Automated Malware Analysis IOC Report for

Details

Filetype:	PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	7.989695899083701
Filename:	file.exe
Filesize:	413224
MD5:	8b0b12811b60a92a72b636a46fadb0ba
SHA1:	0ab6b31b69b7964de2e9639169d036c68f9efd76
SHA256:	1174cade1bd7b389c084b340898d4afd84e1145d9294d8a550f3a532f09cda7c
SHA512:	abf908cb7505acd792aa1d9a346ec1b635f5c078ad2104b5d5a0678cc54e216a843fbacba25ebff6a7baed6a6463ee8fc433ff1c71178775366b7f4aade1227a
SSDEEP:	12288:dHROWCWIpXQ6dvhXe+iGaXImXN18/7LV+z+0EO:ludvbwX4/7LV/0t
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...k#.f.............................<... ...@....@.. ....................................`................................

Signature Hits	Behavior Group	Mitre Attack
Multi AV Scanner detection for submitted file	AV Detection	Process Injection
.NET source code contains very large array initializations	System Summary	Process Injection Disable or Modify Tools
Allocates memory in foreign processes	HIPS / PFW / Operating System Protection Evasion	Process Injection
Contains functionality to inject code into remote processes	HIPS / PFW / Operating System Protection Evasion	Clipboard Data
Injects a PE file into a foreign processes	HIPS / PFW / Operating System Protection Evasion
Writes to foreign memory regions	HIPS / PFW / Operating System Protection Evasion	Process Injection
Allocates memory with a write watch (potentially for evading sandboxes)	Malware Analysis System Evasion
Contains long sleeps (>= 3 min)	Malware Analysis System Evasion	Process Injection
Creates a process in suspended mode (likely to inject code)	HIPS / PFW / Operating System Protection Evasion	File and Directory Discovery
May sleep (evasive loops) to hinder dynamic analysis	Malware Analysis System Evasion	Virtualization/Sandbox Evasion
PE / OLE file has an invalid certificate	System Summary
Queries the volume information (name, serial number etc) of a device	Language, Device and Operating System Detection	Native API System Information Discovery
Sample file is different than original file name gathered from version info	System Summary
Uses 32bit PE files	Compliance, System Summary	Process Injection Masquerading
Binary may include packed or encrypted code	Data Obfuscation	Process Injection
PE file has an executable .text section which is very likely to contain packed code (zlib compression ratio < 0.3)	System Summary	Process Injection Software Packing
Contains functionality to modify the execution of threads in other processes
Contains medium sleeps (>= 30s)	Malware Analysis System Evasion
Creates files inside the user directory	System Summary	Masquerading
Creates guard pages, often used to prevent reverse engineering and debugging	Anti Debugging	Process Injection Disable or Modify Tools
Disables application error messsages (SetErrorMode)	Hooking and other Techniques for Hiding and Protection
PE file has an executable .text section and no other executable section	System Summary
Parts of this applications are using the .NET runtime (Probably coded in C#)	System Summary
Reads software policies	System Summary
Sample is known by Antivirus	System Summary
Tries to load missing DLLs	System Summary	DLL Side-Loading
PE file contains a debug data directory	System Summary	Process Injection
Contains modern PE file flags such as dynamic base (ASLR) or NX	Compliance, System Summary
PE file contains a COM descriptor data directory	System Summary

Details

File:	C:\ProgramData\EBGDHJECFC.exe
Category:	dropped
Dump:	EBGDHJECFC.exe.3.dr
ID:	dr_24
Target ID:	3
Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Type:	PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	7.988522009011023
Encrypted:	false
Ssdeep:	6144:uXfqISDaHCXsYQkiJ0j0Zt/d/WCIRibFrzae5LpVGbM/5Pg+rq8ZrPbXbCEO:uCvXsWtI/dVHbdastVG2ycWEO
Size:	377384
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Allocates memory in foreign processes	HIPS / PFW / Operating System Protection Evasion	Process Injection
Injects a PE file into a foreign processes	HIPS / PFW / Operating System Protection Evasion	Process Injection
Writes to foreign memory regions	HIPS / PFW / Operating System Protection Evasion	Process Injection
Allocates memory with a write watch (potentially for evading sandboxes)	Malware Analysis System Evasion	Virtualization/Sandbox Evasion
Contains long sleeps (>= 3 min)	Malware Analysis System Evasion	Virtualization/Sandbox Evasion
Creates a process in suspended mode (likely to inject code)	HIPS / PFW / Operating System Protection Evasion	Process Injection
Drops PE files	Persistence and Installation Behavior
Drops PE files to the application program directory (C:\ProgramData)	Persistence and Installation Behavior
Queries the volume information (name, serial number etc) of a device	Language, Device and Operating System Detection	System Information Discovery
Contains medium sleeps (>= 30s)	Malware Analysis System Evasion	Virtualization/Sandbox Evasion
Disables application error messsages (SetErrorMode)	Hooking and other Techniques for Hiding and Protection
Spawns processes	System Summary	Process Injection
Tries to load missing DLLs	System Summary	DLL Side-Loading

Details

File:	C:\ProgramData\KKEBKJJDGH.exe
Category:	dropped
Dump:	KKEBKJJDGH.exe.3.dr
ID:	dr_22
Target ID:	3
Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	5.587298385417451
Encrypted:	false
Ssdeep:	768:0Z7bBiDrq+NhJvjhTxhi8DD08T10DnS1RW:0ZErqqTxhZDA8TKS1RW
Size:	26112
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Machine Learning detection for dropped file	AV Detection
Sigma detected: New RUN Key Pointing to Suspicious Folder	System Summary
Allocates memory with a write watch (potentially for evading sandboxes)	Malware Analysis System Evasion	Virtualization/Sandbox Evasion
Contains long sleeps (>= 3 min)	Malware Analysis System Evasion	Virtualization/Sandbox Evasion
Creates a process in suspended mode (likely to inject code)	HIPS / PFW / Operating System Protection Evasion	Process Injection
Creates a start menu entry (Start Menu\Programs\Startup)	Boot Survival	Registry Run Keys / Startup Folder
Drops PE files	Persistence and Installation Behavior
Drops PE files to the application program directory (C:\ProgramData)	Persistence and Installation Behavior
Queries the volume information (name, serial number etc) of a device	Language, Device and Operating System Detection	System Information Discovery
Sigma detected: CurrentVersion Autorun Keys Modification	System Summary
Sigma detected: Startup Folder File Write	System Summary
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder
Contains medium sleeps (>= 30s)	Malware Analysis System Evasion	Virtualization/Sandbox Evasion
Creates an autostart registry key	Boot Survival	Registry Run Keys / Startup Folder
Disables application error messsages (SetErrorMode)	Hooking and other Techniques for Hiding and Protection
Spawns processes	System Summary	Process Injection
Tries to load missing DLLs	System Summary	DLL Side-Loading

Details

File:	C:\ProgramData\freebl3.dll
Category:	dropped
Dump:	freebl3.dll.3.dr
ID:	dr_12
Target ID:	3
Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Entropy:	6.678697839102691
Encrypted:	false
Ssdeep:	12288:4gPbPpxMofhPNN0+RXBrp3M5pzRN4l2SQ+PEu9tUs/abAQb51FW/IzkOfWPO9UN:4gPbPp9NNP0BgInfW2WN
Size:	573177
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Drops PE files to the application program directory (C:\ProgramData)	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\ProgramData\mozglue.dll
Category:	dropped
Dump:	mozglue.dll.3.dr
ID:	dr_13
Target ID:	3
Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Entropy:	6.833616094889818
Encrypted:	false
Ssdeep:	12288:BlSyAom/gcRKMdRm4wFkRHuyG4RRGJVDjMk/x21R8gY/r:BKgcRKMdRm4wFkVVDGJVv//x21R8br
Size:	608080
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Drops PE files to the application program directory (C:\ProgramData)	Persistence and Installation Behavior

Details

File:	C:\ProgramData\nss3.dll
Category:	dropped
Dump:	nss3.dll.3.dr
ID:	dr_17
Target ID:	3
Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Entropy:	6.787733948558952
Encrypted:	false
Ssdeep:	49152:fECf12gikHlnKGxJRIB+y5nvxnaOSJ3HFNWYrVvE4CQsgzMmQfTU1NrWmy4KoAzh:J7Tf8J1Q+SS5/nr
Size:	2046288
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Drops PE files to the application program directory (C:\ProgramData)	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\ProgramData\softokn3.dll
Category:	dropped
Dump:	softokn3.dll.3.dr
ID:	dr_15
Target ID:	3
Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Entropy:	6.727482641240852
Encrypted:	false
Ssdeep:	6144:/yF/zX2zfRkU62THVh/T2AhZxv6A31obD6Hq/8jis+FvtVRpsAAs0o8OqTYz+xnU:/yRzX2zfRkX2T1h/SA5PF9m8jJqKYz+y
Size:	257872
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Drops PE files to the application program directory (C:\ProgramData)	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\file.exe.log
Category:	modified
Dump:	file.exe.log.0.dr
ID:	dr_1
Target ID:	0
Process:	C:\Users\user\Desktop\file.exe
Type:	CSV text
Entropy:	5.353683843266035
Encrypted:	false
Ssdeep:	12:Q3La/KDLI4MWuPTAOKbbDLI4MWuPJKAVKhav:ML9E4KlKDE4KhKiKhk
Size:	425
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Multi AV Scanner detection for submitted file	AV Detection
PE / OLE file has an invalid certificate	System Summary
PE file contains an invalid checksum	Data Obfuscation
Sample file is different than original file name gathered from version info	System Summary
Uses 32bit PE files	Compliance, System Summary
Binary may include packed or encrypted code	Data Obfuscation	Obfuscated Files or Information Software Packing
PE file has an executable .text section which is very likely to contain packed code (zlib compression ratio < 0.3)	System Summary	Software Packing
Creates files inside the user directory	System Summary	Masquerading
PE file has an executable .text section and no other executable section	System Summary
Parts of this applications are using the .NET runtime (Probably coded in C#)	System Summary
Sample is known by Antivirus	System Summary
PE file contains a debug data directory	System Summary
Contains modern PE file flags such as dynamic base (ASLR) or NX	Compliance, System Summary
PE file contains a COM descriptor data directory	System Summary

Details

File:	C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\66f4247d51812_lfdsjna[1].exe
Category:	dropped
Dump:	66f4247d51812_lfdsjna[1].exe.3.dr
ID:	dr_25
Target ID:	3
Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Type:	PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	7.988522009011023
Encrypted:	false
Ssdeep:	6144:uXfqISDaHCXsYQkiJ0j0Zt/d/WCIRibFrzae5LpVGbM/5Pg+rq8ZrPbXbCEO:uCvXsWtI/dVHbdastVG2ycWEO
Size:	377384
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior

Details

File:	C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\66f424e80b9cc_idsmds[1].exe
Category:	dropped
Dump:	66f424e80b9cc_idsmds[1].exe.3.dr
ID:	dr_23
Target ID:	3
Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	5.587298385417451
Encrypted:	false
Ssdeep:	768:0Z7bBiDrq+NhJvjhTxhi8DD08T10DnS1RW:0ZErqqTxhZDA8TKS1RW
Size:	26112
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Machine Learning detection for dropped file	AV Detection
Drops PE files	Persistence and Installation Behavior

Details

File:	C:\Users\user\AppData\Local\Temp\Malewmf\FDWDZ.exe
Category:	dropped
Dump:	FDWDZ.exe.8.dr
ID:	dr_873
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	5.587298385417451
Encrypted:	false
Ssdeep:	768:0Z7bBiDrq+NhJvjhTxhi8DD08T10DnS1RW:0ZErqqTxhZDA8TKS1RW
Size:	26112
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Machine Learning detection for dropped file	AV Detection
Allocates memory with a write watch (potentially for evading sandboxes)	Malware Analysis System Evasion	Virtualization/Sandbox Evasion
Creates a process in suspended mode (likely to inject code)	HIPS / PFW / Operating System Protection Evasion	Process Injection
Drops PE files	Persistence and Installation Behavior
Enables debug privileges	Anti Debugging
Queries the volume information (name, serial number etc) of a device	Language, Device and Operating System Detection	System Information Discovery
Disables application error messsages (SetErrorMode)	Hooking and other Techniques for Hiding and Protection
Spawns processes	System Summary	Process Injection
Tries to load missing DLLs	System Summary	DLL Side-Loading

Details

File:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Category:	dropped
Dump:	MFDBG.exe.7.dr
ID:	dr_26
Target ID:	7
Process:	C:\ProgramData\KKEBKJJDGH.exe
Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	5.587298385417451
Encrypted:	false
Ssdeep:	768:0Z7bBiDrq+NhJvjhTxhi8DD08T10DnS1RW:0ZErqqTxhZDA8TKS1RW
Size:	26112
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Machine Learning detection for dropped file	AV Detection
Sigma detected: New RUN Key Pointing to Suspicious Folder	System Summary
Abnormal high CPU Usage	System Summary
Allocates memory with a write watch (potentially for evading sandboxes)	Malware Analysis System Evasion	Virtualization/Sandbox Evasion
Checks if the current process is being debugged	Anti Debugging	Security Software Discovery Virtualization/Sandbox Evasion
Contains long sleeps (>= 3 min)	Malware Analysis System Evasion	Virtualization/Sandbox Evasion
Creates a process in suspended mode (likely to inject code)	HIPS / PFW / Operating System Protection Evasion	Process Injection
Drops PE files	Persistence and Installation Behavior
Enables debug privileges	Anti Debugging
Found a high number of Window / User specific system calls (may be a loop to detect user behavior)	Malware Analysis System Evasion
One or more processes crash	System Summary
Queries the volume information (name, serial number etc) of a device	Language, Device and Operating System Detection	System Information Discovery
Shows file infection / information gathering behavior (enumerates multiple directory for files)	Spreading, Stealing of Sensitive Information	File and Directory Discovery
Sigma detected: CurrentVersion Autorun Keys Modification	System Summary
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder
Contains medium sleeps (>= 30s)	Malware Analysis System Evasion	Virtualization/Sandbox Evasion
Creates mutexes	System Summary
Disables application error messsages (SetErrorMode)	Hooking and other Techniques for Hiding and Protection
Spawns processes	System Summary	Process Injection
Tries to load missing DLLs	System Summary	DLL Side-Loading
Uses Microsoft Silverlight	System Summary

Details

File:	C:\ProgramData\AEBAKJDGHIIJ\BGDGHJ
Category:	dropped
Dump:	BGDGHJ.3.dr
ID:	dr_11
Target ID:	3
Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 8, database pages 89, cookie 0x36, schema 4, UTF-8, version-valid-for 8
Entropy:	1.121297215059106
Encrypted:	false
Ssdeep:	384:72qOB1nxCkvSAELyKOMq+8yC8F/YfU5m+OlT:qq+n0E9ELyKOMq+8y9/Ow
Size:	196608
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\ProgramData\AEBAKJDGHIIJ\DBFIEH
Category:	dropped
Dump:	DBFIEH.3.dr
ID:	dr_4
Target ID:	3
Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 4, database pages 5, cookie 0x3, schema 4, UTF-8, version-valid-for 4
Entropy:	0.8439810553697228
Encrypted:	false
Ssdeep:	24:TLyAF1kwNbXYFpFNYcw+6UwcQVXH5fBO9p7n52GmCWGf+dyMDCFVE1:TeAFawNLopFgU10XJBOB2Gbf+ba+
Size:	20480
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\ProgramData\AEBAKJDGHIIJ\DGCFHI
Category:	dropped
Dump:	DGCFHI.3.dr
ID:	dr_6
Target ID:	3
Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 20, cookie 0xb, schema 4, UTF-8, version-valid-for 1
Entropy:	0.8553638852307782
Encrypted:	false
Ssdeep:	48:2x7BA+IIF7CVEq8Ma0D0HOlf/6ykwp1EUwMHZq10bvJKLkw8s8LKvUf9KVyJ7h/f:QNDCn8MouB6wz8iZqmvJKLPeymwil
Size:	40960
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\ProgramData\AEBAKJDGHIIJ\EGIIJD
Category:	dropped
Dump:	EGIIJD.3.dr
ID:	dr_7
Target ID:	3
Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 3, database pages 52, cookie 0x21, schema 4, UTF-8, version-valid-for 3
Entropy:	1.136413900497188
Encrypted:	false
Ssdeep:	192:ZWTblyVZTnGtgTgabTanQeZVuSVumZa6cV/04:MnlyfnGtxnfVuSVumEHV84
Size:	106496
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\ProgramData\AEBAKJDGHIIJ\FHCGCA
Category:	dropped
Dump:	FHCGCA.3.dr
ID:	dr_20
Target ID:	3
Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Type:	SQLite 3.x database, user version 75, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 2, database pages 46, cookie 0x26, schema 4, UTF-8, version-valid-for 2
Entropy:	0.03859996294213402
Encrypted:	false
Ssdeep:	192:58rJQaXoMXp0VW9FxWHxDSjENbx56p3DisuwAyHI:58r54w0VW3xWdkEFxcp3y/y
Size:	5242880
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\ProgramData\AEBAKJDGHIIJ\FHCGCA-shm
Category:	dropped
Dump:	FHCGCA-shm.3.dr
ID:	dr_21
Target ID:	3
Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Type:	data
Entropy:	0.017262956703125623
Encrypted:	false
Ssdeep:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
Size:	32768
Whitelisted:	true
Reputation:	timeout

Details

File:	C:\ProgramData\AEBAKJDGHIIJ\FIDHIE
Category:	dropped
Dump:	FIDHIE.3.dr
ID:	dr_10
Target ID:	3
Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 25, cookie 0xe, schema 4, UTF-8, version-valid-for 1
Entropy:	0.8746135976761988
Encrypted:	false
Ssdeep:	96:O8mmwLCn8MouB6wzFlOqUvJKLReZff44EK:O8yLG7IwRWf4
Size:	51200
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\ProgramData\AEBAKJDGHIIJ\GDHDAE
Category:	dropped
Dump:	GDHDAE.3.dr
ID:	dr_5
Target ID:	3
Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 39, cookie 0x20, schema 4, UTF-8, version-valid-for 1
Entropy:	0.5394293526345721
Encrypted:	false
Ssdeep:	96:AquejzH+bF+UIYysX0IxQzh/tsV0NifLjLqLy0e9S8E:AqtH+bF+UI3iN0RSV0k3qLyj9
Size:	159744
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\ProgramData\AEBAKJDGHIIJ\GIJEGD
Category:	dropped
Dump:	GIJEGD.3.dr
ID:	dr_8
Target ID:	3
Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Type:	ASCII text, with very long lines (1743), with CRLF line terminators
Entropy:	5.512408163813622
Encrypted:	false
Ssdeep:	192:nnPOeRnWYbBp6RJ0aX+H6SEXKxkHWNBw8D4Sl:PeegJUaJHEw90
Size:	9504
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\ProgramData\AEBAKJDGHIIJ\IDHIIJ
Category:	dropped
Dump:	IDHIIJ.3.dr
ID:	dr_9
Target ID:	3
Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 38, cookie 0x1f, schema 4, UTF-8, version-valid-for 1
Entropy:	0.5407252242845243
Encrypted:	false
Ssdeep:	96:OgWyejzH+bDoYysX0IxQzZkHtpVJNlYDLjGQLBE3CeE0kE:OJhH+bDo3iN0Z2TVJkXBBE3yb
Size:	155648
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\ProgramData\AEBAKJDGHIIJ\IEHDAF
Category:	dropped
Dump:	IEHDAF.3.dr
ID:	dr_18
Target ID:	3
Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Type:	SQLite 3.x database, user version 12, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 3, database pages 3, cookie 0x1, schema 4, UTF-8, version-valid-for 3
Entropy:	0.08235737944063153
Encrypted:	false
Ssdeep:	12:DQAsfWk73Fmdmc/OPVJXfPNn43etRRfYR5O8atLqxeYaNcDakMG/lO:DQAsff32mNVpP965Ra8KN0MG/lO
Size:	98304
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\ProgramData\AEBAKJDGHIIJ\IEHDAF-shm
Category:	dropped
Dump:	IEHDAF-shm.3.dr
ID:	dr_19
Target ID:	3
Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Type:	data
Entropy:	0.017262956703125623
Encrypted:	false
Ssdeep:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
Size:	32768
Whitelisted:	true
Reputation:	timeout

Details

File:	C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MFDBG.exe_2017157e86b42cec1a418c847f3f981ae2c1db2_c2730a42_142fe33c-523c-4fce-840b-e262467f5a3e\Report.wer
Category:	dropped
Dump:	Report.wer.21.dr
ID:	dr_1060
Target ID:	21
Process:	C:\Windows\SysWOW64\WerFault.exe
Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Entropy:	0.9331069167408058
Encrypted:	false
Ssdeep:	192:9xox3sB70BU/JNea6DkzuiFHZ24IO8Jo:LoxcOBU/JNea+kzuiFHY4IO8Jo
Size:	65536
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MFDBG.exe_2017157e86b42cec1a418c847f3f981ae2c1db2_c2730a42_22780bd9-6d46-4788-9384-4e65b846ea27\Report.wer
Category:	dropped
Dump:	Report.wer.17.dr
ID:	dr_1059
Target ID:	17
Process:	C:\Windows\SysWOW64\WerFault.exe
Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Entropy:	0.9333393847504806
Encrypted:	false
Ssdeep:	192:mxsoBA4B70BU/JNea6DkzuiFHZ24IO8Jo:vom4OBU/JNea+kzuiFHY4IO8Jo
Size:	65536
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\ProgramData\Microsoft\Windows\WER\Temp\WERA569.tmp.dmp
Category:	dropped
Dump:	WERA569.tmp.dmp.17.dr
ID:	dr_1056
Target ID:	17
Process:	C:\Windows\SysWOW64\WerFault.exe
Type:	Mini DuMP crash report, 15 streams, Wed Sep 25 18:50:16 2024, 0x1205a4 type
Entropy:	4.184065701698284
Encrypted:	false
Ssdeep:	3072:mtk+wG5F6pWFl5V4uEqGVy2LTgTUIeXwArwXb:y1wGL0WF3V4PVy0TgQIeXwP
Size:	185420
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\ProgramData\Microsoft\Windows\WER\Temp\WERA886.tmp.WERInternalMetadata.xml
Category:	dropped
Dump:	WERA886.tmp.WERInternalMetadata.xml.17.dr
ID:	dr_1057
Target ID:	17
Process:	C:\Windows\SysWOW64\WerFault.exe
Type:	XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
Entropy:	3.6983752849281473
Encrypted:	false
Ssdeep:	192:R6l7wVeJQA6vrPu6YEITSU9g6X5cgmfZV9prC89bDNsfAABm:R6lXJX6y6YEsSU9g6X5cgmfL7DGfK
Size:	8378
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\ProgramData\Microsoft\Windows\WER\Temp\WERA904.tmp.xml
Category:	dropped
Dump:	WERA904.tmp.xml.17.dr
ID:	dr_1058
Target ID:	17
Process:	C:\Windows\SysWOW64\WerFault.exe
Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Entropy:	4.468314135616429
Encrypted:	false
Ssdeep:	96:uIjfAI7SW7Vo6J9J1RyKn1WTJIjzKKzmd:uIUYSW7b9J1v1W9gzKKzc
Size:	4726
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\ProgramData\Microsoft\Windows\WER\Temp\WERCEBB.tmp.dmp
Category:	dropped
Dump:	WERCEBB.tmp.dmp.21.dr
ID:	dr_1061
Target ID:	21
Process:	C:\Windows\SysWOW64\WerFault.exe
Type:	Mini DuMP crash report, 15 streams, Wed Sep 25 18:50:26 2024, 0x1205a4 type
Entropy:	4.214841914538768
Encrypted:	false
Ssdeep:	1536:YtpwtS51JM/CvInjBuBojRppN4uE2aOGhSVXqcLTgGOUwpfA3Fa9NoCD5aCtTexw:YtmDV4uEqGhylLTgGOUwp0s7D34L02
Size:	185196
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\ProgramData\Microsoft\Windows\WER\Temp\WERD0CF.tmp.WERInternalMetadata.xml
Category:	dropped
Dump:	WERD0CF.tmp.WERInternalMetadata.xml.21.dr
ID:	dr_1062
Target ID:	21
Process:	C:\Windows\SysWOW64\WerFault.exe
Type:	XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
Entropy:	3.694682691189536
Encrypted:	false
Ssdeep:	192:R6l7wVeJSx6k6YEIfSUC6vgmfZV9pr089bQ6sfzQm:R6lXJ06k6YEgSUC6vgmfLxQZfx
Size:	8374
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\ProgramData\Microsoft\Windows\WER\Temp\WERD11E.tmp.xml
Category:	dropped
Dump:	WERD11E.tmp.xml.21.dr
ID:	dr_1063
Target ID:	21
Process:	C:\Windows\SysWOW64\WerFault.exe
Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Entropy:	4.467713384108317
Encrypted:	false
Ssdeep:	96:uIjf7I7SW7VohJ9J1bKn11nTJIjzKKzbd:uIPYSW7K9J1i11n9gzKKzJ
Size:	4726
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\ProgramData\msvcp140.dll
Category:	dropped
Dump:	msvcp140.dll.3.dr
ID:	dr_14
Target ID:	3
Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Entropy:	6.673992339875127
Encrypted:	false
Ssdeep:	12288:McPa9C9VbL+3Omy5CvyOvzeOKdqhUgiW6QR7t5s03Ooc8dHkC2esGAWf:McPa90Vbky5CvyUeOKn03Ooc8dHkC2eN
Size:	450024
Whitelisted:	true
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Drops PE files to the application program directory (C:\ProgramData)	Persistence and Installation Behavior

Details

File:	C:\ProgramData\vcruntime140.dll
Category:	dropped
Dump:	vcruntime140.dll.3.dr
ID:	dr_16
Target ID:	3
Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Entropy:	6.920480786566406
Encrypted:	false
Ssdeep:	1536:lw2886xv555et/MCsjw0BuRK3jteo3ecbA2W86b+Ld:lw28V55At/zqw+Iq9ecbA2W8H
Size:	80880
Whitelisted:	true
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Drops PE files to the application program directory (C:\ProgramData)	Persistence and Installation Behavior

