_462
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:12 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920331313864579
Encrypted:	false
Ssdeep:	24:8XBf+p8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8xGOEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_79af07fec4fc4dffb0f71d54ea8bb3a5.lnk
Category:	dropped
Dump:	MFDBG_79af07fec4fc4dffb0f71d54ea8bb3a5.lnk.7.dr
ID:	dr_183
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:44 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.924207542400218
Encrypted:	false
Ssdeep:	24:8fBfLf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8pQEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_79e1e46edc424547965f7e9b0b1629db.lnk
Category:	dropped
Dump:	MFDBG_79e1e46edc424547965f7e9b0b1629db.lnk.7.dr
ID:	dr_35
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:42 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.921555651677866
Encrypted:	false
Ssdeep:	24:8RBfu8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8r7EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_79e3a83024444e6f8b8973db9f96a1a0.lnk
Category:	dropped
Dump:	MFDBG_79e3a83024444e6f8b8973db9f96a1a0.lnk.7.dr
ID:	dr_660
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:42 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.919865742000293
Encrypted:	false
Ssdeep:	24:8qBfo8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8oFEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_7a501abc8da944778feaab3aa8e5f6cd.lnk
Category:	dropped
Dump:	MFDBG_7a501abc8da944778feaab3aa8e5f6cd.lnk.7.dr
ID:	dr_856
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:54 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920595326126993
Encrypted:	false
Ssdeep:	24:88BfAP8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8y9EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_7ac4456d43924e9b8ef6ab24d8065711.lnk
Category:	dropped
Dump:	MFDBG_7ac4456d43924e9b8ef6ab24d8065711.lnk.7.dr
ID:	dr_265
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:57 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.916028821808284
Encrypted:	false
Ssdeep:	24:8KBfF8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8I6EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_7ad61541948b45659733340ad8658fb0.lnk
Category:	dropped
Dump:	MFDBG_7ad61541948b45659733340ad8658fb0.lnk.7.dr
ID:	dr_559
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:29 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.931921099670844
Encrypted:	false
Ssdeep:	24:8dBfT8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8P4EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_7b62e7c66584481cb19702e900bbb857.lnk
Category:	dropped
Dump:	MFDBG_7b62e7c66584481cb19702e900bbb857.lnk.7.dr
ID:	dr_258
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:49 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9184437643441825
Encrypted:	false
Ssdeep:	24:8UGBfY8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8UMFEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_7b74a53932f841aeac139c8bb463a6e2.lnk
Category:	dropped
Dump:	MFDBG_7b74a53932f841aeac139c8bb463a6e2.lnk.7.dr
ID:	dr_62
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:43 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9267086353881195
Encrypted:	false
Ssdeep:	24:84Bf48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:82FEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_7b7609458f544bed953b3e09f89b5036.lnk
Category:	dropped
Dump:	MFDBG_7b7609458f544bed953b3e09f89b5036.lnk.7.dr
ID:	dr_788
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:44 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9228034648289105
Encrypted:	false
Ssdeep:	24:89BfDf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8vbEEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_7b80b4e8974343398eaed2592f5f104d.lnk
Category:	dropped
Dump:	MFDBG_7b80b4e8974343398eaed2592f5f104d.lnk.7.dr
ID:	dr_844
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:55 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.919599203448557
Encrypted:	false
Ssdeep:	24:8gnQBfAP8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:80e9EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_7ba501dde41f43288c995ff49b6bb38a.lnk
Category:	dropped
Dump:	MFDBG_7ba501dde41f43288c995ff49b6bb38a.lnk.7.dr
ID:	dr_304
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:50 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920646446382626
Encrypted:	false
Ssdeep:	24:8XBfp8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8x2EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_7c4adf9c905641a1a4d2f8e61c2266ad.lnk
Category:	dropped
Dump:	MFDBG_7c4adf9c905641a1a4d2f8e61c2266ad.lnk.7.dr
ID:	dr_493
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:28 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.921569759546592
Encrypted:	false
Ssdeep:	24:8sBfR48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8inEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_7c80bbb623d740f9b1e410ce4405f216.lnk
Category:	dropped
Dump:	MFDBG_7c80bbb623d740f9b1e410ce4405f216.lnk.7.dr
ID:	dr_646
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:41 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.925230678487203
Encrypted:	false
Ssdeep:	24:8cBfEX8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8ShEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_7ca3199d46a844849af028e8114382ee.lnk
Category:	dropped
Dump:	MFDBG_7ca3199d46a844849af028e8114382ee.lnk.7.dr
ID:	dr_496
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:28 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.924565579366355
Encrypted:	false
Ssdeep:	24:8YBfR48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8WnEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_7d0b8c8912464810840f1e8c3d78c8b8.lnk
Category:	dropped
Dump:	MFDBG_7d0b8c8912464810840f1e8c3d78c8b8.lnk.7.dr
ID:	dr_313
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:50 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.92827201645492
Encrypted:	false
Ssdeep:	24:8NBfX8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8/EEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_7d0cbaa295094eb4b26108e232b9064e.lnk
Category:	dropped
Dump:	MFDBG_7d0cbaa295094eb4b26108e232b9064e.lnk.7.dr
ID:	dr_121
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:38 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.926734433537326
Encrypted:	false
Ssdeep:	24:85Bfz8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8jIEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_7d2229ec4399460cb48bca3510528559.lnk
Category:	dropped
Dump:	MFDBG_7d2229ec4399460cb48bca3510528559.lnk.7.dr
ID:	dr_465
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:27 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.928496548074769
Encrypted:	false
Ssdeep:	24:8RBfs48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8r09EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_7d567442997040b7a263a333688cfccb.lnk
Category:	dropped
Dump:	MFDBG_7d567442997040b7a263a333688cfccb.lnk.7.dr
ID:	dr_913
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:56 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.913229952288352
Encrypted:	false
Ssdeep:	24:8hBfc8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:87REvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_7d5defc5c3aa4fd4b37720cdc365337b.lnk
Category:	dropped
Dump:	MFDBG_7d5defc5c3aa4fd4b37720cdc365337b.lnk.7.dr
ID:	dr_545
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:14 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.92897398251847
Encrypted:	false
Ssdeep:	24:8HBfs8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8hBEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_7e28c9c165e74099abc02004beea9134.lnk
Category:	dropped
Dump:	MFDBG_7e28c9c165e74099abc02004beea9134.lnk.7.dr
ID:	dr_170
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:47 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.915456450285464
Encrypted:	false
Ssdeep:	24:8EBfmQ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8qeFEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_7ebb0bbdfa914378abcafc175313d763.lnk
Category:	dropped
Dump:	MFDBG_7ebb0bbdfa914378abcafc175313d763.lnk.7.dr
ID:	dr_750
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:43 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.922143666100042
Encrypted:	false
Ssdeep:	24:8T3Bfn8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8tUEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_7ee462d1dbb040b0bf5d46799f4f8f41.lnk
Category:	dropped
Dump:	MFDBG_7ee462d1dbb040b0bf5d46799f4f8f41.lnk.7.dr
ID:	dr_527
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:14 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.922013511567024
Encrypted:	false
Ssdeep:	24:8qBf6D8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8oyQEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_7f13efdf0dcc4b7ebbcafc674cd972dd.lnk
Category:	dropped
Dump:	MFDBG_7f13efdf0dcc4b7ebbcafc674cd972dd.lnk.7.dr
ID:	dr_711
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:47 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9258816697393275
Encrypted:	false
Ssdeep:	24:8NO3BfE8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8NORpEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_7f4a9ebf19644895940839479233d53e.lnk
Category:	dropped
Dump:	MFDBG_7f4a9ebf19644895940839479233d53e.lnk.7.dr
ID:	dr_144
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:47 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.91599067846635
Encrypted:	false
Ssdeep:	24:8aBfT+8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8YLTEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_7f667397dce04c79be453e8d40e50b43.lnk
Category:	dropped
Dump:	MFDBG_7f667397dce04c79be453e8d40e50b43.lnk.7.dr
ID:	dr_501
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:13 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9276616575068495
Encrypted:	false
Ssdeep:	24:81BfK8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:83/EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_7f6f76a058254ed588ba83e9250c331f.lnk
Category:	dropped
Dump:	MFDBG_7f6f76a058254ed588ba83e9250c331f.lnk.7.dr
ID:	dr_147
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:44 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.922789356960184
Encrypted:	false
Ssdeep:	24:8A3Bfyf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8IjEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_7f9a7889a42e4ca09ee5745af55a9ce6.lnk
Category:	dropped
Dump:	MFDBG_7f9a7889a42e4ca09ee5745af55a9ce6.lnk.7.dr
ID:	dr_912
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:56 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.918614136633172
Encrypted:	false
Ssdeep:	24:82Bfc8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:88REvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_7fc60fd27eb74aadb3e4a8d82022c13a.lnk
Category:	dropped
Dump:	MFDBG_7fc60fd27eb74aadb3e4a8d82022c13a.lnk.7.dr
ID:	dr_451
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:03 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.918221650312578
Encrypted:	false
Ssdeep:	24:8/Bff8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8JcEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_7fe6034bf64b40599010fd8a71a4097a.lnk
Category:	dropped
Dump:	MFDBG_7fe6034bf64b40599010fd8a71a4097a.lnk.7.dr
ID:	dr_96
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:39 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.921135571106803
Encrypted:	false
Ssdeep:	24:8ABfz8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8OYEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_801e900601214cb5b115d90657521ce8.lnk
Category:	dropped
Dump:	MFDBG_801e900601214cb5b115d90657521ce8.lnk.7.dr
ID:	dr_974
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:15 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9158288860087405
Encrypted:	false
Ssdeep:	24:89Bfa8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8vPEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_8024aa45c78442ea9ec1eec59bcc87f3.lnk
Category:	dropped
Dump:	MFDBG_8024aa45c78442ea9ec1eec59bcc87f3.lnk.7.dr
ID:	dr_682
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:43 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.927643784276772
Encrypted:	false
Ssdeep:	24:8hBfOD8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:87bEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_80256ad3cc9e4284878abfe4a1f47963.lnk
Category:	dropped
Dump:	MFDBG_80256ad3cc9e4284878abfe4a1f47963.lnk.7.dr
ID:	dr_976
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:15 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.925695841808507
Encrypted:	false
Ssdeep:	24:8ZBfa8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8DPEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_802b6156de3f439c813ea4bf7dffba92.lnk
Category:	dropped
Dump:	MFDBG_802b6156de3f439c813ea4bf7dffba92.lnk.7.dr
ID:	dr_81
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:43 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.931489183375097
Encrypted:	false
Ssdeep:	24:88Bfs8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8yREvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_805cd967a1e0458690a6d85264259d2d.lnk
Category:	dropped
Dump:	MFDBG_805cd967a1e0458690a6d85264259d2d.lnk.7.dr
ID:	dr_1054
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:01 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9232594879717375
Encrypted:	false
Ssdeep:	24:8Vr2Bfrp8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8Vr8yEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_80b420a76f29430b846d83399fe78855.lnk
Category:	dropped
Dump:	MFDBG_80b420a76f29430b846d83399fe78855.lnk.7.dr
ID:	dr_1040
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:19 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.929061969716803
Encrypted:	false
Ssdeep:	24:8KBfh48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8Ip9EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_80ee0f8576b24cacad7909e092fb0114.lnk
Category:	dropped
Dump:	MFDBG_80ee0f8576b24cacad7909e092fb0114.lnk.7.dr
ID:	dr_968
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:15 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.919009185986217
Encrypted:	false
Ssdeep:	24:8Z2Bfa8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8KPEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_811e9dbcd47c441ba1fae3f3ae188f46.lnk
Category:	dropped
Dump:	MFDBG_811e9dbcd47c441ba1fae3f3ae188f46.lnk.7.dr
ID:	dr_228
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:45 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.902437472790736
Encrypted:	false
Ssdeep:	24:8/Bf38EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8JEEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_81809ab3c09b41e088a498928841e68a.lnk
Category:	dropped
Dump:	MFDBG_81809ab3c09b41e088a498928841e68a.lnk.7.dr
ID:	dr_928
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:03 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.925392545015147
Encrypted:	false
Ssdeep:	24:85BfMN8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8jUaEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_818558ce3f0c4258b79e7b320de83643.lnk
Category:	dropped
Dump:	MFDBG_818558ce3f0c4258b79e7b320de83643.lnk.7.dr
ID:	dr_633
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:46 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.919700714765595
Encrypted:	false
Ssdeep:	24:8FBfZ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8HWEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_819057e8a2e1461a89ae5c8ebdd55e98.lnk
Category:	dropped
Dump:	MFDBG_819057e8a2e1461a89ae5c8ebdd55e98.lnk.7.dr
ID:	dr_918
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:03 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.92082335400432
Encrypted:	false
Ssdeep:	24:8tx2Bf048EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8g89EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_8211aff5c1634044a9b9555327b4c49e.lnk
Category:	dropped
Dump:	MFDBG_8211aff5c1634044a9b9555327b4c49e.lnk.7.dr
ID:	dr_542
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:14 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.921692341543588
Encrypted:	false
Ssdeep:	24:8SBf6D8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8AyQEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_822c1760a95148578fdb63fea6a7fed7.lnk
Category:	dropped
Dump:	MFDBG_822c1760a95148578fdb63fea6a7fed7.lnk.7.dr
ID:	dr_356
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:58 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.930824084254248
Encrypted:	false
Ssdeep:	24:8pcBf+8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8pS7EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_8278637c33a04408be6a23abc83bec77.lnk
Category:	dropped
Dump:	MFDBG_8278637c33a04408be6a23abc83bec77.lnk.7.dr
ID:	dr_722
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:51 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.927657892145497
Encrypted:	false
Ssdeep:	24:85Bf8+8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8jETEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_828f65652b444fc88acbb7f98b1e264f.lnk
Category:	dropped
Dump:	MFDBG_828f65652b444fc88acbb7f98b1e264f.lnk.7.dr
ID:	dr_803
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:53 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.913865620412403
Encrypted:	false
Ssdeep:	24:8mBf08EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8s5EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_8342df1c9191411bb0a13e59bd1c6ff0.lnk
Category:	dropped
Dump:	MFDBG_8342df1c9191411bb0a13e59bd1c6ff0.lnk.7.dr
ID:	dr_841
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:51 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9324613446506556
Encrypted:	false
Ssdeep:	24:8h0Bf28EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8czEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_8387ba5387964ca0946eca8a9f203a04.lnk
Category:	dropped
Dump:	MFDBG_8387ba5387964ca0946eca8a9f203a04.lnk.7.dr
ID:	dr_421
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:02 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920018214204478
Encrypted:	false
Ssdeep:	24:82BfZ48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:88R9EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_83f9259edeb24126b3478ed7d0b7429b.lnk
Category:	dropped
Dump:	MFDBG_83f9259edeb24126b3478ed7d0b7429b.lnk.7.dr
ID:	dr_337
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:58 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920939255224405
Encrypted:	false
Ssdeep:	24:8rkrBfVkD8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8r8t9EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_84237ee2fb2842e6a61600f6b4ccb230.lnk
Category:	dropped
Dump:	MFDBG_84237ee2fb2842e6a61600f6b4ccb230.lnk.7.dr
ID:	dr_661
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:42 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.930912071452584
Encrypted:	false
Ssdeep:	24:8UBfo8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:86FEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_8482ad9507004c00a1b3cf7de31ac34b.lnk
Category:	dropped
Dump:	MFDBG_8482ad9507004c00a1b3cf7de31ac34b.lnk.7.dr
ID:	dr_849
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:51 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.930824084254249
Encrypted:	false
Ssdeep:	24:8V5BfH8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8JkEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_84a2ce79ed914cd496daba01a1f31c76.lnk
Category:	dropped
Dump:	MFDBG_84a2ce79ed914cd496daba01a1f31c76.lnk.7.dr
ID:	dr_302
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:57 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9225561741350825
Encrypted:	false
Ssdeep:	24:8tBfk8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8fJEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_8511d254a8ea48a5910f83a4aef12df8.lnk
Category:	dropped
Dump:	MFDBG_8511d254a8ea48a5910f83a4aef12df8.lnk.7.dr
ID:	dr_124
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:39 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.921013134554013
Encrypted:	false
Ssdeep:	24:8PBfz8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8ZYEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_854ed7fc79044798b88427e00eefc23b.lnk
Category:	dropped
Dump:	MFDBG_854ed7fc79044798b88427e00eefc23b.lnk.7.dr
ID:	dr_702
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:51 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.926257579935542
Encrypted:	false
Ssdeep:	24:8FrBfbl8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8Fd+EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_85625fa7c5fe4446bfb7304c9ef7496b.lnk
Category:	dropped
Dump:	MFDBG_85625fa7c5fe4446bfb7304c9ef7496b.lnk.7.dr
ID:	dr_424
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:03 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.916912995885509
Encrypted:	false
Ssdeep:	24:8FFc3BfpcH8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:88DEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_857942c03233486eb336bbde01b804a0.lnk
Category:	dropped
Dump:	MFDBG_857942c03233486eb336bbde01b804a0.lnk.7.dr
ID:	dr_322
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:57 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.921710214773664
Encrypted:	false
Ssdeep:	24:8cBfv8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8ScEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_85a36c8bdef5477b873b23d9542942e5.lnk
Category:	dropped
Dump:	MFDBG_85a36c8bdef5477b873b23d9542942e5.lnk.7.dr
ID:	dr_631
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:46 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.921982732797122
Encrypted:	false
Ssdeep:	24:8yerBfZ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8yeWEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_85c79073cf6a47318eb70b0113ff2cfa.lnk
Category:	dropped
Dump:	MFDBG_85c79073cf6a47318eb70b0113ff2cfa.lnk.7.dr
ID:	dr_227
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:48 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920216947675124
Encrypted:	false
Ssdeep:	24:86BfRo8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:84jEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_85d88418c33a4c349c180bcf8d9eaa82.lnk
Category:	dropped
Dump:	MFDBG_85d88418c33a4c349c180bcf8d9eaa82.lnk.7.dr
ID:	dr_1033
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:19 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.931256000549997
Encrypted:	false
Ssdeep:	24:8fBfWQ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8peFEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_85d8a5f504824763b0a0c3b6cc4d10fb.lnk
Category:	dropped
Dump:	MFDBG_85d8a5f504824763b0a0c3b6cc4d10fb.lnk.7.dr
ID:	dr_82
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:43 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.927916251632821
Encrypted:	false
Ssdeep:	24:8rmBfs8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8rsREvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_8610d59bf19a4ad1b409b10bcd56ea04.lnk
Category:	dropped
Dump:	MFDBG_8610d59bf19a4ad1b409b10bcd56ea04.lnk.7.dr
ID:	dr_232
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:45 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.905780732923979
Encrypted:	false
Ssdeep:	24:8MBf38EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8CEEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_864054897ebc4bf3b7c28f38904093f5.lnk
Category:	dropped
Dump:	MFDBG_864054897ebc4bf3b7c28f38904093f5.lnk.7.dr
ID:	dr_715
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:43 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.925969656937661
Encrypted:	false
Ssdeep:	24:87Bfh8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8tOEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_865135d18ade4c5782a11979da501487.lnk
Category:	dropped
Dump:	MFDBG_865135d18ade4c5782a11979da501487.lnk.7.dr
ID:	dr_584
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:30 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.924014991879168
Encrypted:	false
Ssdeep:	24:8BBfs8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8bhEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_8662b6207de64a5680650bd8ab121343.lnk
Category:	dropped
Dump:	MFDBG_8662b6207de64a5680650bd8ab121343.lnk.7.dr
ID:	dr_43
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:38 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.927831448953921
Encrypted:	false
Ssdeep:	24:82BfD8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:884EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_867e92862dd64ed08f01fa7de16ad71d.lnk
Category:	dropped
Dump:	MFDBG_867e92862dd64ed08f01fa7de16ad71d.lnk.7.dr
ID:	dr_211
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:48 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.919946607018908
Encrypted:	false
Ssdeep:	24:8uBfmQ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8EeFEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_86ab77220d7e4e97967a9fe41b2db936.lnk
Category:	dropped
Dump:	MFDBG_86ab77220d7e4e97967a9fe41b2db936.lnk.7.dr
ID:	dr_980
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:15 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.922171612733617
Encrypted:	false
Ssdeep:	24:8GBfa8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8MPEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_86d0893456744bf982098b36a8077d63.lnk
Category:	dropped
Dump:	MFDBG_86d0893456744bf982098b36a8077d63.lnk.7.dr
ID:	dr_719
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:43 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.932930127889106
Encrypted:	false
Ssdeep:	24:8YBfh8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8WOEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_875aae413ed74f949fcd0177ffabf4ee.lnk
Category:	dropped
Dump:	MFDBG_875aae413ed74f949fcd0177ffabf4ee.lnk.7.dr
ID:	dr_357
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:59 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923149811514568
Encrypted:	false
Ssdeep:	24:8eQBfJ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8rWEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_877a0124f4554c248284520cf620826a.lnk
Category:	dropped
Dump:	MFDBG_877a0124f4554c248284520cf620826a.lnk.7.dr
ID:	dr_941
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:14 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.930070997935065
Encrypted:	false
Ssdeep:	24:8XrBfs8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8XdBEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_87cbd991504e4858b5e2a86cb81626a5.lnk
Category:	dropped
Dump:	MFDBG_87cbd991504e4858b5e2a86cb81626a5.lnk.7.dr
ID:	dr_518
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:29 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.916084827907817
Encrypted:	false
Ssdeep:	24:8IuBfeQ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8IE2FEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_87da777e0c084e298b02598b0ede0eac.lnk
Category:	dropped
Dump:	MFDBG_87da777e0c084e298b02598b0ede0eac.lnk.7.dr
ID:	dr_83
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:43 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.932586198791694
Encrypted:	false
Ssdeep:	24:85rBfs8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:85dREvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_87e99d43bde5442eaf96c587a99faff0.lnk
Category:	dropped
Dump:	MFDBG_87e99d43bde5442eaf96c587a99faff0.lnk.7.dr
ID:	dr_104
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:44 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9203369666396695
Encrypted:	false
Ssdeep:	24:8kBfwof8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8KWEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_88df42c37a664ea7b7905b36b21a3c9d.lnk
Category:	dropped
Dump:	MFDBG_88df42c37a664ea7b7905b36b21a3c9d.lnk.7.dr
ID:	dr_484
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:28 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920773718111908
Encrypted:	false
Ssdeep:	24:891BfR48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8NnEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_88f927ea29174e9689721d2e0671cd23.lnk
Category:	dropped
Dump:	MFDBG_88f927ea29174e9689721d2e0671cd23.lnk.7.dr
ID:	dr_604
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:40 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.925108241934413
Encrypted:	false
Ssdeep:	24:8gBfX48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8uP9EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_88fe530d94d34ed893d8da1b577a9ee1.lnk
Category:	dropped
Dump:	MFDBG_88fe530d94d34ed893d8da1b577a9ee1.lnk.7.dr
ID:	dr_411
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:11 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.922226352906396
Encrypted:	false
Ssdeep:	24:83TBfh8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8FeEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_890aa0db4c374b0c866077b741c5c803.lnk
Category:	dropped
Dump:	MFDBG_890aa0db4c374b0c866077b741c5c803.lnk.7.dr
ID:	dr_536
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:29 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.921657892189133
Encrypted:	false
Ssdeep:	24:8KBfeQ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8I2FEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_8980602fa2094ebd9d28c1d21867a2cb.lnk
Category:	dropped
Dump:	MFDBG_8980602fa2094ebd9d28c1d21867a2cb.lnk.7.dr
ID:	dr_924
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:04 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920595326126993
Encrypted:	false
Ssdeep:	24:8EBf8f8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8qZEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_8980d97b7a9c4eb0959e4d0e0bb811ba.lnk
Category:	dropped
Dump:	MFDBG_8980d97b7a9c4eb0959e4d0e0bb811ba.lnk.7.dr
ID:	dr_946
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:04 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920916496150429
Encrypted:	false
Ssdeep:	24:8iBf8f8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8QZEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_8a02a70a6c124ac88b42d831ae4dc9f1.lnk
Category:	dropped
Dump:	MFDBG_8a02a70a6c124ac88b42d831ae4dc9f1.lnk.7.dr
ID:	dr_866
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:55 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9280898084412454
Encrypted:	false
Ssdeep:	24:8ZkrBfh48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8ad59EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_8a9419ab54bd4b98bad12f296751f3cc.lnk
Category:	dropped
Dump:	MFDBG_8a9419ab54bd4b98bad12f296751f3cc.lnk.7.dr
ID:	dr_639
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:41 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.92458076590431
Encrypted:	false
Ssdeep:	24:88BfEX8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8yhEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_8ab098bddd434deab6fd5ac5741f150e.lnk
Category:	dropped
Dump:	MFDBG_8ab098bddd434deab6fd5ac5741f150e.lnk.7.dr
ID:	dr_625
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:41 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.916782240829199
Encrypted:	false
Ssdeep:	24:8HBf/8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8h8EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_8b14580080fa46b6b8667f24d42ade63.lnk
Category:	dropped
Dump:	MFDBG_8b14580080fa46b6b8667f24d42ade63.lnk.7.dr
ID:	dr_593
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:30 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.912179802792813
Encrypted:	false
Ssdeep:	24:8FBfU98EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8H5EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_8b7e77a76bc548ca9feabeb5bb7531ca.lnk
Category:	dropped
Dump:	MFDBG_8b7e77a76bc548ca9feabeb5bb7531ca.lnk.7.dr
ID:	dr_738
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:51 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.930824084254248
Encrypted:	false
Ssdeep:	24:8laTBf8+8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8QETEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_8ba78f0f2cac4c5aa5d40ae1adba3097.lnk
Category:	dropped
Dump:	MFDBG_8ba78f0f2cac4c5aa5d40ae1adba3097.lnk.7.dr
ID:	dr_158
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:39 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.92575681559829
Encrypted:	false
Ssdeep:	24:8jBfz8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8lYEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_8bf035199f8a455db5a9455381b9578e.lnk
Category:	dropped
Dump:	MFDBG_8bf035199f8a455db5a9455381b9578e.lnk.7.dr
ID:	dr_889
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:56 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.930912071452584
Encrypted:	false
Ssdeep:	24:8pBfh48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8T59EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_8c886f3f5a66417db83f6353b6e44a11.lnk
Category:	dropped
Dump:	MFDBG_8c886f3f5a66417db83f6353b6e44a11.lnk.7.dr
ID:	dr_495
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:28 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.925895777608052
Encrypted:	false
Ssdeep:	24:8vrBfR48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8vdnEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_8c91e6e7b7e34d52bb637fd85b2dfb2d.lnk
Category:	dropped
Dump:	MFDBG_8c91e6e7b7e34d52bb637fd85b2dfb2d.lnk.7.dr
ID:	dr_686
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:43 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.924616699621987
Encrypted:	false
Ssdeep:	24:8xPrBfEO8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8RduEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_8cd43e51b73941fda670a4dec150545f.lnk
Category:	dropped
Dump:	MFDBG_8cd43e51b73941fda670a4dec150545f.lnk.7.dr
ID:	dr_860
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:54 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.916654367294311
Encrypted:	false
Ssdeep:	24:8cBf48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8SlEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_8cd9a63d4f954de487775fe89542721c.lnk
Category:	dropped
Dump:	MFDBG_8cd9a63d4f954de487775fe89542721c.lnk.7.dr
ID:	dr_80
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:43 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.917919582702844
Encrypted:	false
Ssdeep:	24:82Bfkf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:88BEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_8d739e7c5f4d4cf09b62719331c6de57.lnk
Category:	dropped
Dump:	MFDBG_8d739e7c5f4d4cf09b62719331c6de57.lnk.7.dr
ID:	dr_829
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:54 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.919837084860033
Encrypted:	false
Ssdeep:	24:8PBf48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8ZlEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_8dbccecac0344f9b8a6b4793f876c031.lnk
Category:	dropped
Dump:	MFDBG_8dbccecac0344f9b8a6b4793f876c031.lnk.7.dr
ID:	dr_938
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:04 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.919493155762621
Encrypted:	false
Ssdeep:	24:82BfTf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:88IEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_8ddfcca9825d4ae4b04378da42c71757.lnk
Category:	dropped
Dump:	MFDBG_8ddfcca9825d4ae4b04378da42c71757.lnk.7.dr
ID:	dr_481
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:13 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9194269944132385
Encrypted:	false
Ssdeep:	24:8QBfD8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8eoEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_8df6d2a03264460c8271eb55dd52360c.lnk
Category:	dropped
Dump:	MFDBG_8df6d2a03264460c8271eb55dd52360c.lnk.7.dr
ID:	dr_221
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:48 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.918662839300559
Encrypted:	false
Ssdeep:	24:80pQBfY8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8jFEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_8f307e844fae488fb17774c67bc6cddb.lnk
Category:	dropped
Dump:	MFDBG_8f307e844fae488fb17774c67bc6cddb.lnk.7.dr
ID:	dr_408
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:11 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.930824084254249
Encrypted:	false
Ssdeep:	24:8RTBfR8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8z+EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_8fc40287b1494e3fb1bc4cccf7729a08.lnk
Category:	dropped
Dump:	MFDBG_8fc40287b1494e3fb1bc4cccf7729a08.lnk.7.dr
ID:	dr_526
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:29 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920560876772536
Encrypted:	false
Ssdeep:	24:8akrBfeQ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8akd2FEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_903026c153da4f3786d827bedbc5b081.lnk
Category:	dropped
Dump:	MFDBG_903026c153da4f3786d827bedbc5b081.lnk.7.dr
ID:	dr_129
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:39 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.927643784276771
Encrypted:	false
Ssdeep:	24:8dBfJ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8PGEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_90704eec61fd46579887b548a9eed8d8.lnk
Category:	dropped
Dump:	MFDBG_90704eec61fd46579887b548a9eed8d8.lnk.7.dr
ID:	dr_949
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:15 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923933727271063
Encrypted:	false
Ssdeep:	24:8XQBfa8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8XePEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_9099c16e1382467c811a672fc770752a.lnk
Category:	dropped
Dump:	MFDBG_9099c16e1382467c811a672fc770752a.lnk.7.dr
ID:	dr_101
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:44 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.922772831503212
Encrypted:	false
Ssdeep:	24:8HBfwof8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8hWEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_90f3b95b8fb14cb4b5882761f0651ca2.lnk
Category:	dropped
Dump:	MFDBG_90f3b95b8fb14cb4b5882761f0651ca2.lnk.7.dr
ID:	dr_420
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:02 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.919626930212783
Encrypted:	false
Ssdeep:	24:8IBfZ48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8GR9EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_913721615ea7489a86bac28b3be77485.lnk
Category:	dropped
Dump:	MFDBG_913721615ea7489a86bac28b3be77485.lnk.7.dr
ID:	dr_754
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:43 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.934348313329138
Encrypted:	false
Ssdeep:	24:82Bf48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:881EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_914ebca86136446b829e2c04269d821e.lnk
Category:	dropped
Dump:	MFDBG_914ebca86136446b829e2c04269d821e.lnk.7.dr
ID:	dr_126
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:39 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9218886574259875
Encrypted:	false
Ssdeep:	24:8gBfz8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8uYEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_918c59f001604a4695e37675d81cafdd.lnk
Category:	dropped
Dump:	MFDBG_918c59f001604a4695e37675d81cafdd.lnk.7.dr
ID:	dr_136
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:47 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923249488993383
Encrypted:	false
Ssdeep:	24:8VBfT+8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8XLTEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_91c2e9a5b2ee41e8a15822e292b30b11.lnk
Category:	dropped
Dump:	MFDBG_91c2e9a5b2ee41e8a15822e292b30b11.lnk.7.dr
ID:	dr_204
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:45 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.916287231963016
Encrypted:	false
Ssdeep:	24:8FBfMYH8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8HUJEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_924ff549fd444705b16594fd9c2fd671.lnk
Category:	dropped
Dump:	MFDBG_924ff549fd444705b16594fd9c2fd671.lnk.7.dr
ID:	dr_994
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:16 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.925071374991711
Encrypted:	false
Ssdeep:	24:8o2Bfm8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8o8zEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_92d833c601104240a53ae7eeafa9c2c3.lnk
Category:	dropped
Dump:	MFDBG_92d833c601104240a53ae7eeafa9c2c3.lnk.7.dr
ID:	dr_223
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:48 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.915715562779696
Encrypted:	false
Ssdeep:	24:84BfY8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:82FEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_92df9103c8114040941a49fbe28a743d.lnk
Category:	dropped
Dump:	MFDBG_92df9103c8114040941a49fbe28a743d.lnk.7.dr
ID:	dr_1008
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:17 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.916669959526259
Encrypted:	false
Ssdeep:	24:8OBfy8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8k3EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_92e9a304dade4d8db130090b4a58c65e.lnk
Category:	dropped
Dump:	MFDBG_92e9a304dade4d8db130090b4a58c65e.lnk.7.dr
ID:	dr_611
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:41 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.922408130721776
Encrypted:	false
Ssdeep:	24:89BfD8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8v4EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_92f819e0e41645fa827f71e4fc087fd2.lnk
Category:	dropped
Dump:	MFDBG_92f819e0e41645fa827f71e4fc087fd2.lnk.7.dr
ID:	dr_133
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:39 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.927643784276771
Encrypted:	false
Ssdeep:	24:83uBfJ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:80GEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_936153583a574e12ae5ce301d546ecb7.lnk
Category:	dropped
Dump:	MFDBG_936153583a574e12ae5ce301d546ecb7.lnk.7.dr
ID:	dr_410
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:11 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.922973837117899
Encrypted:	false
Ssdeep:	24:8wiTBfR8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8we+EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_9378c94c8c8d442c912fced6d334da34.lnk
Category:	dropped
Dump:	MFDBG_9378c94c8c8d442c912fced6d334da34.lnk.7.dr
ID:	dr_920
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:03 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923542443279369
Encrypted:	false
Ssdeep:	24:8zQBfk8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8KJEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_9386b2ef7ae34f59b330be2dfe6320c2.lnk
Category:	dropped
Dump:	MFDBG_9386b2ef7ae34f59b330be2dfe6320c2.lnk.7.dr
ID:	dr_236
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:45 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.914427276693088
Encrypted:	false
Ssdeep:	24:8nBfMYH8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8BUJEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_93a234a50f2b4992afefdc51f1dafe2b.lnk
Category:	dropped
Dump:	MFDBG_93a234a50f2b4992afefdc51f1dafe2b.lnk.7.dr
ID:	dr_64
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:38 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9268679388836105
Encrypted:	false
Ssdeep:	24:8bBfs8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8NREvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_93b8fd431a5d4e859912e7c63137d9ce.lnk
Category:	dropped
Dump:	MFDBG_93b8fd431a5d4e859912e7c63137d9ce.lnk.7.dr
ID:	dr_761
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:44 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.921027242422741
Encrypted:	false
Ssdeep:	24:8kBfff8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8KXEEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_93dd48f987304aed829ed7824b3b9c92.lnk
Category:	dropped
Dump:	MFDBG_93dd48f987304aed829ed7824b3b9c92.lnk.7.dr
ID:	dr_883
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:56 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.932930127889106
Encrypted:	false
Ssdeep:	24:8jBfh48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8l59EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_94df0ea4feca4c7e81f1cfb00c0b5c40.lnk
Category:	dropped
Dump:	MFDBG_94df0ea4feca4c7e81f1cfb00c0b5c40.lnk.7.dr
ID:	dr_262
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:45 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.905993574263351
Encrypted:	false
Ssdeep:	24:8NBf38EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8/EEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_9513faac7fa0427080ffacbde853dc94.lnk
Category:	dropped
Dump:	MFDBG_9513faac7fa0427080ffacbde853dc94.lnk.7.dr
ID:	dr_767
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:52 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.922226352906395
Encrypted:	false
Ssdeep:	24:86kTBfP8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:81sEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_95292569d4bd4025ac94913371a85398.lnk
Category:	dropped
Dump:	MFDBG_95292569d4bd4025ac94913371a85398.lnk.7.dr
ID:	dr_652
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:46 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920220618259678
Encrypted:	false
Ssdeep:	24:8YBfW8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8WDEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_9555a527a5f84de4962f7e1f290c2414.lnk
Category:	dropped
Dump:	MFDBG_9555a527a5f84de4962f7e1f290c2414.lnk.7.dr
ID:	dr_176
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:44 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.92431587108428
Encrypted:	false
Ssdeep:	24:8JqBfHf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8JocEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_95b30bf7402c482a92a643eb4e70182a.lnk
Category:	dropped
Dump:	MFDBG_95b30bf7402c482a92a643eb4e70182a.lnk.7.dr
ID:	dr_278
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:46 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.91448448512152
Encrypted:	false
Ssdeep:	24:8CBfZ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8wWEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_967a47b279bd416880382004a8d59470.lnk
Category:	dropped
Dump:	MFDBG_967a47b279bd416880382004a8d59470.lnk.7.dr
ID:	dr_634
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:42 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923073660040919
Encrypted:	false
Ssdeep:	24:8EBfo8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8qFEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_96d3c847ef604774a8f61c635565cf2e.lnk
Category:	dropped
Dump:	MFDBG_96d3c847ef604774a8f61c635565cf2e.lnk.7.dr
ID:	dr_551
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:29 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.928496548074769
Encrypted:	false
Ssdeep:	24:8tBfT8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8f4EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_96f1135cc3e9458bac1a7b890b34d5dc.lnk
Category:	dropped
Dump:	MFDBG_96f1135cc3e9458bac1a7b890b34d5dc.lnk.7.dr
ID:	dr_31
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:43 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.92270136976185
Encrypted:	false
Ssdeep:	24:8JBfu8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8z7EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_97233f108f41478796595a3cacd5a432.lnk
Category:	dropped
Dump:	MFDBG_97233f108f41478796595a3cacd5a432.lnk.7.dr
ID:	dr_926
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:04 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.919821969695952
Encrypted:	false
Ssdeep:	24:8B3Bf8f8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8BRZEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_97396e88791749a4924c24a9ff67cc1e.lnk
Category:	dropped
Dump:	MFDBG_97396e88791749a4924c24a9ff67cc1e.lnk.7.dr
ID:	dr_777
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:52 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.922138365708061
Encrypted:	false
Ssdeep:	24:8oaTBfP8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8BsEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_974bd81b2de344a2bd11d71846e3e074.lnk
Category:	dropped
Dump:	MFDBG_974bd81b2de344a2bd11d71846e3e074.lnk.7.dr
ID:	dr_570
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:30 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.927987713374184
Encrypted:	false
Ssdeep:	24:8MBfs8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8ChEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_97500f3796e04a4cbef023a2c0e77c37.lnk
Category:	dropped
Dump:	MFDBG_97500f3796e04a4cbef023a2c0e77c37.lnk.7.dr
ID:	dr_859
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:51 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9188128701038165
Encrypted:	false
Ssdeep:	24:8ABfk8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8OJEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_975786e402bc47b8a3225283f27f244e.lnk
Category:	dropped
Dump:	MFDBG_975786e402bc47b8a3225283f27f244e.lnk.7.dr
ID:	dr_561
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:29 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.927731771475105
Encrypted:	false
Ssdeep:	24:88QBfT8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8x4EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_9780b187326e4bd8b2d8d1104aa89316.lnk
Category:	dropped
Dump:	MFDBG_9780b187326e4bd8b2d8d1104aa89316.lnk.7.dr
ID:	dr_331
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:58 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.91606725639344
Encrypted:	false
Ssdeep:	24:89Bf78EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8vQEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_978804222c774ac2a11833f815415e93.lnk
Category:	dropped
Dump:	MFDBG_978804222c774ac2a11833f815415e93.lnk.7.dr
ID:	dr_393
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:11 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.926202839762763
Encrypted:	false
Ssdeep:	24:8OkrBfR8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8B+EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_978993225f0b44aca57882ea1cc854ca.lnk
Category:	dropped
Dump:	MFDBG_978993225f0b44aca57882ea1cc854ca.lnk.7.dr
ID:	dr_895
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:03 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920497485394507
Encrypted:	false
Ssdeep:	24:8OBfQ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8k9EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_97d77af1279b4a899fef3dd0f63a817e.lnk
Category:	dropped
Dump:	MFDBG_97d77af1279b4a899fef3dd0f63a817e.lnk.7.dr
ID:	dr_99
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:39 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923994701060845
Encrypted:	false
Ssdeep:	24:8jBfz8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8lYEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_9828dc1710c64e339cb7009cab007839.lnk
Category:	dropped
Dump:	MFDBG_9828dc1710c64e339cb7009cab007839.lnk.7.dr
ID:	dr_657
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:46 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.916389327030077
Encrypted:	false
Ssdeep:	24:84QBfW8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:84eDEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_985396190fc648de8d75757c37e28b46.lnk
Category:	dropped
Dump:	MFDBG_985396190fc648de8d75757c37e28b46.lnk.7.dr
ID:	dr_44
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:38 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.932586198791693
Encrypted:	false
Ssdeep:	24:8NBfD8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8/4EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_98815053ecd940d8be7a04ec2942a1c2.lnk
Category:	dropped
Dump:	MFDBG_98815053ecd940d8be7a04ec2942a1c2.lnk.7.dr
ID:	dr_827
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:50 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.917915935930971
Encrypted:	false
Ssdeep:	24:8PrBff48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8PddEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_98a01e04634f49cbb22f5c74b82f0669.lnk
Category:	dropped
Dump:	MFDBG_98a01e04634f49cbb22f5c74b82f0669.lnk.7.dr
ID:	dr_885
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:56 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.936110427866584
Encrypted:	false
Ssdeep:	24:8waBfh48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8b59EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_98e6c726b7bd458c87db2b85195a9436.lnk
Category:	dropped
Dump:	MFDBG_98e6c726b7bd458c87db2b85195a9436.lnk.7.dr
ID:	dr_521
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:14 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.919195013917036
Encrypted:	false
Ssdeep:	24:8KBf6D8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8IyQEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_994cb8b01abd4f199e774b7546cf7f6a.lnk
Category:	dropped
Dump:	MFDBG_994cb8b01abd4f199e774b7546cf7f6a.lnk.7.dr
ID:	dr_1011
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:17 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.924119555201883
Encrypted:	false
Ssdeep:	24:8A2Bfm4p8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8A8+9EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_998d25b952b74ec58255d6b3b8251b50.lnk
Category:	dropped
Dump:	MFDBG_998d25b952b74ec58255d6b3b8251b50.lnk.7.dr
ID:	dr_1003
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:16 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.925392545015148
Encrypted:	false
Ssdeep:	24:8+Bf88EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8UxEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_99b010cfd49548989d1ae05e0606b7f9.lnk
Category:	dropped
Dump:	MFDBG_99b010cfd49548989d1ae05e0606b7f9.lnk.7.dr
ID:	dr_979
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:15 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923933727271062
Encrypted:	false
Ssdeep:	24:8oBfa8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8mPEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_99f9b251a2124e5bb209b322522a7bc6.lnk
Category:	dropped
Dump:	MFDBG_99f9b251a2124e5bb209b322522a7bc6.lnk.7.dr
ID:	dr_591
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:30 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.903552699896237
Encrypted:	false
Ssdeep:	24:8lBfU98EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8n5EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_9aa35b6c8bb4460aae7a2637806588cc.lnk
Category:	dropped
Dump:	MFDBG_9aa35b6c8bb4460aae7a2637806588cc.lnk.7.dr
ID:	dr_627
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:41 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9262908269610985
Encrypted:	false
Ssdeep:	24:82Bf/8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:888EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_9aa5bd1e593c4471a978320b881143d1.lnk
Category:	dropped
Dump:	MFDBG_9aa5bd1e593c4471a978320b881143d1.lnk.7.dr
ID:	dr_292
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:49 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.924997495662102
Encrypted:	false
Ssdeep:	24:8UBf48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:86FEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_9b215447b0e840b8aac884738ea1c5f2.lnk
Category:	dropped
Dump:	MFDBG_9b215447b0e840b8aac884738ea1c5f2.lnk.7.dr
ID:	dr_617