Details

File:	C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\EBGDHJECFC.exe.log
Category:	modified
Dump:	EBGDHJECFC.exe.log.10.dr
ID:	dr_1055
Target ID:	10
Process:	C:\ProgramData\EBGDHJECFC.exe
Type:	CSV text
Entropy:	5.353683843266035
Encrypted:	false
Ssdeep:	12:Q3La/KDLI4MWuPTAOKbbDLI4MWuPJKAVKhav:ML9E4KlKDE4KhKiKhk
Size:	425
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\KKEBKJJDGH.exe.log
Category:	dropped
Dump:	KKEBKJJDGH.exe.log.7.dr
ID:	dr_28
Target ID:	7
Process:	C:\ProgramData\KKEBKJJDGH.exe
Type:	CSV text
Entropy:	5.353683843266035
Encrypted:	false
Ssdeep:	12:Q3La/KDLI4MWuPTAOKbbDLI4MWuPJKAVKhav:ML9E4KlKDE4KhKiKhk
Size:	425
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\76561199780418869[1].htm
Category:	dropped
Dump:	76561199780418869[1].htm.3.dr
ID:	dr_3
Target ID:	3
Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Type:	HTML document, Unicode text, UTF-8 text, with very long lines (3070), with CRLF, LF line terminators
Entropy:	5.398635440270459
Encrypted:	false
Ssdeep:	768:udpqme0Ih3tAA6WG+2fcDAhTBv++nIjBtPF5zfJkPVoEAdLTBv++nIjBtPF5x2SE:ud8me0Ih3tAA6WG+2FhTBv++nIjBtPFx
Size:	34725
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Local\Temp\delays.tmp
Category:	dropped
Dump:	delays.tmp.3.dr
ID:	dr_2
Target ID:	3
Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Type:	ASCII text, with very long lines (65536), with no line terminators
Entropy:	0.0
Encrypted:	false
Ssdeep:	3:fvv3:/
Size:	1048575
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Creates temporary files	System Summary