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:40 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.927299855179359
Encrypted:	false
Ssdeep:	24:83BfV8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8RaEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_9b39059648df4af0816ec166c72811db.lnk
Category:	dropped
Dump:	MFDBG_9b39059648df4af0816ec166c72811db.lnk.7.dr
ID:	dr_117
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:46 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920821973619387
Encrypted:	false
Ssdeep:	24:8fBfJ48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8pPEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_9b52a63a2e1746e4b06e218785698f22.lnk
Category:	dropped
Dump:	MFDBG_9b52a63a2e1746e4b06e218785698f22.lnk.7.dr
ID:	dr_881
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:56 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.914191625612331
Encrypted:	false
Ssdeep:	24:8cBfc8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8SREvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_9bdb11ca787543c08b8df79f7e00d6c6.lnk
Category:	dropped
Dump:	MFDBG_9bdb11ca787543c08b8df79f7e00d6c6.lnk.7.dr
ID:	dr_532
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:29 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9218910750142335
Encrypted:	false
Ssdeep:	24:8OBfeQ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8k2FEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_9c256477ecf24e49a786ad725f7a8478.lnk
Category:	dropped
Dump:	MFDBG_9c256477ecf24e49a786ad725f7a8478.lnk.7.dr
ID:	dr_456
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:27 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.918659654781123
Encrypted:	false
Ssdeep:	24:8qBfp8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8oGEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_9cb386adc9de48f3b1cf9f560d94f8ea.lnk
Category:	dropped
Dump:	MFDBG_9cb386adc9de48f3b1cf9f560d94f8ea.lnk.7.dr
ID:	dr_379
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:00 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9250307426876585
Encrypted:	false
Ssdeep:	24:8TBfs68EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8VcEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_9ce4f0954cab478fb82b45a53e56dea3.lnk
Category:	dropped
Dump:	MFDBG_9ce4f0954cab478fb82b45a53e56dea3.lnk.7.dr
ID:	dr_640
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:41 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.925304557816813
Encrypted:	false
Ssdeep:	24:8/BfEX8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8JhEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_9d71edf4b7e2408cb61bca3fe9810a9f.lnk
Category:	dropped
Dump:	MFDBG_9d71edf4b7e2408cb61bca3fe9810a9f.lnk.7.dr
ID:	dr_362
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:00 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.925415304089124
Encrypted:	false
Ssdeep:	24:88nQBfo8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:81FEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_9d8079e615744396a77e31627d931da9.lnk
Category:	dropped
Dump:	MFDBG_9d8079e615744396a77e31627d931da9.lnk.7.dr
ID:	dr_275
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:49 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923816258408522
Encrypted:	false
Ssdeep:	24:80BfiD8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8aaQEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_9d8f2f30a768495cbac74f2ea5d9d520.lnk
Category:	dropped
Dump:	MFDBG_9d8f2f30a768495cbac74f2ea5d9d520.lnk.7.dr
ID:	dr_140
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:44 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.92244791682489
Encrypted:	false
Ssdeep:	24:82xBfLf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:82LQEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_9d9f396894b04a6a86593f80590bffe2.lnk
Category:	dropped
Dump:	MFDBG_9d9f396894b04a6a86593f80590bffe2.lnk.7.dr
ID:	dr_321
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:57 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.926290826961097
Encrypted:	false
Ssdeep:	24:8RrBfv8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8/cEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_9dd22b6e00954ad3bd57f0f8a275e0f9.lnk
Category:	dropped
Dump:	MFDBG_9dd22b6e00954ad3bd57f0f8a275e0f9.lnk.7.dr
ID:	dr_490
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:13 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.930088871165142
Encrypted:	false
Ssdeep:	24:8WuBfK8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8z/EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_9e4b2f1f74594f34ab1259deaf092b08.lnk
Category:	dropped
Dump:	MFDBG_9e4b2f1f74594f34ab1259deaf092b08.lnk.7.dr
ID:	dr_568
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:29 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.927518930135735
Encrypted:	false
Ssdeep:	24:8kBfs8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8KhEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_9ea650f6efad4b6d9b80bb69ba4a6548.lnk
Category:	dropped
Dump:	MFDBG_9ea650f6efad4b6d9b80bb69ba4a6548.lnk.7.dr
ID:	dr_608
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:40 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.917503013347851
Encrypted:	false
Ssdeep:	24:8F2Bfi8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8yHEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_9ec2deb96c524edcaba67333e38e9c6e.lnk
Category:	dropped
Dump:	MFDBG_9ec2deb96c524edcaba67333e38e9c6e.lnk.7.dr
ID:	dr_797
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:53 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.919905050343921
Encrypted:	false
Ssdeep:	24:8FprBf08EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8bd5EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_9ee746b57d0e45d7980ef0913e3836cd.lnk
Category:	dropped
Dump:	MFDBG_9ee746b57d0e45d7980ef0913e3836cd.lnk.7.dr
ID:	dr_354
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:58 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9336832142082905
Encrypted:	false
Ssdeep:	24:8gBf+8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8u7EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_9f48497a5e9f4e24864ca43e39ad5ae8.lnk
Category:	dropped
Dump:	MFDBG_9f48497a5e9f4e24864ca43e39ad5ae8.lnk.7.dr
ID:	dr_735
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:48 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923040413015361
Encrypted:	false
Ssdeep:	24:8D3Bfq8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8DRPEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_9f4a7b05964141f69eb77316edfca1ad.lnk
Category:	dropped
Dump:	MFDBG_9f4a7b05964141f69eb77316edfca1ad.lnk.7.dr
ID:	dr_610
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:41 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.926597889115809
Encrypted:	false
Ssdeep:	24:8gBfD8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8u4EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_9fc9981daae74273b04e3b5813566c17.lnk
Category:	dropped
Dump:	MFDBG_9fc9981daae74273b04e3b5813566c17.lnk.7.dr
ID:	dr_656
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:46 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.922647831917971
Encrypted:	false
Ssdeep:	24:8t2BfW8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8t8DEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a055f6b80ecb4a69a70a72fc1590db41.lnk
Category:	dropped
Dump:	MFDBG_a055f6b80ecb4a69a70a72fc1590db41.lnk.7.dr
ID:	dr_271
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:49 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.924551471497629
Encrypted:	false
Ssdeep:	24:8uQBfiD8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8PaQEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a0b0c96f8bcf40578ff25e3f00df5dbe.lnk
Category:	dropped
Dump:	MFDBG_a0b0c96f8bcf40578ff25e3f00df5dbe.lnk.7.dr
ID:	dr_240
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:45 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.917398355248339
Encrypted:	false
Ssdeep:	24:8hQBfMYH8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8heUJEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a0b117534fab4cd28824eb3b06b4a958.lnk
Category:	dropped
Dump:	MFDBG_a0b117534fab4cd28824eb3b06b4a958.lnk.7.dr
ID:	dr_474
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:27 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.913919012812076
Encrypted:	false
Ssdeep:	24:8jBfp8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8lGEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a0bab353ec9e45b9a72b7a63a3a781b7.lnk
Category:	dropped
Dump:	MFDBG_a0bab353ec9e45b9a72b7a63a3a781b7.lnk.7.dr
ID:	dr_811
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:53 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.918898439713906
Encrypted:	false
Ssdeep:	24:8V02BfJ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8e8WEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a0c93ecce37d4ecfb8fee6e58d507231.lnk
Category:	dropped
Dump:	MFDBG_a0c93ecce37d4ecfb8fee6e58d507231.lnk.7.dr
ID:	dr_252
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:46 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.911620200219704
Encrypted:	false
Ssdeep:	24:8muBfr8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8mEgEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a0cc381d134e44efb0e5589999aae5db.lnk
Category:	dropped
Dump:	MFDBG_a0cc381d134e44efb0e5589999aae5db.lnk.7.dr
ID:	dr_256
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:45 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.909514156584847
Encrypted:	false
Ssdeep:	24:8dBfr8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8PgEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a0d82c8031be4e069f3441a9159c1231.lnk
Category:	dropped
Dump:	MFDBG_a0d82c8031be4e069f3441a9159c1231.lnk.7.dr
ID:	dr_488
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:13 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.929423772044293
Encrypted:	false
Ssdeep:	24:852BfK8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8q/EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a0ddbf8c83cc466c83048afc07bce492.lnk
Category:	dropped
Dump:	MFDBG_a0ddbf8c83cc466c83048afc07bce492.lnk.7.dr
ID:	dr_449
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:27 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.922417701098545
Encrypted:	false
Ssdeep:	24:8cBf38EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8SEEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a127d18385374dcc8c7c761ae28beb07.lnk
Category:	dropped
Dump:	MFDBG_a127d18385374dcc8c7c761ae28beb07.lnk.7.dr
ID:	dr_748
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:51 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920601888295946
Encrypted:	false
Ssdeep:	24:8WTBf8+8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8SETEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a12b4f34118e435c9a3e8119bbd18742.lnk
Category:	dropped
Dump:	MFDBG_a12b4f34118e435c9a3e8119bbd18742.lnk.7.dr
ID:	dr_828
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:50 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.914467908997138
Encrypted:	false
Ssdeep:	24:8h2Bff48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8ydEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a17813bcabc3441d8fb993e5629e72cf.lnk
Category:	dropped
Dump:	MFDBG_a17813bcabc3441d8fb993e5629e72cf.lnk.7.dr
ID:	dr_115
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:46 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923661695312722
Encrypted:	false
Ssdeep:	24:8KBfJ48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8IPEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a187a8d8832348a1b09ca7bd5576d1f4.lnk
Category:	dropped
Dump:	MFDBG_a187a8d8832348a1b09ca7bd5576d1f4.lnk.7.dr
ID:	dr_259
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:49 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920907844945178
Encrypted:	false
Ssdeep:	24:8CBfY8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8wFEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a18e9964d32c484f85544f885b11900c.lnk
Category:	dropped
Dump:	MFDBG_a18e9964d32c484f85544f885b11900c.lnk.7.dr
ID:	dr_243
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:49 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.924872641521064
Encrypted:	false
Ssdeep:	24:83BfiD8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8RaQEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a2762f5694cd4b8c9fa31c2db5fe3839.lnk
Category:	dropped
Dump:	MFDBG_a2762f5694cd4b8c9fa31c2db5fe3839.lnk.7.dr
ID:	dr_300
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:57 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.921361317986003
Encrypted:	false
Ssdeep:	24:8fBfC8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8pnEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a29d4a06ab024750af2bf767f5e85ad9.lnk
Category:	dropped
Dump:	MFDBG_a29d4a06ab024750af2bf767f5e85ad9.lnk.7.dr
ID:	dr_510
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:14 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920202694362192
Encrypted:	false
Ssdeep:	24:8VBf6D8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8XyQEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a2ea4756929e45d591866deb3da89f16.lnk
Category:	dropped
Dump:	MFDBG_a2ea4756929e45d591866deb3da89f16.lnk.7.dr
ID:	dr_951
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:15 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.917025309800275
Encrypted:	false
Ssdeep:	24:86Bfa8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:84PEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a2efe83ad92741b4a7acaccf8bf79f72.lnk
Category:	dropped
Dump:	MFDBG_a2efe83ad92741b4a7acaccf8bf79f72.lnk.7.dr
ID:	dr_332
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:58 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.924638110922859
Encrypted:	false
Ssdeep:	24:8hBf78EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:87QEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a30d2e7c430a4d959d4337ee2273ae31.lnk
Category:	dropped
Dump:	MFDBG_a30d2e7c430a4d959d4337ee2273ae31.lnk.7.dr
ID:	dr_187
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:44 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.931256000549996
Encrypted:	false
Ssdeep:	24:8zBfLf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:81QEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a3ea820ecad64f51a4b7e66694e7756b.lnk
Category:	dropped
Dump:	MFDBG_a3ea820ecad64f51a4b7e66694e7756b.lnk.7.dr
ID:	dr_1029
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:19 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.931256000549997
Encrypted:	false
Ssdeep:	24:8JuBfWQ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8JEeFEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a4bc2eddf7bc408685e47cab72092a79.lnk
Category:	dropped
Dump:	MFDBG_a4bc2eddf7bc408685e47cab72092a79.lnk.7.dr
ID:	dr_143
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:44 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923775626104469
Encrypted:	false
Ssdeep:	24:8BBfLf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8bQEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a4edc110e1a54c89aeb875c642b73cd0.lnk
Category:	dropped
Dump:	MFDBG_a4edc110e1a54c89aeb875c642b73cd0.lnk.7.dr
ID:	dr_369
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:10 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.931489183375097
Encrypted:	false
Ssdeep:	24:8ZBfW8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8DDEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a51aaecc40e3455ca0c8b1320ae41847.lnk
Category:	dropped
Dump:	MFDBG_a51aaecc40e3455ca0c8b1320ae41847.lnk.7.dr
ID:	dr_705
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:47 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.922719242991925
Encrypted:	false
Ssdeep:	24:8CBfP8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8wMEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a520191e0b1246289c647b20d075c1de.lnk
Category:	dropped
Dump:	MFDBG_a520191e0b1246289c647b20d075c1de.lnk.7.dr
ID:	dr_190
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:39 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923798385178445
Encrypted:	false
Ssdeep:	24:8sPQBfJ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8s2GEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a57ada7b6cac417bbaae9bea3a1240f1.lnk
Category:	dropped
Dump:	MFDBG_a57ada7b6cac417bbaae9bea3a1240f1.lnk.7.dr
ID:	dr_335
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:58 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.918671490505811
Encrypted:	false
Ssdeep:	24:8pBfT8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8TYEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a5c89dbc0a0147bc9cda62903a5e414b.lnk
Category:	dropped
Dump:	MFDBG_a5c89dbc0a0147bc9cda62903a5e414b.lnk.7.dr
ID:	dr_737
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:48 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.929727068837651
Encrypted:	false
Ssdeep:	24:8WDBfq8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8sPEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a72889b2d35541f4b00f3df041af338e.lnk
Category:	dropped
Dump:	MFDBG_a72889b2d35541f4b00f3df041af338e.lnk.7.dr
ID:	dr_601
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:40 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.918235758181302
Encrypted:	false
Ssdeep:	24:8dcBfX48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8dSP9EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a74090e8956d40b1ade27ebeb3aa426f.lnk
Category:	dropped
Dump:	MFDBG_a74090e8956d40b1ade27ebeb3aa426f.lnk.7.dr
ID:	dr_435
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:11 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.922664502819148
Encrypted:	false
Ssdeep:	24:8OTTBfh8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8OReEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a743113bb7e749dfa4965f279611659b.lnk
Category:	dropped
Dump:	MFDBG_a743113bb7e749dfa4965f279611659b.lnk.7.dr
ID:	dr_989
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:15 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.917514703628329
Encrypted:	false
Ssdeep:	24:8WBfm8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8cDEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a80cdde7397f464e815d83c66b57f852.lnk
Category:	dropped
Dump:	MFDBG_a80cdde7397f464e815d83c66b57f852.lnk.7.dr
ID:	dr_169
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:45 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.928754907562094
Encrypted:	false
Ssdeep:	24:8ABfHf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8OcEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a81f7826afb5449a839b1ee91d46d259.lnk
Category:	dropped
Dump:	MFDBG_a81f7826afb5449a839b1ee91d46d259.lnk.7.dr
ID:	dr_683
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:43 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.930070997935065
Encrypted:	false
Ssdeep:	24:8HrBfOD8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8HdbEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a8fb2c0a2a2c4eb9829effb4e6edad58.lnk
Category:	dropped
Dump:	MFDBG_a8fb2c0a2a2c4eb9829effb4e6edad58.lnk.7.dr
ID:	dr_962
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:15 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923933727271062
Encrypted:	false
Ssdeep:	24:8yBfa8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8gPEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a9b6bcdab67a48fa9ab771f6a1329151.lnk
Category:	dropped
Dump:	MFDBG_a9b6bcdab67a48fa9ab771f6a1329151.lnk.7.dr
ID:	dr_960
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:04 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.917148596298855
Encrypted:	false
Ssdeep:	24:8ruBfEf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8rEBEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a9c532f7c5974a7eaee02bedebe1cbdf.lnk
Category:	dropped
Dump:	MFDBG_a9c532f7c5974a7eaee02bedebe1cbdf.lnk.7.dr
ID:	dr_985
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:15 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9182690052068585
Encrypted:	false
Ssdeep:	24:8NhQBfa8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8NhePEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a9f20330644746ada7e09d0e5908a47a.lnk
Category:	dropped
Dump:	MFDBG_a9f20330644746ada7e09d0e5908a47a.lnk.7.dr
ID:	dr_830
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:54 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.91682138877003
Encrypted:	false
Ssdeep:	24:8cBf48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8SlEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a9f58d260e0f45c7939fa7f7bdb97c6c.lnk
Category:	dropped
Dump:	MFDBG_a9f58d260e0f45c7939fa7f7bdb97c6c.lnk.7.dr
ID:	dr_324
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:57 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.928326756627698
Encrypted:	false
Ssdeep:	24:86BftAp8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:841FEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a9fe575ce50040239577b1f27b3c59d1.lnk
Category:	dropped
Dump:	MFDBG_a9fe575ce50040239577b1f27b3c59d1.lnk.7.dr
ID:	dr_107
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:46 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.910036746771048
Encrypted:	false
Ssdeep:	24:8DBfx8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8FeEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_aa0a225d5c5a455a814a5f2e038ee389.lnk
Category:	dropped
Dump:	MFDBG_aa0a225d5c5a455a814a5f2e038ee389.lnk.7.dr
ID:	dr_939
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:04 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.924528712423652
Encrypted:	false
Ssdeep:	24:8YerBfTf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8YeIEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_aa44b8b76bed407aaf09b16e06fbbcb0.lnk
Category:	dropped
Dump:	MFDBG_aa44b8b76bed407aaf09b16e06fbbcb0.lnk.7.dr
ID:	dr_813
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:44 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9224454278627725
Encrypted:	false
Ssdeep:	24:8lDBfff8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8HXEEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_aadc4a04b41e478e96e76123c3ead7dd.lnk
Category:	dropped
Dump:	MFDBG_aadc4a04b41e478e96e76123c3ead7dd.lnk.7.dr
ID:	dr_588
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:30 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.917159084250438
Encrypted:	false
Ssdeep:	24:8MBfU98EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8C5EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ab0e1a7866a84fdbb3c1ce75a63efd24.lnk
Category:	dropped
Dump:	MFDBG_ab0e1a7866a84fdbb3c1ce75a63efd24.lnk.7.dr
ID:	dr_595
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:30 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.91358615250816
Encrypted:	false
Ssdeep:	24:8YBfU98EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8W5EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_aba044bbc86c485b95ebec1da7732e6e.lnk
Category:	dropped
Dump:	MFDBG_aba044bbc86c485b95ebec1da7732e6e.lnk.7.dr
ID:	dr_403
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:02 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9277317714751065
Encrypted:	false
Ssdeep:	24:8oQBfx+8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8BtEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ac472396664e44caaff7f8ec2f606d30.lnk
Category:	dropped
Dump:	MFDBG_ac472396664e44caaff7f8ec2f606d30.lnk.7.dr
ID:	dr_134
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:47 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.919637272720157
Encrypted:	false
Ssdeep:	24:8dBfT+8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8PLTEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ac6d9c43c25443d48fb06f3b98eec67f.lnk
Category:	dropped
Dump:	MFDBG_ac6d9c43c25443d48fb06f3b98eec67f.lnk.7.dr
ID:	dr_741
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:48 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.92663475605851
Encrypted:	false
Ssdeep:	24:8mBfq8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8sPEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ad132331281f42acbcf4965280ea9f0b.lnk
Category:	dropped
Dump:	MFDBG_ad132331281f42acbcf4965280ea9f0b.lnk.7.dr
ID:	dr_550
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:14 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.928652812495033
Encrypted:	false
Ssdeep:	24:8eBfs8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:80BEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ad27d76c850649209970018fbb8d0dcb.lnk
Category:	dropped
Dump:	MFDBG_ad27d76c850649209970018fbb8d0dcb.lnk.7.dr
ID:	dr_1037
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:19 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.929061969716804
Encrypted:	false
Ssdeep:	24:8bBfWQ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8NeFEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ad42cf402d6c4b6aa876291c072cd52b.lnk
Category:	dropped
Dump:	MFDBG_ad42cf402d6c4b6aa876291c072cd52b.lnk.7.dr
ID:	dr_1001
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:16 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.926057644135997
Encrypted:	false
Ssdeep:	24:8kBf88EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8KxEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ada1b5c02f74425bba0ba02ebd19bae7.lnk
Category:	dropped
Dump:	MFDBG_ada1b5c02f74425bba0ba02ebd19bae7.lnk.7.dr
ID:	dr_406
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:02 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.917511519108894
Encrypted:	false
Ssdeep:	24:8vBfx+8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:85tEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_adb0e6ae1d164b2cb80c4fd5f1289cbc.lnk
Category:	dropped
Dump:	MFDBG_adb0e6ae1d164b2cb80c4fd5f1289cbc.lnk.7.dr
ID:	dr_320
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:57 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9249606287194
Encrypted:	false
Ssdeep:	24:80Bfv8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8acEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_adb1926e95a7409a84f9cfac63253a60.lnk
Category:	dropped
Dump:	MFDBG_adb1926e95a7409a84f9cfac63253a60.lnk.7.dr
ID:	dr_888
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:56 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9290619697168045
Encrypted:	false
Ssdeep:	24:8iBfh48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8Q59EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ae06cbfd1f3e427bb2d451163546df6f.lnk
Category:	dropped
Dump:	MFDBG_ae06cbfd1f3e427bb2d451163546df6f.lnk.7.dr
ID:	dr_383
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:02 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.918168112468699
Encrypted:	false
Ssdeep:	24:8xBfI48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8Lg9EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ae1165dc1f0849c39e798f0698baec0e.lnk
Category:	dropped
Dump:	MFDBG_ae1165dc1f0849c39e798f0698baec0e.lnk.7.dr
ID:	dr_857
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:51 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.924909508463767
Encrypted:	false
Ssdeep:	24:8NBfk8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8/JEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ae3abd9456904d769e04732960fea291.lnk
Category:	dropped
Dump:	MFDBG_ae3abd9456904d769e04732960fea291.lnk.7.dr
ID:	dr_1023
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:18 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.919893468764519
Encrypted:	false
Ssdeep:	24:8NMBfa8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8NCvEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ae3e0b6dbbf44ca1ac821f18cf138bde.lnk
Category:	dropped