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_000913a568ed4d738231f15b80803587.lnk
Category:	dropped
Dump:	MFDBG_000913a568ed4d738231f15b80803587.lnk.8.dr
ID:	dr_854
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:17 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.944332249018222
Encrypted:	false
Ssdeep:	24:8jYmhBfV8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8jYs60R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_001ca14e95544eb3bae7f53a99c59122.lnk
Category:	dropped
Dump:	MFDBG_001ca14e95544eb3bae7f53a99c59122.lnk.8.dr
ID:	dr_863
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:17 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.942512926052346
Encrypted:	false
Ssdeep:	24:8mHmhBfV8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8mHs60R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_002f3f6ff75f4e17818d290ab12069da.lnk
Category:	dropped
Dump:	MFDBG_002f3f6ff75f4e17818d290ab12069da.lnk.8.dr
ID:	dr_856
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:17 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.943843124294044
Encrypted:	false
Ssdeep:	24:8UmhBfV8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Us60R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_006849f5208a480987455abbdf478a37.lnk
Category:	dropped
Dump:	MFDBG_006849f5208a480987455abbdf478a37.lnk.8.dr
ID:	dr_566
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:44 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.932374644085542
Encrypted:	false
Ssdeep:	24:8qhBfI8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8AV0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_00ad15fe2f864b5b99bbc81d7541251f.lnk
Category:	dropped
Dump:	MFDBG_00ad15fe2f864b5b99bbc81d7541251f.lnk.8.dr
ID:	dr_51
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:39 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938053402644597
Encrypted:	false
Ssdeep:	24:8whBfV8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8iK0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_00d0dc1c210c4178a80b2eeb491c9863.lnk
Category:	dropped
Dump:	MFDBG_00d0dc1c210c4178a80b2eeb491c9863.lnk.8.dr
ID:	dr_238
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:50 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939395436610981
Encrypted:	false
Ssdeep:	24:8QhBf1kD8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Cr0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_00ebebafee43487684062606d71c4183.lnk
Category:	dropped
Dump:	MFDBG_00ebebafee43487684062606d71c4183.lnk.8.dr
ID:	dr_492
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:28 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.933184867459285
Encrypted:	false
Ssdeep:	24:8ghBfGY8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8yud0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_00ee42cf5c8c4013b23e262b94fe1a0e.lnk
Category:	dropped
Dump:	MFDBG_00ee42cf5c8c4013b23e262b94fe1a0e.lnk.8.dr
ID:	dr_376
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:26 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938198743715572
Encrypted:	false
Ssdeep:	24:8JhBfTl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8JW0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_016a2c35d21c4b6ca4bb7d051f6abc47.lnk
Category:	dropped
Dump:	MFDBG_016a2c35d21c4b6ca4bb7d051f6abc47.lnk.8.dr
ID:	dr_156
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:40 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9368685454738745
Encrypted:	false
Ssdeep:	24:8MhBfU8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8+p0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_017e6a6b5d394cb498a73f1f00525326.lnk
Category:	dropped
Dump:	MFDBG_017e6a6b5d394cb498a73f1f00525326.lnk.8.dr
ID:	dr_388
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:11 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.941182727810649
Encrypted:	false
Ssdeep:	24:8NhBf58iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8t20R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_01815ce8a80d48dfa3816e4a7eb8c570.lnk
Category:	dropped
Dump:	MFDBG_01815ce8a80d48dfa3816e4a7eb8c570.lnk.8.dr
ID:	dr_785
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:55 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9415038978340835
Encrypted:	false
Ssdeep:	24:8thBfOe8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Nm0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_01d7a38e785c4aa89f351d9c2810c1e1.lnk
Category:	dropped
Dump:	MFDBG_01d7a38e785c4aa89f351d9c2810c1e1.lnk.8.dr
ID:	dr_335
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:09 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936684998541184
Encrypted:	false
Ssdeep:	24:8vhBfg8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8zd0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_01faa85abb6d4b3fbc92d7bb205ad21c.lnk
Category:	dropped
Dump:	MFDBG_01faa85abb6d4b3fbc92d7bb205ad21c.lnk.8.dr
ID:	dr_301
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:08 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936059453055156
Encrypted:	false
Ssdeep:	24:8z9hBfB8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Be0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_022a891409cf4cbfa1840d322036dd59.lnk
Category:	dropped
Dump:	MFDBG_022a891409cf4cbfa1840d322036dd59.lnk.8.dr
ID:	dr_1011
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:51 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938235610658272
Encrypted:	false
Ssdeep:	24:8YehBfyQ8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Y0aF0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0258b253d7c541da8bae1503166e2e45.lnk
Category:	dropped
Dump:	MFDBG_0258b253d7c541da8bae1503166e2e45.lnk.8.dr
ID:	dr_471
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:28 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.941182727810649
Encrypted:	false
Ssdeep:	24:8JhBfvl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8J3C0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_02723c81f1c243209df4e0d6393bf5a0.lnk
Category:	dropped
Dump:	MFDBG_02723c81f1c243209df4e0d6393bf5a0.lnk.8.dr
ID:	dr_654
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:45 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.932787545962199
Encrypted:	false
Ssdeep:	24:8shBfc8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8eh0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0289dc24d2d040d08b7fcd1044eec573.lnk
Category:	dropped
Dump:	MFDBG_0289dc24d2d040d08b7fcd1044eec573.lnk.8.dr
ID:	dr_137
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:48 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.945372056006388
Encrypted:	false
Ssdeep:	24:8phBfu8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8pr0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_02bdff4d6b074f2c89d6d452e778d691.lnk
Category:	dropped
Dump:	MFDBG_02bdff4d6b074f2c89d6d452e778d691.lnk.8.dr
ID:	dr_871
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:17 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936993399614909
Encrypted:	false
Ssdeep:	24:8cYmhBfI+8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8fsgT0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_02ce2367671a4a2687f7bc2928e88f11.lnk
Category:	dropped
Dump:	MFDBG_02ce2367671a4a2687f7bc2928e88f11.lnk.8.dr
ID:	dr_569
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:44 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9374025568366795
Encrypted:	false
Ssdeep:	24:8UhBff8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Wc0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_032ed0f6cb1e4e4cb67e7bae806b8ef2.lnk
Category:	dropped
Dump:	MFDBG_032ed0f6cb1e4e4cb67e7bae806b8ef2.lnk.8.dr
ID:	dr_499
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:41 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.94203230708921
Encrypted:	false
Ssdeep:	24:8k8hBfE8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:89J0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_033ce1f39e32412ca8fa6c613f447c50.lnk
Category:	dropped
Dump:	MFDBG_033ce1f39e32412ca8fa6c613f447c50.lnk.8.dr
ID:	dr_225
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:46 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.933605714961537
Encrypted:	false
Ssdeep:	24:8ohBfeh8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8q/0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0403cc2df8f344279b5b0c3e29d19c52.lnk
Category:	dropped
Dump:	MFDBG_0403cc2df8f344279b5b0c3e29d19c52.lnk.8.dr
ID:	dr_184
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:44 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.943953870566354
Encrypted:	false
Ssdeep:	24:8ThBf98iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8ny0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_047629bfa7f6485b933aecdcfebc49d0.lnk
Category:	dropped
Dump:	MFDBG_047629bfa7f6485b933aecdcfebc49d0.lnk.8.dr
ID:	dr_547
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:43 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.941671852534826
Encrypted:	false
Ssdeep:	24:86/2hBffD8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8B3Q0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_047c503277694b38add257c4d2e38e34.lnk
Category:	dropped
Dump:	MFDBG_047c503277694b38add257c4d2e38e34.lnk.8.dr
ID:	dr_350
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:26 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.946037155127236
Encrypted:	false
Ssdeep:	24:80hBfW8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:82D0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_04a14468ba3a4acea965f5d89a00d11b.lnk
Category:	dropped
Dump:	MFDBG_04a14468ba3a4acea965f5d89a00d11b.lnk.8.dr
ID:	dr_723
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:54 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935943739092594
Encrypted:	false
Ssdeep:	24:8hhBfUxp8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Rl0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_050e5d72c750410185292bdf75396761.lnk
Category:	dropped
Dump:	MFDBG_050e5d72c750410185292bdf75396761.lnk.8.dr
ID:	dr_732
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:50 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938002427833171
Encrypted:	false
Ssdeep:	24:84hBfO8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8ar0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0511ca835d294c6f9a0b866e244463b3.lnk
Category:	dropped
Dump:	MFDBG_0511ca835d294c6f9a0b866e244463b3.lnk.8.dr
ID:	dr_619
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:53 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936993399614912
Encrypted:	false
Ssdeep:	24:8RhBfc8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8hR0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_053a419816fa4d6bbc66f63b5f9fb26c.lnk
Category:	dropped
Dump:	MFDBG_053a419816fa4d6bbc66f63b5f9fb26c.lnk.8.dr
ID:	dr_470
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:28 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.941182727810649
Encrypted:	false
Ssdeep:	24:8QhBfvl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8C3C0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0544720e0d6e476ab4cc61db40bd7fd6.lnk
Category:	dropped
Dump:	MFDBG_0544720e0d6e476ab4cc61db40bd7fd6.lnk.8.dr
ID:	dr_394
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:26 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936254421164452
Encrypted:	false
Ssdeep:	24:8MshBfGy8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Meuf0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_05b1379186bf4e29be4f6e5d40cace44.lnk
Category:	dropped
Dump:	MFDBG_05b1379186bf4e29be4f6e5d40cace44.lnk.8.dr
ID:	dr_968
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:46 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.947134170543831
Encrypted:	false
Ssdeep:	24:8mphBfT8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8So0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_05c7eb56e841446f9eb1e74c981e3a33.lnk
Category:	dropped
Dump:	MFDBG_05c7eb56e841446f9eb1e74c981e3a33.lnk.8.dr
ID:	dr_237
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:45 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.934496071988359
Encrypted:	false
Ssdeep:	24:8a5hBfQl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Y30R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_05e591f6eb824fa8b3ca246cecc85f0d.lnk
Category:	dropped
Dump:	MFDBG_05e591f6eb824fa8b3ca246cecc85f0d.lnk.8.dr
ID:	dr_169
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:49 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935859517255614
Encrypted:	false
Ssdeep:	24:86hBfp8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8wm0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_06165b1d6b664b5e86d478972d965c3a.lnk
Category:	dropped
Dump:	MFDBG_06165b1d6b664b5e86d478972d965c3a.lnk.8.dr
ID:	dr_345
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:10 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.940702108847513
Encrypted:	false
Ssdeep:	24:87hBfbp8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8/DO0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_062df8eb1ecb4b5f9c50e93c669afef5.lnk
Category:	dropped
Dump:	MFDBG_062df8eb1ecb4b5f9c50e93c669afef5.lnk.8.dr
ID:	dr_444
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:14 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936436629178126
Encrypted:	false
Ssdeep:	24:8ZPhBfeczp8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8he0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0752b4308752497792cc1c0cfd143a34.lnk
Category:	dropped
Dump:	MFDBG_0752b4308752497792cc1c0cfd143a34.lnk.8.dr
ID:	dr_703
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:49 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.933708888697828
Encrypted:	false
Ssdeep:	24:8o8hBfDD8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:85rQ0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_07536cd27c8941b08e0f13cc8cf12879.lnk
Category:	dropped
Dump:	MFDBG_07536cd27c8941b08e0f13cc8cf12879.lnk.8.dr
ID:	dr_212
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:49 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939076684175791
Encrypted:	false
Ssdeep:	24:8EhBfp8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8mm0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_07882085e9ec49f3b2313e4e590d1ac0.lnk
Category:	dropped
Dump:	MFDBG_07882085e9ec49f3b2313e4e590d1ac0.lnk.8.dr
ID:	dr_1009
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:51 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.937891681560861
Encrypted:	false
Ssdeep:	24:81hBfyQ8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8laF0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_07b2f22b586041fcb482324a015aa4c7.lnk
Category:	dropped
Dump:	MFDBG_07b2f22b586041fcb482324a015aa4c7.lnk.8.dr
ID:	dr_929
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:00 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935981793405606
Encrypted:	false
Ssdeep:	24:8KhBfv8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8gs0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_091f6f811cfc4478855c1dcecdd833ba.lnk
Category:	dropped
Dump:	MFDBG_091f6f811cfc4478855c1dcecdd833ba.lnk.8.dr
ID:	dr_900
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:18 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9348110590621985
Encrypted:	false
Ssdeep:	24:8ihBfFbD8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8I9c0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0963a2a7665e4211a838b0c496edbf22.lnk
Category:	dropped
Dump:	MFDBG_0963a2a7665e4211a838b0c496edbf22.lnk.8.dr
ID:	dr_640
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:49 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935418949754614
Encrypted:	false
Ssdeep:	24:8oGhBfq8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8v/0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_096dce808468472bb7717a90cce86c76.lnk
Category:	dropped
Dump:	MFDBG_096dce808468472bb7717a90cce86c76.lnk.8.dr
ID:	dr_753
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:54 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.93770585363004
Encrypted:	false
Ssdeep:	24:8ChBfUxp8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8ol0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_09e3dcb0d04b4edbbd9d2be9ee9d8db2.lnk
Category:	dropped
Dump:	MFDBG_09e3dcb0d04b4edbbd9d2be9ee9d8db2.lnk.8.dr
ID:	dr_318
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:09 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.932568471005824
Encrypted:	false
Ssdeep:	24:8FhBf98iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Vi0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0a14da65e9f04a8caf26d56ddc450cde.lnk
Category:	dropped
Dump:	MFDBG_0a14da65e9f04a8caf26d56ddc450cde.lnk.8.dr
ID:	dr_848
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:17 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.945372056006387
Encrypted:	false
Ssdeep:	24:8VYmhBfX8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8+sU0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0a1b371b863c43a39d58c1ef48c87fd9.lnk
Category:	dropped
Dump:	MFDBG_0a1b371b863c43a39d58c1ef48c87fd9.lnk.8.dr
ID:	dr_947
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:01 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9335406322813835
Encrypted:	false
Ssdeep:	24:8aqnhBfeIl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8H7nC0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0a3374ce5ffa41fb80714acd3d7b38a6.lnk
Category:	dropped
Dump:	MFDBG_0a3374ce5ffa41fb80714acd3d7b38a6.lnk.8.dr
ID:	dr_132
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:40 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9372125832723635
Encrypted:	false
Ssdeep:	24:8lhBfe8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:81L0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0a53e49d6ed4460b889dd459118afe3b.lnk
Category:	dropped
Dump:	MFDBG_0a53e49d6ed4460b889dd459118afe3b.lnk.8.dr
ID:	dr_957
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:46 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9401736995923855
Encrypted:	false
Ssdeep:	24:81hBfJe8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8lF0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0a663d8cc3c0444697739e5c91f85acb.lnk
Category:	dropped
Dump:	MFDBG_0a663d8cc3c0444697739e5c91f85acb.lnk.8.dr
ID:	dr_494
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:28 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.932519768338437
Encrypted:	false
Ssdeep:	24:82hBfGY8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8cud0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0a77d54eb7774e9892478746a0de0c0a.lnk
Category:	dropped
Dump:	MFDBG_0a77d54eb7774e9892478746a0de0c0a.lnk.8.dr
ID:	dr_299
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:08 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.942081009756598
Encrypted:	false
Ssdeep:	24:8K2hBfB8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:81e0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0a96f8fc4f214c8396ca2d3ab4f70866.lnk
Category:	dropped
Dump:	MFDBG_0a96f8fc4f214c8396ca2d3ab4f70866.lnk.8.dr
ID:	dr_918
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:00 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9404629972181
Encrypted:	false
Ssdeep:	24:8yhBfv8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:84s0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0af0595f58544c65b0b56e62723f5b7e.lnk
Category:	dropped
Dump:	MFDBG_0af0595f58544c65b0b56e62723f5b7e.lnk.8.dr
ID:	dr_557
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:47 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938843501350689
Encrypted:	false
Ssdeep:	24:8YhBfh8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:86+0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0afaea6e000142548e6723388e7e20e7.lnk
Category:	dropped
Dump:	MFDBG_0afaea6e000142548e6723388e7e20e7.lnk.8.dr
ID:	dr_728
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:54 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935278639971746
Encrypted:	false
Ssdeep:	24:8PhBfUxp8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Tl0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0b17dfac68654765abc07291588cf1a7.lnk
Category:	dropped
Dump:	MFDBG_0b17dfac68654765abc07291588cf1a7.lnk.8.dr
ID:	dr_198
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:50 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9403595275232055
Encrypted:	false
Ssdeep:	24:8HhBf1kD8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8br0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0b4d8097dc2143e2ac44a568ef78e6b0.lnk
Category:	dropped
Dump:	MFDBG_0b4d8097dc2143e2ac44a568ef78e6b0.lnk.8.dr
ID:	dr_639
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:53 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.93436745248597
Encrypted:	false
Ssdeep:	24:8GhBfSr8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8MKI0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0b51e93500c44739858f635b733c3ac6.lnk
Category:	dropped
Dump:	MFDBG_0b51e93500c44739858f635b733c3ac6.lnk.8.dr
ID:	dr_173
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:49 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.940838798713236
Encrypted:	false
Ssdeep:	24:8+hBfp8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Um0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0b8a004423424b29bd11acdd7980fc3b.lnk
Category:	dropped
Dump:	MFDBG_0b8a004423424b29bd11acdd7980fc3b.lnk.8.dr
ID:	dr_849
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:17 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.941847826931498
Encrypted:	false
Ssdeep:	24:8zmhBfX8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8zsU0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0ba608ade7f149a28e2dfed050278f92.lnk
Category:	dropped
Dump:	MFDBG_0ba608ade7f149a28e2dfed050278f92.lnk.8.dr
ID:	dr_796
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:55 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9415038978340835
Encrypted:	false
Ssdeep:	24:8P9hBf08iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8P9Z0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0bec5552a4ab40fc84862be029e3c5ef.lnk
Category:	dropped
Dump:	MFDBG_0bec5552a4ab40fc84862be029e3c5ef.lnk.8.dr
ID:	dr_242
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:51 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.940750811514902
Encrypted:	false
Ssdeep:	24:8ahBf9l8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8QA0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0c284546fc6b48aea0639b9a626a6e98.lnk
Category:	dropped
Dump:	MFDBG_0c284546fc6b48aea0639b9a626a6e98.lnk.8.dr
ID:	dr_743
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:55 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935570328330978
Encrypted:	false
Ssdeep:	24:8GhBfOe8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Mm0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0c4f885cea60472bafbb9885dd908da4.lnk
Category:	dropped
Dump:	MFDBG_0c4f885cea60472bafbb9885dd908da4.lnk.8.dr
ID:	dr_110
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:47 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936706678945931
Encrypted:	false
Ssdeep:	24:87hBfO8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8/70R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0c6462c6e24b4b43a78b2fc82968f9ee.lnk
Category:	dropped
Dump:	MFDBG_0c6462c6e24b4b43a78b2fc82968f9ee.lnk.8.dr
ID:	dr_67
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:39 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935673689324791
Encrypted:	false
Ssdeep:	24:8ShBfS8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Y30R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0ccbdc2a47784fbea67c714995b9e370.lnk
Category:	dropped
Dump:	MFDBG_0ccbdc2a47784fbea67c714995b9e370.lnk.8.dr
ID:	dr_298
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:08 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935464467902566
Encrypted:	false
Ssdeep:	24:8hhBfB8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Re0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0cd1473aef6b4f7caeb6929298d6e14d.lnk
Category:	dropped
Dump:	MFDBG_0cd1473aef6b4f7caeb6929298d6e14d.lnk.8.dr
ID:	dr_830
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:16 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.934507493164965
Encrypted:	false
Ssdeep:	24:8DhBfNbD8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:83lc0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0d7b2097bc4e49068880fcce920b5a42.lnk
Category:	dropped
Dump:	MFDBG_0d7b2097bc4e49068880fcce920b5a42.lnk.8.dr
ID:	dr_959
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:46 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.941182727810647
Encrypted:	false
Ssdeep:	24:8xhBfJe8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8BF0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0deeed9c7c6b41bab18215a90aba7ccb.lnk
Category:	dropped
Dump:	MFDBG_0deeed9c7c6b41bab18215a90aba7ccb.lnk.8.dr
ID:	dr_776
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:55 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.94321730970414
Encrypted:	false
Ssdeep:	24:8lGhBf08iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8lMZ0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0e298dcf407b4a058d7c296bbab771fb.lnk
Category:	dropped
Dump:	MFDBG_0e298dcf407b4a058d7c296bbab771fb.lnk.8.dr
ID:	dr_402
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:11 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939764542370615
Encrypted:	false
Ssdeep:	24:80hBfM8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:82x0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0e69ef1567d248a1a5403ac89de9f57e.lnk
Category:	dropped
Dump:	MFDBG_0e69ef1567d248a1a5403ac89de9f57e.lnk.8.dr
ID:	dr_528
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:47 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.928036146937697
Encrypted:	false
Ssdeep:	24:8lPhBfvl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8lT3C0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0e72d32b1c9547178ca03ab39db7fa94.lnk
Category:	dropped
Dump:	MFDBG_0e72d32b1c9547178ca03ab39db7fa94.lnk.8.dr
ID:	dr_685
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:45 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935953592626745
Encrypted:	false
Ssdeep:	24:8thBfGI+8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8NuIT0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0eacf4353c5a43a880e1c93aaad90750.lnk
Category:	dropped
Dump:	MFDBG_0eacf4353c5a43a880e1c93aaad90750.lnk.8.dr
ID:	dr_126
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:39 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.93620301615473
Encrypted:	false
Ssdeep:	24:8bhBfR8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8f+0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0ede71712fe64dc98c32b448d166c5d5.lnk
Category:	dropped
Dump:	MFDBG_0ede71712fe64dc98c32b448d166c5d5.lnk.8.dr
ID:	dr_252
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:51 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936041579825081
Encrypted:	false
Ssdeep:	24:8thBfKP8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8NC00R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0f2a6fc45ad5481d924af185fb92a5ec.lnk
Category:	dropped
Dump:	MFDBG_0f2a6fc45ad5481d924af185fb92a5ec.lnk.8.dr
ID:	dr_519
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:43 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938593647624409
Encrypted:	false
Ssdeep:	24:8b8hBfsA8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8bOE10R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0f400e831312466eb0e729ac5b043e83.lnk
Category:	dropped
Dump:	MFDBG_0f400e831312466eb0e729ac5b043e83.lnk.8.dr
ID:	dr_276
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:46 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9375336445947235
Encrypted:	false
Ssdeep:	24:8QhBf48iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Cl0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_0feb0ec6fd704a21939547332b66bae4.lnk
Category:	dropped
Dump:	MFDBG_0feb0ec6fd704a21939547332b66bae4.lnk.8.dr
ID:	dr_226
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:50 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.941526656908061
Encrypted:	false
Ssdeep:	24:87hBf+8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8/b0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_10449eafcfe74b0480ec13eccffe8c47.lnk
Category:	dropped
Dump:	MFDBG_10449eafcfe74b0480ec13eccffe8c47.lnk.8.dr
ID:	dr_764
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:55 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9382748951892195
Encrypted:	false
Ssdeep:	24:868hBfOe8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Hm0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_1070428f48264e0c92337542f2cf8915.lnk
Category:	dropped
Dump:	MFDBG_1070428f48264e0c92337542f2cf8915.lnk.8.dr
ID:	dr_610
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:49 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.931707056002575
Encrypted:	false
Ssdeep:	24:8ChBfp8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8oG0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_107544c703774267a35ba4333c496a70.lnk
Category:	dropped
Dump:	MFDBG_107544c703774267a35ba4333c496a70.lnk.8.dr
ID:	dr_283
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:52 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.933309721600321
Encrypted:	false
Ssdeep:	24:8ShBf38iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8YU0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_10c168a0461a444c9bb91025ddbfe081.lnk
Category:	dropped
Dump:	MFDBG_10c168a0461a444c9bb91025ddbfe081.lnk.8.dr
ID:	dr_496
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:28 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.931422752921841
Encrypted:	false
Ssdeep:	24:8a+hBfGY8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8lud0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_10d2fa0ea6e14a7b920960f79c00b449.lnk
Category:	dropped
Dump:	MFDBG_10d2fa0ea6e14a7b920960f79c00b449.lnk.8.dr
ID:	dr_678
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:53 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9342973385177125
Encrypted:	false
Ssdeep:	24:8QhBfSr8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8CKI0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_10e87549ab8e46feb571e5659d57b947.lnk
Category:	dropped
Dump:	MFDBG_10e87549ab8e46feb571e5659d57b947.lnk.8.dr
ID:	dr_762
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:55 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936889188675304
Encrypted:	false
Ssdeep:	24:86hBfOe8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8wm0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_111e8ac8ce304fc284b785cbe30ba5ca.lnk
Category:	dropped
Dump:	MFDBG_111e8ac8ce304fc284b785cbe30ba5ca.lnk.8.dr
ID:	dr_279
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:52 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.940443749360191
Encrypted:	false
Ssdeep:	24:8GhBfr48iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8MJ0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_1138e05d6378404899aa2a094fb50bec.lnk
Category:	dropped
Dump:	MFDBG_1138e05d6378404899aa2a094fb50bec.lnk.8.dr
ID:	dr_553
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:47 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.931508322531928
Encrypted:	false
Ssdeep:	24:8AhBfl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8S60R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_11b54e6813c64a22b9af156663e71ded.lnk
Category:	dropped
Dump:	MFDBG_11b54e6813c64a22b9af156663e71ded.lnk.8.dr
ID:	dr_667
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:49 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9366314100298965
Encrypted:	false
Ssdeep:	24:8KWhBfDD8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8trQ0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_12196d4f20a74353bd7f317ebe086486.lnk
Category:	dropped
Dump:	MFDBG_12196d4f20a74353bd7f317ebe086486.lnk.8.dr
ID:	dr_265
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:52 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.937930966091807
Encrypted:	false
Ssdeep:	24:8FhBf38iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8VU0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_125bbb01dffe40fb982f2eed9545a247.lnk
Category:	dropped
Dump:	MFDBG_125bbb01dffe40fb982f2eed9545a247.lnk.8.dr
ID:	dr_981
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:47 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.941847826931496
Encrypted:	false
Ssdeep:	24:8vGhBfF+8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8vMp0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_125f4f249c1346bca76ce0272c94b707.lnk
Category:	dropped
Dump:	MFDBG_125f4f249c1346bca76ce0272c94b707.lnk.8.dr
ID:	dr_540
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:47 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9320380795601615
Encrypted:	false
Ssdeep:	24:8XhBfvl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8L3C0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_12e02e05a5794e34bdd3dcd67e1a4f47.lnk
Category:	dropped
Dump:	MFDBG_12e02e05a5794e34bdd3dcd67e1a4f47.lnk.8.dr
ID:	dr_160
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:40 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.934310244057537
Encrypted:	false
Ssdeep:	24:86hBfe8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8wL0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_133d1e2e36d141f5a6c6fd268f239d69.lnk
Category:	dropped
Dump:	MFDBG_133d1e2e36d141f5a6c6fd268f239d69.lnk.8.dr
ID:	dr_560
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:44 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.93645073704685
Encrypted:	false
Ssdeep:	24:8dm8hBf2p8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8ZeO0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_13b73e127bdc44a5930c938fa1fc77e1.lnk
Category:	dropped
Dump:	MFDBG_13b73e127bdc44a5930c938fa1fc77e1.lnk.8.dr
ID:	dr_45
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:39 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.930845640999325
Encrypted:	false
Ssdeep:	24:8chBfQ8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8ut0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_13fcdfd8c1d941f5b991395161017b10.lnk
Category:	dropped
Dump:	MFDBG_13fcdfd8c1d941f5b991395161017b10.lnk.8.dr
ID:	dr_674
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:53 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.942388071911309
Encrypted:	false
Ssdeep:	24:82hBfSr8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8cKI0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_143ec38e28af40e584cada10cac44145.lnk
Category:	dropped
Dump:	MFDBG_143ec38e28af40e584cada10cac44145.lnk.8.dr
ID:	dr_939
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:01 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.937026755341544
Encrypted:	false
Ssdeep:	24:8ehBfv8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:80s0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_14a790e24c2c4e95947bc03eabd45b5c.lnk
Category:	dropped
Dump:	MFDBG_14a790e24c2c4e95947bc03eabd45b5c.lnk.8.dr
ID:	dr_114
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:47 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936291003353065
Encrypted:	false
Ssdeep:	24:8EhBfO8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8m70R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_154ed92159f44d3894364c250d39d5f5.lnk
Category:	dropped
Dump:	MFDBG_154ed92159f44d3894364c250d39d5f5.lnk.8.dr
ID:	dr_624
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:45 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9393619204815495
Encrypted:	false
Ssdeep:	24:822hBfc8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:82ch0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_15510b0a07d342b7afff073c96ea5b5e.lnk
Category:	dropped
Dump:	MFDBG_15510b0a07d342b7afff073c96ea5b5e.lnk.8.dr
ID:	dr_622
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:49 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936254421164452
Encrypted:	false
Ssdeep:	24:8uphBfq8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8qv0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_161be8eb5229421586ef616afec945ad.lnk
Category:	dropped
Dump:	MFDBG_161be8eb5229421586ef616afec945ad.lnk.8.dr
ID:	dr_911
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:00 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9326127500817485
Encrypted:	false
Ssdeep:	24:8EhBfv8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8ms0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_162d2564056b4f25af0b03aec212724b.lnk
Category:	dropped
Dump:	MFDBG_162d2564056b4f25af0b03aec212724b.lnk.8.dr
ID:	dr_536
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:46 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.937621631793056
Encrypted:	false
Ssdeep:	24:8vhBfE8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8zp0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_1633c92dbed043028e3eaccaffee2aac.lnk
Category:	dropped
Dump:	MFDBG_1633c92dbed043028e3eaccaffee2aac.lnk.8.dr
ID:	dr_245
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:46 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.942512926052347
Encrypted:	false
Ssdeep:	24:86hBf48iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8wl0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_167335b91ede48169e9c6bd52d11f536.lnk
Category:	dropped
Dump:	MFDBG_167335b91ede48169e9c6bd52d11f536.lnk.8.dr
ID:	dr_662
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:53 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936004712882378
Encrypted:	false
Ssdeep:	24:8UhBfSr8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8WKI0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_16a3bd0232114b2cb2e3c6a99bf54eea.lnk
Category:	dropped
Dump:	MFDBG_16a3bd0232114b2cb2e3c6a99bf54eea.lnk.8.dr
ID:	dr_538
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:43 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.943521954270607
Encrypted:	false
Ssdeep:	24:8bhBfsA8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8fE10R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_171c4d2fa7de4fa1b9803be0f00a8ebe.lnk
Category:	dropped
Dump:	MFDBG_171c4d2fa7de4fa1b9803be0f00a8ebe.lnk.8.dr
ID:	dr_817
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:15 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935479654440524
Encrypted:	false
Ssdeep:	24:88hBfNbD8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Olc0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_17ba712e0f5e4fa7a55639457ed3cff8.lnk
Category:	dropped
Dump:	MFDBG_17ba712e0f5e4fa7a55639457ed3cff8.lnk.8.dr
ID:	dr_712
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:46 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.934584059186692
Encrypted:	false
Ssdeep:	24:8FhBfP8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Vs0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_17bf3b161fa24807bfe401fc7c5c7fe6.lnk
Category:	dropped
Dump:	MFDBG_17bf3b161fa24807bfe401fc7c5c7fe6.lnk.8.dr
ID:	dr_508
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:42 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.942205863897635
Encrypted:	false
Ssdeep:	24:8Vn2hBfC8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8yn0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_17ecd94fcf5643a89b12c55dea4628bb.lnk
Category:	dropped
Dump:	MFDBG_17ecd94fcf5643a89b12c55dea4628bb.lnk.8.dr
ID:	dr_582
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:44 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9336870064243685
Encrypted:	false
Ssdeep:	24:8d9hBfwp8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8d9oO0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_1889f16736d24f6f8ce8c10d6eac5175.lnk
Category:	dropped
Dump:	MFDBG_1889f16736d24f6f8ce8c10d6eac5175.lnk.8.dr
ID:	dr_211
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:45 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9314024114361095
Encrypted:	false
Ssdeep:	24:8DhBfW8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:83D0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_19959ae7ba1c4c1ea2ada7f02752151e.lnk
Category:	dropped
Dump:	MFDBG_19959ae7ba1c4c1ea2ada7f02752151e.lnk.8.dr
ID:	dr_141
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:47 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939960858253017
Encrypted:	false
Ssdeep:	24:8v8hBfu8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Gr0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_199a6424bac7478bb7d6b05c89fa5528.lnk
Category:	dropped
Dump:	MFDBG_199a6424bac7478bb7d6b05c89fa5528.lnk.8.dr
ID:	dr_857
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:17 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.94203230708921
Encrypted:	false
Ssdeep:	24:8OmhBfV8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Os60R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_19f77a25fd6e4a36b9028741636b740e.lnk
Category:	dropped
Dump:	MFDBG_19f77a25fd6e4a36b9028741636b740e.lnk.8.dr
ID:	dr_358
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:26 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938198743715572
Encrypted:	false
Ssdeep:	24:8fhBfTl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8DW0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_1a4536e9d97148c180ff1153bc03de2f.lnk
Category:	dropped
Dump:	MFDBG_1a4536e9d97148c180ff1153bc03de2f.lnk.8.dr
ID:	dr_148
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:44 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.937970715838244
Encrypted:	false
Ssdeep:	24:8thBf8p8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Nh0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_1a8709e4167c4839b7d3f49e2c618bc7.lnk
Category:	dropped
Dump:	MFDBG_1a8709e4167c4839b7d3f49e2c618bc7.lnk.8.dr
ID:	dr_55
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:42 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9377464859340945
Encrypted:	false
Ssdeep:	24:8XGhBfN8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8XMy0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_1a8b5f8846dd46878829a4cdf100aad3.lnk
Category:	dropped
Dump:	MFDBG_1a8b5f8846dd46878829a4cdf100aad3.lnk.8.dr
ID:	dr_533
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:44 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.931062298367456
Encrypted:	false
Ssdeep:	24:8a1hBf2p8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8EeO0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_1b89850992b94e3e8b9eff5903af5fcf.lnk
Category:	dropped
Dump:	MFDBG_1b89850992b94e3e8b9eff5903af5fcf.lnk.8.dr
ID:	dr_967
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:46 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.932773292649268
Encrypted:	false
Ssdeep:	24:8ahBfG48iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Qa0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_1c776814a28048cb9caf89101bec2e0c.lnk
Category:	dropped
Dump:	MFDBG_1c776814a28048cb9caf89101bec2e0c.lnk.8.dr
ID:	dr_751
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:50 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938593647624409
Encrypted:	false
Ssdeep:	24:8+hBf3+8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8UPT0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_1c83a24927a342a6a2ac0694dc802ff6.lnk
Category:	dropped
Dump:	MFDBG_1c83a24927a342a6a2ac0694dc802ff6.lnk.8.dr
ID:	dr_777
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:55 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.942819558008763
Encrypted:	false
Ssdeep:	24:89hBfB8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:89+0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_1c83a9e0d9b2499ea2fc3d5a0477dc9a.lnk
Category:	dropped
Dump:	MFDBG_1c83a9e0d9b2499ea2fc3d5a0477dc9a.lnk.8.dr
ID:	dr_621
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:53 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9352312850774664
Encrypted:	false
Ssdeep:	24:8L2hBfc8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8LcR0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_1d337e8647e94e96859b6bc133503773.lnk
Category:	dropped
Dump:	MFDBG_1d337e8647e94e96859b6bc133503773.lnk.8.dr
ID:	dr_344
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:10 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939477821701635
Encrypted:	false
Ssdeep:	24:8N9hBfbp8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8N9DO0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_1d66a11277de4648ae88b2a3adc18f71.lnk
Category:	dropped
Dump:	MFDBG_1d66a11277de4648ae88b2a3adc18f71.lnk.8.dr
ID:	dr_70
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:42 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.929455816740951
Encrypted:	false
Ssdeep:	24:8ihBfe8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8IL0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_1db71f8f218148a488ed41bb6b7e1054.lnk
Category:	dropped
Dump:	MFDBG_1db71f8f218148a488ed41bb6b7e1054.lnk.8.dr
ID:	dr_1017
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:47 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938921051264851
Encrypted:	false
Ssdeep:	24:8DhBft8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:83C0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_1e59107beb5f429faf5de1e8258b0a38.lnk
Category:	dropped
Dump:	MFDBG_1e59107beb5f429faf5de1e8258b0a38.lnk.8.dr
ID:	dr_42
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:39 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938788869878989
Encrypted:	false
Ssdeep:	24:85hBfOW8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Z60R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_1e875b361a27496e8282119649d34fbd.lnk
Category:	dropped
Dump:	MFDBG_1e875b361a27496e8282119649d34fbd.lnk.8.dr
ID:	dr_1019
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:51 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939778650239342
Encrypted:	false
Ssdeep:	24:8lhBfyQ8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:81aF0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_1ea440c531ab44b5898de033fb7e79bc.lnk
Category:	dropped
Dump:	MFDBG_1ea440c531ab44b5898de033fb7e79bc.lnk.8.dr
ID:	dr_909
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:00 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9352646408041
Encrypted:	false
Ssdeep:	24:8IhBfv8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Ks0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_1edb8076cac443c4af1f48e57952d094.lnk
Category:	dropped
Dump:	MFDBG_1edb8076cac443c4af1f48e57952d094.lnk.8.dr
ID:	dr_268
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:52 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.934406737016918
Encrypted:	false
Ssdeep:	24:8GhBf38iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8MU0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_1efac788f56341d1934f1516410db009.lnk
Category:	dropped
Dump:	MFDBG_1efac788f56341d1934f1516410db009.lnk.8.dr
ID:	dr_209
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:45 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.932600183000752
Encrypted:	false
Ssdeep:	24:8xhBfQl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8B30R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_1f150a96fa4d41b391576883dbfaaffc.lnk
Category:	dropped
Dump:	MFDBG_1f150a96fa4d41b391576883dbfaaffc.lnk.8.dr
ID:	dr_657
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:45 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.930360332303906
Encrypted:	false
Ssdeep:	24:87hBf38iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8/00R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_1f44f01aa87e4488a8a85d8089889007.lnk
Category:	dropped
Dump:	MFDBG_1f44f01aa87e4488a8a85d8089889007.lnk.8.dr
ID:	dr_669
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:53 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935771530057277
Encrypted:	false
Ssdeep:	24:8+hBfSr8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8UKI0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_1fb0c10e627e4107985af6e8697040aa.lnk
Category:	dropped
Dump:	MFDBG_1fb0c10e627e4107985af6e8697040aa.lnk.8.dr
ID:	dr_458
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:28 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.940750811514901
Encrypted:	false
Ssdeep:	24:8ghBfEH8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8y8c0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_1fed6e1bd23d40f39960af1386845023.lnk
Category:	dropped
Dump:	MFDBG_1fed6e1bd23d40f39960af1386845023.lnk.8.dr
ID:	dr_666
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:53 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935956010214991
Encrypted:	false
Ssdeep:	24:8ehBfSr8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:80KI0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_205655dfd85e483aa2c533059911a7f6.lnk
Category:	dropped
Dump:	MFDBG_205655dfd85e483aa2c533059911a7f6.lnk.8.dr
ID:	dr_113
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:43 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939404087816231
Encrypted:	false
Ssdeep:	24:8O9hBfk8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8ep0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_2066b51c32ba4e61a8eed11a08a1c71f.lnk
Category:	dropped
Dump:	MFDBG_2066b51c32ba4e61a8eed11a08a1c71f.lnk.8.dr
ID:	dr_419
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:12 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.932804071419171
Encrypted:	false
Ssdeep:	24:8bhBfD8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8fY0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_20aff243fc5146778babee5cb9e2e4a7.lnk
Category:	dropped
Dump:	MFDBG_20aff243fc5146778babee5cb9e2e4a7.lnk.8.dr
ID:	dr_130
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:40 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.940447514721542
Encrypted:	false
Ssdeep:	24:8C9hBfe8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8KL0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_210b3671a39542499bf3c5f2ae29b057.lnk
Category:	dropped
Dump:	MFDBG_210b3671a39542499bf3c5f2ae29b057.lnk.8.dr
ID:	dr_869
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:17 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9386675269540214
Encrypted:	false
Ssdeep:	24:8qHmhBfI+8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8QsgT0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_21314e9d94f54121aecfe97137fc5ee6.lnk
Category:	dropped
Dump:	MFDBG_21314e9d94f54121aecfe97137fc5ee6.lnk.8.dr
ID:	dr_1014
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:51 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.94141591063575
Encrypted:	false
Ssdeep:	24:8hhBf/D8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8RXQ0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_213ea792838842dba8c55213144b108c.lnk
Category:	dropped
Dump:	MFDBG_213ea792838842dba8c55213144b108c.lnk.8.dr
ID:	dr_204
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:45 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.932065092968714
Encrypted:	false
Ssdeep:	24:8VhBfQl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8F30R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_2172e70d8f8941b6a7ba3fd79c1cd6d7.lnk
Category:	dropped
Dump:	MFDBG_2172e70d8f8941b6a7ba3fd79c1cd6d7.lnk.8.dr
ID:	dr_843
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:17 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938198743715571
Encrypted:	false
Ssdeep:	24:8RmhBfX8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8RsU0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_217b5497a1314f9791ca1e7cd15379c6.lnk
Category:	dropped
Dump:	MFDBG_217b5497a1314f9791ca1e7cd15379c6.lnk.8.dr
ID:	dr_661
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:46 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939350499304945
Encrypted:	false
Ssdeep:	24:8ahBfP8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Qs0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_229387b9402d4709b1de4b5a64c216e6.lnk
Category:	dropped
Dump:	MFDBG_229387b9402d4709b1de4b5a64c216e6.lnk.8.dr
ID:	dr_702
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:54 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.933823587589012
Encrypted:	false
Ssdeep:	24:8bphBfSr8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8bpKI0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_22a16f363f4d4516b8bd59f3b8c66b89.lnk
Category:	dropped
Dump:	MFDBG_22a16f363f4d4516b8bd59f3b8c66b89.lnk.8.dr
ID:	dr_1003
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:51 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.926873298723667
Encrypted:	false
Ssdeep:	24:8hhBfw8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8R90R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_22c431b45de64da98ff600cb49398260.lnk
Category:	dropped
Dump:	MFDBG_22c431b45de64da98ff600cb49398260.lnk.8.dr
ID:	dr_972
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:46 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.941270715008983
Encrypted:	false
Ssdeep:	24:8YhBfT8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:86o0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_22e4565ae6bc4845b98ad26cb9e05922.lnk
Category:	dropped
Dump:	MFDBG_22e4565ae6bc4845b98ad26cb9e05922.lnk.8.dr
ID:	dr_448
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:27 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.934762501839015
Encrypted:	false
Ssdeep:	24:8DhBfi8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:83n0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_22f69a1bfa7b4c4e8e953b7d9a076cb7.lnk
Category:	dropped
Dump:	MFDBG_22f69a1bfa7b4c4e8e953b7d9a076cb7.lnk.8.dr
ID:	dr_693
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:50 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.937249341513987
Encrypted:	false
Ssdeep:	24:839hBfO8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:839r0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_230e8d7f9b514a80af7ef1d8b8deadfd.lnk
Category:	dropped
Dump:	MFDBG_230e8d7f9b514a80af7ef1d8b8deadfd.lnk.8.dr
ID:	dr_527
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:43 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9386675269540214
Encrypted:	false
Ssdeep:	24:80hBfA8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8290R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_2337dc7fcd4c4951bcd497a0d934593a.lnk
Category:	dropped
Dump:	MFDBG_2337dc7fcd4c4951bcd497a0d934593a.lnk.8.dr
ID:	dr_139
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:44 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.945372056006388
Encrypted:	false
Ssdeep:	24:8YphBfWw48iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Yp+e0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_2384fd3cdd0540109f22dd6a618ea21d.lnk
Category:	dropped
Dump:	MFDBG_2384fd3cdd0540109f22dd6a618ea21d.lnk.8.dr
ID:	dr_845
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:17 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936651959479615
Encrypted:	false
Ssdeep:	24:86mhBfX8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:86sU0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_2399e10318ce45b3adc237435e8838ce.lnk
Category:	dropped
Dump:	MFDBG_2399e10318ce45b3adc237435e8838ce.lnk.8.dr
ID:	dr_647
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:53 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.932851426313454
Encrypted:	false
Ssdeep:	24:8xhBfc8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8BR0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_239a0aaf783848539413a43771cb6a52.lnk
Category:	dropped
Dump:	MFDBG_239a0aaf783848539413a43771cb6a52.lnk.8.dr
ID:	dr_800
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:14 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.93417113660357
Encrypted:	false
Ssdeep:	24:8chBfy8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8un0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_24214eb67eb74f7081b22b43a9ea27eb.lnk
Category:	dropped
Dump:	MFDBG_24214eb67eb74f7081b22b43a9ea27eb.lnk.8.dr
ID:	dr_461
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:27 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939653796098305
Encrypted:	false
Ssdeep:	24:8ehBfEH8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:808c0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_24222e2b775f4683926ffffbfa8313a9.lnk
Category:	dropped
Dump:	MFDBG_24222e2b775f4683926ffffbfa8313a9.lnk.8.dr
ID:	dr_500
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:42 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.941415910635748
Encrypted:	false
Ssdeep:	24:8K8hBfo8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8/V0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_24319c6706444af0a416ddb6508ae128.lnk
Category:	dropped
Dump:	MFDBG_24319c6706444af0a416ddb6508ae128.lnk.8.dr
ID:	dr_791
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:56 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.944055965633415
Encrypted:	false
Ssdeep:	24:8I8hBf08iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8ZZ0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_245e789e7cf941b584b8d64a731b57ea.lnk
Category:	dropped
Dump:	MFDBG_245e789e7cf941b584b8d64a731b57ea.lnk.8.dr
ID:	dr_379
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:10 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.946037155127236
Encrypted:	false
Ssdeep:	24:8rhBfR8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Pe0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_24815749e57f472181f138465b4f08d6.lnk
Category:	dropped
Dump:	MFDBG_24815749e57f472181f138465b4f08d6.lnk.8.dr
ID:	dr_853
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:17 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.942442812084087
Encrypted:	false
Ssdeep:	24:8K5mhBfV8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Os60R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_249a3e25b899472eb6c08e6bdfe717a9.lnk
Category:	dropped
Dump:	MFDBG_249a3e25b899472eb6c08e6bdfe717a9.lnk.8.dr
ID:	dr_1006
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:47 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.94242493885401
Encrypted:	false
Ssdeep:	24:8MDhBft8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8M3C0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_24a81ac1b8fc4ee294b65ca0a105df3b.lnk
Category:	dropped
Dump:	MFDBG_24a81ac1b8fc4ee294b65ca0a105df3b.lnk.8.dr
ID:	dr_1013
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:51 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.93866752695402
Encrypted:	false
Ssdeep:	24:8chBfyQ8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8uaF0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_24b03bbcdcc94b669b3d586084339082.lnk
Category:	dropped
Dump:	MFDBG_24b03bbcdcc94b669b3d586084339082.lnk.8.dr
ID:	dr_443
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:13 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.941847826931498
Encrypted:	false
Ssdeep:	24:8whBfeczp8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8ie0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_251afaa95e784ed1b114f9a014eb5df4.lnk
Category:	dropped
Dump:	MFDBG_251afaa95e784ed1b114f9a014eb5df4.lnk.8.dr
ID:	dr_240
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:50 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.942205863897634
Encrypted:	false
Ssdeep:	24:8n9hBf1kD8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8n9r0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_25313b730ea84ed8b7ffcd004d64411d.lnk
Category:	dropped
Dump:	MFDBG_25313b730ea84ed8b7ffcd004d64411d.lnk.8.dr
ID:	dr_577
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:48 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939113551118494
Encrypted:	false
Ssdeep:	24:8wphBfU+8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8gcT0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_25abebec116c4834bf11c94f13d7d780.lnk
Category:	dropped
Dump:	MFDBG_25abebec116c4834bf11c94f13d7d780.lnk.8.dr
ID:	dr_153
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:47 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.943697928667277
Encrypted:	false
Ssdeep:	24:8SOhBfO8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8SE70R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_25ad07aefc7c49e8a360ef41da00d867.lnk
Category:	dropped
Dump:	MFDBG_25ad07aefc7c49e8a360ef41da00d867.lnk.8.dr
ID:	dr_727
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:50 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936993399614909
Encrypted:	false
Ssdeep:	24:8Y2hBfO8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Xr0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_25ceb06067524f8d9dc7d999262d7f88.lnk
Category:	dropped
Dump:	MFDBG_25ceb06067524f8d9dc7d999262d7f88.lnk.8.dr
ID:	dr_295
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:53 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935984371396651
Encrypted:	false
Ssdeep:	24:8FhBfc8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8VR0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_25de4af73e7b4bd28508fa4ecc82223a.lnk
Category:	dropped
Dump:	MFDBG_25de4af73e7b4bd28508fa4ecc82223a.lnk.8.dr
ID:	dr_744
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:50 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935752390900444
Encrypted:	false
Ssdeep:	24:8ahhBf3+8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8APT0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_25ecead2939248c7bc792bb73f0cd54d.lnk
Category:	dropped
Dump:	MFDBG_25ecead2939248c7bc792bb73f0cd54d.lnk.8.dr
ID:	dr_94
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:39 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.937533214396427
Encrypted:	false
Ssdeep:	24:8yhBfR8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:84+0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_26444fb8d2824fc999b1160d3c0d082a.lnk
Category:	dropped
Dump:	MFDBG_26444fb8d2824fc999b1160d3c0d082a.lnk.8.dr
ID:	dr_718
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:50 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935627267655535
Encrypted:	false
Ssdeep:	24:8ahBfO8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Qr0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_264a50f09e1d4cc6b9a847667822d723.lnk
Category:	dropped
Dump:	MFDBG_264a50f09e1d4cc6b9a847667822d723.lnk.8.dr
ID:	dr_216
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:41 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.942512926052345
Encrypted:	false
Ssdeep:	24:80hBfev8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:82N0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_2652d3e630004d9cb9f2591915873513.lnk
Category:	dropped
Dump:	MFDBG_2652d3e630004d9cb9f2591915873513.lnk.8.dr
ID:	dr_215
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:45 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.930552832157547
Encrypted:	false
Ssdeep:	24:8MChBfW8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8MoD0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_266dc4634b4346f99283ba280a58b9e5.lnk
Category:	dropped
Dump:	MFDBG_266dc4634b4346f99283ba280a58b9e5.lnk.8.dr
ID:	dr_541
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:43 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9410947406123125
Encrypted:	false
Ssdeep:	24:8mhBfsA8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8sE10R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_26e8e0f7dfd64d628a4fe63b4623122f.lnk
Category:	dropped
Dump:	MFDBG_26e8e0f7dfd64d628a4fe63b4623122f.lnk.8.dr
ID:	dr_921
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:00 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.931095654094093
Encrypted:	false
Ssdeep:	24:8nhBfv8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:87s0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_271ecb76bcc345718cee14064d2c4b5c.lnk
Category:	dropped
Dump:	MFDBG_271ecb76bcc345718cee14064d2c4b5c.lnk.8.dr
ID:	dr_436
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:27 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.931113418623089
Encrypted:	false
Ssdeep:	24:8yhBfi8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:84n0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_276b06d4e1c94b55ad64c3090343cbdf.lnk
Category:	dropped
Dump:	MFDBG_276b06d4e1c94b55ad64c3090343cbdf.lnk.8.dr
ID:	dr_737
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:54 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.937101728298974
Encrypted:	false
Ssdeep:	24:8HhBfSr8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8bKI0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_27ad4a4b2d4a44d1abf1380498fdcdc7.lnk
Category:	dropped
Dump:	MFDBG_27ad4a4b2d4a44d1abf1380498fdcdc7.lnk.8.dr
ID:	dr_431
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:27 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9392957591321665
Encrypted:	false
Ssdeep:	24:8uhBf1D8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8kNQ0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_27c19a4f3fad42ce9751c2b8e09e64ef.lnk
Category:	dropped
Dump:	MFDBG_27c19a4f3fad42ce9751c2b8e09e64ef.lnk.8.dr
ID:	dr_438
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:13 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.948143198762093
Encrypted:	false
Ssdeep:	24:8J8hBfGK8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8sun0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_27ed73e1a1b84af090ed410af0795e09.lnk
Category:	dropped
Dump:	MFDBG_27ed73e1a1b84af090ed410af0795e09.lnk.8.dr
ID:	dr_423
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:12 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.929309163587214
Encrypted:	false
Ssdeep:	24:8bhBfN8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8fC0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_2806a214f0194783b2c5408920a5bf5c.lnk
Category:	dropped
Dump:	MFDBG_2806a214f0194783b2c5408920a5bf5c.lnk.8.dr
ID:	dr_659
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:45 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936701523998154
Encrypted:	false
Ssdeep:	24:8COhBf38iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8CE00R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_28db9fd69cdf42a5830b2b87e24a8e7d.lnk
Category:	dropped
Dump:	MFDBG_28db9fd69cdf42a5830b2b87e24a8e7d.lnk.8.dr
ID:	dr_484
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:28 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.945372056006387
Encrypted:	false
Ssdeep:	24:8GqphBfvl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:89p3C0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_297cad131ff84a558671268ad5a96f9f.lnk
Category:	dropped
Dump:	MFDBG_297cad131ff84a558671268ad5a96f9f.lnk.8.dr
ID:	dr_542
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:47 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.93478646324189
Encrypted:	false
Ssdeep:	24:84ShBfvl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8t3C0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_299966a7af664cfcbce2561f193fdb9d.lnk
Category:	dropped
Dump:	MFDBG_299966a7af664cfcbce2561f193fdb9d.lnk.8.dr
ID:	dr_750
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:50 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.934334205460413
Encrypted:	false
Ssdeep:	24:8S5hBf3+8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8SZPT0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_29a71091d8844dd1a596b7ea96e37919.lnk
Category:	dropped
Dump:	MFDBG_29a71091d8844dd1a596b7ea96e37919.lnk.8.dr
ID:	dr_996
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:47 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939764542370615
Encrypted:	false
Ssdeep:	24:8a2hBfF+8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Fp0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_29b582b1b0f44686926c0f5952099148.lnk
Category:	dropped
Dump:	MFDBG_29b582b1b0f44686926c0f5952099148.lnk.8.dr
ID:	dr_584
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:44 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.933351888935003
Encrypted:	false
Ssdeep:	24:8KhBfwp8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8goO0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_29c09eee5d854331a86972971f43b58a.lnk
Category:	dropped
Dump:	MFDBG_29c09eee5d854331a86972971f43b58a.lnk.8.dr
ID:	dr_405
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:12 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9277292213731005
Encrypted:	false
Ssdeep:	24:8thBfi+8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8N20R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_29de675df33e4b1c8d63a293c9620578.lnk
Category:	dropped
Dump:	MFDBG_29de675df33e4b1c8d63a293c9620578.lnk.8.dr
ID:	dr_1034
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:52 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936453154635097
Encrypted:	false
Ssdeep:	24:8dhBfB8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8dO0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_2a177020281f4fd5b54d2fdaebae4afa.lnk
Category:	dropped
Dump:	MFDBG_2a177020281f4fd5b54d2fdaebae4afa.lnk.8.dr
ID:	dr_374
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:26 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936780558275539
Encrypted:	false
Ssdeep:	24:8BhBfTl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8xW0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_2a240e77830949ec8eaa9483da0e0ba9.lnk
Category:	dropped
Dump:	MFDBG_2a240e77830949ec8eaa9483da0e0ba9.lnk.8.dr
ID:	dr_938
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:01 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9327494399474725
Encrypted:	false
Ssdeep:	24:8chBfv8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8us0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_2a36691d6d6b46b3846fc4ed4640d823.lnk
Category:	dropped
Dump:	MFDBG_2a36691d6d6b46b3846fc4ed4640d823.lnk.8.dr
ID:	dr_618
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:45 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.941773947601887
Encrypted:	false
Ssdeep:	24:8bhBf98iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8fy0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_2a4bb1c058914722b10a22744412fd57.lnk
Category:	dropped
Dump:	MFDBG_2a4bb1c058914722b10a22744412fd57.lnk.8.dr
ID:	dr_411
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:27 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938863842836419
Encrypted:	false
Ssdeep:	24:8AhhBf1D8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8sNQ0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_2a505697352c45e495994b89aa26706e.lnk
Category:	dropped
Dump:	MFDBG_2a505697352c45e495994b89aa26706e.lnk.8.dr
ID:	dr_427
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:27 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936798431505616
Encrypted:	false
Ssdeep:	24:8hhBf1D8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8RNQ0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_2a776a941cb54c51aca0f4b2b1068178.lnk
Category:	dropped
Dump:	MFDBG_2a776a941cb54c51aca0f4b2b1068178.lnk.8.dr
ID:	dr_591
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:45 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.940194041078117
Encrypted:	false
Ssdeep:	24:8ThBf98iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8ny0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_2ade6b44efc74a239d67203fecc80a57.lnk
Category:	dropped
Dump:	MFDBG_2ade6b44efc74a239d67203fecc80a57.lnk.8.dr
ID:	dr_940
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:01 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.933483278408747
Encrypted:	false
Ssdeep:	24:8ahBfeIl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8QnC0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_2b281f94a6da4509957d4eef4e6bfda6.lnk
Category:	dropped
Dump:	MFDBG_2b281f94a6da4509957d4eef4e6bfda6.lnk.8.dr
ID:	dr_36
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:41 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.941526656908061
Encrypted:	false
Ssdeep:	24:8SFhBfF8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8SVa0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_2b3217420f594025a0b8ed9dcf839924.lnk
Category:	dropped
Dump:	MFDBG_2b3217420f594025a0b8ed9dcf839924.lnk.8.dr
ID:	dr_234
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:50 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938685400184097
Encrypted:	false
Ssdeep:	24:8ihBf+8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Ib0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_2b8d2f054d81466da9ef5c283746c445.lnk
Category:	dropped
Dump:	MFDBG_2b8d2f054d81466da9ef5c283746c445.lnk.8.dr
ID:	dr_912
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:00 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.933502526266655
Encrypted:	false
Ssdeep:	24:8ShBfv8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Ys0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_2b90931ab9ce44f392202d6e18fc6f03.lnk
Category:	dropped
Dump:	MFDBG_2b90931ab9ce44f392202d6e18fc6f03.lnk.8.dr
ID:	dr_449
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:14 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.941503897834084
Encrypted:	false
Ssdeep:	24:87hBfeczp8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8/e0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_2c0bbe52a9d44e769afed45185665781.lnk
Category:	dropped
Dump:	MFDBG_2c0bbe52a9d44e769afed45185665781.lnk.8.dr
ID:	dr_573
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:44 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.942388071911309
Encrypted:	false
Ssdeep:	24:892hBff8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:89cM0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_2c8a5e8955f442c990dd9b8deb1f7154.lnk
Category:	dropped
Dump:	MFDBG_2c8a5e8955f442c990dd9b8deb1f7154.lnk.8.dr
ID:	dr_435
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:27 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.934357598951819
Encrypted:	false
Ssdeep:	24:8p2hBfi8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8pcn0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_2cd586b8154342a9bea73bfeb475d963.lnk
Category:	dropped
Dump:	MFDBG_2cd586b8154342a9bea73bfeb475d963.lnk.8.dr
ID:	dr_748
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:50 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.93876962202108
Encrypted:	false
Ssdeep:	24:8DhBf3+8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:83PT0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_2da95b604ae74c2a8346762ff204dd3d.lnk
Category:	dropped
Dump:	MFDBG_2da95b604ae74c2a8346762ff204dd3d.lnk.8.dr
ID:	dr_263
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:46 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9366863374602
Encrypted:	false
Ssdeep:	24:8dhBfeh8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8d/0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_2dbf89672c154e5c8f958853f0d51972.lnk
Category:	dropped
Dump:	MFDBG_2dbf89672c154e5c8f958853f0d51972.lnk.8.dr
ID:	dr_613
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:45 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.937314569638345
Encrypted:	false
Ssdeep:	24:8MhBff8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8+c0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_2df15f7ce15648f0a166b94e91f384f7.lnk
Category:	dropped
Dump:	MFDBG_2df15f7ce15648f0a166b94e91f384f7.lnk.8.dr
ID:	dr_617
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:45 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938235610658273
Encrypted:	false
Ssdeep:	24:8dhBf98iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8dy0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_2dfb4fe1b327465b8d38ffc6aa2ccbac.lnk
Category:	dropped
Dump:	MFDBG_2dfb4fe1b327465b8d38ffc6aa2ccbac.lnk.8.dr
ID:	dr_136
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:44 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.943609941468943
Encrypted:	false
Ssdeep:	24:8ahhBfWw48iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8M+e0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_2e4194fcf2df4b5dae38c9494c311abe.lnk
Category:	dropped
Dump:	MFDBG_2e4194fcf2df4b5dae38c9494c311abe.lnk.8.dr
ID:	dr_679
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:49 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9412824052894635
Encrypted:	false
Ssdeep:	24:8GhBfq8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8M/0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_2e58308b0a5d47aab66aab336d0b699e.lnk
Category:	dropped
Dump:	MFDBG_2e58308b0a5d47aab66aab336d0b699e.lnk.8.dr
ID:	dr_771
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:55 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.940406882417489
Encrypted:	false
Ssdeep:	24:838hBfOe8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8+m0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_2f039d7e0e6f4b60b6bd34b56bb3aa63.lnk