Dump:	MFDBG_ae3e0b6dbbf44ca1ac821f18cf138bde.lnk.7.dr
ID:	dr_937
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:04 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920791642009391
Encrypted:	false
Ssdeep:	24:8HBfTf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8hIEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ae443fadafe44e0ca11b0c1f7e9a0bb4.lnk
Category:	dropped
Dump:	MFDBG_ae443fadafe44e0ca11b0c1f7e9a0bb4.lnk.7.dr
ID:	dr_637
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:46 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.922991761015384
Encrypted:	false
Ssdeep:	24:8W3BfZ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8WRWEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_aee0ea27092f462aafc90242bcb9de5c.lnk
Category:	dropped
Dump:	MFDBG_aee0ea27092f462aafc90242bcb9de5c.lnk.7.dr
ID:	dr_417
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:11 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9211853435893325
Encrypted:	false
Ssdeep:	24:8gTBfh8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8IeEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_af6691a9309b45f395dac288b2eba10d.lnk
Category:	dropped
Dump:	MFDBG_af6691a9309b45f395dac288b2eba10d.lnk.7.dr
ID:	dr_743
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:48 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.92236400283339
Encrypted:	false
Ssdeep:	24:8h2Bfq8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8h8PEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_af936ee15ca74eb78fd816d5c0dbf422.lnk
Category:	dropped
Dump:	MFDBG_af936ee15ca74eb78fd816d5c0dbf422.lnk.7.dr
ID:	dr_953
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:15 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.917778396119458
Encrypted:	false
Ssdeep:	24:8vBfa8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:85PEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_afa5340990174fac89cb4b66d9fb6bc1.lnk
Category:	dropped
Dump:	MFDBG_afa5340990174fac89cb4b66d9fb6bc1.lnk.7.dr
ID:	dr_878
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:03 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.919969511537091
Encrypted:	false
Ssdeep:	24:8iBf048EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8Q89EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b001ba6e01c047deb30853522f2e30a6.lnk
Category:	dropped
Dump:	MFDBG_b001ba6e01c047deb30853522f2e30a6.lnk.7.dr
ID:	dr_780
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:48 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9222466943921255
Encrypted:	false
Ssdeep:	24:8oBf98EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8miEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b0665480dd1448d6ae92f8d305245bbc.lnk
Category:	dropped
Dump:	MFDBG_b0665480dd1448d6ae92f8d305245bbc.lnk.7.dr
ID:	dr_71
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:43 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.929727068837653
Encrypted:	false
Ssdeep:	24:8CBfs8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8wREvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b0ad081455aa4e238d4d3e959e02f8cb.lnk
Category:	dropped
Dump:	MFDBG_b0ad081455aa4e238d4d3e959e02f8cb.lnk.7.dr
ID:	dr_217
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:40 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.918168112468699
Encrypted:	false
Ssdeep:	24:8dBfL8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8PgEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b173a49480e04460aff51749c069a73f.lnk
Category:	dropped
Dump:	MFDBG_b173a49480e04460aff51749c069a73f.lnk.7.dr
ID:	dr_693
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:43 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9273420225140425
Encrypted:	false
Ssdeep:	24:8MBfn8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8CUEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b1ac400e5ce44609948c42db9c7bcceb.lnk
Category:	dropped
Dump:	MFDBG_b1ac400e5ce44609948c42db9c7bcceb.lnk.7.dr
ID:	dr_248
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:46 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.919035615644746
Encrypted:	false
Ssdeep:	24:8dhBfZ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8d7WEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b1c09c0732dc442d920e1feab5f489f0.lnk
Category:	dropped
Dump:	MFDBG_b1c09c0732dc442d920e1feab5f489f0.lnk.7.dr
ID:	dr_412
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:11 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.924872641521066
Encrypted:	false
Ssdeep:	24:8fTBfh8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8teEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b1dc0c490730403a82859fca8741544c.lnk
Category:	dropped
Dump:	MFDBG_b1dc0c490730403a82859fca8741544c.lnk.7.dr
ID:	dr_784
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:48 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.917255577209817
Encrypted:	false
Ssdeep:	24:8+Bf98EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8UiEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b27de76ace1c4257a2ce93218b3012c1.lnk
Category:	dropped
Dump:	MFDBG_b27de76ace1c4257a2ce93218b3012c1.lnk.7.dr
ID:	dr_48
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:38 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.931921099670846
Encrypted:	false
Ssdeep:	24:8FBfD8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8H4EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b27f2a2f860b42a8a2043f1eabe01d71.lnk
Category:	dropped
Dump:	MFDBG_b27f2a2f860b42a8a2043f1eabe01d71.lnk.7.dr
ID:	dr_666
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:46 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.92076086323949
Encrypted:	false
Ssdeep:	24:80BfW8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8aDEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b2941dd6e76541968cf4b029eeb9bcc7.lnk
Category:	dropped
Dump:	MFDBG_b2941dd6e76541968cf4b029eeb9bcc7.lnk.7.dr
ID:	dr_65
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:38 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.929405898814216
Encrypted:	false
Ssdeep:	24:8IQBfs8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8IeREvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b2b6461849d44285b65c92a721f7871b.lnk
Category:	dropped
Dump:	MFDBG_b2b6461849d44285b65c92a721f7871b.lnk.7.dr
ID:	dr_765
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:52 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.921436399644509
Encrypted:	false
Ssdeep:	24:8BTBfJ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8DWEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b2df7a78e53f46a4a43edd7cbe2dc415.lnk
Category:	dropped
Dump:	MFDBG_b2df7a78e53f46a4a43edd7cbe2dc415.lnk.7.dr
ID:	dr_148
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:46 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.919418197763782
Encrypted:	false
Ssdeep:	24:8wBfT+8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8+LTEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b2e28e2e7fa1483f9b5f95c40b8daeb0.lnk
Category:	dropped
Dump:	MFDBG_b2e28e2e7fa1483f9b5f95c40b8daeb0.lnk.7.dr
ID:	dr_623
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:41 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.925537740641915
Encrypted:	false
Ssdeep:	24:8WBf/8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8c8EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b36c835b9a95454ba5d0dd12ccfec0ac.lnk
Category:	dropped
Dump:	MFDBG_b36c835b9a95454ba5d0dd12ccfec0ac.lnk.7.dr
ID:	dr_149
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:44 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.92781975867344
Encrypted:	false
Ssdeep:	24:8kBfyf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8KjEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b3bcd01edd474a47a86c8bd1792d05ee.lnk
Category:	dropped
Dump:	MFDBG_b3bcd01edd474a47a86c8bd1792d05ee.lnk.7.dr
ID:	dr_436
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:11 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9301589851334
Encrypted:	false
Ssdeep:	24:8aTBfh8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:82eEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b3f508dc44314dccbe78e1357c8cd018.lnk
Category:	dropped
Dump:	MFDBG_b3f508dc44314dccbe78e1357c8cd018.lnk.7.dr
ID:	dr_308
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:58 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.925713715038584
Encrypted:	false
Ssdeep:	24:8G2BftAp8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8Z1FEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b43dd428ab954267b0cc14c2862a3170.lnk
Category:	dropped
Dump:	MFDBG_b43dd428ab954267b0cc14c2862a3170.lnk.7.dr
ID:	dr_663
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:42 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.921708867000558
Encrypted:	false
Ssdeep:	24:82QBfk8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:82eJEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b4a1fcdc28334837b3566d5eab3c9f44.lnk
Category:	dropped
Dump:	MFDBG_b4a1fcdc28334837b3566d5eab3c9f44.lnk.7.dr
ID:	dr_529
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:14 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.918512041566111
Encrypted:	false
Ssdeep:	24:8GBf6D8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8MyQEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b4e3cd0f2cc842d1a90a88be56724008.lnk
Category:	dropped
Dump:	MFDBG_b4e3cd0f2cc842d1a90a88be56724008.lnk.7.dr
ID:	dr_503
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:14 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.918577269690469
Encrypted:	false
Ssdeep:	24:8O2Bf6D8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8ByQEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b52c00d18b264182a7d5195b90c5045f.lnk
Category:	dropped
Dump:	MFDBG_b52c00d18b264182a7d5195b90c5045f.lnk.7.dr
ID:	dr_153
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:44 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.92781975867344
Encrypted:	false
Ssdeep:	24:8eBfyf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:80jEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b531fa8056124173a8b000f51dc8b32d.lnk
Category:	dropped
Dump:	MFDBG_b531fa8056124173a8b000f51dc8b32d.lnk.7.dr
ID:	dr_63
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:38 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.932586198791693
Encrypted:	false
Ssdeep:	24:8t2Bfs8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8mREvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b55b390084094c8892fbee97051125df.lnk
Category:	dropped
Dump:	MFDBG_b55b390084094c8892fbee97051125df.lnk.7.dr
ID:	dr_224
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:45 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.907667701602461
Encrypted:	false
Ssdeep:	24:8uBf38EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8EEEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b598ffd3c74c4418bca684bd0a9d1bb4.lnk
Category:	dropped
Dump:	MFDBG_b598ffd3c74c4418bca684bd0a9d1bb4.lnk.7.dr
ID:	dr_762
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:44 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.919265127885296
Encrypted:	false
Ssdeep:	24:8RBfff8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8rXEEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b616e1c5e4424a1c933f77b62812d3b6.lnk
Category:	dropped
Dump:	MFDBG_b616e1c5e4424a1c933f77b62812d3b6.lnk.7.dr
ID:	dr_225
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:48 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.917332210860567
Encrypted:	false
Ssdeep:	24:8qBfY8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8oFEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b64f32d251f4443a90c324e30d32b500.lnk
Category:	dropped
Dump:	MFDBG_b64f32d251f4443a90c324e30d32b500.lnk.7.dr
ID:	dr_375
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:59 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923814910635417
Encrypted:	false
Ssdeep:	24:82BfJ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:88WEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b66567f7a2dc4c5f9ec7bab8df53c2e7.lnk
Category:	dropped
Dump:	MFDBG_b66567f7a2dc4c5f9ec7bab8df53c2e7.lnk.7.dr
ID:	dr_74
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:38 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.928052941498543
Encrypted:	false
Ssdeep:	24:8v/Bfz8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8xIEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b6682343f2ec4234b40dd8d996b47aba.lnk
Category:	dropped
Dump:	MFDBG_b6682343f2ec4234b40dd8d996b47aba.lnk.7.dr
ID:	dr_1035
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:00 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.927066672354258
Encrypted:	false
Ssdeep:	24:8c3Bfrp8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8EyEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b668a9224bf241879a0e16a0db4edc13.lnk
Category:	dropped
Dump:	MFDBG_b668a9224bf241879a0e16a0db4edc13.lnk.7.dr
ID:	dr_569
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:30 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.931168013351661
Encrypted:	false
Ssdeep:	24:8PierBfs8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:86ehEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b6fdae483f0d47398c3aabd92269cdbb.lnk
Category:	dropped
Dump:	MFDBG_b6fdae483f0d47398c3aabd92269cdbb.lnk.7.dr
ID:	dr_399
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:02 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9211152296210745
Encrypted:	false
Ssdeep:	24:8EBfA8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8qdEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b7286d69ef14444ab3f3b68467559491.lnk
Category:	dropped
Dump:	MFDBG_b7286d69ef14444ab3f3b68467559491.lnk.7.dr
ID:	dr_386
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:00 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.921778980968818
Encrypted:	false
Ssdeep:	24:8UBfs68EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:86cEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b7439bf158644f119f3a2b1e4d4195a3.lnk
Category:	dropped
Dump:	MFDBG_b7439bf158644f119f3a2b1e4d4195a3.lnk.7.dr
ID:	dr_453
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:03 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9159907525366835
Encrypted:	false
Ssdeep:	24:85Bff8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8jcEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b7b673f342744ed1b113c0b9148eef4a.lnk
Category:	dropped
Dump:	MFDBG_b7b673f342744ed1b113c0b9148eef4a.lnk.7.dr
ID:	dr_755
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:43 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.928939533164014
Encrypted:	false
Ssdeep:	24:8GBfZf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8MREEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b7c0cdc6401d4aad9fd95728d769ea4a.lnk
Category:	dropped
Dump:	MFDBG_b7c0cdc6401d4aad9fd95728d769ea4a.lnk.7.dr
ID:	dr_801
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:53 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9165936626084035
Encrypted:	false
Ssdeep:	24:8LLbrBf08EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8LLbd5EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b7ec6cd8f7514dfba882e112ae8107ba.lnk
Category:	dropped
Dump:	MFDBG_b7ec6cd8f7514dfba882e112ae8107ba.lnk.7.dr
ID:	dr_816
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:45 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.922910699885153
Encrypted:	false
Ssdeep:	24:8iBf6lf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8Q2EEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b7ef647184544aeca0260a92ed11b7ce.lnk
Category:	dropped
Dump:	MFDBG_b7ef647184544aeca0260a92ed11b7ce.lnk.7.dr
ID:	dr_810
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:49 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.919154381612983
Encrypted:	false
Ssdeep:	24:8d6BfY8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8d4VEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b81f47a27fb54e7c9445d2ffb9084849.lnk
Category:	dropped
Dump:	MFDBG_b81f47a27fb54e7c9445d2ffb9084849.lnk.7.dr
ID:	dr_466
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:13 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.918435693980848
Encrypted:	false
Ssdeep:	24:8EBf+p8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8qGOEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b87b743a810d47e3959c362cacc52604.lnk
Category:	dropped
Dump:	MFDBG_b87b743a810d47e3959c362cacc52604.lnk.7.dr
ID:	dr_402
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:02 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.92131396309172
Encrypted:	false
Ssdeep:	24:8dbBfA8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8dNdEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b8855e37856e47d3b9198c16e6bfd87a.lnk
Category:	dropped
Dump:	MFDBG_b8855e37856e47d3b9198c16e6bfd87a.lnk.7.dr
ID:	dr_680
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:46 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.918743740027992
Encrypted:	false
Ssdeep:	24:8bBf68EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8NfEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b8ba5da3a87a425ab810f891aaf28de1.lnk
Category:	dropped
Dump:	MFDBG_b8ba5da3a87a425ab810f891aaf28de1.lnk.7.dr
ID:	dr_477
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:27 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.929815056035987
Encrypted:	false
Ssdeep:	24:8mBfs48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8s09EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b8c45e76293e4924ad4b7f7f4a050d6a.lnk
Category:	dropped
Dump:	MFDBG_b8c45e76293e4924ad4b7f7f4a050d6a.lnk.7.dr
ID:	dr_448
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:27 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.91859868099134
Encrypted:	false
Ssdeep:	24:8qBf38EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8oEEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b9008f7ed3bc412dbba86bd10cbfa7c5.lnk
Category:	dropped
Dump:	MFDBG_b9008f7ed3bc412dbba86bd10cbfa7c5.lnk.7.dr
ID:	dr_773
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:52 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.919711152049768
Encrypted:	false
Ssdeep:	24:8PTBfP8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:89sEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b9743b2537174e95a0b38395b8e26463.lnk
Category:	dropped
Dump:	MFDBG_b9743b2537174e95a0b38395b8e26463.lnk.7.dr
ID:	dr_494
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:28 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.921502560993893
Encrypted:	false
Ssdeep:	24:8iBfR48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8QnEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b9a7b8e5f7e44049b4d47227ca61e257.lnk
Category:	dropped
Dump:	MFDBG_b9a7b8e5f7e44049b4d47227ca61e257.lnk.7.dr
ID:	dr_703
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:47 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.916669959526257
Encrypted:	false
Ssdeep:	24:8RBfP8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8rMEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ba34989b21e3491e90fbf51a98ba4c24.lnk
Category:	dropped
Dump:	MFDBG_ba34989b21e3491e90fbf51a98ba4c24.lnk.7.dr
ID:	dr_479
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:13 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920669205456601
Encrypted:	false
Ssdeep:	24:8wBfD8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8+oEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ba566f14cb4d44bf8d86612f75a65d3c.lnk
Category:	dropped
Dump:	MFDBG_ba566f14cb4d44bf8d86612f75a65d3c.lnk.7.dr
ID:	dr_296
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:57 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.927177418626568
Encrypted:	false
Ssdeep:	24:8P2BfC8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8P8nEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ba64c97dd74446f9981434bfc3edf2ef.lnk
Category:	dropped
Dump:	MFDBG_ba64c97dd74446f9981434bfc3edf2ef.lnk.7.dr
ID:	dr_790
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:44 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.928828786891703
Encrypted:	false
Ssdeep:	24:8mBfDf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8sbEEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_baeaec4053514e5abffb4ee7ae9168fc.lnk
Category:	dropped
Dump:	MFDBG_baeaec4053514e5abffb4ee7ae9168fc.lnk.7.dr
ID:	dr_438
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:11 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.922269453466103
Encrypted:	false
Ssdeep:	24:8+iTBfo+8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8+egTEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_bb4770f69c134a1a98df5356635405cd.lnk
Category:	dropped
Dump:	MFDBG_bb4770f69c134a1a98df5356635405cd.lnk.7.dr
ID:	dr_251
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:49 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.918699706243261
Encrypted:	false
Ssdeep:	24:8fBfY8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8pFEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_bb4f2043403b4e8ea1976bdfc0ecc667.lnk
Category:	dropped
Dump:	MFDBG_bb4f2043403b4e8ea1976bdfc0ecc667.lnk.7.dr
ID:	dr_413
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:11 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923454456081034
Encrypted:	false
Ssdeep:	24:82TBfh8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8yeEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_bb5e2b165ced4da6910b9b2f501cf0b7.lnk
Category:	dropped
Dump:	MFDBG_bb5e2b165ced4da6910b9b2f501cf0b7.lnk.7.dr
ID:	dr_696
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:48 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.922533415061107
Encrypted:	false
Ssdeep:	24:8TBfP8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8VMEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_bbd6cab15775415da939bf17c00ccce3.lnk
Category:	dropped
Dump:	MFDBG_bbd6cab15775415da939bf17c00ccce3.lnk.7.dr
ID:	dr_201
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:48 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.922973837117898
Encrypted:	false
Ssdeep:	24:8PBfn+8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8ZLEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_bbf25726f3044233a4aedf0a765446ed.lnk
Category:	dropped
Dump:	MFDBG_bbf25726f3044233a4aedf0a765446ed.lnk.7.dr
ID:	dr_629
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:46 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.922991761015385
Encrypted:	false
Ssdeep:	24:8FBfZ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8HWEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_bc5ea7ed009a459591d35a800810bcd3.lnk
Category:	dropped
Dump:	MFDBG_bc5ea7ed009a459591d35a800810bcd3.lnk.7.dr
ID:	dr_557
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:29 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.932930127889105
Encrypted:	false
Ssdeep:	24:8YBfT8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8W4EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_bc6d44af05e14824b7274bd7d2296c41.lnk
Category:	dropped
Dump:	MFDBG_bc6d44af05e14824b7274bd7d2296c41.lnk.7.dr
ID:	dr_650
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:46 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9226478319179705
Encrypted:	false
Ssdeep:	24:8FWBfW8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8SDEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_bd17416a66b8436c81fbf5bf32e75e46.lnk
Category:	dropped
Dump:	MFDBG_bd17416a66b8436c81fbf5bf32e75e46.lnk.7.dr
ID:	dr_846
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:55 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.925105824346167
Encrypted:	false
Ssdeep:	24:8SBfAP8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8A9EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_bd17f4d0fe2a415197ba84208543e21a.lnk
Category:	dropped
Dump:	MFDBG_bd17f4d0fe2a415197ba84208543e21a.lnk.7.dr
ID:	dr_746
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:51 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.929061969716804
Encrypted:	false
Ssdeep:	24:85TBf8+8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:87ETEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_bd465e8b637d4cc79ac948b8ac6dd6a4.lnk
Category:	dropped
Dump:	MFDBG_bd465e8b637d4cc79ac948b8ac6dd6a4.lnk.7.dr
ID:	dr_97
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:39 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.928184029256583
Encrypted:	false
Ssdeep:	24:8PBfz8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8ZYEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_bd64922bc23b4ccc86a48c01ec62bdf3.lnk
Category:	dropped
Dump:	MFDBG_bd64922bc23b4ccc86a48c01ec62bdf3.lnk.7.dr
ID:	dr_173
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:44 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9301589851333985
Encrypted:	false
Ssdeep:	24:8CBfHf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8wcEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_bdee6357f6c44cc09eb37fe3e65ed7dc.lnk
Category:	dropped
Dump:	MFDBG_bdee6357f6c44cc09eb37fe3e65ed7dc.lnk.7.dr
ID:	dr_930
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:03 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.921868315940258
Encrypted:	false
Ssdeep:	24:8TBfMN8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8VUaEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_be028939d885480487399a1f9ba584c6.lnk
Category:	dropped
Dump:	MFDBG_be028939d885480487399a1f9ba584c6.lnk.7.dr
ID:	dr_744
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:51 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.926833489529155
Encrypted:	false
Ssdeep:	24:8hJiTBf8+8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8hEETEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_be1b472c0c1b45ee848d67e87235f1c4.lnk
Category:	dropped
Dump:	MFDBG_be1b472c0c1b45ee848d67e87235f1c4.lnk.7.dr
ID:	dr_873
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:51 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.932461344650657
Encrypted:	false
Ssdeep:	24:8xa3Bf28EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8YzEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_be3e0245798a4224b34d9ee9a0a7d657.lnk
Category:	dropped
Dump:	MFDBG_be3e0245798a4224b34d9ee9a0a7d657.lnk.7.dr
ID:	dr_945
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:14 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.924352738026983
Encrypted:	false
Ssdeep:	24:8Y2Bfs8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8Y8BEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_bf00ac8092d34e2080945734fdbba1c6.lnk
Category:	dropped
Dump:	MFDBG_bf00ac8092d34e2080945734fdbba1c6.lnk.7.dr
ID:	dr_534
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:29 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.924750204968274
Encrypted:	false
Ssdeep:	24:8rBfeQ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8d2FEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_bfdcb133505a4d51a487911c1ca898d2.lnk
Category:	dropped
Dump:	MFDBG_bfdcb133505a4d51a487911c1ca898d2.lnk.7.dr
ID:	dr_213
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:48 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.912890603169357
Encrypted:	false
Ssdeep:	24:8RBfmQ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8reFEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_bfeda46592ff464ebaeae8e45cb96243.lnk
Category:	dropped
Dump:	MFDBG_bfeda46592ff464ebaeae8e45cb96243.lnk.7.dr
ID:	dr_964
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:15 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920284644055136
Encrypted:	false