Category:	dropped
Dump:	MFDBG_2f039d7e0e6f4b60b6bd34b56bb3aa63.lnk.8.dr
ID:	dr_916
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:00 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.931206400366403
Encrypted:	false
Ssdeep:	24:89hBfv8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:89s0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_2f347956c6754f81bc051be0a4c0bb1b.lnk
Category:	dropped
Dump:	MFDBG_2f347956c6754f81bc051be0a4c0bb1b.lnk.8.dr
ID:	dr_44
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:42 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.941367207968362
Encrypted:	false
Ssdeep:	24:80hBfF8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:82a0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_2fc005b30e614e659c47e2897db2a44f.lnk
Category:	dropped
Dump:	MFDBG_2fc005b30e614e659c47e2897db2a44f.lnk.8.dr
ID:	dr_862
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:17 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938198743715571
Encrypted:	false
Ssdeep:	24:8GmhBfV8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Gs60R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_2fec224326fd46d6a1e924208c52a7d1.lnk
Category:	dropped
Dump:	MFDBG_2fec224326fd46d6a1e924208c52a7d1.lnk.8.dr
ID:	dr_630
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:53 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.933753473620754
Encrypted:	false
Ssdeep:	24:8ghBfSr8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8yKI0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_30021e49c9024d8598d161192bf88011.lnk
Category:	dropped
Dump:	MFDBG_30021e49c9024d8598d161192bf88011.lnk.8.dr
ID:	dr_410
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:12 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.932584996462794
Encrypted:	false
Ssdeep:	24:8aPhBfi+8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8S20R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3029679db7ed4d7aa4988057578c95b7.lnk
Category:	dropped
Dump:	MFDBG_3029679db7ed4d7aa4988057578c95b7.lnk.8.dr
ID:	dr_270
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:52 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.926346833060631
Encrypted:	false
Ssdeep:	24:8jhBf38iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8XU0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_303b5a69def94b789db4ec9c512c3795.lnk
Category:	dropped
Dump:	MFDBG_303b5a69def94b789db4ec9c512c3795.lnk.8.dr
ID:	dr_892
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:49:59 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935534690571903
Encrypted:	false
Ssdeep:	24:8dhBfv8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8ds0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3042d26375554d1b9c7a54fd17f4e58a.lnk
Category:	dropped
Dump:	MFDBG_3042d26375554d1b9c7a54fd17f4e58a.lnk.8.dr
ID:	dr_740
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:50 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9390396717888825
Encrypted:	false
Ssdeep:	24:8rhBf3+8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8PPT0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_30490dabc6844727b73e8e52691c0e60.lnk
Category:	dropped
Dump:	MFDBG_30490dabc6844727b73e8e52691c0e60.lnk.8.dr
ID:	dr_820
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:15 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.93912873765645
Encrypted:	false
Ssdeep:	24:8MhBfNbD8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8+lc0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_307886165e464921aa1476cb60b7074c.lnk
Category:	dropped
Dump:	MFDBG_307886165e464921aa1476cb60b7074c.lnk.8.dr
ID:	dr_418
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:12 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938434344128919
Encrypted:	false
Ssdeep:	24:8RhBfD8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8hY0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_309ea965c4d24d188bd604c72a33ab26.lnk
Category:	dropped
Dump:	MFDBG_309ea965c4d24d188bd604c72a33ab26.lnk.8.dr
ID:	dr_1020
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:47 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.942081009756597
Encrypted:	false
Ssdeep:	24:8hhBft8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8RC0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_30ad132923e24e73bf06ace2583c2d0b.lnk
Category:	dropped
Dump:	MFDBG_30ad132923e24e73bf06ace2583c2d0b.lnk.8.dr
ID:	dr_887
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:18 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9406259573738645
Encrypted:	false
Ssdeep:	24:8KGhBfFbD8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Z9c0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_30b8d01415004525976b404718a4e867.lnk
Category:	dropped
Dump:	MFDBG_30b8d01415004525976b404718a4e867.lnk.8.dr
ID:	dr_377
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:26 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.934367452485971
Encrypted:	false
Ssdeep:	24:8VPhBfTl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8tW0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_30f7c8a8e7fb458698c92d9199774533.lnk
Category:	dropped
Dump:	MFDBG_30f7c8a8e7fb458698c92d9199774533.lnk.8.dr
ID:	dr_99
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:47 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9436979286672775
Encrypted:	false
Ssdeep:	24:8DphBfO8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Dp70R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3120fbff3dee49898e73bd97f7c82ebf.lnk
Category:	dropped
Dump:	MFDBG_3120fbff3dee49898e73bd97f7c82ebf.lnk.8.dr
ID:	dr_168
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:45 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9329800458158415
Encrypted:	false
Ssdeep:	24:8whBfW8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8iD0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3128d6518f44490ea7b3100f0a3ed70f.lnk
Category:	dropped
Dump:	MFDBG_3128d6518f44490ea7b3100f0a3ed70f.lnk.8.dr
ID:	dr_672
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:53 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.932179655269783
Encrypted:	false
Ssdeep:	24:8YhBfSr8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:86KI0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_315b540a79ef49d6896cc0e75e55fa66.lnk
Category:	dropped
Dump:	MFDBG_315b540a79ef49d6896cc0e75e55fa66.lnk.8.dr
ID:	dr_638
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:49 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.93012975835574
Encrypted:	false
Ssdeep:	24:8dPhBfq8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8F/0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_320fd5ba35144e0d9625b69b2aceb21e.lnk
Category:	dropped
Dump:	MFDBG_320fd5ba35144e0d9625b69b2aceb21e.lnk.8.dr
ID:	dr_786
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:55 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.94612514232557
Encrypted:	false
Ssdeep:	24:8phBf08iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8pZ0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_327adeb97c4f40f2808311f0cdb7b4ae.lnk
Category:	dropped
Dump:	MFDBG_327adeb97c4f40f2808311f0cdb7b4ae.lnk.8.dr
ID:	dr_539
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:43 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939872871054681
Encrypted:	false
Ssdeep:	24:8KGhBfsA8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8ZE10R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_32c1d16ee5ca4a97979c4f8eb3455382.lnk
Category:	dropped
Dump:	MFDBG_32c1d16ee5ca4a97979c4f8eb3455382.lnk.8.dr
ID:	dr_515
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:42 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.941415910635749
Encrypted:	false
Ssdeep:	24:8yhBfC8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:84n0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_32d9905e07c247e5884a03c48f8370c7.lnk
Category:	dropped
Dump:	MFDBG_32d9905e07c247e5884a03c48f8370c7.lnk.8.dr
ID:	dr_650
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:45 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9394679681674845
Encrypted:	false
Ssdeep:	24:8bhBfw8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8f90R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_33391cf13f354b61ada90f57c31ad046.lnk
Category:	dropped
Dump:	MFDBG_33391cf13f354b61ada90f57c31ad046.lnk.8.dr
ID:	dr_366
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:10 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939076684175792
Encrypted:	false
Ssdeep:	24:8TPhBfR8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8ve0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_341bb7b5582b49609cc2d0e677190a3a.lnk
Category:	dropped
Dump:	MFDBG_341bb7b5582b49609cc2d0e677190a3a.lnk.8.dr
ID:	dr_326
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:09 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.937891681560862
Encrypted:	false
Ssdeep:	24:8dGhBfg8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Kd0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3431b818a3254d3fadea78118b3c5ac5.lnk
Category:	dropped
Dump:	MFDBG_3431b818a3254d3fadea78118b3c5ac5.lnk.8.dr
ID:	dr_637
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:53 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939207771933832
Encrypted:	false
Ssdeep:	24:87hBfSr8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8/KI0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_34432d00fccd42d49655616eefb2e323.lnk
Category:	dropped
Dump:	MFDBG_34432d00fccd42d49655616eefb2e323.lnk.8.dr
ID:	dr_565
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:48 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.941935814129833
Encrypted:	false
Ssdeep:	24:8AhBfU+8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8ScT0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_34f7dca7f57b4604ab71549ddd4ccaac.lnk
Category:	dropped
Dump:	MFDBG_34f7dca7f57b4604ab71549ddd4ccaac.lnk.8.dr
ID:	dr_308
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:08 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.93431282101427
Encrypted:	false
Ssdeep:	24:8+hBfB8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Ue0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_355ea350ede34aee8c6f4405472af6e0.lnk
Category:	dropped
Dump:	MFDBG_355ea350ede34aee8c6f4405472af6e0.lnk.8.dr
ID:	dr_811
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:15 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.937533214396429
Encrypted:	false
Ssdeep:	24:8m9hBft8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:82C0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3567f0816d0449cf9f893af6ce752311.lnk
Category:	dropped
Dump:	MFDBG_3567f0816d0449cf9f893af6ce752311.lnk.8.dr
ID:	dr_1012
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:48 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.94044374936019
Encrypted:	false
Ssdeep:	24:8UhBf7T8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Wzg0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_35ebeb92fc004cc88f3956b286e288a8.lnk
Category:	dropped
Dump:	MFDBG_35ebeb92fc004cc88f3956b286e288a8.lnk.8.dr
ID:	dr_779
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:55 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939295328933874
Encrypted:	false
Ssdeep:	24:8PhBfB8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8T+0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3609da433ccd491a95d89be0c83d977f.lnk
Category:	dropped
Dump:	MFDBG_3609da433ccd491a95d89be0c83d977f.lnk.8.dr
ID:	dr_387
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:11 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.941182727810649
Encrypted:	false
Ssdeep:	24:8OhBf58iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8E20R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_362ff7f042234e73a13412f8f61b953b.lnk
Category:	dropped
Dump:	MFDBG_362ff7f042234e73a13412f8f61b953b.lnk.8.dr
ID:	dr_1024
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:47 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936463642586676
Encrypted:	false
Ssdeep:	24:8BhBft8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8xC0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_36388aa310cb422dbe174ddf8f33a13c.lnk
Category:	dropped
Dump:	MFDBG_36388aa310cb422dbe174ddf8f33a13c.lnk.8.dr
ID:	dr_146
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:44 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.945372056006387
Encrypted:	false
Ssdeep:	24:8dhBfWw48iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8d+e0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3638ea4972dc4bbb9cf046c1ef87bc7e.lnk
Category:	dropped
Dump:	MFDBG_3638ea4972dc4bbb9cf046c1ef87bc7e.lnk.8.dr
ID:	dr_430
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:13 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.933066575487204
Encrypted:	false
Ssdeep:	24:8vhBfN8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8zC0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_36614cc8e6d64b739ed5420e58158db8.lnk
Category:	dropped
Dump:	MFDBG_36614cc8e6d64b739ed5420e58158db8.lnk.8.dr
ID:	dr_952
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:01 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935798543465829
Encrypted:	false
Ssdeep:	24:8ChBfeIl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8onC0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_366e45a6ea764b23bacd599955c8bdb1.lnk
Category:	dropped
Dump:	MFDBG_366e45a6ea764b23bacd599955c8bdb1.lnk.8.dr
ID:	dr_281
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:52 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9375501700516935
Encrypted:	false
Ssdeep:	24:8N2hBfr48iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8mJ0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_36bc5a81e3604298be820ded3ff7b778.lnk
Category:	dropped
Dump:	MFDBG_36bc5a81e3604298be820ded3ff7b778.lnk.8.dr
ID:	dr_606
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:49 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.932175839241024
Encrypted:	false
Ssdeep:	24:8mhBfq8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8sv0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_36d072f891074d94ae8ee0b528ec097a.lnk
Category:	dropped
Dump:	MFDBG_36d072f891074d94ae8ee0b528ec097a.lnk.8.dr
ID:	dr_426
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:13 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.934916677222984
Encrypted:	false
Ssdeep:	24:8lhBfN8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:81C0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3735e3024da84597908e5f8fa2c36646.lnk
Category:	dropped
Dump:	MFDBG_3735e3024da84597908e5f8fa2c36646.lnk.8.dr
ID:	dr_280
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:52 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9415407647767875
Encrypted:	false
Ssdeep:	24:8LhBfr48iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8vJ0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_374f22d7a5db408ebfdad075fdcaaaaf.lnk
Category:	dropped
Dump:	MFDBG_374f22d7a5db408ebfdad075fdcaaaaf.lnk.8.dr
ID:	dr_416
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:27 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938286730913904
Encrypted:	false
Ssdeep:	24:8phBf1D8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8pNQ0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_37a038621fff4d569ded509ac3a55390.lnk
Category:	dropped
Dump:	MFDBG_37a038621fff4d569ded509ac3a55390.lnk.8.dr
ID:	dr_688
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:45 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.937161354315651
Encrypted:	false
Ssdeep:	24:8ahBfGI+8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8QuIT0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_37b30dc543d9462093b006fc6e9c7215.lnk
Category:	dropped
Dump:	MFDBG_37b30dc543d9462093b006fc6e9c7215.lnk.8.dr
ID:	dr_842
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:17 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.940085712394052
Encrypted:	false
Ssdeep:	24:8+mhBfX8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8+sU0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_380c78f2344f48e9b8463d79de504191.lnk
Category:	dropped
Dump:	MFDBG_380c78f2344f48e9b8463d79de504191.lnk.8.dr
ID:	dr_604
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:49 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9325173507501905
Encrypted:	false
Ssdeep:	24:8c6GhBfq8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8vMv0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_38c1e60d73c04c889cc28bac4c26a3f6.lnk
Category:	dropped
Dump:	MFDBG_38c1e60d73c04c889cc28bac4c26a3f6.lnk.8.dr
ID:	dr_259
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:46 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.937263449382715
Encrypted:	false
Ssdeep:	24:8OhBfeh8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8E/0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3949435efa8447f6907184877bbcc4cd.lnk
Category:	dropped
Dump:	MFDBG_3949435efa8447f6907184877bbcc4cd.lnk.8.dr
ID:	dr_982
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:46 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.940173699592387
Encrypted:	false
Ssdeep:	24:8o2hBfO8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8nr0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3958687753084f999d10cc575d007862.lnk
Category:	dropped
Dump:	MFDBG_3958687753084f999d10cc575d007862.lnk.8.dr
ID:	dr_810
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:15 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.933775802496438
Encrypted:	false
Ssdeep:	24:8SWhBft8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8S8C0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3958be6d1bd94e3db899fca540a1d80a.lnk
Category:	dropped
Dump:	MFDBG_3958be6d1bd94e3db899fca540a1d80a.lnk.8.dr
ID:	dr_963
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:46 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.937715707164189
Encrypted:	false
Ssdeep:	24:85hBfG48iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Za0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3982af06f4734532bbf2d57145fe810a.lnk
Category:	dropped
Dump:	MFDBG_3982af06f4734532bbf2d57145fe810a.lnk.8.dr
ID:	dr_96
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:40 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.942154458887913
Encrypted:	false
Ssdeep:	24:8HhBfR8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8b+0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3aa3615318234782ad072ebb02a7461d.lnk
Category:	dropped
Dump:	MFDBG_3aa3615318234782ad072ebb02a7461d.lnk.8.dr
ID:	dr_961
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:46 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.941182727810647
Encrypted:	false
Ssdeep:	24:8BhBfJe8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8xF0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3af0013796414331afed6559190da506.lnk
Category:	dropped
Dump:	MFDBG_3af0013796414331afed6559190da506.lnk.8.dr
ID:	dr_300
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:08 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935376480704232
Encrypted:	false
Ssdeep:	24:8KehBfB8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Ve0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3bdcab68685b4192bec69ea8634e429c.lnk
Category:	dropped
Dump:	MFDBG_3bdcab68685b4192bec69ea8634e429c.lnk.8.dr
ID:	dr_815
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:15 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.932034459643017
Encrypted:	false
Ssdeep:	24:8Lb9hBfNbD8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Lplc0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3c42eb6e0c204de7991da7f9e677f71f.lnk
Category:	dropped
Dump:	MFDBG_3c42eb6e0c204de7991da7f9e677f71f.lnk.8.dr
ID:	dr_864
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:17 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.94238807191131
Encrypted:	false
Ssdeep:	24:8bFXmhBfV8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8bFXs60R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3c6df182813c4aa6a86aaea14920b935.lnk
Category:	dropped
Dump:	MFDBG_3c6df182813c4aa6a86aaea14920b935.lnk.8.dr
ID:	dr_361
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:10 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939952207047766
Encrypted:	false
Ssdeep:	24:8aPhBfD8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8wI0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3d0b14cb94334d20ab00e0ae92071943.lnk
Category:	dropped
Dump:	MFDBG_3d0b14cb94334d20ab00e0ae92071943.lnk.8.dr
ID:	dr_187
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:48 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.943794421626655
Encrypted:	false
Ssdeep:	24:8o8hBf/8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:85M0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3d15bced02634f538db4ebcb21b20d42.lnk
Category:	dropped
Dump:	MFDBG_3d15bced02634f538db4ebcb21b20d42.lnk.8.dr
ID:	dr_68
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:42 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.932645970252579
Encrypted:	false
Ssdeep:	24:8ayhBfe8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8JL0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3dc1285023bd420682de11bb2a71fb44.lnk
Category:	dropped
Dump:	MFDBG_3dc1285023bd420682de11bb2a71fb44.lnk.8.dr
ID:	dr_322
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:09 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.932173421652779
Encrypted:	false
Ssdeep:	24:86e9hBf98iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Hi0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3ddbeed70c9244c1bba47bf6d0a71a84.lnk
Category:	dropped
Dump:	MFDBG_3ddbeed70c9244c1bba47bf6d0a71a84.lnk.8.dr
ID:	dr_914
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:00 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9352646408041005
Encrypted:	false
Ssdeep:	24:8KhBfv8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8gs0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3dfb4f7048a742fb8385594f1219fce6.lnk
Category:	dropped
Dump:	MFDBG_3dfb4f7048a742fb8385594f1219fce6.lnk.8.dr
ID:	dr_33
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:39 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.934148377529593
Encrypted:	false
Ssdeep:	24:89hBfQ8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:89t0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3e58e47d93c344d58836d76b0e8bb1aa.lnk
Category:	dropped
Dump:	MFDBG_3e58e47d93c344d58836d76b0e8bb1aa.lnk.8.dr
ID:	dr_490
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:28 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.934185389916501
Encrypted:	false
Ssdeep:	24:8lhBfZ8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:81G0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3eb90e18e0f2408b9d42841c36459563.lnk
Category:	dropped
Dump:	MFDBG_3eb90e18e0f2408b9d42841c36459563.lnk.8.dr
ID:	dr_1039
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:48 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.942856855149757
Encrypted:	false
Ssdeep:	24:85hBft8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8ZS0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3ece3ffb69f745669cf4dc80761961f9.lnk
Category:	dropped
Dump:	MFDBG_3ece3ffb69f745669cf4dc80761961f9.lnk.8.dr
ID:	dr_833
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:16 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938499572253277
Encrypted:	false
Ssdeep:	24:8FhBfF8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8V60R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3eff6c286ea2468cbd4b80d81ab222c6.lnk
Category:	dropped
Dump:	MFDBG_3eff6c286ea2468cbd4b80d81ab222c6.lnk.8.dr
ID:	dr_339
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:26 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.942512926052347
Encrypted:	false
Ssdeep:	24:8yhBfW8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:84D0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3f1fc5f1f3434908a5ca534ead5d4837.lnk
Category:	dropped
Dump:	MFDBG_3f1fc5f1f3434908a5ca534ead5d4837.lnk.8.dr
ID:	dr_803
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:14 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936993399614912
Encrypted:	false
Ssdeep:	24:8KHhBfy8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Cn0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3f24393e90ad4bc8b6d72de7f286eab5.lnk
Category:	dropped
Dump:	MFDBG_3f24393e90ad4bc8b6d72de7f286eab5.lnk.8.dr
ID:	dr_994
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:47 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.943178025173193
Encrypted:	false
Ssdeep:	24:8ChBft8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8oC0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3f34bf13a71547ea829828aeacf05614.lnk
Category:	dropped
Dump:	MFDBG_3f34bf13a71547ea829828aeacf05614.lnk.8.dr
ID:	dr_412
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:27 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.933276670686378
Encrypted:	false
Ssdeep:	24:8QhBf1D8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8CNQ0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3f5b4cde20c845038dcf777ca4e4e52f.lnk
Category:	dropped
Dump:	MFDBG_3f5b4cde20c845038dcf777ca4e4e52f.lnk.8.dr
ID:	dr_875
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:49:59 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935176653605765
Encrypted:	false
Ssdeep:	24:8DhBfv8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:83s0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3f5b57ecd8d24ae1a081682e6d29f345.lnk
Category:	dropped
Dump:	MFDBG_3f5b57ecd8d24ae1a081682e6d29f345.lnk.8.dr
ID:	dr_719
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:54 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936375655388343
Encrypted:	false
Ssdeep:	24:8g9hBfUxp8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Ql0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3f92aa3c82814684953c7c4b4f2cb245.lnk
Category:	dropped
Dump:	MFDBG_3f92aa3c82814684953c7c4b4f2cb245.lnk.8.dr
ID:	dr_284
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:52 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.932519768338437
Encrypted:	false
Ssdeep:	24:8MQhBf38iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8MCU0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3f9b20eb879a4b0498df1350b8d452a9.lnk
Category:	dropped
Dump:	MFDBG_3f9b20eb879a4b0498df1350b8d452a9.lnk.8.dr
ID:	dr_756
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:50 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939690663041006
Encrypted:	false
Ssdeep:	24:8l8hBf3+8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8lOPT0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3fe002fe053843c8b2a82494b9c8ef34.lnk
Category:	dropped
Dump:	MFDBG_3fe002fe053843c8b2a82494b9c8ef34.lnk.8.dr
ID:	dr_615
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:45 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935231285077464
Encrypted:	false
Ssdeep:	24:8rhBff8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Pc0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_3ff2eaadaf234373ad38b8869de3f242.lnk
Category:	dropped
Dump:	MFDBG_3ff2eaadaf234373ad38b8869de3f242.lnk.8.dr
ID:	dr_348
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:10 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938004264579501
Encrypted:	false
Ssdeep:	24:8dhBfD8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8dI0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4017c603241b408aacaf6b62616f3387.lnk
Category:	dropped
Dump:	MFDBG_4017c603241b408aacaf6b62616f3387.lnk.8.dr
ID:	dr_381
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:10 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.94177771296324
Encrypted:	false
Ssdeep:	24:8a6hBfR8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Be0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4066e4e10de34f96a4b4f2722e72c80e.lnk
Category:	dropped
Dump:	MFDBG_4066e4e10de34f96a4b4f2722e72c80e.lnk.8.dr
ID:	dr_648
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:49 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939520290752018
Encrypted:	false
Ssdeep:	24:8SAGhBfq8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8SAM/0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_40ce8edaa8ee4b74af040e97d4f56f34.lnk
Category:	dropped
Dump:	MFDBG_40ce8edaa8ee4b74af040e97d4f56f34.lnk.8.dr
ID:	dr_516
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:42 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.941282405289463
Encrypted:	false
Ssdeep:	24:8phBfC8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8pn0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_40d7c41b521d4770a517fa80b9b85a2f.lnk
Category:	dropped
Dump:	MFDBG_40d7c41b521d4770a517fa80b9b85a2f.lnk.8.dr
ID:	dr_347
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:10 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.941847826931496
Encrypted:	false
Ssdeep:	24:8UhBfbp8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8WDO0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_40f9823301f14fa5a8304c4f733e0cd0.lnk
Category:	dropped
Dump:	MFDBG_40f9823301f14fa5a8304c4f733e0cd0.lnk.8.dr
ID:	dr_202
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:50 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.942103768830574
Encrypted:	false
Ssdeep:	24:8FhBf48iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8VF0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4121a24a1bb24c1ea44782748cd9b1f6.lnk
Category:	dropped
Dump:	MFDBG_4121a24a1bb24c1ea44782748cd9b1f6.lnk.8.dr
ID:	dr_249
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:46 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.940429641491465
Encrypted:	false
Ssdeep:	24:8FhBf48iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Vl0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4163216f595e47f384c1c36ff639e461.lnk
Category:	dropped
Dump:	MFDBG_4163216f595e47f384c1c36ff639e461.lnk.8.dr
ID:	dr_784
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:55 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.93807345937624
Encrypted:	false
Ssdeep:	24:8ShBfB8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Y+0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4178df279e5a4ce3bda39fbf6484144f.lnk
Category:	dropped
Dump:	MFDBG_4178df279e5a4ce3bda39fbf6484144f.lnk.8.dr
ID:	dr_924
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:00 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938700882680655
Encrypted:	false
Ssdeep:	24:8C8hBfv8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8COs0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_42300c312e1040c7913c43d160fdd525.lnk
Category:	dropped
Dump:	MFDBG_42300c312e1040c7913c43d160fdd525.lnk.8.dr
ID:	dr_210
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:49 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938755514152355
Encrypted:	false
Ssdeep:	24:86hBfp8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8wm0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4287cf38b1a14f85ab586189389208e1.lnk
Category:	dropped
Dump:	MFDBG_4287cf38b1a14f85ab586189389208e1.lnk.8.dr
ID:	dr_571
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:48 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9350325516068185
Encrypted:	false
Ssdeep:	24:8IFhBfp8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8gG0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_42d39aaf8f2647fd87d9910eef11fa03.lnk
Category:	dropped
Dump:	MFDBG_42d39aaf8f2647fd87d9910eef11fa03.lnk.8.dr
ID:	dr_149
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:47 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.940173699592387
Encrypted:	false
Ssdeep:	24:8PhBfO8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8T70R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_43256ad6856c4b148a944abffb7a1105.lnk
Category:	dropped
Dump:	MFDBG_43256ad6856c4b148a944abffb7a1105.lnk.8.dr
ID:	dr_108
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:47 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.934152142890946
Encrypted:	false
Ssdeep:	24:86hBfO8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8w70R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4394f8d0496f46b8abf02c99de4741d1.lnk
Category:	dropped
Dump:	MFDBG_4394f8d0496f46b8abf02c99de4741d1.lnk.8.dr
ID:	dr_253
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:46 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938059636261603
Encrypted:	false
Ssdeep:	24:8cphBf48iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:80l0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_43ced9e6d57b459cb1876c1fed70dedd.lnk
Category:	dropped
Dump:	MFDBG_43ced9e6d57b459cb1876c1fed70dedd.lnk.8.dr
ID:	dr_673
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:49 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.934274310339862
Encrypted:	false
Ssdeep:	24:8AhBfDD8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8SrQ0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_446be97a5f744ef29929e7c31add8d75.lnk
Category:	dropped
Dump:	MFDBG_446be97a5f744ef29929e7c31add8d75.lnk.8.dr
ID:	dr_792
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:56 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.943697928667277
Encrypted:	false
Ssdeep:	24:8b6GhBf08iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8GMZ0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4496f1ab3c94485aab6ab45c8e58b64d.lnk
Category:	dropped
Dump:	MFDBG_4496f1ab3c94485aab6ab45c8e58b64d.lnk.8.dr
ID:	dr_262
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:51 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.93751181874577
Encrypted:	false
Ssdeep:	24:8shBfKP8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8eC00R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_44bd4964c259424e97b3823bc805dbbd.lnk
Category:	dropped
Dump:	MFDBG_44bd4964c259424e97b3823bc805dbbd.lnk.8.dr
ID:	dr_331
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:09 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.93807345937624
Encrypted:	false
Ssdeep:	24:84hBfg8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8ad0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_44c91cfc25d94ea7be58b3380351476d.lnk
Category:	dropped
Dump:	MFDBG_44c91cfc25d94ea7be58b3380351476d.lnk.8.dr
ID:	dr_357
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:26 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.93338774551064
Encrypted:	false
Ssdeep:	24:8hPhBft8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8ZC0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_451f6debdf324fc397b2170cd1028cd3.lnk
Category:	dropped
Dump:	MFDBG_451f6debdf324fc397b2170cd1028cd3.lnk.8.dr
ID:	dr_883
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:18 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.945372056006386
Encrypted:	false
Ssdeep:	24:8NhBfB8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8t+0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4571ca4bb0754de5ae49434816d846aa.lnk
Category:	dropped
Dump:	MFDBG_4571ca4bb0754de5ae49434816d846aa.lnk.8.dr
ID:	dr_197
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:45 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.933506037482722
Encrypted:	false
Ssdeep:	24:8T8hBfQl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8TO30R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_457980ab57864402839ebb1e07ff3087.lnk
Category:	dropped
Dump:	MFDBG_457980ab57864402839ebb1e07ff3087.lnk.8.dr
ID:	dr_884
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:18 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.943609941468941
Encrypted:	false
Ssdeep:	24:8WGhBfB8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8WM+0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_45e7d180e9c14aef91b861c650164caf.lnk
Category:	dropped
Dump:	MFDBG_45e7d180e9c14aef91b861c650164caf.lnk.8.dr
ID:	dr_801
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:14 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.934000764314584
Encrypted:	false
Ssdeep:	24:8CphBfy8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Cpn0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_46a2f31c4c214857ab38d5a61176ba72.lnk
Category:	dropped
Dump:	MFDBG_46a2f31c4c214857ab38d5a61176ba72.lnk.8.dr
ID:	dr_277
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:52 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.933741637896069
Encrypted:	false
Ssdeep:	24:8ahBf38iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8QU0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_46a771c4c8d3471c975dc3a261b87b83.lnk
Category:	dropped
Dump:	MFDBG_46a771c4c8d3471c975dc3a261b87b83.lnk.8.dr
ID:	dr_713
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:46 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938685400184096
Encrypted:	false
Ssdeep:	24:80hBfP8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:82s0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_46c05e2359c142b2ba198218252e8236.lnk
Category:	dropped
Dump:	MFDBG_46c05e2359c142b2ba198218252e8236.lnk.8.dr
ID:	dr_493
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:28 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.931510740120175
Encrypted:	false
Ssdeep:	24:8zhBfGY8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Hud0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_475acb4d40b5484daa69ad5b975ccf21.lnk
Category:	dropped
Dump:	MFDBG_475acb4d40b5484daa69ad5b975ccf21.lnk.8.dr
ID:	dr_386
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:11 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.943539827500683
Encrypted:	false
Ssdeep:	24:8YlhBfR8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8ke0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4799d32c96864483a1e7fc31fc1f989a.lnk
Category:	dropped
Dump:	MFDBG_4799d32c96864483a1e7fc31fc1f989a.lnk.8.dr
ID:	dr_71
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:39 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.937560658003273
Encrypted:	false
Ssdeep:	24:8YhBfS8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8630R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_47c5ef22bb674020bbb61448020c57ff.lnk
Category:	dropped
Dump:	MFDBG_47c5ef22bb674020bbb61448020c57ff.lnk.8.dr
ID:	dr_836
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:16 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939076684175792
Encrypted:	false