Ssdeep:	24:8gBfa8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8uPEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c01b24c3f1c340ccb898de8656c800c8.lnk
Category:	dropped
Dump:	MFDBG_c01b24c3f1c340ccb898de8656c800c8.lnk.7.dr
ID:	dr_291
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:49 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923235381124656
Encrypted:	false
Ssdeep:	24:8N5Bf48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8NjFEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c04398a29594406ea5ca6be4eec2eb95.lnk
Category:	dropped
Dump:	MFDBG_c04398a29594406ea5ca6be4eec2eb95.lnk.7.dr
ID:	dr_390
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:11 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923741176750014
Encrypted:	false
Ssdeep:	24:8MBf68EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8CfEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c05893d423f443539ffd74d879d727d9.lnk
Category:	dropped
Dump:	MFDBG_c05893d423f443539ffd74d879d727d9.lnk.7.dr
ID:	dr_676
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:46 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.921223128106846
Encrypted:	false
Ssdeep:	24:8+Bf68EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8UfEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c08ec426f6ae45428894960cfe77236d.lnk
Category:	dropped
Dump:	MFDBG_c08ec426f6ae45428894960cfe77236d.lnk.7.dr
ID:	dr_840
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:55 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.921891146388106
Encrypted:	false
Ssdeep:	24:81QBfi8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:81eHEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c1615bd8dbc24c0abd75af6fdecfa905.lnk
Category:	dropped
Dump:	MFDBG_c1615bd8dbc24c0abd75af6fdecfa905.lnk.7.dr
ID:	dr_505
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:29 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.916658269245778
Encrypted:	false
Ssdeep:	24:8LBfeQ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:892FEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c180b78f6ae9498fbf22ec331d77bd3f.lnk
Category:	dropped
Dump:	MFDBG_c180b78f6ae9498fbf22ec331d77bd3f.lnk.7.dr
ID:	dr_316
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:50 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.92827201645492
Encrypted:	false
Ssdeep:	24:8YuBfX8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8YEEEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c18bbfa506ae42f3acf58c88617753d6.lnk
Category:	dropped
Dump:	MFDBG_c18bbfa506ae42f3acf58c88617753d6.lnk.7.dr
ID:	dr_620
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:41 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9246598001816935
Encrypted:	false
Ssdeep:	24:8uBfo8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8EFEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c1fe8295eb164f2ab6b8488ffb0fc20e.lnk
Category:	dropped
Dump:	MFDBG_c1fe8295eb164f2ab6b8488ffb0fc20e.lnk.7.dr
ID:	dr_975
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:04 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.916150056032175
Encrypted:	false
Ssdeep:	24:8ABfEf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8OBEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c20423503e5345778f9e4e47df1c79c7.lnk
Category:	dropped
Dump:	MFDBG_c20423503e5345778f9e4e47df1c79c7.lnk.7.dr
ID:	dr_338
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:58 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.929692619483197
Encrypted:	false
Ssdeep:	24:8KBfVkD8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8It9EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c2291ad259a44eb39743c51fe7f859ba.lnk
Category:	dropped
Dump:	MFDBG_c2291ad259a44eb39743c51fe7f859ba.lnk.7.dr
ID:	dr_242
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:45 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.91250706098905
Encrypted:	false
Ssdeep:	24:8Nf3BfMYH8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8NJUJEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c22ddca1cdfe4e9ab0e78abee346f329.lnk
Category:	dropped
Dump:	MFDBG_c22ddca1cdfe4e9ab0e78abee346f329.lnk.7.dr
ID:	dr_556
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:29 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.927475829576027
Encrypted:	false
Ssdeep:	24:8FqBfT8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8q4EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c248998bc7984c0a9363c00298387770.lnk
Category:	dropped
Dump:	MFDBG_c248998bc7984c0a9363c00298387770.lnk.7.dr
ID:	dr_987
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:15 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9192651278852955
Encrypted:	false
Ssdeep:	24:8WBfm8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8cDEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c29943771c15413eb51ad2bc0b08131a.lnk
Category:	dropped
Dump:	MFDBG_c29943771c15413eb51ad2bc0b08131a.lnk.7.dr
ID:	dr_507
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:29 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.924463484299295
Encrypted:	false
Ssdeep:	24:8ABf/8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8OMEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c2c87489ad2342da96371ae94ed441ea.lnk
Category:	dropped
Dump:	MFDBG_c2c87489ad2342da96371ae94ed441ea.lnk.7.dr
ID:	dr_901
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:03 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.925969656937662
Encrypted:	false
Ssdeep:	24:8Bc3Bfk8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8BEJEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c2e9f789f8484ce7832a97e074f2a08c.lnk
Category:	dropped
Dump:	MFDBG_c2e9f789f8484ce7832a97e074f2a08c.lnk.7.dr
ID:	dr_172
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:47 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.915498919335847
Encrypted:	false
Ssdeep:	24:8dWuBfmQ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8sEeFEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c2f6a3df34f04616acb3ab443bd37ce0.lnk
Category:	dropped
Dump:	MFDBG_c2f6a3df34f04616acb3ab443bd37ce0.lnk.7.dr
ID:	dr_681
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:46 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.91585531566727
Encrypted:	false
Ssdeep:	24:836Bf68EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:834fEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c3123ef38c0c4649983a5c859d6ad2e7.lnk
Category:	dropped
Dump:	MFDBG_c3123ef38c0c4649983a5c859d6ad2e7.lnk.7.dr
ID:	dr_925
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:04 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923343709808723
Encrypted:	false
Ssdeep:	24:8NAuBf8f8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8NdZEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c31418e184c142fc9b2fe72f5bf988d2.lnk
Category:	dropped
Dump:	MFDBG_c31418e184c142fc9b2fe72f5bf988d2.lnk.7.dr
ID:	dr_34
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:38 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.927964954300208
Encrypted:	false
Ssdeep:	24:8OQBfs8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8OeREvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c315579c9c1249de89fbe8c940a13a30.lnk
Category:	dropped
Dump:	MFDBG_c315579c9c1249de89fbe8c940a13a30.lnk.7.dr
ID:	dr_956
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:04 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.918908293248056
Encrypted:	false
Ssdeep:	24:8yBfEf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8gBEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c31a7c420d8a4d4696f672280bb2c4b6.lnk
Category:	dropped
Dump:	MFDBG_c31a7c420d8a4d4696f672280bb2c4b6.lnk.7.dr
ID:	dr_990
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:16 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923454456081033
Encrypted:	false
Ssdeep:	24:83Bfm8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8RDEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c352aef064a646779ce42fa7630dfb53.lnk
Category:	dropped
Dump:	MFDBG_c352aef064a646779ce42fa7630dfb53.lnk.7.dr
ID:	dr_950
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:04 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.927964954300207
Encrypted:	false
Ssdeep:	24:8Q3Bf8f8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8QRZEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c3877562359349878c87b2693f1c6452.lnk
Category:	dropped
Dump:	MFDBG_c3877562359349878c87b2693f1c6452.lnk.7.dr
ID:	dr_626
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:41 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.922013511567026
Encrypted:	false
Ssdeep:	24:8vBf/8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:858EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c4db55aecc6e4422a3e683d4420d2bdc.lnk
Category:	dropped
Dump:	MFDBG_c4db55aecc6e4422a3e683d4420d2bdc.lnk.7.dr
ID:	dr_747
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:48 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.918415403162525
Encrypted:	false
Ssdeep:	24:8pBfq8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8TPEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c5211a2b2a41435ba7ed73fd2bc20cb8.lnk
Category:	dropped
Dump:	MFDBG_c5211a2b2a41435ba7ed73fd2bc20cb8.lnk.7.dr
ID:	dr_512
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:29 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9218910750142335
Encrypted:	false
Ssdeep:	24:8NqBfeQ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8No2FEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c537fcc881fd49cabaab9f159b7ddb28.lnk
Category:	dropped
Dump:	MFDBG_c537fcc881fd49cabaab9f159b7ddb28.lnk.7.dr
ID:	dr_1028
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:19 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.924872641521066
Encrypted:	false
Ssdeep:	24:8vBfB8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:85OEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c56adcd7efc342e18a61a20a14d51c43.lnk
Category:	dropped
Dump:	MFDBG_c56adcd7efc342e18a61a20a14d51c43.lnk.7.dr
ID:	dr_700
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:51 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.931489183375097
Encrypted:	false
Ssdeep:	24:8oBf8+8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8mETEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c5b3908ee7e240a09481bea946407c6b.lnk
Category:	dropped
Dump:	MFDBG_c5b3908ee7e240a09481bea946407c6b.lnk.7.dr
ID:	dr_58
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:43 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.930912071452584
Encrypted:	false
Ssdeep:	24:8KBf48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8IFEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c5be5b02ea4b4047b95f86b24240ed8d.lnk
Category:	dropped
Dump:	MFDBG_c5be5b02ea4b4047b95f86b24240ed8d.lnk.7.dr
ID:	dr_942
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:14 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.928396870595955
Encrypted:	false
Ssdeep:	24:8xBfs8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8LBEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c60ddea941e4478ba05ccbd759858d3e.lnk
Category:	dropped
Dump:	MFDBG_c60ddea941e4478ba05ccbd759858d3e.lnk.7.dr
ID:	dr_823
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:50 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.917986049899229
Encrypted:	false
Ssdeep:	24:8OBff48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8kdEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c619a5c38b314ba3a63637abb07f2e2c.lnk
Category:	dropped
Dump:	MFDBG_c619a5c38b314ba3a63637abb07f2e2c.lnk.7.dr
ID:	dr_809
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:53 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920106201402811
Encrypted:	false
Ssdeep:	24:8GBfJ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8MWEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c62c32d63da94d74800bb8d867dc2cc3.lnk
Category:	dropped
Dump:	MFDBG_c62c32d63da94d74800bb8d867dc2cc3.lnk.7.dr
ID:	dr_87
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:38 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920106201402814
Encrypted:	false
Ssdeep:	24:8tBf/P48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8f3FEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c65b60d43cf7410dbdea0fca4675ba57.lnk
Category:	dropped
Dump:	MFDBG_c65b60d43cf7410dbdea0fca4675ba57.lnk.7.dr
ID:	dr_624
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:41 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.925895777608052
Encrypted:	false
Ssdeep:	24:8NBf/8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8/8EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c65dfbcc6f644407af3230082d585b4d.lnk
Category:	dropped
Dump:	MFDBG_c65dfbcc6f644407af3230082d585b4d.lnk.7.dr
ID:	dr_56
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:43 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.929149956915139
Encrypted:	false
Ssdeep:	24:8hBfs8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:87REvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c66780075c16437399490e20625aefa3.lnk
Category:	dropped
Dump:	MFDBG_c66780075c16437399490e20625aefa3.lnk.7.dr
ID:	dr_992
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:16 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.921328070960446
Encrypted:	false
Ssdeep:	24:8dBfm8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8PzEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c669faa194c148adbd71d355ac4cf53c.lnk
Category:	dropped
Dump:	MFDBG_c669faa194c148adbd71d355ac4cf53c.lnk.7.dr
ID:	dr_98
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:39 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.918726230678587
Encrypted:	false
Ssdeep:	24:81Bfz8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:83YEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c6e9fca622764e5b93489c56ffbecf68.lnk
Category:	dropped
Dump:	MFDBG_c6e9fca622764e5b93489c56ffbecf68.lnk.7.dr
ID:	dr_219
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:40 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.921692341543589
Encrypted:	false
Ssdeep:	24:8HQBfL8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8HegEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c731861d3e66437696f840c3de15ff17.lnk
Category:	dropped
Dump:	MFDBG_c731861d3e66437696f840c3de15ff17.lnk.7.dr
ID:	dr_471
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:27 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.915962391355026
Encrypted:	false
Ssdeep:	24:8RBfp8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8rGEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c7dd6f8bf0704bf793fa276e6f560cb6.lnk
Category:	dropped
Dump:	MFDBG_c7dd6f8bf0704bf793fa276e6f560cb6.lnk.7.dr
ID:	dr_804
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:49 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.924207542400216
Encrypted:	false
Ssdeep:	24:822BfY8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:828VEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c7ebeefdbf074595ab60303486696b62.lnk
Category:	dropped
Dump:	MFDBG_c7ebeefdbf074595ab60303486696b62.lnk.7.dr
ID:	dr_799
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:49 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.924895400595043
Encrypted:	false
Ssdeep:	24:86Bf98EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:84yEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c853476168ab4c93847c24a0e1ad225a.lnk
Category:	dropped
Dump:	MFDBG_c853476168ab4c93847c24a0e1ad225a.lnk.7.dr
ID:	dr_759
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:44 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923472329311109
Encrypted:	false
Ssdeep:	24:83BfDf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8RbEEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c85666bd69894731ab36d103658446b2.lnk
Category:	dropped
Dump:	MFDBG_c85666bd69894731ab36d103658446b2.lnk.7.dr
ID:	dr_787
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:44 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.925969656937662
Encrypted:	false
Ssdeep:	24:8FPBfDf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8fbEEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c85a93c519c1402fb19602fa26d1bb30.lnk
Category:	dropped
Dump:	MFDBG_c85a93c519c1402fb19602fa26d1bb30.lnk.7.dr
ID:	dr_802
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:49 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920274156103555
Encrypted:	false
Ssdeep:	24:8FBfY8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8HVEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c889471adc3044cba2771738dc11bd54.lnk
Category:	dropped
Dump:	MFDBG_c889471adc3044cba2771738dc11bd54.lnk.7.dr
ID:	dr_50
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:38 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.932586198791694
Encrypted:	false
Ssdeep:	24:8aBfD8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8Y4EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c8a5a589279f40a3875168e1117663b6.lnk
Category:	dropped
Dump:	MFDBG_c8a5a589279f40a3875168e1117663b6.lnk.7.dr
ID:	dr_164
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:40 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.919178977433289
Encrypted:	false
Ssdeep:	24:8FBfO8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8HrEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c8b1b7822b824dd2bbc40d929ae773ca.lnk
Category:	dropped
Dump:	MFDBG_c8b1b7822b824dd2bbc40d929ae773ca.lnk.7.dr
ID:	dr_674
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:43 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923826746360102
Encrypted:	false
Ssdeep:	24:88BfEO8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8yuEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c8b354c7be1c4f4babe8e2983f0f0edd.lnk
Category:	dropped
Dump:	MFDBG_c8b354c7be1c4f4babe8e2983f0f0edd.lnk.7.dr
ID:	dr_717
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:43 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.930070997935065
Encrypted:	false
Ssdeep:	24:8iBfh8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8QOEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c9d0cd915b1c48ed9caf11b313d6eee3.lnk
Category:	dropped
Dump:	MFDBG_c9d0cd915b1c48ed9caf11b313d6eee3.lnk.7.dr
ID:	dr_524
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:14 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.913320247321065
Encrypted:	false
Ssdeep:	24:8QBf6D8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8eyQEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c9dcfb2f36d14592a2f0aac782316c9d.lnk
Category:	dropped
Dump:	MFDBG_c9dcfb2f36d14592a2f0aac782316c9d.lnk.7.dr
ID:	dr_385
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:02 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.918489282492135
Encrypted:	false
Ssdeep:	24:83BfI48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8Rg9EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c9ea8d257d884379b631f2f19fd6cc78.lnk
Category:	dropped
Dump:	MFDBG_c9ea8d257d884379b631f2f19fd6cc78.lnk.7.dr
ID:	dr_33
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:43 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.922789356960184
Encrypted:	false
Ssdeep:	24:83Bfu8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8R7EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c9f16771133b481da790524d5b6a796c.lnk
Category:	dropped
Dump:	MFDBG_c9f16771133b481da790524d5b6a796c.lnk.7.dr
ID:	dr_911
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:56 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.918614136633172
Encrypted:	false
Ssdeep:	24:82Bfc8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:88REvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ca2a9f24088a492ba1ac9efd6006908f.lnk
Category:	dropped
Dump:	MFDBG_ca2a9f24088a492ba1ac9efd6006908f.lnk.7.dr
ID:	dr_753
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:43 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.930824084254248
Encrypted:	false
Ssdeep:	24:8YBf48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8W1EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ca5c496c519d470983557f85790a9a98.lnk
Category:	dropped
Dump:	MFDBG_ca5c496c519d470983557f85790a9a98.lnk.7.dr
ID:	dr_548
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:14 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.924784654322731
Encrypted:	false
Ssdeep:	24:8YYrBfs8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8NdBEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_cab1c5f535b14b819ae0b5bf302f72a2.lnk
Category:	dropped
Dump:	MFDBG_cab1c5f535b14b819ae0b5bf302f72a2.lnk.7.dr
ID:	dr_218
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:40 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.921692341543588
Encrypted:	false
Ssdeep:	24:8QBfL8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8egEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_cb3770bd64ae4facbb95bb90dfd311bc.lnk
Category:	dropped
Dump:	MFDBG_cb3770bd64ae4facbb95bb90dfd311bc.lnk.7.dr
ID:	dr_1016
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:18 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923040413015362
Encrypted:	false
Ssdeep:	24:8vQBfm4p8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8ve+9EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_cb880494154649f388587718ba6c9215.lnk
Category:	dropped
Dump:	MFDBG_cb880494154649f388587718ba6c9215.lnk.7.dr
ID:	dr_891
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:56 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.929678366170266
Encrypted:	false
Ssdeep:	24:8fBfh48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8p59EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_cba69b44adf34ca7a7f87b7f18d4d368.lnk
Category:	dropped
Dump:	MFDBG_cba69b44adf34ca7a7f87b7f18d4d368.lnk.7.dr
ID:	dr_815
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:45 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.92074052175376
Encrypted:	false
Ssdeep:	24:83lBfff8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:83nXEEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_cc1f32a83c8542fdb3ef08d2045eee7e.lnk
Category:	dropped
Dump:	MFDBG_cc1f32a83c8542fdb3ef08d2045eee7e.lnk.7.dr
ID:	dr_958
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:04 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.922608496719614
Encrypted:	false
Ssdeep:	24:8nBfEf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8BBEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_cc32c7736da54040b2011c22d23448a4.lnk
Category:	dropped
Dump:	MFDBG_cc32c7736da54040b2011c22d23448a4.lnk.7.dr
ID:	dr_921
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:03 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.918650718821785
Encrypted:	false
Ssdeep:	24:8XBfk8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8xJEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ccafc754268d46878ad8d1e393464837.lnk
Category:	dropped
Dump:	MFDBG_ccafc754268d46878ad8d1e393464837.lnk.7.dr
ID:	dr_839
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:49 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.922320573721735
Encrypted:	false
Ssdeep:	24:8MBfl8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8CqEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_cce8e502292f47f19e448bee4375b557.lnk
Category:	dropped
Dump:	MFDBG_cce8e502292f47f19e448bee4375b557.lnk.7.dr
ID:	dr_270
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:49 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.928828786891701
Encrypted:	false
Ssdeep:	24:8VpBfiD8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8FaQEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_cced82f205f241c6a8aab111ffbaad83.lnk
Category:	dropped
Dump:	MFDBG_cced82f205f241c6a8aab111ffbaad83.lnk.7.dr
ID:	dr_1025
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:18 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.92354244327937
Encrypted:	false
Ssdeep:	24:8wQBfB8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8lOEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_cd2304c8038143d8aa8f6aab6f85144e.lnk
Category:	dropped
Dump:	MFDBG_cd2304c8038143d8aa8f6aab6f85144e.lnk.7.dr
ID:	dr_283
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:57 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920114707163857
Encrypted:	false
Ssdeep:	24:82Bfk8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:88JEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_cd578e914bf84f60934aa8e92c09c9a7.lnk
Category:	dropped
Dump:	MFDBG_cd578e914bf84f60934aa8e92c09c9a7.lnk.7.dr
ID:	dr_699
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:48 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.919948100236219
Encrypted:	false
Ssdeep:	24:8S3BfP8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8GMEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_cd65a8ba5aa64527b9412bd7d63a9f2c.lnk
Category:	dropped
Dump:	MFDBG_cd65a8ba5aa64527b9412bd7d63a9f2c.lnk.7.dr
ID:	dr_796
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:49 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9217803287419235
Encrypted:	false
Ssdeep:	24:8dyBf98EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8dgyEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_cdb09e8fa2ed4c34b49da65184cc0f92.lnk
Category:	dropped
Dump:	MFDBG_cdb09e8fa2ed4c34b49da65184cc0f92.lnk.7.dr
ID:	dr_365
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:09 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.928396870595956
Encrypted:	false
Ssdeep:	24:8YBf08EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8W5EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_cdd0375322dc48738e770e5624bf6a27.lnk
Category:	dropped
Dump:	MFDBG_cdd0375322dc48738e770e5624bf6a27.lnk.7.dr
ID:	dr_141
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:47 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.92350543089246
Encrypted:	false
Ssdeep:	24:8kBfT+8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8KLTEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_cde732e5dddd4a47bcdc18deaf833198.lnk
Category:	dropped
Dump:	MFDBG_cde732e5dddd4a47bcdc18deaf833198.lnk.7.dr
ID:	dr_1031
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:19 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.931921099670845
Encrypted:	false
Ssdeep:	24:8yBfWQ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8geFEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_cde887806a29420db17e28ba93f99804.lnk
Category:	dropped
Dump:	MFDBG_cde887806a29420db17e28ba93f99804.lnk.7.dr
ID:	dr_884
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:56 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.931921099670845
Encrypted:	false
Ssdeep:	24:8uBfh48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8E59EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ce21d56bdf234704a66c2040b18a1a63.lnk
Category:	dropped
Dump:	MFDBG_ce21d56bdf234704a66c2040b18a1a63.lnk.7.dr
ID:	dr_967
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:15 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.916396144397104
Encrypted:	false
Ssdeep:	24:8aBfa8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8YPEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ce8ed0209632479a9250d4a86c2afdd2.lnk
Category:	dropped
Dump:	MFDBG_ce8ed0209632479a9250d4a86c2afdd2.lnk.7.dr
ID:	dr_54
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:43 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9283968705959555
Encrypted:	false
Ssdeep:	24:8oBfs8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8mREvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ceef6a4f9abf48ce82b565dd0a17baf6.lnk
Category:	dropped
Dump:	MFDBG_ceef6a4f9abf48ce82b565dd0a17baf6.lnk.7.dr
ID:	dr_826
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:54 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920303450510237
Encrypted:	false
Ssdeep:	24:8JBf48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8zlEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_cf01dcc753df4680a75acb2fa182ef74.lnk
Category:	dropped
Dump:	MFDBG_cf01dcc753df4680a75acb2fa182ef74.lnk.7.dr
ID:	dr_664
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:46 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923224943840485
Encrypted:	false
Ssdeep:	24:88Bf68EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8yfEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_cf14c5bcafa646f3ad50e3957ed1be81.lnk
Category:	dropped
Dump:	MFDBG_cf14c5bcafa646f3ad50e3957ed1be81.lnk.7.dr
ID:	dr_695
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:51 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.924191016943245
Encrypted:	false
Ssdeep:	24:89RBf8+8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8pETEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_cf2eb955b118455183b99f70ee7a025b.lnk
Category:	dropped
Dump:	MFDBG_cf2eb955b118455183b99f70ee7a025b.lnk.7.dr
ID:	dr_959
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:04 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.922608496719614
Encrypted:	false
Ssdeep:	24:8ABfEf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8OBEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_cf5027baf925495493cc9ba1808b637e.lnk
Category:	dropped
Dump:	MFDBG_cf5027baf925495493cc9ba1808b637e.lnk.7.dr
ID:	dr_720
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:51 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9314891833750965
Encrypted:	false
Ssdeep:	24:8BdrBf8+8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8BddETEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_cff5ba8843db495f96a70aaf05b73c10.lnk
Category:	dropped
Dump:	MFDBG_cff5ba8843db495f96a70aaf05b73c10.lnk.7.dr
ID:	dr_598
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:30 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.909965430473891
Encrypted:	false
Ssdeep:	24:8PBfU98EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8Z5EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d011912d60dc46f9b4de0e35fa255952.lnk
Category:	dropped
Dump:	MFDBG_d011912d60dc46f9b4de0e35fa255952.lnk.7.dr
ID:	dr_874
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:55 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9283968705959555
Encrypted:	false
Ssdeep:	24:8VBfi8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8XHEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d0373579bea044a6894a7bae88f94728.lnk
Category:	dropped
Dump:	MFDBG_d0373579bea044a6894a7bae88f94728.lnk.7.dr
ID:	dr_574
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:29 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.930070997935063
Encrypted:	false
Ssdeep:	24:8DQBfs8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8ahEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d0b86dee567047b79fc76e830a709cf9.lnk
Category:	dropped
Dump:	MFDBG_d0b86dee567047b79fc76e830a709cf9.lnk.7.dr
ID:	dr_932
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:04 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.921731626074535
Encrypted:	false
Ssdeep:	24:8dc3BfMN8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8dEUaEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d11772abf56f4d40937e6f0d0ed6aa4e.lnk
Category:	dropped
Dump:	MFDBG_d11772abf56f4d40937e6f0d0ed6aa4e.lnk.7.dr
ID:	dr_400
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:02 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920202694362192
Encrypted:	false
Ssdeep:	24:8rBfA8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8ddEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d16e7767b8eb4f00a8f4d02a25225145.lnk
Category:	dropped
Dump:	MFDBG_d16e7767b8eb4f00a8f4d02a25225145.lnk.7.dr
ID:	dr_135
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:44 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.925216570618479
Encrypted:	false
Ssdeep:	24:8lBfLf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8nQEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d19f0520d104456b8957290f449092a8.lnk
Category:	dropped
Dump:	MFDBG_d19f0520d104456b8957290f449092a8.lnk.7.dr
ID:	dr_822
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:54 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923827679585127
Encrypted:	false
Ssdeep:	24:8jBf48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8llEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d1b713c1cb734b1cbcf1bf616fef5d7d.lnk
Category:	dropped
Dump:	MFDBG_d1b713c1cb734b1cbcf1bf616fef5d7d.lnk.7.dr
ID:	dr_731
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:51 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.922337099178707
Encrypted:	false
Ssdeep:	24:8qTBf88EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8mBEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d22e19e6daf4499a99e1ce2d7f6ad58d.lnk
Category:	dropped
Dump:	MFDBG_d22e19e6daf4499a99e1ce2d7f6ad58d.lnk.7.dr
ID:	dr_162
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:40 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.92037383358237
Encrypted:	false
Ssdeep:	24:8WQBfO8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8WerEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d23023bf2d6c4e4fab1fd21da1cbf7a0.lnk
Category:	dropped
Dump:	MFDBG_d23023bf2d6c4e4fab1fd21da1cbf7a0.lnk.7.dr
ID:	dr_200
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:45 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.911952708140511
Encrypted:	false
Ssdeep:	24:8QBfMYH8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8eUJEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d24ea315e05d4f7c8b1a9dc726826917.lnk
Category:	dropped
Dump:	MFDBG_d24ea315e05d4f7c8b1a9dc726826917.lnk.7.dr
ID:	dr_546
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:14 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.926890697957589
Encrypted:	false
Ssdeep:	24:8+2Bfs8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8RBEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d3515252f24d45c6ba8060c8a0f6dcee.lnk
Category:	dropped
Dump:	MFDBG_d3515252f24d45c6ba8060c8a0f6dcee.lnk.7.dr
ID:	dr_586
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:30 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.917176812036308
Encrypted:	false
Ssdeep:	24:82Bfs8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:88hEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d366692687804ad8a85db70662bfb2d7.lnk
Category:	dropped
Dump:	MFDBG_d366692687804ad8a85db70662bfb2d7.lnk.7.dr
ID:	dr_638
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:41 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.924872641521066
Encrypted:	false
Ssdeep:	24:8kBfEX8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8KhEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d3a62b5995a341baa7304236f7429b3e.lnk
Category:	dropped
Dump:	MFDBG_d3a62b5995a341baa7304236f7429b3e.lnk.7.dr
ID:	dr_578
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:30 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.928740799693367
Encrypted:	false
Ssdeep:	24:8tBfs8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8fhEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d3c649f6de2c401789fcb37232195770.lnk
Category:	dropped
Dump:	MFDBG_d3c649f6de2c401789fcb37232195770.lnk.7.dr
ID:	dr_247
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:49 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.927265405824903
Encrypted:	false
Ssdeep:	24:8UBfiD8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:86aQEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d440493b3dce4ded809ab54706b6134e.lnk
Category:	dropped
Dump:	MFDBG_d440493b3dce4ded809ab54706b6134e.lnk.7.dr
ID:	dr_267
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:57 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.924406275870862
Encrypted:	false
Ssdeep:	24:84BfC8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:82nEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d4a72249031d4f969e1e6be20b01f78d.lnk
Category:	dropped
Dump:	MFDBG_d4a72249031d4f969e1e6be20b01f78d.lnk.7.dr
ID:	dr_506
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:14 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.919265127885295
Encrypted:	false
Ssdeep:	24:8UrBf6D8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:82yQEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d4abadb793a24bbf8b9c4317aea56901.lnk
Category:	dropped
Dump:	MFDBG_d4abadb793a24bbf8b9c4317aea56901.lnk.7.dr
ID:	dr_749
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:48 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.922287326696178
Encrypted:	false
Ssdeep:	24:8ZBfP8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8DMEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d4ade3b0c3da42618c0d49ba137e6d8d.lnk
Category:	dropped
Dump:	MFDBG_d4ade3b0c3da42618c0d49ba137e6d8d.lnk.7.dr
ID:	dr_1041
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:19 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.929493886012551
Encrypted:	false
Ssdeep:	24:8yrBfh48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8ydp9EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d4b3b0f7820c4af189004b7b5781f896.lnk
Category:	dropped
Dump:	MFDBG_d4b3b0f7820c4af189004b7b5781f896.lnk.7.dr
ID:	dr_677
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:46 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.921259995049548
Encrypted:	false
Ssdeep:	24:8xrBf68EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8xdfEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d4b9f77d33834f3aafdf8ba5f09babc6.lnk
Category:	dropped
Dump:	MFDBG_d4b9f77d33834f3aafdf8ba5f09babc6.lnk.7.dr
ID:	dr_502
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:14 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.931850985702587
Encrypted:	false
Ssdeep:	24:8HBfK8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8h/EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d5071a10c08a4b8ca933aea9366f6c53.lnk
Category:	dropped
Dump:	MFDBG_d5071a10c08a4b8ca933aea9366f6c53.lnk.7.dr
ID:	dr_675
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:46 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.918603699349
Encrypted:	false
Ssdeep:	24:8tBf68EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8ffEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d56cdf3ebaf84c568bbdfa08d0c6af47.lnk
Category:	dropped
Dump:	MFDBG_d56cdf3ebaf84c568bbdfa08d0c6af47.lnk.7.dr
ID:	dr_381
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:00 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.92358979817365
Encrypted:	false
Ssdeep:	24:844QBfe8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:844erEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d56f39a00fba487b853a6384ba548f6e.lnk
Category:	dropped
Dump:	MFDBG_d56f39a00fba487b853a6384ba548f6e.lnk.7.dr
ID:	dr_460
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:12 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.92033131386458
Encrypted:	false
Ssdeep:	24:8gTBf+p8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8IGOEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d5e849c7e90d4d4bb762678af2f09dd1.lnk
Category:	dropped
Dump:	MFDBG_d5e849c7e90d4d4bb762678af2f09dd1.lnk.7.dr
ID:	dr_1022
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:18 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.927661657506848
Encrypted:	false
Ssdeep:	24:8jBfa8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8lvEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d62ed2d4448344e3bbda3badf1061be8.lnk
Category:	dropped
Dump:	MFDBG_d62ed2d4448344e3bbda3badf1061be8.lnk.7.dr
ID:	dr_301
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:57 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.921692341543589
Encrypted:	false
Ssdeep:	24:8gBfk8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8uJEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d64808adce754949a5503cb813f04742.lnk
Category:	dropped
Dump:	MFDBG_d64808adce754949a5503cb813f04742.lnk.7.dr
ID:	dr_834
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:54 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.921348412446175
Encrypted:	false
Ssdeep:	24:81BfMMQ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:83UEEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d6599472534f46f486e9f7f7e6f980ad.lnk
Category:	dropped
Dump:	MFDBG_d6599472534f46f486e9f7f7e6f980ad.lnk.7.dr
ID:	dr_745
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:48 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.924119555201881
Encrypted:	false
Ssdeep:	24:8mBfq8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8sPEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d67349736ec14b3e92f074e61e3680f7.lnk
Category:	dropped
Dump:	MFDBG_d67349736ec14b3e92f074e61e3680f7.lnk.7.dr
ID:	dr_865
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:56 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.930502914230813
Encrypted:	false
Ssdeep:	24:8tBfh48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8f59EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d704bce04c8c478591fe48d430c6b986.lnk
Category:	dropped
Dump:	MFDBG_d704bce04c8c478591fe48d430c6b986.lnk.7.dr
ID:	dr_927
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:56 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.91966621474373
Encrypted:	false
Ssdeep:	24:8kBfw8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8KtEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d72384b7b2e14e968f515cf042ff0e18.lnk
Category:	dropped
Dump:	MFDBG_d72384b7b2e14e968f515cf042ff0e18.lnk.7.dr
ID:	dr_668
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:46 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.915118754805057
Encrypted:	false
Ssdeep:	24:8fBfW8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8pDEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d7d273631b394c039fbbe1f6d9cba66a.lnk
Category:	dropped
Dump:	MFDBG_d7d273631b394c039fbbe1f6d9cba66a.lnk.7.dr
ID:	dr_708
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:51 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.932586198791694
Encrypted:	false
Ssdeep:	24:8+Bfbl8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8U+EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d8c6811c2b944dc6833d42edf3fd7710.lnk
Category:	dropped
Dump:	MFDBG_d8c6811c2b944dc6833d42edf3fd7710.lnk.7.dr
ID:	dr_319
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:57 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920646446382626
Encrypted:	false
Ssdeep:	24:8hBfv8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:87cEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d91f2c4dd7ae4b4ab0c4f9cb472863f9.lnk
Category:	dropped
Dump:	MFDBG_d91f2c4dd7ae4b4ab0c4f9cb472863f9.lnk.7.dr
ID:	dr_1050
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:01 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.92622559883674
Encrypted:	false
Ssdeep:	24:8TBfrp8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8VyEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d942bc560a574f63982de9dac58e8db1.lnk
Category:	dropped
Dump:	MFDBG_d942bc560a574f63982de9dac58e8db1.lnk.7.dr
ID:	dr_727
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:44 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9209294016902545
Encrypted:	false
Ssdeep:	24:8D3Bfxf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:89JEEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d95f428b6ef849fb9c290f69f3b9c323.lnk
Category:	dropped
Dump:	MFDBG_d95f428b6ef849fb9c290f69f3b9c323.lnk.7.dr
ID:	dr_706
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:51 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.928740799693369
Encrypted:	false
Ssdeep:	24:8SBfbl8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8A+EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d965b5fb4bfd4e2ab9e3da1a8b262198.lnk
Category:	dropped
Dump:	MFDBG_d965b5fb4bfd4e2ab9e3da1a8b262198.lnk.7.dr
ID:	dr_156
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:39 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.919140273744257
Encrypted:	false
Ssdeep:	24:8+Bfz8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8UYEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d9ce68203eb04024ad3c21a526da950a.lnk
Category:	dropped
Dump:	MFDBG_d9ce68203eb04024ad3c21a526da950a.lnk.7.dr
ID:	dr_469
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:13 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.922431319994047
Encrypted:	false
Ssdeep:	24:8vBfD8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:85oEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d9ecdfbdcb994738aa75d13ba96fb9eb.lnk
Category:	dropped
Dump:	MFDBG_d9ecdfbdcb994738aa75d13ba96fb9eb.lnk.7.dr
ID:	dr_687
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:43 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920177663144176
Encrypted:	false
Ssdeep:	24:8vBfEO8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:85uEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_da4bb175e14a43bebe66fcad1fbf2c24.lnk
Category:	dropped
Dump:	MFDBG_da4bb175e14a43bebe66fcad1fbf2c24.lnk.7.dr
ID:	dr_837
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:49 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920791642009391
Encrypted:	false
Ssdeep:	24:8g6Bfl8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8g4qEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_da590f276b9f42f6b3d0b2600873e18c.lnk
Category:	dropped
Dump:	MFDBG_da590f276b9f42f6b3d0b2600873e18c.lnk.7.dr
ID:	dr_234
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:48 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.91868801596278
Encrypted:	false
Ssdeep:	24:8GBfRo8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8MjEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_daa260e61db3452fa120613d3319de62.lnk
Category:	dropped
Dump:	MFDBG_daa260e61db3452fa120613d3319de62.lnk.7.dr
ID:	dr_378
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:00 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.921037730374321
Encrypted:	false
Ssdeep:	24:85Bfs68EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8jcEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_dadce83b687b427bb24095d1a0baf4f6.lnk
Category:	dropped
Dump:	MFDBG_dadce83b687b427bb24095d1a0baf4f6.lnk.7.dr
ID:	dr_312
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:51 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9235172666171465
Encrypted:	false
Ssdeep:	24:8nBfX8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8BEEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_db0e0a0033264ea2abd75127aac03a26.lnk
Category:	dropped
Dump:	MFDBG_db0e0a0033264ea2abd75127aac03a26.lnk.7.dr
ID:	dr_1036
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:19 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9283968705959555
Encrypted:	false
Ssdeep:	24:89BfWQ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8veFEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_db375625497b450682217713d7e8c1af.lnk
Category:	dropped
Dump:	MFDBG_db375625497b450682217713d7e8c1af.lnk.7.dr
ID:	dr_573
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:29 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9311680133516615
Encrypted:	false
Ssdeep:	24:8SBfs8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8AhEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_db5c4b99112e4fe283f3b096981b6f21.lnk
Category:	dropped
Dump:	MFDBG_db5c4b99112e4fe283f3b096981b6f21.lnk.7.dr
ID:	dr_525
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:14 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.922985672842583
Encrypted:	false
Ssdeep:	24:86Bf6D8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:84yQEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_db7ae24d3e3e4fcb8e554ded9797a120.lnk
Category:	dropped
Dump:	MFDBG_db7ae24d3e3e4fcb8e554ded9797a120.lnk.7.dr
ID:	dr_230
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:45 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.895979170383585
Encrypted:	false
Ssdeep:	24:8ZBf38EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8DEEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_db7fc2a90ef844f49ab5fc2c1497c65c.lnk
Category:	dropped
Dump:	MFDBG_db7fc2a90ef844f49ab5fc2c1497c65c.lnk.7.dr
ID:	dr_698
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:51 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.926546768860175
Encrypted:	false
Ssdeep:	24:8qQBf8+8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8qeETEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_dbafcd30f4f4459e8703c151468fbf2d.lnk
Category:	dropped
Dump:	MFDBG_dbafcd30f4f4459e8703c151468fbf2d.lnk.7.dr
ID:	dr_785
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:44 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.918921198787882
Encrypted:	false
Ssdeep:	24:87FBfbf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8rjEEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_dbca29054fd14f6fba7921fe98daeedf.lnk
Category:	dropped
Dump:	MFDBG_dbca29054fd14f6fba7921fe98daeedf.lnk.7.dr
ID:	dr_405
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:02 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.925503291287458
Encrypted:	false
Ssdeep:	24:8SBfx+8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8AtEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_dc0b7f730d78456594918e0041888b5e.lnk
Category:	dropped
Dump:	MFDBG_dc0b7f730d78456594918e0041888b5e.lnk.7.dr
ID:	dr_999
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:16 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.925702024758105
Encrypted:	false
Ssdeep:	24:8y3Bfm8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8yRzEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_dc10b4db954b4a3cafd3c8d6dc0b3f12.lnk
Category:	dropped
Dump:	MFDBG_dc10b4db954b4a3cafd3c8d6dc0b3f12.lnk.7.dr
ID:	dr_602
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:40 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.922249111980373
Encrypted:	false
Ssdeep:	24:8rBfX48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8dP9EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_dcb80d238ec148b884af12aeb4548d2d.lnk
Category:	dropped
Dump:	MFDBG_dcb80d238ec148b884af12aeb4548d2d.lnk.7.dr
ID:	dr_794
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:49 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.924426617356593
Encrypted:	false
Ssdeep:	24:8wQBf98EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8JyEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_dcfa5d7657ed42419292bb60e212f87a.lnk
Category:	dropped
Dump:	MFDBG_dcfa5d7657ed42419292bb60e212f87a.lnk.7.dr
ID:	dr_831
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:50 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.918241991798307
Encrypted:	false
Ssdeep:	24:8drBff48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8dddEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_dd4604b136a747629e27d3201ce0b0bc.lnk
Category:	dropped
Dump:	MFDBG_dd4604b136a747629e27d3201ce0b0bc.lnk.7.dr
ID:	dr_90
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:38 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9221894859636945
Encrypted:	false
Ssdeep:	24:8NeQBf/P48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8Z3FEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_dd498831bff149b99efb6c9e1c28f413.lnk
Category:	dropped
Dump:	MFDBG_dd498831bff149b99efb6c9e1c28f413.lnk.7.dr
ID:	dr_500
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:13 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923705512136211
Encrypted:	false
Ssdeep:	24:8r2BfK8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8r8/EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_dd78e776cc0141d98fac53795a254411.lnk
Category:	dropped
Dump:	MFDBG_dd78e776cc0141d98fac53795a254411.lnk.7.dr
ID:	dr_249
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:49 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.919020876266696
Encrypted:	false
Ssdeep:	24:82BfY8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:88FEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ddb92394195847bda11c29cd5bafe6ba.lnk
Category:	dropped
Dump:	MFDBG_ddb92394195847bda11c29cd5bafe6ba.lnk.7.dr
ID:	dr_161
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:39 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.925415304089124
Encrypted:	false
Ssdeep:	24:8FBfJ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8HGEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ddb959feb2de4e219dc51ccf30535b10.lnk
Category:	dropped
Dump:	MFDBG_ddb959feb2de4e219dc51ccf30535b10.lnk.7.dr
ID:	dr_560
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:29 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9314891833750965
Encrypted:	false
Ssdeep:	24:8aBfT8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8Y4EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ddf5ce9ef93e46b9836095ca0b705386.lnk
Category:	dropped
Dump:	MFDBG_ddf5ce9ef93e46b9836095ca0b705386.lnk.7.dr
ID:	dr_426
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:27 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9273878423776925
Encrypted:	false
Ssdeep:	24:8xBfs48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8L09EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_de1f5ec1e135499f8ac419f06e6e6c32.lnk
Category:	dropped
Dump:	MFDBG_de1f5ec1e135499f8ac419f06e6e6c32.lnk.7.dr
ID:	dr_600
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:40 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.919821898322078
Encrypted:	false
Ssdeep:	24:8w2BfX48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8w8P9EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_de327e69f3494ad4942c2c2715b12614.lnk
Category:	dropped
Dump:	MFDBG_de327e69f3494ad4942c2c2715b12614.lnk.7.dr
ID:	dr_742
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:51 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.926867938883611
Encrypted:	false
Ssdeep:	24:8LTBf8+8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8JETEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_de3fad75c6f04e9ea04570bcdf94640d.lnk
Category:	dropped
Dump:	MFDBG_de3fad75c6f04e9ea04570bcdf94640d.lnk.7.dr
ID:	dr_713
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:47 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9336832142082905
Encrypted:	false
Ssdeep:	24:8F4BfE8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8YpEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_de9ac4a308614189a6b4bf032b336629.lnk
Category:	dropped
Dump:	MFDBG_de9ac4a308614189a6b4bf032b336629.lnk.7.dr
ID:	dr_95
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:38 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920601888295947
Encrypted:	false
Ssdeep:	24:8VTBfz8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8vIEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_deaa59cb34ec40eab0d9edba32ab3925.lnk
Category:	dropped
Dump:	MFDBG_deaa59cb34ec40eab0d9edba32ab3925.lnk.7.dr
ID:	dr_812
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:49 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923110526983621
Encrypted:	false
Ssdeep:	24:8XBfY8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8xVEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_dec3c565ced64136bdd96311ab907b57.lnk
Category:	dropped
Dump:	MFDBG_dec3c565ced64136bdd96311ab907b57.lnk.7.dr
ID:	dr_763
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:52 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9249606287194
Encrypted:	false
Ssdeep:	24:8fTBfJ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8tWEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ded0ad1dfda94647bd0b21fd9915fe89.lnk
Category:	dropped
Dump:	MFDBG_ded0ad1dfda94647bd0b21fd9915fe89.lnk.7.dr