Ssdeep:	24:8QhBfF8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8C60R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_47e6fc079af140e79ff89b807fe7c360.lnk
Category:	dropped
Dump:	MFDBG_47e6fc079af140e79ff89b807fe7c360.lnk.8.dr
ID:	dr_1023
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:51 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.946037155127236
Encrypted:	false
Ssdeep:	24:8UhBfyQ8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8WaF0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_47f185b2362f469682db6306b54012ae.lnk
Category:	dropped
Dump:	MFDBG_47f185b2362f469682db6306b54012ae.lnk.8.dr
ID:	dr_102
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:44 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935524728336674
Encrypted:	false
Ssdeep:	24:8QhBf/D8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8CnQ0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4812d8eb33b04341a94bb53de1ac1772.lnk
Category:	dropped
Dump:	MFDBG_4812d8eb33b04341a94bb53de1ac1772.lnk.8.dr
ID:	dr_632
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:49 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936302693633546
Encrypted:	false
Ssdeep:	24:8vhBfq8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8z/0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_482bf924df284469a8476f6ee4d58634.lnk
Category:	dropped
Dump:	MFDBG_482bf924df284469a8476f6ee4d58634.lnk.8.dr
ID:	dr_459
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:28 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.942856855149758
Encrypted:	false
Ssdeep:	24:8WhBfEH8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:888c0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4863839fb5c944fda4b11b39c8b4f1dd.lnk
Category:	dropped
Dump:	MFDBG_4863839fb5c944fda4b11b39c8b4f1dd.lnk.8.dr
ID:	dr_513
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:42 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.943178025173194
Encrypted:	false
Ssdeep:	24:8chBfo8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8uV0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_48bfc0d991f94d28a7a87023e67414c6.lnk
Category:	dropped
Dump:	MFDBG_48bfc0d991f94d28a7a87023e67414c6.lnk.8.dr
ID:	dr_287
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:53 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9315822018615405
Encrypted:	false
Ssdeep:	24:8CvhBfc8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8CzR0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_494d880ee33744e88ff8d364a6bc5245.lnk
Category:	dropped
Dump:	MFDBG_494d880ee33744e88ff8d364a6bc5245.lnk.8.dr
ID:	dr_84
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:43 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.94118272781065
Encrypted:	false
Ssdeep:	24:8YhBf08iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:86p0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_496a11f1d1c046808ab637b1f9a61271.lnk
Category:	dropped
Dump:	MFDBG_496a11f1d1c046808ab637b1f9a61271.lnk.8.dr
ID:	dr_898
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:00 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.933903663792499
Encrypted:	false
Ssdeep:	24:8JkhBfv8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:84s0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_49ba90fb1762414f9457e97b21a8e404.lnk
Category:	dropped
Dump:	MFDBG_49ba90fb1762414f9457e97b21a8e404.lnk.8.dr
ID:	dr_804
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:15 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.934274310339863
Encrypted:	false
Ssdeep:	24:8HhBfy8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8bn0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4a4320d5a1d04f84a8fbbc96a7f99939.lnk
Category:	dropped
Dump:	MFDBG_4a4320d5a1d04f84a8fbbc96a7f99939.lnk.8.dr
ID:	dr_109
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:43 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938741406283628
Encrypted:	false
Ssdeep:	24:8zhBfk8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Hp0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4a559acfb31948e5a56cac55d6896e24.lnk
Category:	dropped
Dump:	MFDBG_4a559acfb31948e5a56cac55d6896e24.lnk.8.dr
ID:	dr_40
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:39 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.943032829546428
Encrypted:	false
Ssdeep:	24:8whBfOW8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8i60R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4aa710f786c84ca2a79aa606295cebfb.lnk
Category:	dropped
Dump:	MFDBG_4aa710f786c84ca2a79aa606295cebfb.lnk.8.dr
ID:	dr_603
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:53 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.93765849873576
Encrypted:	false
Ssdeep:	24:84hBfc8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8aR0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4ad32de01a184698a05c6420fe200272.lnk
Category:	dropped
Dump:	MFDBG_4ad32de01a184698a05c6420fe200272.lnk.8.dr
ID:	dr_990
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:47 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.940318895219153
Encrypted:	false
Ssdeep:	24:8sq2hBft8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8sfC0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4b3027ba17f846679ff9bc13106d808a.lnk
Category:	dropped
Dump:	MFDBG_4b3027ba17f846679ff9bc13106d808a.lnk.8.dr
ID:	dr_789
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:56 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.944363027788126
Encrypted:	false
Ssdeep:	24:8p8hBf08iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8pOZ0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4b7d19c1bedf4007b50279fad719027e.lnk
Category:	dropped
Dump:	MFDBG_4b7d19c1bedf4007b50279fad719027e.lnk.8.dr
ID:	dr_97
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:40 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9379651306921755
Encrypted:	false
Ssdeep:	24:8P2hBfR8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Pc+0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4b7fbd48ba0340c78527cd8c47b688c6.lnk
Category:	dropped
Dump:	MFDBG_4b7fbd48ba0340c78527cd8c47b688c6.lnk.8.dr
ID:	dr_351
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:26 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.937979668759194
Encrypted:	false
Ssdeep:	24:8OhBfW8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8ED0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4b82d8a99156452eb53694d969e61ff8.lnk
Category:	dropped
Dump:	MFDBG_4b82d8a99156452eb53694d969e61ff8.lnk.8.dr
ID:	dr_704
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:54 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.932610638340505
Encrypted:	false
Ssdeep:	24:8JPhBfSr8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8xKI0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4c4d3331613c415e85bca83358ae4f3a.lnk
Category:	dropped
Dump:	MFDBG_4c4d3331613c415e85bca83358ae4f3a.lnk.8.dr
ID:	dr_330
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:09 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.942819988207057
Encrypted:	false
Ssdeep:	24:8ar8hBfg8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8iOd0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4cb8c1a36a6841c085793f59c8d932fb.lnk
Category:	dropped
Dump:	MFDBG_4cb8c1a36a6841c085793f59c8d932fb.lnk.8.dr
ID:	dr_222
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:50 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.931657283520046
Encrypted:	false
Ssdeep:	24:8GhBfKP8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8MC00R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4cc307867aeb4819bf7f31ef416446f1.lnk
Category:	dropped
Dump:	MFDBG_4cc307867aeb4819bf7f31ef416446f1.lnk.8.dr
ID:	dr_831
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:16 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939793836777299
Encrypted:	false
Ssdeep:	24:8nGhBfNbD8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Mlc0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4cd1cd548da44fff8a8529fef3d76127.lnk
Category:	dropped
Dump:	MFDBG_4cd1cd548da44fff8a8529fef3d76127.lnk.8.dr
ID:	dr_167
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:49 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939508600471537
Encrypted:	false
Ssdeep:	24:8xGhBfp8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8xMm0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4cd551224c3a40b3a0394558e3003fd4.lnk
Category:	dropped
Dump:	MFDBG_4cd551224c3a40b3a0394558e3003fd4.lnk.8.dr
ID:	dr_558
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:44 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936882653342598
Encrypted:	false
Ssdeep:	24:8JhBf2p8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8JeO0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4d45b64c8ab24d529683c07f7003b20d.lnk
Category:	dropped
Dump:	MFDBG_4d45b64c8ab24d529683c07f7003b20d.lnk.8.dr
ID:	dr_554
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:47 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938104522900231
Encrypted:	false
Ssdeep:	24:8A8hBfh8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8B+0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4d5c968e54924feda01cd55a67afced6.lnk
Category:	dropped
Dump:	MFDBG_4d5c968e54924feda01cd55a67afced6.lnk.8.dr
ID:	dr_65
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:39 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.942759014417272
Encrypted:	false
Ssdeep:	24:84hBfS8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8a30R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4d7e406ce5974947bdc9493bc77e18f7.lnk
Category:	dropped
Dump:	MFDBG_4d7e406ce5974947bdc9493bc77e18f7.lnk.8.dr
ID:	dr_368
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:10 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.943178025173195
Encrypted:	false
Ssdeep:	24:8ayPhBfR8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8pTe0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4dac9550957444a29c6e5616da41cbb2.lnk
Category:	dropped
Dump:	MFDBG_4dac9550957444a29c6e5616da41cbb2.lnk.8.dr
ID:	dr_923
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:00 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.933377672125618
Encrypted:	false
Ssdeep:	24:81hBfv8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8ls0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4dc9865322b148d5837259d477b95436.lnk
Category:	dropped
Dump:	MFDBG_4dc9865322b148d5837259d477b95436.lnk.8.dr
ID:	dr_517
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:42 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.943609941468943
Encrypted:	false
Ssdeep:	24:89hBfC8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:89n0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4dce7fa3b22a49328d979f5d462e409a.lnk
Category:	dropped
Dump:	MFDBG_4dce7fa3b22a49328d979f5d462e409a.lnk.8.dr
ID:	dr_1030
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:52 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9314586094974775
Encrypted:	false
Ssdeep:	24:8LhBfB8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8vO0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4dfc0a5c710449a18c6d58180471c52f.lnk
Category:	dropped
Dump:	MFDBG_4dfc0a5c710449a18c6d58180471c52f.lnk.8.dr
ID:	dr_715
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:46 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939043437150233
Encrypted:	false
Ssdeep:	24:8NhBfP8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8ts0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4e2d4225100348a29f7192e31c5c924e.lnk
Category:	dropped
Dump:	MFDBG_4e2d4225100348a29f7192e31c5c924e.lnk.8.dr
ID:	dr_655
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:45 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938031722239853
Encrypted:	false
Ssdeep:	24:8qhBfc8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Ah0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4e3a9ea5248f4df98ac947da21aba3c0.lnk
Category:	dropped
Dump:	MFDBG_4e3a9ea5248f4df98ac947da21aba3c0.lnk.8.dr
ID:	dr_607
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:53 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.934580293825342
Encrypted:	false
Ssdeep:	24:83hBfc8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8rR0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4e4c427ba86e4885b904b5f555af08fc.lnk
Category:	dropped
Dump:	MFDBG_4e4c427ba86e4885b904b5f555af08fc.lnk.8.dr
ID:	dr_881
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:18 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939997725195718
Encrypted:	false
Ssdeep:	24:8D2mhBfI+8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8qsgT0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4e6fe5b474094c6595994f9cd9dd6efb.lnk
Category:	dropped
Dump:	MFDBG_4e6fe5b474094c6595994f9cd9dd6efb.lnk.8.dr
ID:	dr_567
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:48 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.93397482072117
Encrypted:	false
Ssdeep:	24:83hBfl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8r60R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4ebcc3921db24299b0540b8ebe715200.lnk
Category:	dropped
Dump:	MFDBG_4ebcc3921db24299b0540b8ebe715200.lnk.8.dr
ID:	dr_453
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:27 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938755514152355
Encrypted:	false
Ssdeep:	24:8KtphBfEH8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8ip8c0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4edd39da451f4f68a9959b3ce9274267.lnk
Category:	dropped
Dump:	MFDBG_4edd39da451f4f68a9959b3ce9274267.lnk.8.dr
ID:	dr_876
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:49:59 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.932010461497013
Encrypted:	false
Ssdeep:	24:8ThBfv8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8ns0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4ee36e988051456494d438d6bacfd8d2.lnk
Category:	dropped
Dump:	MFDBG_4ee36e988051456494d438d6bacfd8d2.lnk.8.dr
ID:	dr_360
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:10 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939199120728582
Encrypted:	false
Ssdeep:	24:82hBfD8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8cI0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4f26dc6847794d82ae0a76f19538f395.lnk
Category:	dropped
Dump:	MFDBG_4f26dc6847794d82ae0a76f19538f395.lnk.8.dr
ID:	dr_1002
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:47 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.932335288180721
Encrypted:	false
Ssdeep:	24:87hBfX8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8/E0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4f697576d39d490fbd75530d958afd8e.lnk
Category:	dropped
Dump:	MFDBG_4f697576d39d490fbd75530d958afd8e.lnk.8.dr
ID:	dr_1037
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:48 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.937463100428169
Encrypted:	false
Ssdeep:	24:8zphBf7T8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8zpzg0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4f6e2528021d4e8489175c34659b1983.lnk
Category:	dropped
Dump:	MFDBG_4f6e2528021d4e8489175c34659b1983.lnk.8.dr
ID:	dr_159
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:40 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9372813226127885
Encrypted:	false
Ssdeep:	24:8T2hBfe8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8TcL0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4f89b8d3e0fa4dd88473a1cedcc53a5a.lnk
Category:	dropped
Dump:	MFDBG_4f89b8d3e0fa4dd88473a1cedcc53a5a.lnk.8.dr
ID:	dr_586
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:44 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939221879802557
Encrypted:	false
Ssdeep:	24:8DhBff8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:83M0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_4f9365bad00b4c87890584e3a5de6c81.lnk
Category:	dropped
Dump:	MFDBG_4f9365bad00b4c87890584e3a5de6c81.lnk.8.dr
ID:	dr_602
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:49 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935157405747855
Encrypted:	false
Ssdeep:	24:8CshBfq8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Cev0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_506c20782e804d259dd6ace9e91ee497.lnk
Category:	dropped
Dump:	MFDBG_506c20782e804d259dd6ace9e91ee497.lnk.8.dr
ID:	dr_826
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:16 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9349394094607115
Encrypted:	false
Ssdeep:	24:8XhBfNbD8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Llc0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_50d9a1e107844b459ffba1a63d426e05.lnk
Category:	dropped
Dump:	MFDBG_50d9a1e107844b459ffba1a63d426e05.lnk.8.dr
ID:	dr_1049
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:49 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.93967655517228
Encrypted:	false
Ssdeep:	24:8j2hBfG448iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Iu490R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_51213300e35f4326bee5e060f43710c1.lnk
Category:	dropped
Dump:	MFDBG_51213300e35f4326bee5e060f43710c1.lnk.8.dr
ID:	dr_598
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:49 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.934813476650443
Encrypted:	false
Ssdeep:	24:8NhBfq8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8tv0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_512f3a3cc35b42a993273a712966b520.lnk
Category:	dropped
Dump:	MFDBG_512f3a3cc35b42a993273a712966b520.lnk.8.dr
ID:	dr_955
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:01 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939741783296639
Encrypted:	false
Ssdeep:	24:8U8hBfeIl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8UOnC0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_512f97fbfa2542e9b5d6c06d328160e9.lnk
Category:	dropped
Dump:	MFDBG_512f97fbfa2542e9b5d6c06d328160e9.lnk.8.dr
ID:	dr_498
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:41 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.943178025173194
Encrypted:	false
Ssdeep:	24:805hBfE8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:80ZJ0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_513ca017b83949eda604431ee216ec0d.lnk
Category:	dropped
Dump:	MFDBG_513ca017b83949eda604431ee216ec0d.lnk.8.dr
ID:	dr_752
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:54 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.93467074927933
Encrypted:	false
Ssdeep:	24:8AhBfUxp8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Sl0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_51896ae087d643cda353befc244c30c3.lnk
Category:	dropped
Dump:	MFDBG_51896ae087d643cda353befc244c30c3.lnk.8.dr
ID:	dr_363
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:26 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.93886384283642
Encrypted:	false
Ssdeep:	24:8whBfTl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8iW0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_5195622b3fa743babfb792e90d0ffc0a.lnk
Category:	dropped
Dump:	MFDBG_5195622b3fa743babfb792e90d0ffc0a.lnk.8.dr
ID:	dr_258
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:51 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.937803694362525
Encrypted:	false
Ssdeep:	24:8+hBfKP8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8UC00R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_51b0be070fa74ba7a29d266c7559ded3.lnk
Category:	dropped
Dump:	MFDBG_51b0be070fa74ba7a29d266c7559ded3.lnk.8.dr
ID:	dr_303
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:08 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936059453055156
Encrypted:	false
Ssdeep:	24:8ChBfB8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8oe0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_52ce49d4e2af41afba5c5a62b36c4a91.lnk
Category:	dropped
Dump:	MFDBG_52ce49d4e2af41afba5c5a62b36c4a91.lnk.8.dr
ID:	dr_103
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:44 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938569686221536
Encrypted:	false
Ssdeep:	24:8V8hBf/D8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8wnQ0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_52ffe49941ef4e6eafdd84666c980861.lnk
Category:	dropped
Dump:	MFDBG_52ffe49941ef4e6eafdd84666c980861.lnk.8.dr
ID:	dr_980
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:47 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.945372056006385
Encrypted:	false
Ssdeep:	24:8uphBfF+8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8upp0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_539f32a14079463db298e0af347b2041.lnk
Category:	dropped
Dump:	MFDBG_539f32a14079463db298e0af347b2041.lnk.8.dr
ID:	dr_556
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:47 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.934762501839017
Encrypted:	false
Ssdeep:	24:8CuhBfh8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Ck+0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_53fb3bd0c39f4a958c95d3b048ce79a1.lnk
Category:	dropped
Dump:	MFDBG_53fb3bd0c39f4a958c95d3b048ce79a1.lnk.8.dr
ID:	dr_334
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:09 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.945912300986199
Encrypted:	false
Ssdeep:	24:8YhBfg8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:86d0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_5422625da6c44bc2a5e828d1de6564b6.lnk
Category:	dropped
Dump:	MFDBG_5422625da6c44bc2a5e828d1de6564b6.lnk.8.dr
ID:	dr_901
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:18 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.944275040589791
Encrypted:	false
Ssdeep:	24:84hBfFbD8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8a9c0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_5422af8dab694e14afebd118c238b814.lnk
Category:	dropped
Dump:	MFDBG_5422af8dab694e14afebd118c238b814.lnk.8.dr
ID:	dr_899
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:18 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938198743715572
Encrypted:	false
Ssdeep:	24:8XGhBfFbD8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8c9c0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_542d6fb4b7e24e44a4f274ae18e70266.lnk
Category:	dropped
Dump:	MFDBG_542d6fb4b7e24e44a4f274ae18e70266.lnk.8.dr
ID:	dr_35
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:41 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.949561384202124
Encrypted:	false
Ssdeep:	24:84hBfF8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8aa0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_545f437e12c34e058ee8f0a017640f79.lnk
Category:	dropped
Dump:	MFDBG_545f437e12c34e058ee8f0a017640f79.lnk.8.dr
ID:	dr_1052
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:52 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935464467902568
Encrypted:	false
Ssdeep:	24:8UhBfQ8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Wt0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_54617eaa7b5f4a7f9e7ea8fdddc621b2.lnk
Category:	dropped
Dump:	MFDBG_54617eaa7b5f4a7f9e7ea8fdddc621b2.lnk.8.dr
ID:	dr_852
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:17 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.941759839733162
Encrypted:	false
Ssdeep:	24:8gmhBfV8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8gs60R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_546f5a2e0f704befbf2f295fcd0fd46a.lnk
Category:	dropped
Dump:	MFDBG_546f5a2e0f704befbf2f295fcd0fd46a.lnk.8.dr
ID:	dr_575
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:48 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.93580839699998
Encrypted:	false
Ssdeep:	24:8YhBfp8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:86G0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_5485e16de1204364bb5c58cbe24f270e.lnk
Category:	dropped
Dump:	MFDBG_5485e16de1204364bb5c58cbe24f270e.lnk.8.dr
ID:	dr_782
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:55 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.941722542592166
Encrypted:	false
Ssdeep:	24:84OhBfB8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8h+0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_54901bec9e3141d1b896eda7ab8a1015.lnk
Category:	dropped
Dump:	MFDBG_54901bec9e3141d1b896eda7ab8a1015.lnk.8.dr
ID:	dr_966
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:46 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938755514152354
Encrypted:	false
Ssdeep:	24:8/chBfJe8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8WF0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_54c1e8e0824e404e9bd56018c6cab311.lnk
Category:	dropped
Dump:	MFDBG_54c1e8e0824e404e9bd56018c6cab311.lnk.8.dr
ID:	dr_271
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:52 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.930663432985652
Encrypted:	false
Ssdeep:	24:8vhBf38iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8zU0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_55bb0b6241f144038e619559450cc027.lnk
Category:	dropped
Dump:	MFDBG_55bb0b6241f144038e619559450cc027.lnk.8.dr
ID:	dr_825
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:15 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.934075576869216
Encrypted:	false
Ssdeep:	24:85hBfNbD8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Zlc0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_55c4cfba041f4b8d95f34e93e1723d35.lnk
Category:	dropped
Dump:	MFDBG_55c4cfba041f4b8d95f34e93e1723d35.lnk.8.dr
ID:	dr_288
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:53 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.934750666114332
Encrypted:	false
Ssdeep:	24:8kfphBfc8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8cpR0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_55cc3d75b6084adfb0690a70399599b3.lnk
Category:	dropped
Dump:	MFDBG_55cc3d75b6084adfb0690a70399599b3.lnk.8.dr
ID:	dr_626
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:45 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9404296414914635
Encrypted:	false
Ssdeep:	24:8zhBfGI+8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8HuIT0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_560490dd09a84c43aa48b60a3abafb4c.lnk
Category:	dropped
Dump:	MFDBG_560490dd09a84c43aa48b60a3abafb4c.lnk.8.dr
ID:	dr_551
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:48 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.934813476650444
Encrypted:	false
Ssdeep:	24:80hBfl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8260R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_56a958991a984bb0a2b9adf2a4645b4a.lnk
Category:	dropped
Dump:	MFDBG_56a958991a984bb0a2b9adf2a4645b4a.lnk.8.dr
ID:	dr_814
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:15 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936956102473914
Encrypted:	false
Ssdeep:	24:89GhBft8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:89MC0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_57dc48fa00534487b1f373574d86863c.lnk
Category:	dropped
Dump:	MFDBG_57dc48fa00534487b1f373574d86863c.lnk.8.dr
ID:	dr_1031
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:48 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.94222105043559
Encrypted:	false
Ssdeep:	24:8NhBfc8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8th0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_58641e854ec446bba61e441f137f90e5.lnk
Category:	dropped
Dump:	MFDBG_58641e854ec446bba61e441f137f90e5.lnk.8.dr
ID:	dr_1008
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:47 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.940185389872865
Encrypted:	false
Ssdeep:	24:87hBft8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8/C0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_58853713aeba4822bb2da71f7ba64889.lnk
Category:	dropped
Dump:	MFDBG_58853713aeba4822bb2da71f7ba64889.lnk.8.dr
ID:	dr_77
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:43 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9424760591096435
Encrypted:	false
Ssdeep:	24:8chBfk8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8up0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_58f1d4805098494e9f52fb2ff6430c09.lnk
Category:	dropped
Dump:	MFDBG_58f1d4805098494e9f52fb2ff6430c09.lnk.8.dr
ID:	dr_829
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:16 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938375651337266
Encrypted:	false
Ssdeep:	24:8KhBfNbD8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8glc0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_59391273af5a4ed6b6d28fb20deda29e.lnk
Category:	dropped
Dump:	MFDBG_59391273af5a4ed6b6d28fb20deda29e.lnk.8.dr
ID:	dr_858
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:17 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.940662824316566
Encrypted:	false
Ssdeep:	24:8hmhBfV8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8hs60R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_5a2d57af5d724de780c77e4ee2f4786b.lnk
Category:	dropped
Dump:	MFDBG_5a2d57af5d724de780c77e4ee2f4786b.lnk.8.dr
ID:	dr_605
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:53 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.940085712394054
Encrypted:	false
Ssdeep:	24:8HhBfc8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8bR0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_5a91c0400dca4fc6843447f0d9eba27c.lnk
Category:	dropped
Dump:	MFDBG_5a91c0400dca4fc6843447f0d9eba27c.lnk.8.dr
ID:	dr_273
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:52 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.945372056006388
Encrypted:	false
Ssdeep:	24:8LhBf9l8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8vA0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_5b0a6fd42b2c408fa97a4f3295cfb919.lnk
Category:	dropped
Dump:	MFDBG_5b0a6fd42b2c408fa97a4f3295cfb919.lnk.8.dr
ID:	dr_105
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:44 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939109931201347
Encrypted:	false
Ssdeep:	24:8phBf/D8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8pnQ0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_5b17e7b0f75b4058b63861e49ea7b512.lnk
Category:	dropped
Dump:	MFDBG_5b17e7b0f75b4058b63861e49ea7b512.lnk.8.dr
ID:	dr_420
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:12 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9373373287123234
Encrypted:	false
Ssdeep:	24:8ihBfD8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8IY0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_5b2e93ac97b44d91a42ba48d885fff61.lnk
Category:	dropped
Dump:	MFDBG_5b2e93ac97b44d91a42ba48d885fff61.lnk.8.dr
ID:	dr_549
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:48 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938644767880044
Encrypted:	false
Ssdeep:	24:8CwhBfl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Ci60R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_5b4e7f2892d04ce9abea30c28d3a7e1d.lnk
Category:	dropped
Dump:	MFDBG_5b4e7f2892d04ce9abea30c28d3a7e1d.lnk.8.dr
ID:	dr_161
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:41 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.940983994340002
Encrypted:	false
Ssdeep:	24:8shBfZ8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8eW0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_5b57b073dd944b42965210fb9319c57b.lnk
Category:	dropped
Dump:	MFDBG_5b57b073dd944b42965210fb9319c57b.lnk.8.dr
ID:	dr_349
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:10 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9399522070477655
Encrypted:	false
Ssdeep:	24:8h9hBfD8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8PI0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_5bd7c079c1644ff1ae66ac3d6cd1bb5a.lnk
Category:	dropped
Dump:	MFDBG_5bd7c079c1644ff1ae66ac3d6cd1bb5a.lnk.8.dr
ID:	dr_85
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:42 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.940443749360191
Encrypted:	false
Ssdeep:	24:8jphBf08iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:89p0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_5c30d37b939a4e8c8052615e6dba9e1d.lnk
Category:	dropped
Dump:	MFDBG_5c30d37b939a4e8c8052615e6dba9e1d.lnk.8.dr
ID:	dr_510
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:42 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.941108848481038
Encrypted:	false
Ssdeep:	24:8dhBfC8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8dn0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_5c442904acee4a5ba908e538689262d6.lnk
Category:	dropped
Dump:	MFDBG_5c442904acee4a5ba908e538689262d6.lnk.8.dr
ID:	dr_43
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:39 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.932124718985389
Encrypted:	false
Ssdeep:	24:899hBfQ8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8zt0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_5cf9b7ce57b5465cb005d43dad0893e7.lnk
Category:	dropped
Dump:	MFDBG_5cf9b7ce57b5465cb005d43dad0893e7.lnk.8.dr
ID:	dr_392
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:26 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938016535701897
Encrypted:	false
Ssdeep:	24:8KQhBfGy8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8KCuf0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_5df2e3404f2f4a3886801fb2c2554f7f.lnk
Category:	dropped
Dump:	MFDBG_5df2e3404f2f4a3886801fb2c2554f7f.lnk.8.dr
ID:	dr_832
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:16 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9436979286672775
Encrypted:	false
Ssdeep:	24:8shBfF8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8e60R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_5df9c8f4299a405196f23ef28bdc350f.lnk
Category:	dropped
Dump:	MFDBG_5df9c8f4299a405196f23ef28bdc350f.lnk.8.dr
ID:	dr_989
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:51 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935998479265374
Encrypted:	false
Ssdeep:	24:82hBfw8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8c90R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_5e263a1b00b94022b8fa4bdf385664b2.lnk
Category:	dropped
Dump:	MFDBG_5e263a1b00b94022b8fa4bdf385664b2.lnk.8.dr
ID:	dr_787
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:56 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.941935814129831
Encrypted:	false
Ssdeep:	24:8whBf08iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8iZ0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_5e3cad065ecc4bc889594baa48ab907c.lnk
Category:	dropped
Dump:	MFDBG_5e3cad065ecc4bc889594baa48ab907c.lnk.8.dr
ID:	dr_74
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:39 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935106000738133
Encrypted:	false
Ssdeep:	24:8RGhBfR8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8RM+0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_5ea9dd2aefed4d1bade39ce4a8fb63ec.lnk
Category:	dropped
Dump:	MFDBG_5ea9dd2aefed4d1bade39ce4a8fb63ec.lnk.8.dr
ID:	dr_399
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:11 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.940173699592387
Encrypted:	false
Ssdeep:	24:8zhBf58iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8H20R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_5f053207bd3a4c2ba5ad38df43ea9c3f.lnk
Category:	dropped
Dump:	MFDBG_5f053207bd3a4c2ba5ad38df43ea9c3f.lnk.8.dr
ID:	dr_608
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:49 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.93112617871871
Encrypted:	false
Ssdeep:	24:8dhBfq8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8dv0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_5f89e12ce8ff4502adb6862af8378140.lnk
Category:	dropped
Dump:	MFDBG_5f89e12ce8ff4502adb6862af8378140.lnk.8.dr
ID:	dr_497
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:29 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.93377623269473
Encrypted:	false
Ssdeep:	24:8rhBfZ8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8PG0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_5fbb3f9c0a9149ac9bb015539e777abb.lnk
Category:	dropped
Dump:	MFDBG_5fbb3f9c0a9149ac9bb015539e777abb.lnk.8.dr
ID:	dr_609
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:53 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.937658498735761
Encrypted:	false
Ssdeep:	24:8jhBfc8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8XR0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_5fc43c5d0d6440f192c143f917d16b4a.lnk
Category:	dropped
Dump:	MFDBG_5fc43c5d0d6440f192c143f917d16b4a.lnk.8.dr
ID:	dr_365
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:10 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.933254240164353
Encrypted:	false
Ssdeep:	24:8M2hBfD8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8bI0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_6017a61f4fdf4ff5bdf2008acf6758c0.lnk
Category:	dropped
Dump:	MFDBG_6017a61f4fdf4ff5bdf2008acf6758c0.lnk.8.dr
ID:	dr_174
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:45 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.934310244057539
Encrypted:	false
Ssdeep:	24:81hBfW8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8lD0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_609f085ce47c4b7696ec38c2785c09b0.lnk
Category:	dropped
Dump:	MFDBG_609f085ce47c4b7696ec38c2785c09b0.lnk.8.dr
ID:	dr_178
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:45 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.94320078424717
Encrypted:	false
Ssdeep:	24:8BhBf98iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8xy0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_60a2883c3af1453ba912c29e1ca9d9cc.lnk
Category:	dropped
Dump:	MFDBG_60a2883c3af1453ba912c29e1ca9d9cc.lnk.8.dr
ID:	dr_191
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:40 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9350897600352495
Encrypted:	false
Ssdeep:	24:8AhBfo8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8SV0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_612b99da5e0a4e3a9051d125b0007791.lnk
Category:	dropped
Dump:	MFDBG_612b99da5e0a4e3a9051d125b0007791.lnk.8.dr
ID:	dr_282
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:52 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939457480215905
Encrypted:	false
Ssdeep:	24:8rhBfr48iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8PJ0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_61462c6b90ea455fb0cb9eebf6fcede5.lnk
Category:	dropped
Dump:	MFDBG_61462c6b90ea455fb0cb9eebf6fcede5.lnk.8.dr
ID:	dr_520
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:43 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.940341654293129
Encrypted:	false
Ssdeep:	24:8OhBfsA8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8EE10R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_624438f2b6c84956be4b930c3dc223fc.lnk
Category:	dropped
Dump:	MFDBG_624438f2b6c84956be4b930c3dc223fc.lnk.8.dr
ID:	dr_546
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:47 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9327031786810105
Encrypted:	false
Ssdeep:	24:8uhBfvl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8k3C0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_6262a7ce758f4bcab1ee9c5040591e91.lnk
Category:	dropped
Dump:	MFDBG_6262a7ce758f4bcab1ee9c5040591e91.lnk.8.dr
ID:	dr_235
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:45 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935074718941502
Encrypted:	false
Ssdeep:	24:8RhBfQD8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8hp0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_627e6b8116da4fcba3daf5f9b64a0579.lnk
Category:	dropped
Dump:	MFDBG_627e6b8116da4fcba3daf5f9b64a0579.lnk.8.dr
ID:	dr_468
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:28 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.94118272781065
Encrypted:	false
Ssdeep:	24:8qphBfvl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8O3C0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_62cadda31404448d838af88f08cfa737.lnk
Category:	dropped
Dump:	MFDBG_62cadda31404448d838af88f08cfa737.lnk.8.dr
ID:	dr_101
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:47 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936651959479616
Encrypted:	false
Ssdeep:	24:8ChBfO8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8o70R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_62d7212e4d4d430aaab8a85144ef8964.lnk
Category:	dropped
Dump:	MFDBG_62d7212e4d4d430aaab8a85144ef8964.lnk.8.dr
ID:	dr_309
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:09 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939221879802557
Encrypted:	false
Ssdeep:	24:8NhBfB8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8te0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_63204641a95644258f39a453d2c90675.lnk
Category:	dropped
Dump:	MFDBG_63204641a95644258f39a453d2c90675.lnk.8.dr
ID:	dr_327
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:09 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.933927990490451
Encrypted:	false
Ssdeep:	24:8khBfg8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Gd0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_636df6856838405fa1d01e549a71f0a0.lnk
Category:	dropped
Dump:	MFDBG_636df6856838405fa1d01e549a71f0a0.lnk.8.dr
ID:	dr_491
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:28 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.930536306700575
Encrypted:	false
Ssdeep:	24:85hBfZ8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8ZG0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_636e089d99994f76a06a167cade496c6.lnk
Category:	dropped
Dump:	MFDBG_636e089d99994f76a06a167cade496c6.lnk.8.dr
ID:	dr_891
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:49:59 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.93693876814321
Encrypted:	false
Ssdeep:	24:8OhBfv8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Es0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_63d04d7c451444a5bdc13b74bc6e03fa.lnk
Category:	dropped
Dump:	MFDBG_63d04d7c451444a5bdc13b74bc6e03fa.lnk.8.dr
ID:	dr_194
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:50 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.944150186448754
Encrypted:	false
Ssdeep:	24:8M+2hBf1kD8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8fcr0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_63db1a430d05465daea4982ab73643fb.lnk
Category:	dropped
Dump:	MFDBG_63db1a430d05465daea4982ab73643fb.lnk.8.dr
ID:	dr_943
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:01 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.93718106429206
Encrypted:	false
Ssdeep:	24:8+hBfeIl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8UnC0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_64063bfef1c54d9cb8893495e95ac390.lnk
Category:	dropped
Dump:	MFDBG_64063bfef1c54d9cb8893495e95ac390.lnk.8.dr
ID:	dr_827
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:16 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938119709438189
Encrypted:	false
Ssdeep:	24:8aGhBfNbD8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8aMlc0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_6413f07228bf47ecba0251da93e50f1f.lnk
Category:	dropped
Dump:	MFDBG_6413f07228bf47ecba0251da93e50f1f.lnk.8.dr
ID:	dr_819
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:15 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9397938367773
Encrypted:	false
Ssdeep:	24:8tphBfNbD8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8blc0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_64b92a5043934c708f7c4c0e749fa84e.lnk
Category:	dropped
Dump:	MFDBG_64b92a5043934c708f7c4c0e749fa84e.lnk.8.dr
ID:	dr_505
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:41 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.943843124294043
Encrypted:	false
Ssdeep:	24:8shhBfE8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8sRJ0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_64cb77a97e2e4db29a361d4be4ee1935.lnk
Category:	dropped
Dump:	MFDBG_64cb77a97e2e4db29a361d4be4ee1935.lnk.8.dr
ID:	dr_257
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:51 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.93604157982508
Encrypted:	false
Ssdeep:	24:8n2hBfKP8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8ncC00R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_64fe0509547d40cd9fb220b3f4287a0c.lnk
Category:	dropped
Dump:	MFDBG_64fe0509547d40cd9fb220b3f4287a0c.lnk.8.dr
ID:	dr_767
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:55 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936789511196491
Encrypted:	false
Ssdeep:	24:8iphBfOe8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8ipm0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_6514f30aef6940cfbbb8c0bac35b0d79.lnk
Category:	dropped
Dump:	MFDBG_6514f30aef6940cfbbb8c0bac35b0d79.lnk.8.dr
ID:	dr_969
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:46 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.941935814129831
Encrypted:	false
Ssdeep:	24:8C8hBfT8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8COo0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_6557e7dbea914fc083c7f6c85c25d263.lnk
Category:	dropped
Dump:	MFDBG_6557e7dbea914fc083c7f6c85c25d263.lnk.8.dr
ID:	dr_1048
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:49 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.944187053391455
Encrypted:	false
Ssdeep:	24:8aGhBfG448iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Ju490R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_655be88d522843e4bef216f24627203c.lnk
Category:	dropped
Dump:	MFDBG_655be88d522843e4bef216f24627203c.lnk.8.dr
ID:	dr_775
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:55 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.940713944572199
Encrypted:	false
Ssdeep:	24:8EhBf08iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8mZ0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_65851bf6ae1b4a559d9948b82b675424.lnk
Category:	dropped
Dump:	MFDBG_65851bf6ae1b4a559d9948b82b675424.lnk.8.dr
ID:	dr_207
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:45 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.931005089939026
Encrypted:	false
Ssdeep:	24:8CRPhBfQl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Cp30R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_65b16a18bbec4ca6a0f94c2581bf5aa7.lnk
Category:	dropped
Dump:	MFDBG_65b16a18bbec4ca6a0f94c2581bf5aa7.lnk.8.dr
ID:	dr_824
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:15 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935604508581561
Encrypted:	false
Ssdeep:	24:8ohBfNbD8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8qlc0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_661c9c404d5a4cb38dfa37a647a7ab6e.lnk
Category:	dropped
Dump:	MFDBG_661c9c404d5a4cb38dfa37a647a7ab6e.lnk.8.dr
ID:	dr_935
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:01 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935051799464729
Encrypted:	false
Ssdeep:	24:8qhBfv8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8As0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_666fc6932fde4d4e81b88c31d33064f9.lnk
Category:	dropped
Dump:	MFDBG_666fc6932fde4d4e81b88c31d33064f9.lnk.8.dr
ID:	dr_663
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:49 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.937366623119004
Encrypted:	false
Ssdeep:	24:8SChBfDD8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8SorQ0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_66c868bdf9ed48388470fc2df97825f3.lnk
Category:	dropped
Dump:	MFDBG_66c868bdf9ed48388470fc2df97825f3.lnk.8.dr
ID:	dr_885
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:18 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.942944842348092
Encrypted:	false
Ssdeep:	24:8x9hBfB8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8/+0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_66fc59645d7e4b78a952b7c9475ebe33.lnk
Category:	dropped
Dump:	MFDBG_66fc59645d7e4b78a952b7c9475ebe33.lnk.8.dr
ID:	dr_995
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:51 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.930569516983003
Encrypted:	false
Ssdeep:	24:8BhBfw8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8x90R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_6734b7106c734fc2bcaafda57c4d937d.lnk
Category:	dropped
Dump:	MFDBG_6734b7106c734fc2bcaafda57c4d937d.lnk.8.dr
ID:	dr_425
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:27 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9390038835154115
Encrypted:	false
Ssdeep:	24:86hBf1D8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8wNQ0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_67700df4ca004ef7bf53b3238a8dc761.lnk
Category:	dropped
Dump:	MFDBG_67700df4ca004ef7bf53b3238a8dc761.lnk.8.dr
ID:	dr_708
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:54 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936348641979791
Encrypted:	false
Ssdeep:	24:8ZhBfSr8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:85KI0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_67803ef73c8d447c83dcba6f35aa2439.lnk
Category:	dropped
Dump:	MFDBG_67803ef73c8d447c83dcba6f35aa2439.lnk.8.dr
ID:	dr_456
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:27 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938411585054941
Encrypted:	false
Ssdeep:	24:8RhBfi8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8hn0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_679525ade986477cadd488d1cf258f6b.lnk
Category:	dropped
Dump:	MFDBG_679525ade986477cadd488d1cf258f6b.lnk.8.dr
ID:	dr_290
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:53 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.93765849873576
Encrypted:	false
Ssdeep:	24:8VhBfc8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8FR0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_679e8de7d3a34ad597130b0e269ae80f.lnk
Category:	dropped
Dump:	MFDBG_679e8de7d3a34ad597130b0e269ae80f.lnk.8.dr
ID:	dr_200
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:50 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.941094740612313
Encrypted:	false
Ssdeep:	24:8aQhBf48iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8TF0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_67df0d264bb04073afa212263b233b70.lnk
Category:	dropped
Dump:	MFDBG_67df0d264bb04073afa212263b233b70.lnk.8.dr
ID:	dr_745
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:55 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.940173699592387
Encrypted:	false
Ssdeep:	24:88hBfOe8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Om0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_682c9f35c053405d9c3e88346d744a81.lnk
Category:	dropped
Dump:	MFDBG_682c9f35c053405d9c3e88346d744a81.lnk.8.dr
ID:	dr_76
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:43 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9390829177927955
Encrypted:	false
Ssdeep:	24:8uhBfk8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8kp0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_68b50efd559f4c099329a8ed7a2e5c2e.lnk
Category:	dropped
Dump:	MFDBG_68b50efd559f4c099329a8ed7a2e5c2e.lnk.8.dr
ID:	dr_193
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:40 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.943843124294043
Encrypted:	false
Ssdeep:	24:87hBfZ8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8/W0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_68f3363f0d3342ef970448aa4e9c6472.lnk
Category:	dropped
Dump:	MFDBG_68f3363f0d3342ef970448aa4e9c6472.lnk.8.dr
ID:	dr_928
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:00 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.933846455364067
Encrypted:	false
Ssdeep:	24:8NhBfv8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8ts0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_69b43f08d0f845cc9daa871e5c43bb26.lnk
Category:	dropped
Dump:	MFDBG_69b43f08d0f845cc9daa871e5c43bb26.lnk.8.dr
ID:	dr_974
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:46 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938380806285038
Encrypted:	false
Ssdeep:	24:8YdGhBfG48iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8YKa0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_69b56b59db19469c9aca224c1c65dc6b.lnk
Category:	dropped
Dump:	MFDBG_69b56b59db19469c9aca224c1c65dc6b.lnk.8.dr
ID:	dr_340
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:09 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938012915784751
Encrypted:	false
Ssdeep:	24:8+2hBfg8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8pd0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_69f2d18ba48e412c87c8e9849481ef8c.lnk
Category:	dropped
Dump:	MFDBG_69f2d18ba48e412c87c8e9849481ef8c.lnk.8.dr
ID:	dr_246
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:51 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.937138595241676
Encrypted:	false
Ssdeep:	24:8BhBfKP8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8xC00R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_6a11f0b37c434a669858bc52b949cbbe.lnk
Category:	dropped
Dump:	MFDBG_6a11f0b37c434a669858bc52b949cbbe.lnk.8.dr
ID:	dr_254
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:51 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935609663529332
Encrypted:	false
Ssdeep:	24:8xhBfKP8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8BC00R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_6a68eddae1914e31a709071f6abc223a.lnk
Category:	dropped
Dump:	MFDBG_6a68eddae1914e31a709071f6abc223a.lnk.8.dr
ID:	dr_421
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:12 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9373373287123234
Encrypted:	false
Ssdeep:	24:8ihBfD8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8IY0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_6a74ec871a274b5188422fc8cbb4018b.lnk
Category:	dropped
Dump:	MFDBG_6a74ec871a274b5188422fc8cbb4018b.lnk.8.dr
ID:	dr_1021
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:51 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.942512926052346
Encrypted:	false
Ssdeep:	24:8qhBfyQ8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8AaF0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_6a90472266c44864b368e313f76b2cb2.lnk
Category:	dropped
Dump:	MFDBG_6a90472266c44864b368e313f76b2cb2.lnk.8.dr
ID:	dr_675
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:49 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.931872894830773
Encrypted:	false
Ssdeep:	24:8y9hBfq8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8y9/0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_6a99caafb8b34ac4bebb418c0e1efad3.lnk
Category:	dropped
Dump:	MFDBG_6a99caafb8b34ac4bebb418c0e1efad3.lnk.8.dr
ID:	dr_600
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:49 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936919520285301
Encrypted:	false
Ssdeep:	24:8YjhBfq8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8YXv0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_6b0900674cf14c6aba6426dd72c28fc9.lnk
Category:	dropped
Dump:	MFDBG_6b0900674cf14c6aba6426dd72c28fc9.lnk.8.dr
ID:	dr_545
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:43 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.937296696408269
Encrypted:	false
Ssdeep:	24:8C+hBffD8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8CU3Q0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_6b8e72b01b094ba19259621d725f793e.lnk
Category:	dropped
Dump:	MFDBG_6b8e72b01b094ba19259621d725f793e.lnk.8.dr
ID:	dr_54
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:39 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.932559550696697
Encrypted:	false
Ssdeep:	24:8OhBfS8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8E30R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_6b9d90a39d01473a8c4f011014f39696.lnk
Category:	dropped
Dump:	MFDBG_6b9d90a39d01473a8c4f011014f39696.lnk.8.dr
ID:	dr_700
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:54 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.934330585543267
Encrypted:	false
Ssdeep:	24:85hBfSr8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8ZKI0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_6bafb6b97d424fe7807bf2ca43b54b6f.lnk
Category:	dropped
Dump:	MFDBG_6bafb6b97d424fe7807bf2ca43b54b6f.lnk.8.dr
ID:	dr_428
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:13 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.929851680711065
Encrypted:	false
Ssdeep:	24:8/hBfN8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8jC0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_6bdaacbe9607440098c0bcf25c47eadd.lnk
Category:	dropped
Dump:	MFDBG_6bdaacbe9607440098c0bcf25c47eadd.lnk.8.dr
ID:	dr_631
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:49 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.937633322073537
Encrypted:	false
Ssdeep:	24:8zhBfq8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8H/0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_6d21257d55e04856bd7278d2ec1df479.lnk
Category:	dropped
Dump:	MFDBG_6d21257d55e04856bd7278d2ec1df479.lnk.8.dr
ID:	dr_224
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:50 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9356976507276675
Encrypted:	false
Ssdeep:	24:8d9hBfKP8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8TC00R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_6e0455d2361041fe846b5776d8dcbea6.lnk
Category:	dropped
Dump:	MFDBG_6e0455d2361041fe846b5776d8dcbea6.lnk.8.dr
ID:	dr_186
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:44 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.94111261384239
Encrypted:	false
Ssdeep:	24:8nhBfWw48iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:87+e0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_6e3158f54e5f4daa81f2d373b6f351f9.lnk
Category:	dropped
Dump:	MFDBG_6e3158f54e5f4daa81f2d373b6f351f9.lnk.8.dr
ID:	dr_642
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:49 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9321100302747505
Encrypted:	false
Ssdeep:	24:8zhBfq8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8H/0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_6e4036fb21c949148a21e364aa3f8419.lnk
Category:	dropped
Dump:	MFDBG_6e4036fb21c949148a21e364aa3f8419.lnk.8.dr
ID:	dr_91
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:39 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936561053120868
Encrypted:	false
Ssdeep:	24:8sphBfR8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8sp+0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_6e7507295509415ab6119af84e461b5c.lnk
Category:	dropped
Dump:	MFDBG_6e7507295509415ab6119af84e461b5c.lnk.8.dr
ID:	dr_267
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:52 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.934406737016918
Encrypted:	false
Ssdeep:	24:8KghBf38iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8zU0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_6f242c261b7643ebab8761ccc0437287.lnk
Category:	dropped
Dump:	MFDBG_6f242c261b7643ebab8761ccc0437287.lnk.8.dr
ID:	dr_977
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:47 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938755514152353
Encrypted:	false
Ssdeep:	24:88i8hBfF+8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:88fp0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_6f41a6564a3845c18c06b82fd78ab2a3.lnk
Category:	dropped
Dump:	MFDBG_6f41a6564a3845c18c06b82fd78ab2a3.lnk.8.dr
ID:	dr_581
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:44 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.93163559426121
Encrypted:	false
Ssdeep:	24:8XhBfwp8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8LoO0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_6fa9c01c7c564aa6b473322be2ea0151.lnk
Category:	dropped
Dump:	MFDBG_6fa9c01c7c564aa6b473322be2ea0151.lnk.8.dr
ID:	dr_142
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:44 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.94118272781065
Encrypted:	false
Ssdeep:	24:8dPhBfWw48iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8F+e0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_6fb595b1064b42a5ac3d41db0093ac3f.lnk
Category:	dropped
Dump:	MFDBG_6fb595b1064b42a5ac3d41db0093ac3f.lnk.8.dr
ID:	dr_205
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:50 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939508600471537
Encrypted:	false
Ssdeep:	24:8khBf48iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8GF0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_6fe75dad94c842f9886cb63f7559b868.lnk
Category:	dropped
Dump:	MFDBG_6fe75dad94c842f9886cb63f7559b868.lnk.8.dr
ID:	dr_682
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:53 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.931256145994202
Encrypted:	false
Ssdeep:	24:86hBfSr8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8wKI0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_703ee5c717db456ba95cadb661dc57b1.lnk
Category:	dropped
Dump:	MFDBG_703ee5c717db456ba95cadb661dc57b1.lnk.8.dr
ID:	dr_82
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:43 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.945372056006388
Encrypted:	false
Ssdeep:	24:8Aw2hBf08iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Kp0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_708c94d6819e41cab931de5b0ad30ad0.lnk
Category:	dropped
Dump:	MFDBG_708c94d6819e41cab931de5b0ad30ad0.lnk.8.dr
ID:	dr_668
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:49 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.93493940946071
Encrypted:	false
Ssdeep:	24:89hBfDD8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:89rQ0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_7092882e727e47e6bd507c89835336a5.lnk
Category:	dropped
Dump:	MFDBG_7092882e727e47e6bd507c89835336a5.lnk.8.dr
ID:	dr_129
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:40 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.940015598425792
Encrypted:	false
Ssdeep:	24:8JhBfe8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8JL0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_70a416cd5b2c43ee8efc31478be68b37.lnk
Category:	dropped
Dump:	MFDBG_70a416cd5b2c43ee8efc31478be68b37.lnk.8.dr
ID:	dr_32
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:41 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9436124304310605
Encrypted:	false
Ssdeep:	24:824hBfF8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:82aa0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_711feef794b24e69b333bd32382bcc61.lnk
Category:	dropped
Dump:	MFDBG_711feef794b24e69b333bd32382bcc61.lnk.8.dr
ID:	dr_838
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:16 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.941935814129832
Encrypted:	false
Ssdeep:	24:849hBfF8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8o60R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_7138a5573fa94279b905b2b549577c64.lnk
Category:	dropped
Dump:	MFDBG_7138a5573fa94279b905b2b549577c64.lnk.8.dr
ID:	dr_684
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:45 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9424249388540105
Encrypted:	false
Ssdeep:	24:8YhBfGI+8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:86uIT0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_715326f50c1d41ca97e579f181bb57ae.lnk
Category:	dropped
Dump:	MFDBG_715326f50c1d41ca97e579f181bb57ae.lnk.8.dr
ID:	dr_397
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:26 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.937766827419823
Encrypted:	false
Ssdeep:	24:8aQhBfTl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8XW0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_71567f3db369474e819561d68ba0040c.lnk
Category:	dropped
Dump:	MFDBG_71567f3db369474e819561d68ba0040c.lnk.8.dr
ID:	dr_707
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:49 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936701523998155
Encrypted:	false
Ssdeep:	24:84phBfDD8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8YrQ0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_7164ba6916484b16beccacd38d82d5eb.lnk
Category:	dropped
Dump:	MFDBG_7164ba6916484b16beccacd38d82d5eb.lnk.8.dr
ID:	dr_927
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:00 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936273669022362
Encrypted:	false
Ssdeep:	24:8ZhBfv8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:85s0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_71b159d28dff48558066aed0f9e2d7c8.lnk
Category:	dropped
Dump:	MFDBG_71b159d28dff48558066aed0f9e2d7c8.lnk.8.dr
ID:	dr_930
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:00 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.93693876814321
Encrypted:	false
Ssdeep:	24:8VhBfv8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Fs0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_71c4f14c069d4dd2a1fc2fac3882299f.lnk
Category:	dropped
Dump:	MFDBG_71c4f14c069d4dd2a1fc2fac3882299f.lnk.8.dr
ID:	dr_692
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:54 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9374456573963865
Encrypted:	false
Ssdeep:	24:8vhBfSr8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8zKI0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_71d269ef04ec48e59f9e63c257cd4a36.lnk
Category:	dropped
Dump:	MFDBG_71d269ef04ec48e59f9e63c257cd4a36.lnk.8.dr
ID:	dr_1027
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:48 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938755514152355
Encrypted:	false
Ssdeep:	24:8m8hBfk8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8mOp0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_71fd9c32861a45c1b236dff5e1044f1a.lnk
Category:	dropped
Dump:	MFDBG_71fd9c32861a45c1b236dff5e1044f1a.lnk.8.dr
ID:	dr_913
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:00 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.937026755341544
Encrypted:	false
Ssdeep:	24:8whBfv8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8is0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_721b72bde8d94220ac20a94fe758d711.lnk
Category:	dropped
Dump:	MFDBG_721b72bde8d94220ac20a94fe758d711.lnk.8.dr
ID:	dr_534
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:46 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.932423275379057
Encrypted:	false
Ssdeep:	24:8+hBfE8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Up0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_72f1e733920a48c7a14bda34bab732da.lnk
Category:	dropped
Dump:	MFDBG_72f1e733920a48c7a14bda34bab732da.lnk.8.dr
ID:	dr_758
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:50 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936905412416575
Encrypted:	false
Ssdeep:	24:8gPhBfO8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8gTr0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_73397d2003164f529839f62dc3b154aa.lnk
Category:	dropped
Dump:	MFDBG_73397d2003164f529839f62dc3b154aa.lnk.8.dr
ID:	dr_285
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:52 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.930561337918593
Encrypted:	false
Ssdeep:	24:8S2hBf38iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8ScU0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_73644cf69f1048b5b7dc1f5ef2b21e7b.lnk
Category:	dropped
Dump:	MFDBG_73644cf69f1048b5b7dc1f5ef2b21e7b.lnk.8.dr
ID:	dr_531
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:43 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939309867000892
Encrypted:	false
Ssdeep:	24:8eXGhBf2p8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8aMeO0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_737cf91bedbe4a40b42065262135ed75.lnk
Category:	dropped
Dump:	MFDBG_737cf91bedbe4a40b42065262135ed75.lnk.8.dr
ID:	dr_690
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:54 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9406259573738645
Encrypted:	false
Ssdeep:	24:8WhBfSr8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:88KI0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_73845d6e679f474b885ef827044829ce.lnk
Category:	dropped
Dump:	MFDBG_73845d6e679f474b885ef827044829ce.lnk.8.dr
ID:	dr_861
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:17 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.943843124294043
Encrypted:	false
Ssdeep:	24:8DmhBfV8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Ds60R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_7387ac33ab7545c59faefc40001f15b0.lnk
Category:	dropped
Dump:	MFDBG_7387ac33ab7545c59faefc40001f15b0.lnk.8.dr
ID:	dr_986
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:47 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9406259573738645
Encrypted:	false
Ssdeep:	24:8WhBfO8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:88r0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_739590bbc24646e1bd83ef85c067c0e9.lnk
Category:	dropped
Dump:	MFDBG_739590bbc24646e1bd83ef85c067c0e9.lnk.8.dr
ID:	dr_735
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:54 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935427600959865
Encrypted:	false
Ssdeep:	24:8YPhBfSr8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8YTKI0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_73e8b78942c84cebafed46b2026986ac.lnk
Category:	dropped
Dump:	MFDBG_73e8b78942c84cebafed46b2026986ac.lnk.8.dr
ID:	dr_834
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:16 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936416287692398
Encrypted:	false
Ssdeep:	24:8AhBfF8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8S60R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_73f9842952ec4b7e8d8214da8f4c186b.lnk
Category:	dropped
Dump:	MFDBG_73f9842952ec4b7e8d8214da8f4c186b.lnk.8.dr
ID:	dr_937
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:01 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935176653605765
Encrypted:	false
Ssdeep:	24:8ahBfv8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Qs0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_74397b91852c4305a52fbdae5b4699ee.lnk
Category:	dropped
Dump:	MFDBG_74397b91852c4305a52fbdae5b4699ee.lnk.8.dr
ID:	dr_932
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:01 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936631705988499
Encrypted:	false
Ssdeep:	24:8nhBfv8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:87s0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_7469705f84874c51b2bd8f200a691bb2.lnk
Category:	dropped
Dump:	MFDBG_7469705f84874c51b2bd8f200a691bb2.lnk.8.dr
ID:	dr_512
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:42 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.94044374936019
Encrypted:	false
Ssdeep:	24:8zhBfC8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Hn0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_74a68b93aef948a78cbfcc48f42f7e5d.lnk
Category:	dropped
Dump:	MFDBG_74a68b93aef948a78cbfcc48f42f7e5d.lnk.8.dr
ID:	dr_466
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:28 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.940750811514901
Encrypted:	false
Ssdeep:	24:8j2hBfEH8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8jc8c0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_74be935c3af24b3391ff9342ee14a477.lnk
Category:	dropped
Dump:	MFDBG_74be935c3af24b3391ff9342ee14a477.lnk.8.dr
ID:	dr_162
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:41 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.933976168494276
Encrypted:	false
Ssdeep:	24:8HhBfjqH8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8bLqc0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_74e63e958e6a414d9647d955a3f194ab.lnk
Category:	dropped
Dump:	MFDBG_74e63e958e6a414d9647d955a3f194ab.lnk.8.dr
ID:	dr_866
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:17 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939778650239343
Encrypted:	false
Ssdeep:	24:8zmhBfV8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8zs60R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_750a8892a57d4535a0f8505307a88b48.lnk
Category:	dropped
Dump:	MFDBG_750a8892a57d4535a0f8505307a88b48.lnk.8.dr
ID:	dr_816
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:15 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.934884777989011
Encrypted:	false
Ssdeep:	24:80hBfNbD8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:82lc0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_750cc4a4acdf46bb8e0f3268e69c19f9.lnk
Category:	dropped
Dump:	MFDBG_750cc4a4acdf46bb8e0f3268e69c19f9.lnk.8.dr
ID:	dr_828
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:16 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.934186323141529
Encrypted:	false
Ssdeep:	24:8yhBfNbD8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:84lc0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_750d3cd899b64d16b6d24c231cf6822f.lnk
Category:	dropped
Dump:	MFDBG_750d3cd899b64d16b6d24c231cf6822f.lnk.8.dr
ID:	dr_511
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:42 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939025563920158
Encrypted:	false
Ssdeep:	24:8UhBfC8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Wn0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_758aa4e80a0946ff9a03a7cc9443c70a.lnk
Category:	dropped
Dump:	MFDBG_758aa4e80a0946ff9a03a7cc9443c70a.lnk.8.dr
ID:	dr_272
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:52 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.941847826931498
Encrypted:	false
Ssdeep:	24:8m1hBf9l8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8AA0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_759396364d6744ce99d07cf7641c8e7b.lnk
Category:	dropped
Dump:	MFDBG_759396364d6744ce99d07cf7641c8e7b.lnk.8.dr
ID:	dr_664
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:53 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.933507385255825
Encrypted:	false
Ssdeep:	24:83hBfSr8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8rKI0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_75b0af925b214fde9caa8825c658d3b7.lnk
Category:	dropped
Dump:	MFDBG_75b0af925b214fde9caa8825c658d3b7.lnk.8.dr
ID:	dr_294
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:53 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.93479936878172
Encrypted:	false
Ssdeep:	24:8XhBfc8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8LR0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_75ce9b99bbaa44209ff7f622416b0721.lnk
Category:	dropped
Dump:	MFDBG_75ce9b99bbaa44209ff7f622416b0721.lnk.8.dr
ID:	dr_439
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:13 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.946037155127235
Encrypted:	false
Ssdeep:	24:8JhBfGK8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Jun0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_75d17fb233b24c76bf6cdb19297ae6c6.lnk
Category:	dropped
Dump:	MFDBG_75d17fb233b24c76bf6cdb19297ae6c6.lnk.8.dr
ID:	dr_1050
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:52 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9393529675606
Encrypted:	false
Ssdeep:	24:8fPhBfQ8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8fTt0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_75d891aa8c7444efb6a88dbad3a8e1b6.lnk
Category:	dropped
Dump:	MFDBG_75d891aa8c7444efb6a88dbad3a8e1b6.lnk.8.dr
ID:	dr_404
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:27 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935464467902567
Encrypted:	false
Ssdeep:	24:8IhBf1D8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8KNQ0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_761a6afbf6f64f94ae42a48157473093.lnk
Category:	dropped
Dump:	MFDBG_761a6afbf6f64f94ae42a48157473093.lnk.8.dr
ID:	dr_261
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:46 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936291288107154
Encrypted:	false
Ssdeep:	24:8shBfeh8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8e/0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_762d026cbe9d4d3ab50cbdbff32698fb.lnk
Category:	dropped
Dump:	MFDBG_762d026cbe9d4d3ab50cbdbff32698fb.lnk.8.dr
ID:	dr_942
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:01 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.940173699592387
Encrypted:	false
Ssdeep:	24:80hBfeIl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:82nC0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_7658c46a9875427a9566159c3853a94d.lnk
Category:	dropped
Dump:	MFDBG_7658c46a9875427a9566159c3853a94d.lnk.8.dr
ID:	dr_691
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:50 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936993399614909
Encrypted:	false
Ssdeep:	24:8XhBfO8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Lr0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_768d1525a6ed483d8b79b584c151cebe.lnk
Category:	dropped
Dump:	MFDBG_768d1525a6ed483d8b79b584c151cebe.lnk.8.dr
ID:	dr_333
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:09 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.940503520821074
Encrypted:	false