ID:	dr_915
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:03 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.928828786891702
Encrypted:	false
Ssdeep:	24:8BBf048EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8b89EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_deebfae9083543d185718818c3eefc0f.lnk
Category:	dropped
Dump:	MFDBG_deebfae9083543d185718818c3eefc0f.lnk.7.dr
ID:	dr_775
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:52 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.922138365708061
Encrypted:	false
Ssdeep:	24:8ITBfP8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8QsEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_deef6bc6e50b46d4a7269868c8c4e8cb.lnk
Category:	dropped
Dump:	MFDBG_deef6bc6e50b46d4a7269868c8c4e8cb.lnk.7.dr
ID:	dr_786
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:44 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.922357440664437
Encrypted:	false
Ssdeep:	24:8bBfDf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8NbEEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_dfa2e05349c74a4293deeeee229c59f8.lnk
Category:	dropped
Dump:	MFDBG_dfa2e05349c74a4293deeeee229c59f8.lnk.7.dr
ID:	dr_919
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:03 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9277317714751065
Encrypted:	false
Ssdeep:	24:87+2Bfk8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:87+8JEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_dfb09039d46a43bdbb2b06a40c1b4997.lnk
Category:	dropped
Dump:	MFDBG_dfb09039d46a43bdbb2b06a40c1b4997.lnk.7.dr
ID:	dr_643
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:46 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.918657237192878
Encrypted:	false
Ssdeep:	24:8nkrBfW8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:88DEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_dfdd5bba9788435eb2910c5034ad2dd0.lnk
Category:	dropped
Dump:	MFDBG_dfdd5bba9788435eb2910c5034ad2dd0.lnk.7.dr
ID:	dr_261
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:48 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.92054980797904
Encrypted:	false
Ssdeep:	24:8u3BfY8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8uRFEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_dfee3ea624b74099ba567c579cfb17b0.lnk
Category:	dropped
Dump:	MFDBG_dfee3ea624b74099ba567c579cfb17b0.lnk.7.dr
ID:	dr_642
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:41 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.926327693903801
Encrypted:	false
Ssdeep:	24:8ysQBfEX8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8ylhEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_dfeef28de7574777b3b38b5ffb31988b.lnk
Category:	dropped
Dump:	MFDBG_dfeef28de7574777b3b38b5ffb31988b.lnk.7.dr
ID:	dr_222
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:45 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.905203621001465
Encrypted:	false
Ssdeep:	24:8/Bf38EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8JEEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_dffdf2fda11f4aad85f8eb40882fc373.lnk
Category:	dropped
Dump:	MFDBG_dffdf2fda11f4aad85f8eb40882fc373.lnk.7.dr
ID:	dr_179
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:44 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.925969656937662
Encrypted:	false
Ssdeep:	24:8lBfHf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8ncEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e03f850e50cb4e21892fba9f5a967bb0.lnk
Category:	dropped
Dump:	MFDBG_e03f850e50cb4e21892fba9f5a967bb0.lnk.7.dr
ID:	dr_739
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:48 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9258957776080505
Encrypted:	false
Ssdeep:	24:80Bfq8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8aPEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e12e68f152b14eda9937bd048008c634.lnk
Category:	dropped
Dump:	MFDBG_e12e68f152b14eda9937bd048008c634.lnk.7.dr
ID:	dr_1048
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:01 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.924639458695966
Encrypted:	false
Ssdeep:	24:8yBfrp8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8gyEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e1c5dbe5743f4a06961b238e933d23ee.lnk
Category:	dropped
Dump:	MFDBG_e1c5dbe5743f4a06961b238e933d23ee.lnk.7.dr
ID:	dr_752
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:43 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.929420006682942
Encrypted:	false
Ssdeep:	24:86Bf48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:841EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e209847210184f9d9e08e9cda8ba96d9.lnk
Category:	dropped
Dump:	MFDBG_e209847210184f9d9e08e9cda8ba96d9.lnk.7.dr
ID:	dr_371
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:10 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.922445427862773
Encrypted:	false
Ssdeep:	24:8uBf68EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8EfEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e222587107ca434d92c7dc5a1c3c993b.lnk
Category:	dropped
Dump:	MFDBG_e222587107ca434d92c7dc5a1c3c993b.lnk.7.dr
ID:	dr_367
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:09 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9283968705959555
Encrypted:	false
Ssdeep:	24:8SBfW8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8ADEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e25753d43beb485cbaa4a67ab6b45346.lnk
Category:	dropped
Dump:	MFDBG_e25753d43beb485cbaa4a67ab6b45346.lnk.7.dr
ID:	dr_564
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:29 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.931921099670844
Encrypted:	false
Ssdeep:	24:8VBfT8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8X4EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e25afd2e04e1401f8919fc99c6edce3f.lnk
Category:	dropped
Dump:	MFDBG_e25afd2e04e1401f8919fc99c6edce3f.lnk.7.dr
ID:	dr_618
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:40 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.921524386842846
Encrypted:	false
Ssdeep:	24:8OBfD8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8k4EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e2978ee49ccb4db19bf257228bb79a04.lnk
Category:	dropped
Dump:	MFDBG_e2978ee49ccb4db19bf257228bb79a04.lnk.7.dr
ID:	dr_100
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:46 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.909832858352627
Encrypted:	false
Ssdeep:	24:8JBfx8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8zeEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e2b0d008589a43ffa57027fc95dec1a8.lnk
Category:	dropped
Dump:	MFDBG_e2b0d008589a43ffa57027fc95dec1a8.lnk.7.dr
ID:	dr_257
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:45 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.916422574055634
Encrypted:	false
Ssdeep:	24:87Bfr8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8tgEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e2c620c31afa41bc83c10a028fd47ab0.lnk
Category:	dropped
Dump:	MFDBG_e2c620c31afa41bc83c10a028fd47ab0.lnk.7.dr
ID:	dr_116
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:44 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.916462305746486
Encrypted:	false
Ssdeep:	24:8rBfHf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8dMEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e2f75b72e9834a9ebe41f4c443e2fca2.lnk
Category:	dropped
Dump:	MFDBG_e2f75b72e9834a9ebe41f4c443e2fca2.lnk.7.dr
ID:	dr_867
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:55 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.929727068837653
Encrypted:	false
Ssdeep:	24:8kBfh48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8K59EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e33a63152c3f44fba0d7fcbba2735872.lnk
Category:	dropped
Dump:	MFDBG_e33a63152c3f44fba0d7fcbba2735872.lnk.7.dr
ID:	dr_391
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:11 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9234685639497595
Encrypted:	false
Ssdeep:	24:8urBfR8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8u+EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e3535f3a13fe494bab7fc46edf2b3d27.lnk
Category:	dropped
Dump:	MFDBG_e3535f3a13fe494bab7fc46edf2b3d27.lnk.7.dr
ID:	dr_108
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:44 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.922183883856012
Encrypted:	false
Ssdeep:	24:87Bfwof8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8tWEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e365100e3272463bbd6ffa36aa53142c.lnk
Category:	dropped
Dump:	MFDBG_e365100e3272463bbd6ffa36aa53142c.lnk.7.dr
ID:	dr_167
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:40 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.922357440664436
Encrypted:	false
Ssdeep:	24:8NQBfL8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:84gEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e36fb09aef6d4c43852d94cf4decf380.lnk
Category:	dropped
Dump:	MFDBG_e36fb09aef6d4c43852d94cf4decf380.lnk.7.dr
ID:	dr_572
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:29 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.926978685155922
Encrypted:	false
Ssdeep:	24:8GBfs8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8MhEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e3ec8acd27e34938a13e55943e7532a0.lnk
Category:	dropped
Dump:	MFDBG_e3ec8acd27e34938a13e55943e7532a0.lnk.7.dr
ID:	dr_110
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:44 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920251397029579
Encrypted:	false
Ssdeep:	24:8u2Bfwof8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8hWEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e43a100cb7794e6c8e216304337aa432.lnk
Category:	dropped
Dump:	MFDBG_e43a100cb7794e6c8e216304337aa432.lnk.7.dr
ID:	dr_879
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:03 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.922445427862772
Encrypted:	false
Ssdeep:	24:8fBf048EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8p89EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e48f2b0ac2904a2cba40c95dc6d2c4ae.lnk
Category:	dropped
Dump:	MFDBG_e48f2b0ac2904a2cba40c95dc6d2c4ae.lnk.7.dr
ID:	dr_1047
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:01 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.930070997935066
Encrypted:	false
Ssdeep:	24:8dpBfrp8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8dTyEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e4ae840d37f44296a777a752c67ce107.lnk
Category:	dropped
Dump:	MFDBG_e4ae840d37f44296a777a752c67ce107.lnk.7.dr
ID:	dr_475
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:27 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9218399547586005
Encrypted:	false
Ssdeep:	24:83Bfp8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8RGEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e4d39e5831514030ad69549844376c40.lnk
Category:	dropped
Dump:	MFDBG_e4d39e5831514030ad69549844376c40.lnk.7.dr
ID:	dr_373
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:59 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923814910635417
Encrypted:	false
Ssdeep:	24:8GBfJ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8MWEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e4d6ae53c7d849b38ff6f23886167cbd.lnk
Category:	dropped
Dump:	MFDBG_e4d6ae53c7d849b38ff6f23886167cbd.lnk.7.dr
ID:	dr_997
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:16 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.922890249698346
Encrypted:	false
Ssdeep:	24:80Bfm8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8azEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e51455206397447e902dc9429442182e.lnk
Category:	dropped
Dump:	MFDBG_e51455206397447e902dc9429442182e.lnk.7.dr
ID:	dr_214
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:45 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.917778396119459
Encrypted:	false
Ssdeep:	24:8tBfTf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8foEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e5c383e4869e4538804470cbca6cc43b.lnk
Category:	dropped
Dump:	MFDBG_e5c383e4869e4538804470cbca6cc43b.lnk.7.dr
ID:	dr_455
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:03 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.92131396309172
Encrypted:	false
Ssdeep:	24:8uBff8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8EcEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e5c53a068cd441d8aaf2ec8c642a7399.lnk
Category:	dropped
Dump:	MFDBG_e5c53a068cd441d8aaf2ec8c642a7399.lnk.7.dr
ID:	dr_498
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:28 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920486997442927
Encrypted:	false
Ssdeep:	24:8P2BfR48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8EnEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e66d5af40411499abd6353af70bf0b52.lnk
Category:	dropped
Dump:	MFDBG_e66d5af40411499abd6353af70bf0b52.lnk.7.dr
ID:	dr_46
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:38 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.925179273477482
Encrypted:	false
Ssdeep:	24:87BfD8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8t4EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e69b463016a048d6a377e01f399e0f34.lnk
Category:	dropped
Dump:	MFDBG_e69b463016a048d6a377e01f399e0f34.lnk.7.dr
ID:	dr_952
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:04 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.921581595271278
Encrypted:	false
Ssdeep:	24:862BfTf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:868IEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e6a2c5b4a9b74da491ce913645176a7d.lnk
Category:	dropped
Dump:	MFDBG_e6a2c5b4a9b74da491ce913645176a7d.lnk.7.dr
ID:	dr_345
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:09 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920148871764225
Encrypted:	false
Ssdeep:	24:8CBf98EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8wCEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e6b67fc2032e410da5ef2d5ac0b602e4.lnk
Category:	dropped
Dump:	MFDBG_e6b67fc2032e410da5ef2d5ac0b602e4.lnk.7.dr
ID:	dr_540
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:14 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920274156103556
Encrypted:	false
Ssdeep:	24:8hBf6D8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:87yQEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e7509e2f07204299ba37e97647e38724.lnk
Category:	dropped
Dump:	MFDBG_e7509e2f07204299ba37e97647e38724.lnk.7.dr
ID:	dr_220
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:40 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9195862979087295
Encrypted:	false
Ssdeep:	24:86BfL8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:84gEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e79f718fe8704bf19193bfefc90c1a91.lnk
Category:	dropped
Dump:	MFDBG_e79f718fe8704bf19193bfefc90c1a91.lnk.7.dr
ID:	dr_492
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:28 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9301589851334
Encrypted:	false
Ssdeep:	24:8+Bf/8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8UMEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e7f91745407d43f39ab8406d4a863a79.lnk
Category:	dropped
Dump:	MFDBG_e7f91745407d43f39ab8406d4a863a79.lnk.7.dr
ID:	dr_487
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:13 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.928326756627698
Encrypted:	false
Ssdeep:	24:8G3BfK8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8GR/EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e8017adbfe234afe8e3aaac388b18790.lnk
Category:	dropped
Dump:	MFDBG_e8017adbfe234afe8e3aaac388b18790.lnk.7.dr
ID:	dr_216
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:45 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.92125057171369
Encrypted:	false
Ssdeep:	24:87BfTf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8toEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e87faf28939b4486b16a4effc9a39d06.lnk
Category:	dropped
Dump:	MFDBG_e87faf28939b4486b16a4effc9a39d06.lnk.7.dr
ID:	dr_929
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:03 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.917122217307735
Encrypted:	false
Ssdeep:	24:8oBfMN8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8mUaEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e9704cab26de41c1882d6c676d07fc1d.lnk
Category:	dropped
Dump:	MFDBG_e9704cab26de41c1882d6c676d07fc1d.lnk.7.dr
ID:	dr_307
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:58 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.925956751397836
Encrypted:	false
Ssdeep:	24:8d2BftAp8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8d81FEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e987592e22ec496890a6115a57cf5ea3.lnk
Category:	dropped
Dump:	MFDBG_e987592e22ec496890a6115a57cf5ea3.lnk.7.dr
ID:	dr_622
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:41 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.930158985133401
Encrypted:	false
Ssdeep:	24:8nBfEX8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8BhEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e9e6408406dd44a08a651813062ac84f.lnk
Category:	dropped
Dump:	MFDBG_e9e6408406dd44a08a651813062ac84f.lnk.7.dr
ID:	dr_644
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:41 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.925304557816814
Encrypted:	false
Ssdeep:	24:8zBfEX8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:81hEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ea148e856ed84f7ba0b8469f6869aef1.lnk
Category:	dropped
Dump:	MFDBG_ea148e856ed84f7ba0b8469f6869aef1.lnk.7.dr
ID:	dr_519
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:14 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.922013511567024
Encrypted:	false
Ssdeep:	24:8VBf6D8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8XyQEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ea4e562f13984711abebcc85a1fa94ab.lnk
Category:	dropped
Dump:	MFDBG_ea4e562f13984711abebcc85a1fa94ab.lnk.7.dr
ID:	dr_779
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:52 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920720180268028
Encrypted:	false
Ssdeep:	24:8UTBfP8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8MsEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_eab9966ae3364a9a963d01d86690455e.lnk
Category:	dropped
Dump:	MFDBG_eab9966ae3364a9a963d01d86690455e.lnk.7.dr
ID:	dr_847
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:51 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9278401001591705
Encrypted:	false
Ssdeep:	24:8KBf28EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8IzEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_eaeae7b9a8f84ea19391e81c78992e44.lnk
Category:	dropped
Dump:	MFDBG_eaeae7b9a8f84ea19391e81c78992e44.lnk.7.dr
ID:	dr_776
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:48 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.921581595271277
Encrypted:	false
Ssdeep:	24:8gBf98EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8uiEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_eaf56925889c45249bf06c94a3a60090.lnk
Category:	dropped
Dump:	MFDBG_eaf56925889c45249bf06c94a3a60090.lnk.7.dr
ID:	dr_334
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:58 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.925245865025159
Encrypted:	false
Ssdeep:	24:8VBfT8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8XYEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_eaf8294eda534b5697837c1c42337c62.lnk
Category:	dropped
Dump:	MFDBG_eaf8294eda534b5697837c1c42337c62.lnk.7.dr
ID:	dr_965
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:15 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.92143639964451
Encrypted:	false
Ssdeep:	24:85Bfa8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8jPEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_eb2f704bae8c40aebb9fd2f6bbb0a21d.lnk
Category:	dropped
Dump:	MFDBG_eb2f704bae8c40aebb9fd2f6bbb0a21d.lnk.7.dr
ID:	dr_933
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:04 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.921780328741923
Encrypted:	false
Ssdeep:	24:83BBfMN8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8rUaEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ebcb7ccaf4ae4f749e0debcfc1342e9f.lnk
Category:	dropped
Dump:	MFDBG_ebcb7ccaf4ae4f749e0debcfc1342e9f.lnk.7.dr
ID:	dr_843
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:51 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.930034130992364
Encrypted:	false
Ssdeep:	24:8SBf28EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8AzEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ec78a119948441a38e8138183f3eef78.lnk
Category:	dropped
Dump:	MFDBG_ec78a119948441a38e8138183f3eef78.lnk.7.dr
ID:	dr_597
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:30 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.911872740638103
Encrypted:	false
Ssdeep:	24:85BfU98EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8j5EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ecf482d931484bf7a0ea7932ed8c7f42.lnk
Category:	dropped
Dump:	MFDBG_ecf482d931484bf7a0ea7932ed8c7f42.lnk.7.dr
ID:	dr_868
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:55 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.930824084254249
Encrypted:	false
Ssdeep:	24:8X2Bfh48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8X859EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ed0f93a683f2412fae380f4f096c6d4c.lnk
Category:	dropped
Dump:	MFDBG_ed0f93a683f2412fae380f4f096c6d4c.lnk.7.dr
ID:	dr_297
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:57 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.926168390408307
Encrypted:	false
Ssdeep:	24:8OrBfC8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8OdnEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ed165a352a64430bae8f3469b4d6438b.lnk
Category:	dropped
Dump:	MFDBG_ed165a352a64430bae8f3469b4d6438b.lnk.7.dr
ID:	dr_947
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:15 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.924207542400217
Encrypted:	false
Ssdeep:	24:8RuBfs8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8eBEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ed2ceb07c8e7470aa75251b85eeba0b5.lnk
Category:	dropped
Dump:	MFDBG_ed2ceb07c8e7470aa75251b85eeba0b5.lnk.7.dr
ID:	dr_273
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:49 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.922585468541764
Encrypted:	false
Ssdeep:	24:8uBfiD8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8EaQEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ee4b5ec409db44739748d36b2bb61633.lnk
Category:	dropped
Dump:	MFDBG_ee4b5ec409db44739748d36b2bb61633.lnk.7.dr
ID:	dr_260
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:45 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.908764717019057
Encrypted:	false
Ssdeep:	24:8uBf38EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8EEEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ee6d7b7c4a014a6389462575a8aefab6.lnk
Category:	dropped
Dump:	MFDBG_ee6d7b7c4a014a6389462575a8aefab6.lnk.7.dr
ID:	dr_112
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:44 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.926430867640089
Encrypted:	false
Ssdeep:	24:8FDQBfHf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8JeMEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ee9d9205c39f4b3092f541c18415cb5d.lnk
Category:	dropped
Dump:	MFDBG_ee9d9205c39f4b3092f541c18415cb5d.lnk.7.dr
ID:	dr_450
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:03 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.913657614249523
Encrypted:	false
Ssdeep:	24:8tBff8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8fcEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_eee21c00ecd245e89d72ca7658f3dd42.lnk
Category:	dropped
Dump:	MFDBG_eee21c00ecd245e89d72ca7658f3dd42.lnk.7.dr
ID:	dr_897
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:03 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.918070271736214
Encrypted:	false
Ssdeep:	24:8QBfQ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8e9EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ef0c445c60704dff856e35cfb3ff9549.lnk
Category:	dropped
Dump:	MFDBG_ef0c445c60704dff856e35cfb3ff9549.lnk.7.dr
ID:	dr_619
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:41 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923464944032612
Encrypted:	false
Ssdeep:	24:80Bfo8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8aFEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ef169d8bbddc4e84ad36022d6f4a87a8.lnk
Category:	dropped
Dump:	MFDBG_ef169d8bbddc4e84ad36022d6f4a87a8.lnk.7.dr
ID:	dr_858
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:54 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920771300523661
Encrypted:	false
Ssdeep:	24:8MBfAP8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8C9EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ef3977837e7c46be92a9b17ea0369382.lnk
Category:	dropped
Dump:	MFDBG_ef3977837e7c46be92a9b17ea0369382.lnk.7.dr
ID:	dr_454
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:03 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.916027619479387
Encrypted:	false
Ssdeep:	24:87Bff8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8tcEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ef5a5ed4e86c4b8b802c86d812dbb24b.lnk
Category:	dropped
Dump:	MFDBG_ef5a5ed4e86c4b8b802c86d812dbb24b.lnk.7.dr
ID:	dr_757
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:51 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920534352337209
Encrypted:	false
Ssdeep:	24:8RTTBf88EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8nBEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ef6e4451b27b4dbfa91845ca1e8c53db.lnk
Category:	dropped
Dump:	MFDBG_ef6e4451b27b4dbfa91845ca1e8c53db.lnk.7.dr
ID:	dr_1004
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:16 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.926676923393193
Encrypted:	false
Ssdeep:	24:8lBf88EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8nxEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ef6eaaebf01141e38106ed6d5b8a8d00.lnk
Category:	dropped
Dump:	MFDBG_ef6eaaebf01141e38106ed6d5b8a8d00.lnk.7.dr
ID:	dr_289
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:49 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923235381124658
Encrypted:	false
Ssdeep:	24:83uBf48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:83EFEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_efea9766216e4e5ea74d54e4b95a645a.lnk
Category:	dropped
Dump:	MFDBG_efea9766216e4e5ea74d54e4b95a645a.lnk.7.dr
ID:	dr_476
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:27 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9314891833750965
Encrypted:	false
Ssdeep:	24:8TBfs48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8V09EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_effe40b4d1034de689eeaf191f7465d0.lnk
Category:	dropped
Dump:	MFDBG_effe40b4d1034de689eeaf191f7465d0.lnk.7.dr
ID:	dr_195
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:48 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.926498066192789
Encrypted:	false
Ssdeep:	24:8wBfn+8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8+LEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f00617e8940a4709be52a9cebd4e1109.lnk
Category:	dropped
Dump:	MFDBG_f00617e8940a4709be52a9cebd4e1109.lnk.7.dr
ID:	dr_793
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:53 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9134220138361755
Encrypted:	false
Ssdeep:	24:8nuBfMMQ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8EUEEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f080679de7164dc8bd9ae2e6a345e3e5.lnk
Category:	dropped
Dump:	MFDBG_f080679de7164dc8bd9ae2e6a345e3e5.lnk.7.dr
ID:	dr_472
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:27 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9211748556377515
Encrypted:	false
Ssdeep:	24:8lBfp8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8nGEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f090f1130d36414bba42791654f10168.lnk
Category:	dropped
Dump:	MFDBG_f090f1130d36414bba42791654f10168.lnk.7.dr
ID:	dr_607
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:40 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920075422632909
Encrypted:	false
Ssdeep:	24:8FBfi8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8HHEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f119c2045df2439d9dc7f23a349c20d3.lnk
Category:	dropped
Dump:	MFDBG_f119c2045df2439d9dc7f23a349c20d3.lnk.7.dr
ID:	dr_977
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:15 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.922836711854465
Encrypted:	false
Ssdeep:	24:89Bfa8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8vPEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f16c491e9a1c49e1a9932880040ef541.lnk
Category:	dropped
Dump:	MFDBG_f16c491e9a1c49e1a9932880040ef541.lnk.7.dr
ID:	dr_255
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:49 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.92054980797904
Encrypted:	false
Ssdeep:	24:8TBfY8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8VFEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f1887752044345e385c2de097fa3d5d4.lnk
Category:	dropped
Dump:	MFDBG_f1887752044345e385c2de097fa3d5d4.lnk.7.dr
ID:	dr_893
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:03 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.915751386761984
Encrypted:	false
Ssdeep:	24:8euBfQ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8r9EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f209faef39cf4efcbc977a31260e756a.lnk
Category:	dropped
Dump:	MFDBG_f209faef39cf4efcbc977a31260e756a.lnk.7.dr
ID:	dr_163
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:40 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.913865461043917
Encrypted:	false
Ssdeep:	24:8CBfO8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8wrEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f2256ec9fc9048bc90581c03bfd8863f.lnk
Category:	dropped
Dump:	MFDBG_f2256ec9fc9048bc90581c03bfd8863f.lnk.7.dr
ID:	dr_533
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:29 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9277889799035375
Encrypted:	false
Ssdeep:	24:8VBfT8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8X4EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f26a8a2035854a5784cab9c0afb57268.lnk
Category:	dropped
Dump:	MFDBG_f26a8a2035854a5784cab9c0afb57268.lnk.7.dr
ID:	dr_41
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:38 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9301589851334
Encrypted:	false
Ssdeep:	24:8VBfD8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8X4EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f272c2703c9f48278e1e12e304f84b42.lnk
Category:	dropped
Dump:	MFDBG_f272c2703c9f48278e1e12e304f84b42.lnk.7.dr
ID:	dr_318
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:49 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.92663475605851
Encrypted:	false
Ssdeep:	24:8oBfp8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8m2EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f2815abb9bd448aebfe7c93231034827.lnk
Category:	dropped
Dump:	MFDBG_f2815abb9bd448aebfe7c93231034827.lnk.7.dr
ID:	dr_380
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:00 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9282110426651355
Encrypted:	false
Ssdeep:	24:8jUBfs68EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8j6cEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f288b0903906439fbbd30cbaf8a1c4d2.lnk
Category:	dropped
Dump:	MFDBG_f288b0903906439fbbd30cbaf8a1c4d2.lnk.7.dr
ID:	dr_808
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:49 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920339384227914
Encrypted:	false
Ssdeep:	24:8vrBfY8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8VVEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f2cae9e31cfe4dd78d567ecf6fb168d6.lnk
Category:	dropped
Dump:	MFDBG_f2cae9e31cfe4dd78d567ecf6fb168d6.lnk.7.dr
ID:	dr_636
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:46 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923656860136233
Encrypted:	false
Ssdeep:	24:8iBfZ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8QWEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f301b392d9de47899f1629c65eb08e38.lnk
Category:	dropped
Dump:	MFDBG_f301b392d9de47899f1629c65eb08e38.lnk.7.dr
ID:	dr_531
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:14 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.922445427862772
Encrypted:	false
Ssdeep:	24:86Bf6D8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:84yQEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f305204a071f457bbba376db0d3b6659.lnk
Category:	dropped
Dump:	MFDBG_f305204a071f457bbba376db0d3b6659.lnk.7.dr
ID:	dr_710
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:51 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9278401001591705
Encrypted:	false
Ssdeep:	24:8ZKBfbl8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8ZI+EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f30a0ef1581a48e2acad0584d07708a8.lnk
Category:	dropped
Dump:	MFDBG_f30a0ef1581a48e2acad0584d07708a8.lnk.7.dr
ID:	dr_882
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:56 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.918738990774208
Encrypted:	false
Ssdeep:	24:8gBfc8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8uREvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f31d299e77614811bbf95885d0fa85bd.lnk
Category:	dropped
Dump:	MFDBG_f31d299e77614811bbf95885d0fa85bd.lnk.7.dr
ID:	dr_1005
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:16 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923065008835668
Encrypted:	false
Ssdeep:	24:8kuBf88EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8kExEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f3408920b42d477d82a70823101ed2ee.lnk
Category:	dropped
Dump:	MFDBG_f3408920b42d477d82a70823101ed2ee.lnk.7.dr
ID:	dr_88
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:38 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.92395160050114
Encrypted:	false
Ssdeep:	24:8VBf/P48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8X3FEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f3e2313274494d28a0f6a99a194a2895.lnk
Category:	dropped
Dump:	MFDBG_f3e2313274494d28a0f6a99a194a2895.lnk.7.dr
ID:	dr_310
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:51 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.928308883397621
Encrypted:	false
Ssdeep:	24:8WBfbl8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8c+EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f42753194e2241b3a564fdd125902ddb.lnk
Category:	dropped
Dump:	MFDBG_f42753194e2241b3a564fdd125902ddb.lnk.7.dr
ID:	dr_282
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:57 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.92114967897553
Encrypted:	false
Ssdeep:	24:8dNBfk8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8d/JEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f447ab547b224ce291cfcfb70633bd84.lnk
Category:	dropped
Dump:	MFDBG_f447ab547b224ce291cfcfb70633bd84.lnk.7.dr
ID:	dr_899
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:03 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.918735370857063
Encrypted:	false
Ssdeep:	24:8tBfQ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8f9EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f44b5d7817e0498ba3fb876e447efa03.lnk
Category:	dropped
Dump:	MFDBG_f44b5d7817e0498ba3fb876e447efa03.lnk.7.dr
ID:	dr_547
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:29 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.929061969716804
Encrypted:	false
Ssdeep:	24:84BfT8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:824EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f45234c5af6347b69fbda2eb06d34384.lnk
Category:	dropped
Dump:	MFDBG_f45234c5af6347b69fbda2eb06d34384.lnk.7.dr
ID:	dr_37
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:42 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.919881524338755
Encrypted:	false
Ssdeep:	24:8auBfu8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8H7EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f479cc4b7b934621b114e9851cf7f7da.lnk
Category:	dropped
Dump:	MFDBG_f479cc4b7b934621b114e9851cf7f7da.lnk.7.dr
ID:	dr_30
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:38 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9283968705959555
Encrypted:	false
Ssdeep:	24:8IBfs8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8GREvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f4b5a7df816f4497a7e8cb98139bdf48.lnk
Category:	dropped
Dump:	MFDBG_f4b5a7df816f4497a7e8cb98139bdf48.lnk.7.dr
ID:	dr_934
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:04 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.92478465432273
Encrypted:	false
Ssdeep:	24:8VLBfTf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8TIEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f4c769dcd6fd4287a40c456dba82b287.lnk
Category:	dropped
Dump:	MFDBG_f4c769dcd6fd4287a40c456dba82b287.lnk.7.dr
ID:	dr_350
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:58 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.925318665685538
Encrypted:	false
Ssdeep:	24:8gBfq8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8uPEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f50d22f87a8449d3be113df1294cbaad.lnk
Category:	dropped
Dump:	MFDBG_f50d22f87a8449d3be113df1294cbaad.lnk.7.dr
ID:	dr_931
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:04 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.917101875822007
Encrypted:	false
Ssdeep:	24:8+3BfMN8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8+RUaEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f54b3fe81f7346f0b3c02addc3692e43.lnk
Category:	dropped
Dump:	MFDBG_f54b3fe81f7346f0b3c02addc3692e43.lnk.7.dr
ID:	dr_1018
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:18 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.919097173184552
Encrypted:	false
Ssdeep:	24:8OBfa8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8kvEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f5b967b8d0224e779a1846541c73128b.lnk
Category:	dropped
Dump:	MFDBG_f5b967b8d0224e779a1846541c73128b.lnk.7.dr
ID:	dr_614
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:40 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.92268102827612
Encrypted:	false
Ssdeep:	24:8JBfX48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8zP9EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f5cc5c1c3f3945f5a2f551f7e58f0025.lnk
Category:	dropped
Dump:	MFDBG_f5cc5c1c3f3945f5a2f551f7e58f0025.lnk.7.dr
ID:	dr_171
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:45 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.927299855179359
Encrypted:	false
Ssdeep:	24:8HBfHf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8hcEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f5cf6be2ff21462486128190b8390323.lnk
Category:	dropped
Dump:	MFDBG_f5cf6be2ff21462486128190b8390323.lnk.7.dr
ID:	dr_1026
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:18 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.926634756058511
Encrypted:	false
Ssdeep:	24:8MBfB8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8COEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f6374e59e8e848289cdd6bca699591e5.lnk
Category:	dropped
Dump:	MFDBG_f6374e59e8e848289cdd6bca699591e5.lnk.7.dr
ID:	dr_672
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:47 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.928396870595956
Encrypted:	false
Ssdeep:	24:8iBfE8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8QpEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f639ee0d4f084b9f8f4f72430c281769.lnk
Category:	dropped
Dump:	MFDBG_f639ee0d4f084b9f8f4f72430c281769.lnk.7.dr
ID:	dr_281
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:49 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923235381124656
Encrypted:	false
Ssdeep:	24:8eQBf48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8eeFEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f65d3bd057d041bda72c93045ac5b69e.lnk
Category:	dropped
Dump:	MFDBG_f65d3bd057d041bda72c93045ac5b69e.lnk.7.dr
ID:	dr_49
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:43 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.931489183375097
Encrypted:	false
Ssdeep:	24:8PmBf48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8PsFEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f6a7db425463482ebdfe9038eef803ef.lnk
Category:	dropped
Dump:	MFDBG_f6a7db425463482ebdfe9038eef803ef.lnk.7.dr
ID:	dr_778
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:48 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.915903967667248
Encrypted:	false
Ssdeep:	24:8pfNQBf98EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8pAiEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f6b2dc63d8724a01b65af3be17a83528.lnk
Category:	dropped
Dump:	MFDBG_f6b2dc63d8724a01b65af3be17a83528.lnk.7.dr
ID:	dr_991
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:16 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923366468882698
Encrypted:	false
Ssdeep:	24:8IBfm8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8GDEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f73de78cc5d64e2cbf683454adf71c62.lnk
Category:	dropped
Dump:	MFDBG_f73de78cc5d64e2cbf683454adf71c62.lnk.7.dr
ID:	dr_1010
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:17 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.921966156672743
Encrypted:	false
Ssdeep:	24:83Bfy8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8R3EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f73f49d756444958a0c2e3b05c5adcb8.lnk
Category:	dropped
Dump:	MFDBG_f73f49d756444958a0c2e3b05c5adcb8.lnk.7.dr
ID:	dr_877
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:51 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.926743084742576
Encrypted:	false
Ssdeep:	24:8ZBf28EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8DzEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f7606c9129f84452a028d4a1dab81333.lnk
Category:	dropped
Dump:	MFDBG_f7606c9129f84452a028d4a1dab81333.lnk.7.dr
ID:	dr_961
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:04 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9218185434577295
Encrypted:	false
Ssdeep:	24:8mBBfEf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:82BEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f7b95cb2ff3b4ba4877b5bd6a7ebb25a.lnk
Category:	dropped
Dump:	MFDBG_f7b95cb2ff3b4ba4877b5bd6a7ebb25a.lnk.7.dr
ID:	dr_1000
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:16 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920763230160327
Encrypted:	false
Ssdeep:	24:8U3Bfm8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:88zEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f83cbde460654376a3bb9f2e9c761d0b.lnk
Category:	dropped
Dump:	MFDBG_f83cbde460654376a3bb9f2e9c761d0b.lnk.7.dr
ID:	dr_181
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:44 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.925783829006842
Encrypted:	false
Ssdeep:	24:8HBfHf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8hcEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f848fac784324d4880abcc8eb94271ca.lnk
Category:	dropped
Dump:	MFDBG_f848fac784324d4880abcc8eb94271ca.lnk.7.dr
ID:	dr_109
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:46 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.914117746282721
Encrypted:	false
Ssdeep:	24:8jBfx8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8leEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f8e4a9e0c7d448d4a30c939144e4bd95.lnk
Category:	dropped
Dump:	MFDBG_f8e4a9e0c7d448d4a30c939144e4bd95.lnk.7.dr
ID:	dr_842
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:55 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.921623762605961
Encrypted:	false
Ssdeep:	24:8PnQBfAP8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8Pe9EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f96d637d4bc843979aac47a3b61511bf.lnk
Category:	dropped
Dump:	MFDBG_f96d637d4bc843979aac47a3b61511bf.lnk.7.dr
ID:	dr_253
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:49 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.921090052958854
Encrypted:	false
Ssdeep:	24:8jBfY8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8lFEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f97352d57f2749548c9d59bcd095d57a.lnk
Category:	dropped
Dump:	MFDBG_f97352d57f2749548c9d59bcd095d57a.lnk.7.dr
ID:	dr_235
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:48 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.917108109439009
Encrypted:	false
Ssdeep:	24:85BfRo8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8jjEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f9a17241f81844c2b6bc08a999572bf0.lnk
Category:	dropped
Dump:	MFDBG_f9a17241f81844c2b6bc08a999572bf0.lnk.7.dr
ID:	dr_791
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:54 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9231105269836215
Encrypted:	false
Ssdeep:	24:8WBfMMQ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8cUEEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f9cf4079652f4131869cdd7b3a29268d.lnk
Category:	dropped
Dump:	MFDBG_f9cf4079652f4131869cdd7b3a29268d.lnk.7.dr
ID:	dr_613
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:41 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.921692341543588
Encrypted:	false
Ssdeep:	24:8FBf/8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8H8EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_fa155e2f569941bca27ab1500bfa54cf.lnk
Category:	dropped
Dump:	MFDBG_fa155e2f569941bca27ab1500bfa54cf.lnk.7.dr
ID:	dr_442
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:27 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923525917822396
Encrypted:	false
Ssdeep:	24:8IBfs48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8G09EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_fa776a2791fc4846873264390dcfba92.lnk
Category:	dropped
Dump:	MFDBG_fa776a2791fc4846873264390dcfba92.lnk.7.dr
ID:	dr_818
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:54 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.919726338587723
Encrypted:	false
Ssdeep:	24:8NqBf48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8NolEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_faeb202816184438b3c28ac535b4f680.lnk
Category:	dropped
Dump:	MFDBG_faeb202816184438b3c28ac535b4f680.lnk.7.dr
ID:	dr_577
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:30 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9273226142533355
Encrypted:	false
Ssdeep:	24:8dBfs8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8PhEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_fb38cd2a873f4b1a908ec92236637c79.lnk
Category:	dropped
Dump:	MFDBG_fb38cd2a873f4b1a908ec92236637c79.lnk.7.dr
ID:	dr_903
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:03 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.925304557816814
Encrypted:	false
Ssdeep:	24:8kQBfk8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8keJEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_fbacba17bfd54a5bbeca26464ae558d8.lnk
Category:	dropped
Dump:	MFDBG_fbacba17bfd54a5bbeca26464ae558d8.lnk.7.dr
ID:	dr_581
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:30 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.91142671647363
Encrypted:	false
Ssdeep:	24:8ZBfU98EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8D5EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_fbefad1c58c34519967e0cb20d2b705e.lnk
Category:	dropped
Dump:	MFDBG_fbefad1c58c34519967e0cb20d2b705e.lnk.7.dr
ID:	dr_723
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:48 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.920106201402813
Encrypted:	false
Ssdeep:	24:8Sr3BfP8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8SFMEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_fc1da7d1c6a74761a4df00f0a60678cd.lnk
Category:	dropped
Dump:	MFDBG_fc1da7d1c6a74761a4df00f0a60678cd.lnk.7.dr
ID:	dr_66
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:38 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.924494263069199
Encrypted:	false
Ssdeep:	24:8NjBfs8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8NlREvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_fccd7ef197d04401bb3d04603d3d6553.lnk
Category:	dropped
Dump:	MFDBG_fccd7ef197d04401bb3d04603d3d6553.lnk.7.dr
ID:	dr_537
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:29 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9212259758933845
Encrypted:	false
Ssdeep:	24:85BfeQ8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8j2FEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_fd7be8dc068948d78aa70dbfe369ca7e.lnk
Category:	dropped
Dump:	MFDBG_fd7be8dc068948d78aa70dbfe369ca7e.lnk.7.dr
ID:	dr_404
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:02 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923542443279368
Encrypted:	false
Ssdeep:	24:8PQBfx+8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8GtEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_fdb48038b10c4384b7991f54c5406501.lnk
Category:	dropped
Dump:	MFDBG_fdb48038b10c4384b7991f54c5406501.lnk.7.dr
ID:	dr_166
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:40 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.921792019022403
Encrypted:	false
Ssdeep:	24:8cBfO8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8SrEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_fdb839047d554ea182761f8b58fb52d1.lnk
Category:	dropped
Dump:	MFDBG_fdb839047d554ea182761f8b58fb52d1.lnk.7.dr
ID:	dr_203
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:48 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.924735951655343
Encrypted:	false
Ssdeep:	24:8VBfn+8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8XLEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_fdec0e4c1d1f42de92db4f797d6f6d57.lnk
Category:	dropped
Dump:	MFDBG_fdec0e4c1d1f42de92db4f797d6f6d57.lnk.7.dr
ID:	dr_155
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:44 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.9206692054566
Encrypted:	false
Ssdeep:	24:8MBfwof8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8CWEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_fe2680119c514045b8c0d0888ee3de23.lnk
Category:	dropped
Dump:	MFDBG_fe2680119c514045b8c0d0888ee3de23.lnk.7.dr
ID:	dr_555
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:29 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.927964954300207
Encrypted:	false
Ssdeep:	24:8FIBfT8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8o4EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_fe6282a8eec14dfaac4524cf2669496f.lnk
Category:	dropped
Dump:	MFDBG_fe6282a8eec14dfaac4524cf2669496f.lnk.7.dr
ID:	dr_38
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:42 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.918688015962781
Encrypted:	false
Ssdeep:	24:8OBfu8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8k7EvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_fe6bd566582542929fe7cfbf6bfffc7c.lnk
Category:	dropped
Dump:	MFDBG_fe6bd566582542929fe7cfbf6bfffc7c.lnk.7.dr
ID:	dr_585
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:02:30 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.924137428431958
Encrypted:	false
Ssdeep:	24:8/2Bfs8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8UhEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_fe82d8fe196c4479be0372563483996f.lnk
Category:	dropped
Dump:	MFDBG_fe82d8fe196c4479be0372563483996f.lnk.7.dr
ID:	dr_349
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:09 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923638936238747
Encrypted:	false
Ssdeep:	24:8fBf98EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8pCEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ff0a7d568a7f45218a3e2589a6ab617e.lnk
Category:	dropped
Dump:	MFDBG_ff0a7d568a7f45218a3e2589a6ab617e.lnk.7.dr
ID:	dr_630
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:41 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.925969656937661
Encrypted:	false
Ssdeep:	24:8EBfUp8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8q8OEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ff26073bc8d24d91bf36ead697e196c9.lnk
Category:	dropped
Dump:	MFDBG_ff26073bc8d24d91bf36ead697e196c9.lnk.7.dr
ID:	dr_936
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:04 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.929727068837653
Encrypted:	false
Ssdeep:	24:84BfTf8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:82IEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ff3e8dc95e4b43ad95f8cf101e915ccc.lnk
Category:	dropped
Dump:	MFDBG_ff3e8dc95e4b43ad95f8cf101e915ccc.lnk.7.dr
ID:	dr_461
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:04:03 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.918619940051882
Encrypted:	false
Ssdeep:	24:81BfpcH8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:83DEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ffbc9426f5ad426980d4895d38040245.lnk
Category:	dropped
Dump:	MFDBG_ffbc9426f5ad426980d4895d38040245.lnk.7.dr
ID:	dr_771
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:52 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923900480245505
Encrypted:	false
Ssdeep:	24:8NmiTBfP8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8NmesEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ffc920abc35c439d975a00ec232f4ddf.lnk
Category:	dropped
Dump:	MFDBG_ffc920abc35c439d975a00ec232f4ddf.lnk.7.dr
ID:	dr_944
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:14 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.923366468882699
Encrypted:	false
Ssdeep:	24:8TBfs8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8VBEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ffc99a63dce94766b2f29046624f6966.lnk
Category:	dropped
Dump:	MFDBG_ffc99a63dce94766b2f29046624f6966.lnk.7.dr
ID:	dr_483
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:01:13 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.925611619971524
Encrypted:	false
Ssdeep:	24:8EuBfD8EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8BoEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_fff62a29b5b043a38c13ab03b7de322d.lnk
Category:	dropped
Dump:	MFDBG_fff62a29b5b043a38c13ab03b7de322d.lnk.7.dr
ID:	dr_51
Target ID:	7
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 15:01:00 2024, mtime=Wed Sep 25 15:03:38 2024, atime=Wed Sep 25 15:01:00 2024, length=26112, window=hide
Entropy:	4.922189485963695
Encrypted:	false
Ssdeep:	24:8EBf/P48EvT9peyRngK2FRRhW0O2RaRAqiVDi0RTp1A6ZL/qygm:8q3FEvZ0yRO7DLO2zdxdRd1kyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	\Device\ConDrv
Category:	dropped
Dump:	ConDrv.10.dr
ID:	dr_1055
Target ID:	10
Process:	C:\ProgramData\BFIIEHJDBK.exe
Type:	ASCII text, with CRLF, LF line terminators
Entropy:	2.2845972159140855
Encrypted:	false
Ssdeep:	3:i6vvRyMivvRya:iKvHivD
Size:	33
Whitelisted:	false
Reputation:	timeout

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

IOC Report
file.exe

Files

Processes

URLs

Domains

IPs

Registry

Memdumps

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

IOC Reportfile.exe

Files

Processes

URLs

Domains

IPs

Registry

Memdumps

IOC Report
file.exe