Ssdeep:	24:80hBfg8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:82d0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_76abc9b8093e47e3b1726392bff55a6f.lnk
Category:	dropped
Dump:	MFDBG_76abc9b8093e47e3b1726392bff55a6f.lnk.8.dr
ID:	dr_670
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:53 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9353396137615295
Encrypted:	false
Ssdeep:	24:832hBfSr8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:83cKI0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_76b2c8a75bb84f15bde6c4c36aea6b7d.lnk
Category:	dropped
Dump:	MFDBG_76b2c8a75bb84f15bde6c4c36aea6b7d.lnk.8.dr
ID:	dr_119
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:43 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.947674415523644
Encrypted:	false
Ssdeep:	24:8qhBfk8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Ap0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_76e9912ed2f4497f9b7c341d87d31dab.lnk
Category:	dropped
Dump:	MFDBG_76e9912ed2f4497f9b7c341d87d31dab.lnk.8.dr
ID:	dr_643
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:53 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.933687815298103
Encrypted:	false
Ssdeep:	24:8vhBfc8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8zR0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_776ad5f164614ce691eb6b14555bdf2f.lnk
Category:	dropped
Dump:	MFDBG_776ad5f164614ce691eb6b14555bdf2f.lnk.8.dr
ID:	dr_822
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:15 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.934595480363299
Encrypted:	false
Ssdeep:	24:8nhBfNbD8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:87lc0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_778ef3050aa54d239c280f4cf8fd5149.lnk
Category:	dropped
Dump:	MFDBG_778ef3050aa54d239c280f4cf8fd5149.lnk.8.dr
ID:	dr_970
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:46 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.945372056006386
Encrypted:	false
Ssdeep:	24:86GhBfT8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:86Mo0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_77ce7ae1869341dab054c317a4654eac.lnk
Category:	dropped
Dump:	MFDBG_77ce7ae1869341dab054c317a4654eac.lnk.8.dr
ID:	dr_850
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:17 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.940085712394053
Encrypted:	false
Ssdeep:	24:8KxmhBfX8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8KxsU0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_77cfdefec1434a56b3831e1c384f433c.lnk
Category:	dropped
Dump:	MFDBG_77cfdefec1434a56b3831e1c384f433c.lnk.8.dr
ID:	dr_219
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:41 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.93907668417579
Encrypted:	false
Ssdeep:	24:8MhBf+8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8+70R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_77dfed189d6a4ef893019d2a32861122.lnk
Category:	dropped
Dump:	MFDBG_77dfed189d6a4ef893019d2a32861122.lnk.8.dr
ID:	dr_124
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:39 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938505375671986
Encrypted:	false
Ssdeep:	24:8e2hBfR8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8J+0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_7847c59fe1a14922baafeb0124424248.lnk
Category:	dropped
Dump:	MFDBG_7847c59fe1a14922baafeb0124424248.lnk.8.dr
ID:	dr_616
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:45 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939346733943594
Encrypted:	false
Ssdeep:	24:8DhBf98iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:83y0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_7849e0c9036c4f4ca9493ea2500d5f87.lnk
Category:	dropped
Dump:	MFDBG_7849e0c9036c4f4ca9493ea2500d5f87.lnk.8.dr
ID:	dr_166
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:41 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.943053171032158
Encrypted:	false
Ssdeep:	24:8+hBfev8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8UN0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_78a915a4d4294ca8b5632fde2956ee82.lnk
Category:	dropped
Dump:	MFDBG_78a915a4d4294ca8b5632fde2956ee82.lnk.8.dr
ID:	dr_701
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:50 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9348221278556945
Encrypted:	false
Ssdeep:	24:82nhBfO8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:827r0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_78b62642bb934533ba0154f1b7ffceef.lnk
Category:	dropped
Dump:	MFDBG_78b62642bb934533ba0154f1b7ffceef.lnk.8.dr
ID:	dr_1043
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:48 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939793836777296
Encrypted:	false
Ssdeep:	24:83hBfc8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8rh0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_7908ac5f49e54536807b20fecdf77825.lnk
Category:	dropped
Dump:	MFDBG_7908ac5f49e54536807b20fecdf77825.lnk.8.dr
ID:	dr_441
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:13 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.947134170543832
Encrypted:	false
Ssdeep:	24:8whBfGK8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8iun0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_795a7a32a69945bcbb15c0db69382261.lnk
Category:	dropped
Dump:	MFDBG_795a7a32a69945bcbb15c0db69382261.lnk.8.dr
ID:	dr_761
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:55 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9415038978340835
Encrypted:	false
Ssdeep:	24:8thBfOe8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Nm0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_796e3305c8ee421a99a1fbd425546f1e.lnk
Category:	dropped
Dump:	MFDBG_796e3305c8ee421a99a1fbd425546f1e.lnk.8.dr
ID:	dr_248
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:51 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936581824804892
Encrypted:	false
Ssdeep:	24:8QhBfKP8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8CC00R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_798460e03d46483d94b53e22adf2a27d.lnk
Category:	dropped
Dump:	MFDBG_798460e03d46483d94b53e22adf2a27d.lnk.8.dr
ID:	dr_837
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:16 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935938551532996
Encrypted:	false
Ssdeep:	24:8qGhBfF8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8560R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_798df4a07ff342239e14a838dda30a1e.lnk
Category:	dropped
Dump:	MFDBG_798df4a07ff342239e14a838dda30a1e.lnk.8.dr
ID:	dr_213
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:45 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.934975343178388
Encrypted:	false
Ssdeep:	24:8wPhBfW8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8wTD0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_79bb7bdc39d844899ea7ee8386d1b934.lnk
Category:	dropped
Dump:	MFDBG_79bb7bdc39d844899ea7ee8386d1b934.lnk.8.dr
ID:	dr_725
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:54 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935278639971747
Encrypted:	false
Ssdeep:	24:8AhBfUxp8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Sl0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_79dc3a26853b4da49607c83dfd01db98.lnk
Category:	dropped
Dump:	MFDBG_79dc3a26853b4da49607c83dfd01db98.lnk.8.dr
ID:	dr_133
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:48 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.934097257273961
Encrypted:	false
Ssdeep:	24:8XhBf/8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8LM0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_79eb98f609d44807bbbd25063787a162.lnk
Category:	dropped
Dump:	MFDBG_79eb98f609d44807bbbd25063787a162.lnk.8.dr
ID:	dr_765
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:55 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936156580431966
Encrypted:	false
Ssdeep:	24:8shBfOe8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8em0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_7ab6e14a96c7410f9891458a32ca9f59.lnk
Category:	dropped
Dump:	MFDBG_7ab6e14a96c7410f9891458a32ca9f59.lnk.8.dr
ID:	dr_1041
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:48 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.940137765874709
Encrypted:	false
Ssdeep:	24:83hBfc8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8rh0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_7b89afc260f740ad8cc4ec0e91022528.lnk
Category:	dropped
Dump:	MFDBG_7b89afc260f740ad8cc4ec0e91022528.lnk.8.dr
ID:	dr_809
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:15 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.934245933507992
Encrypted:	false
Ssdeep:	24:852hBft8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8CC0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_7cc45119b70c4a7cb619b814a6465d43.lnk
Category:	dropped
Dump:	MFDBG_7cc45119b70c4a7cb619b814a6465d43.lnk.8.dr
ID:	dr_304
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:08 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938431926540673
Encrypted:	false
Ssdeep:	24:8gzhBfB8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:80e0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_7d0b8ddb586a48afaeabbb99c43e4f35.lnk
Category:	dropped
Dump:	MFDBG_7d0b8ddb586a48afaeabbb99c43e4f35.lnk.8.dr
ID:	dr_356
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:26 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.942856855149759
Encrypted:	false
Ssdeep:	24:8cYhBfW8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8PD0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_7d8774b2009d4d3495f8d60a2fac1139.lnk
Category:	dropped
Dump:	MFDBG_7d8774b2009d4d3495f8d60a2fac1139.lnk.8.dr
ID:	dr_1035
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:51 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.941074399126583
Encrypted:	false
Ssdeep:	24:8H2hBfB8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:88O0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_7d9247105120475b8c4d39cd32d3e231.lnk
Category:	dropped
Dump:	MFDBG_7d9247105120475b8c4d39cd32d3e231.lnk.8.dr
ID:	dr_711
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:49 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.93201016553841
Encrypted:	false
Ssdeep:	24:8xhBfDD8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8BrQ0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_7df42da47eb14e60951f277e9d03f29f.lnk
Category:	dropped
Dump:	MFDBG_7df42da47eb14e60951f277e9d03f29f.lnk.8.dr
ID:	dr_680
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:53 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938198743715571
Encrypted:	false
Ssdeep:	24:8N8hBfSr8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8NOKI0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_7dffe398227840e799a1a74147ddf4be.lnk
Category:	dropped
Dump:	MFDBG_7dffe398227840e799a1a74147ddf4be.lnk.8.dr
ID:	dr_763
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:55 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.942600913250679
Encrypted:	false
Ssdeep:	24:8chBfOe8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8um0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_7e3eb09b5156463d811cbbc9ad6a9d95.lnk
Category:	dropped
Dump:	MFDBG_7e3eb09b5156463d811cbbc9ad6a9d95.lnk.8.dr
ID:	dr_473
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:28 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938073889574535
Encrypted:	false
Ssdeep:	24:8KqhBfvl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8V3C0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_7e75ab6539c84bea91d92f869b1bbc1b.lnk
Category:	dropped
Dump:	MFDBG_7e75ab6539c84bea91d92f869b1bbc1b.lnk.8.dr
ID:	dr_627
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:45 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9376584987357575
Encrypted:	false
Ssdeep:	24:838hBfGI+8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:83OuIT0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_7e7a0cd2ff1440bca985a27bc361599d.lnk
Category:	dropped
Dump:	MFDBG_7e7a0cd2ff1440bca985a27bc361599d.lnk.8.dr
ID:	dr_432
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:27 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.937402556836681
Encrypted:	false
Ssdeep:	24:8ThBfi8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8nn0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_7ef176e6c7e541ed87941dfa4d51d947.lnk
Category:	dropped
Dump:	MFDBG_7ef176e6c7e541ed87941dfa4d51d947.lnk.8.dr
ID:	dr_944
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:01 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938499572253278
Encrypted:	false
Ssdeep:	24:8mPhBfeIl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8mTnC0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_7f062ebd9279495b8357f057e9930ed8.lnk
Category:	dropped
Dump:	MFDBG_7f062ebd9279495b8357f057e9930ed8.lnk.8.dr
ID:	dr_474
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:28 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.943178025173195
Encrypted:	false
Ssdeep:	24:8ihBfEH8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8I8c0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_7f4ce7e9aca04cc49fb0e158be4410fa.lnk
Category:	dropped
Dump:	MFDBG_7f4ce7e9aca04cc49fb0e158be4410fa.lnk.8.dr
ID:	dr_984
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:47 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.942512926052345
Encrypted:	false
Ssdeep:	24:8SwhBfO8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Sir0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_7f66f66205044f7eb98bf3a5d687f5a9.lnk
Category:	dropped
Dump:	MFDBG_7f66f66205044f7eb98bf3a5d687f5a9.lnk.8.dr
ID:	dr_352
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:26 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.940750811514901
Encrypted:	false
Ssdeep:	24:83hBfW8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8rD0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_7f6a20923efc415d86b2aabbf2ff04a9.lnk
Category:	dropped
Dump:	MFDBG_7f6a20923efc415d86b2aabbf2ff04a9.lnk.8.dr
ID:	dr_39
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:39 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938755514152354
Encrypted:	false
Ssdeep:	24:8thBfOW8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8N60R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_804eae0ddaf54d648072000f55c45f43.lnk
Category:	dropped
Dump:	MFDBG_804eae0ddaf54d648072000f55c45f43.lnk.8.dr
ID:	dr_1015
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:51 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939332626074869
Encrypted:	false
Ssdeep:	24:8x9hBf/D8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8x9XQ0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_806ac2d45d5d4d61a32871595a0c8bc0.lnk
Category:	dropped
Dump:	MFDBG_806ac2d45d5d4d61a32871595a0c8bc0.lnk.8.dr
ID:	dr_38
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:41 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.947887256863014
Encrypted:	false
Ssdeep:	24:8ohBfF8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8qa0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_806fa2d575f7494ca4962abd63f726d3.lnk
Category:	dropped
Dump:	MFDBG_806fa2d575f7494ca4962abd63f726d3.lnk.8.dr
ID:	dr_985
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:47 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.940838798713235
Encrypted:	false
Ssdeep:	24:8ChGhBfO8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8ChMr0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_81557168fff74d42a4ccc696bb554d7b.lnk
Category:	dropped
Dump:	MFDBG_81557168fff74d42a4ccc696bb554d7b.lnk.8.dr
ID:	dr_941
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:01 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.93343230359732
Encrypted:	false
Ssdeep:	24:8MePhBfeIl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8tTnC0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_81aef1ca25254f2c9f1a0efad6e86607.lnk
Category:	dropped
Dump:	MFDBG_81aef1ca25254f2c9f1a0efad6e86607.lnk.8.dr
ID:	dr_323
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:09 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.929677468654059
Encrypted:	false
Ssdeep:	24:88hBf98iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Oi0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_81c8faad4a474525a46f822310938ceb.lnk
Category:	dropped
Dump:	MFDBG_81c8faad4a474525a46f822310938ceb.lnk.8.dr
ID:	dr_646
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:49 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.934686045552675
Encrypted:	false
Ssdeep:	24:8GhBfq8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8M/0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_81cb9049ef75438eba0cdfdcdc5c6e14.lnk
Category:	dropped
Dump:	MFDBG_81cb9049ef75438eba0cdfdcdc5c6e14.lnk.8.dr
ID:	dr_370
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:26 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935771530057278
Encrypted:	false
Ssdeep:	24:8VhBfTl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8FW0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_81dece4f13e7425995089570c0c19147.lnk
Category:	dropped
Dump:	MFDBG_81dece4f13e7425995089570c0c19147.lnk.8.dr
ID:	dr_297
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:53 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.937891681560861
Encrypted:	false
Ssdeep:	24:8NhBfr48iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8tJ0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_81e8c22c05d3431dbd7baa0f3eadf2d7.lnk
Category:	dropped
Dump:	MFDBG_81e8c22c05d3431dbd7baa0f3eadf2d7.lnk.8.dr
ID:	dr_417
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:27 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.937766827419824
Encrypted:	false
Ssdeep:	24:8yQhBf1D8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8yCNQ0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_81f13d4ac35c48b4859705c86aef5d8a.lnk
Category:	dropped
Dump:	MFDBG_81f13d4ac35c48b4859705c86aef5d8a.lnk.8.dr
ID:	dr_599
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:53 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.93189153616029
Encrypted:	false
Ssdeep:	24:8ghBfc8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8yR0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_821eb2c80c0749e8b143fa20774f188c.lnk
Category:	dropped
Dump:	MFDBG_821eb2c80c0749e8b143fa20774f188c.lnk.8.dr
ID:	dr_243
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:46 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.937816599902352
Encrypted:	false
Ssdeep:	24:809hBf48iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Ml0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_822eb94f96a04da7bfde8090c1824c19.lnk
Category:	dropped
Dump:	MFDBG_822eb94f96a04da7bfde8090c1824c19.lnk.8.dr
ID:	dr_371
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:26 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936780558275539
Encrypted:	false
Ssdeep:	24:8LhBfTl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8vW0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_8267522f9bd942d4be804acfa38c0a33.lnk
Category:	dropped
Dump:	MFDBG_8267522f9bd942d4be804acfa38c0a33.lnk.8.dr
ID:	dr_915
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:00 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9404629972181
Encrypted:	false
Ssdeep:	24:8jhBfv8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Xs0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_82faeaa0f2884ac9ad3d124972ac7138.lnk
Category:	dropped
Dump:	MFDBG_82faeaa0f2884ac9ad3d124972ac7138.lnk.8.dr
ID:	dr_190
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:40 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.934033376922707
Encrypted:	false
Ssdeep:	24:8IhBfo8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8KV0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_8344fd49fcdf40aaa8f4dcd76bce9da9.lnk
Category:	dropped
Dump:	MFDBG_8344fd49fcdf40aaa8f4dcd76bce9da9.lnk.8.dr
ID:	dr_649
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:45 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.941415910635749
Encrypted:	false
Ssdeep:	24:88hBfw8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8O90R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_8352761d2d7f49a8ab8b5c14c261829c.lnk
Category:	dropped
Dump:	MFDBG_8352761d2d7f49a8ab8b5c14c261829c.lnk.8.dr
ID:	dr_316
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:09 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.931150285565794
Encrypted:	false
Ssdeep:	24:83GhBf98iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:83Mi0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_836d5ce5950f41b3944bc42c91b1b5f4.lnk
Category:	dropped
Dump:	MFDBG_836d5ce5950f41b3944bc42c91b1b5f4.lnk.8.dr
ID:	dr_1028
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:52 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.942637780193382
Encrypted:	false
Ssdeep:	24:8wg8hBfB8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8whO0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_8372a0710ab940ab8228fd1586efad41.lnk
Category:	dropped
Dump:	MFDBG_8372a0710ab940ab8228fd1586efad41.lnk.8.dr
ID:	dr_315
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:09 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.930669666602657
Encrypted:	false
Ssdeep:	24:8LhBf98iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8vi0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_83ac88d33bff447ea2ebed8298ec5bce.lnk
Category:	dropped
Dump:	MFDBG_83ac88d33bff447ea2ebed8298ec5bce.lnk.8.dr
ID:	dr_795
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:55 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.942023801328165
Encrypted:	false
Ssdeep:	24:8FhBf08iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8VZ0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_83c7375efdc74ff7aeed9e6142061403.lnk
Category:	dropped
Dump:	MFDBG_83c7375efdc74ff7aeed9e6142061403.lnk.8.dr
ID:	dr_269
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:52 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.925832682317852
Encrypted:	false
Ssdeep:	24:8E2hBf38iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8jU0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_83f492e0109545968015f9d3466a7e52.lnk
Category:	dropped
Dump:	MFDBG_83f492e0109545968015f9d3466a7e52.lnk.8.dr
ID:	dr_106
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:47 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938499572253278
Encrypted:	false
Ssdeep:	24:8KahBfO8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8d70R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_842011c2cfb3425f9b79700a42a29f45.lnk
Category:	dropped
Dump:	MFDBG_842011c2cfb3425f9b79700a42a29f45.lnk.8.dr
ID:	dr_450
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:27 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.934111510586892
Encrypted:	false
Ssdeep:	24:8GhBfi8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Mn0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_8444a3e7520a478f86b553fb4bb950f3.lnk
Category:	dropped
Dump:	MFDBG_8444a3e7520a478f86b553fb4bb950f3.lnk.8.dr
ID:	dr_576
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:48 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.944275040589791
Encrypted:	false
Ssdeep:	24:8lhBfp8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:81G0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_847e04532b5d4c1092439ea4d3a89e64.lnk
Category:	dropped
Dump:	MFDBG_847e04532b5d4c1092439ea4d3a89e64.lnk.8.dr
ID:	dr_525
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:43 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939025563920159
Encrypted:	false
Ssdeep:	24:8UhBfA8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8W90R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_84f1a0de31fe47f6b8e47262995631f2.lnk
Category:	dropped
Dump:	MFDBG_84f1a0de31fe47f6b8e47262995631f2.lnk.8.dr
ID:	dr_561
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:44 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936129567023414
Encrypted:	false
Ssdeep:	24:8CPhBfP48iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8CTH90R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_84fb336b69ed4a1fa67753e4278f1aa7.lnk
Category:	dropped
Dump:	MFDBG_84fb336b69ed4a1fa67753e4278f1aa7.lnk.8.dr
ID:	dr_555
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:47 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939508600471538
Encrypted:	false
Ssdeep:	24:81khBfh8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8c+0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_854aff189aca4bc38c40c8709abce53f.lnk
Category:	dropped
Dump:	MFDBG_854aff189aca4bc38c40c8709abce53f.lnk.8.dr
ID:	dr_694
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:54 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936794666144263
Encrypted:	false
Ssdeep:	24:859hBfSr8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8nKI0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_85e020505e2c4fb39a80e3c7814e6f15.lnk
Category:	dropped
Dump:	MFDBG_85e020505e2c4fb39a80e3c7814e6f15.lnk.8.dr
ID:	dr_846
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:17 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.942225111755545
Encrypted:	false
Ssdeep:	24:8zmhBfX8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8zsU0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_86185feb1b144be7923538ee52eca9a6.lnk
Category:	dropped
Dump:	MFDBG_86185feb1b144be7923538ee52eca9a6.lnk.8.dr
ID:	dr_157
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:40 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939295759132167
Encrypted:	false
Ssdeep:	24:8shBfU8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8ep0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_871fb545d3cb430aa2e8aae46cc3e5c0.lnk
Category:	dropped
Dump:	MFDBG_871fb545d3cb430aa2e8aae46cc3e5c0.lnk.8.dr
ID:	dr_144
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:44 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.940085712394053
Encrypted:	false
Ssdeep:	24:8ahBfWw48iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Q+e0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_87779c3eda7e4f0b90f03be30674b854.lnk
Category:	dropped
Dump:	MFDBG_87779c3eda7e4f0b90f03be30674b854.lnk.7.dr
ID:	dr_27
Target ID:	7
Process:	C:\ProgramData\KKEBKJJDGH.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:49:58 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.937685512144309
Encrypted:	false
Ssdeep:	24:8KphBfr8iVRdgKUJEDBoNRABVDi0RTp1A6LpLgUqygm:84Q0RaCDBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Creates a start menu entry (Start Menu\Programs\Startup)	Boot Survival	Registry Run Keys / Startup Folder
Sigma detected: Startup Folder File Write	System Summary
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_8777edbc9c8940448975fffaa033bdf4.lnk
Category:	dropped
Dump:	MFDBG_8777edbc9c8940448975fffaa033bdf4.lnk.8.dr
ID:	dr_479
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:28 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.928907552065211
Encrypted:	false
Ssdeep:	24:8YjhBfGY8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Mud0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_88058317d60c47ea930deb5a1460730f.lnk
Category:	dropped
Dump:	MFDBG_88058317d60c47ea930deb5a1460730f.lnk.8.dr
ID:	dr_182
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:45 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.941182727810648
Encrypted:	false
Ssdeep:	24:8RhBf98iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8hy0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_8827589807534f95bd957caea260332e.lnk
Category:	dropped
Dump:	MFDBG_8827589807534f95bd957caea260332e.lnk.8.dr
ID:	dr_988
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:47 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.940808019943331
Encrypted:	false
Ssdeep:	24:8GhBft8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8MC0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_8907fe635da646e4872837f438833bee.lnk
Category:	dropped
Dump:	MFDBG_8907fe635da646e4872837f438833bee.lnk.8.dr
ID:	dr_336
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:09 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.940969886471277
Encrypted:	false
Ssdeep:	24:8A8hBfg8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Bd0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_892e61d4a4e246f9b40d4070b7579b7b.lnk
Category:	dropped
Dump:	MFDBG_892e61d4a4e246f9b40d4070b7579b7b.lnk.8.dr
ID:	dr_320
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:09 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936004712882379
Encrypted:	false
Ssdeep:	24:87zhBf98iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:87Hi0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_8979f400fcff49a192e50b5bbbd2754c.lnk
Category:	dropped
Dump:	MFDBG_8979f400fcff49a192e50b5bbbd2754c.lnk.8.dr
ID:	dr_413
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:27 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.93722658244001
Encrypted:	false
Ssdeep:	24:8NhBf1D8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8tNQ0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_8998bb20d9984da7ac215f04bfa54614.lnk
Category:	dropped
Dump:	MFDBG_8998bb20d9984da7ac215f04bfa54614.lnk.8.dr
ID:	dr_251
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:46 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9405176286898005
Encrypted:	false
Ssdeep:	24:8gGhBf48iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8gMl0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_89da647c4baa4e14a40ca1886205b04f.lnk
Category:	dropped
Dump:	MFDBG_89da647c4baa4e14a40ca1886205b04f.lnk.8.dr
ID:	dr_590
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:44 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9406259573738645
Encrypted:	false
Ssdeep:	24:8w9hBff8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8w9M0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_89dc7aa08bde499c8dc852f29eac859b.lnk
Category:	dropped
Dump:	MFDBG_89dc7aa08bde499c8dc852f29eac859b.lnk.8.dr
ID:	dr_260
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:51 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.933813099637432
Encrypted:	false
Ssdeep:	24:8lhBfKP8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:81C00R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_89efa94242a7495e99b3241303cb6013.lnk
Category:	dropped
Dump:	MFDBG_89efa94242a7495e99b3241303cb6013.lnk.8.dr
ID:	dr_629
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:49 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9371810642920595
Encrypted:	false
Ssdeep:	24:88hBfq8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8O/0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_8a10beae66fe4d70b4dd18b750993091.lnk
Category:	dropped
Dump:	MFDBG_8a10beae66fe4d70b4dd18b750993091.lnk.8.dr
ID:	dr_478
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:28 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.930092554680144
Encrypted:	false
Ssdeep:	24:8rPhBfGY8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:83ud0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_8b1d2a57c62447ac9005fcc102d32505.lnk
Category:	dropped
Dump:	MFDBG_8b1d2a57c62447ac9005fcc102d32505.lnk.8.dr
ID:	dr_414
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:27 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9346258119732935
Encrypted:	false
Ssdeep:	24:8uhBf1D8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8kNQ0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_8b63fd18c61e45a2a69da02a77b6cae2.lnk
Category:	dropped
Dump:	MFDBG_8b63fd18c61e45a2a69da02a77b6cae2.lnk.8.dr
ID:	dr_954
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:01 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.934799368781718
Encrypted:	false
Ssdeep:	24:8BhBfeIl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8xnC0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_8bd360f017e345fa86d057536ad4f522.lnk
Category:	dropped
Dump:	MFDBG_8bd360f017e345fa86d057536ad4f522.lnk.8.dr
ID:	dr_422
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:12 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936007130470627
Encrypted:	false
Ssdeep:	24:8WphBfD8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8WpY0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_8c19db91882c4e1994d7acc592dac701.lnk
Category:	dropped
Dump:	MFDBG_8c19db91882c4e1994d7acc592dac701.lnk.8.dr
ID:	dr_208
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:49 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938755514152355
Encrypted:	false
Ssdeep:	24:8rhBf48iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8PF0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_8cc393db4089458eb647c40cc5c4ef5d.lnk
Category:	dropped
Dump:	MFDBG_8cc393db4089458eb647c40cc5c4ef5d.lnk.8.dr
ID:	dr_699
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:54 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.937766827419823
Encrypted:	false
Ssdeep:	24:8ApPhBfSr8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8ARKI0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_8cd1ac26284943e6a48e3a21405f728e.lnk
Category:	dropped
Dump:	MFDBG_8cd1ac26284943e6a48e3a21405f728e.lnk.8.dr
ID:	dr_29
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:39 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.934148377529593
Encrypted:	false
Ssdeep:	24:8ghBfQ8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8yt0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_8ce88b29ae5f4a6fa4611b254d350e86.lnk
Category:	dropped
Dump:	MFDBG_8ce88b29ae5f4a6fa4611b254d350e86.lnk.8.dr
ID:	dr_583
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:44 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.931905644029014
Encrypted:	false
Ssdeep:	24:8ZhBfwp8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:85oO0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_8d2ffb11efe6422fb97b0f4ff81f11ce.lnk
Category:	dropped
Dump:	MFDBG_8d2ffb11efe6422fb97b0f4ff81f11ce.lnk.8.dr
ID:	dr_709
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:49 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.932745378627518
Encrypted:	false
Ssdeep:	24:8BhBfDD8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8xrQ0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_8d59e26915ea49b7b377885e9f5f55dd.lnk
Category:	dropped
Dump:	MFDBG_8d59e26915ea49b7b377885e9f5f55dd.lnk.8.dr
ID:	dr_462
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:27 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.943609941468943
Encrypted:	false
Ssdeep:	24:8IhBfEH8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8K8c0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_8d64ea97b2364ea791702b5bde60b953.lnk
Category:	dropped
Dump:	MFDBG_8d64ea97b2364ea791702b5bde60b953.lnk.8.dr
ID:	dr_407
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:12 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.926275516763472
Encrypted:	false
Ssdeep:	24:8Q8hBfi+8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8x20R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_8d8d63d8c1374dceae7e9d9ecdc766ca.lnk
Category:	dropped
Dump:	MFDBG_8d8d63d8c1374dceae7e9d9ecdc766ca.lnk.8.dr
ID:	dr_138
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:44 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.941540764776787
Encrypted:	false
Ssdeep:	24:8ZhBfWw48iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:85+e0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_8e8caf3532d5484196452cbcbbe46e56.lnk
Category:	dropped
Dump:	MFDBG_8e8caf3532d5484196452cbcbbe46e56.lnk.8.dr
ID:	dr_151
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:47 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.940173699592387
Encrypted:	false
Ssdeep:	24:8mhBfO8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8s70R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_8e9fcf0437cc4917963a2f129bac85f6.lnk
Category:	dropped
Dump:	MFDBG_8e9fcf0437cc4917963a2f129bac85f6.lnk.8.dr
ID:	dr_41
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:39 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939438486503279
Encrypted:	false
Ssdeep:	24:8fDhBfOW8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8v60R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_8ebaee62035e4b2dbbb10642d6143de6.lnk
Category:	dropped
Dump:	MFDBG_8ebaee62035e4b2dbbb10642d6143de6.lnk.8.dr
ID:	dr_530
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:47 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.932289135615338
Encrypted:	false
Ssdeep:	24:8y2hBfvl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8yc3C0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_8f0f83c185c549f4bfb0f83e9633f085.lnk
Category:	dropped
Dump:	MFDBG_8f0f83c185c549f4bfb0f83e9633f085.lnk.8.dr
ID:	dr_372
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:26 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.937445657396387
Encrypted:	false
Ssdeep:	24:8h2hBfTl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8hcW0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_8fc1b76c3cc94728801cf297766caa9f.lnk
Category:	dropped
Dump:	MFDBG_8fc1b76c3cc94728801cf297766caa9f.lnk.8.dr
ID:	dr_434
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:27 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.934222256859203
Encrypted:	false
Ssdeep:	24:8BhBfi8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8xn0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_8ff31a4bfebe4962a16f2ca9eec961ed.lnk
Category:	dropped
Dump:	MFDBG_8ff31a4bfebe4962a16f2ca9eec961ed.lnk.8.dr
ID:	dr_408
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:26 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9418478269314985
Encrypted:	false
Ssdeep:	24:8MvhBfGy8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8auf0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_90ee81aa2d014184b11d899e3374690b.lnk
Category:	dropped
Dump:	MFDBG_90ee81aa2d014184b11d899e3374690b.lnk.8.dr
ID:	dr_860
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:17 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.944275040589791
Encrypted:	false
Ssdeep:	24:8bmhBfV8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8bs60R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_90f167aee40e475f9dd4262f691badac.lnk
Category:	dropped
Dump:	MFDBG_90f167aee40e475f9dd4262f691badac.lnk.8.dr
ID:	dr_66
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:39 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.942759014417272
Encrypted:	false
Ssdeep:	24:8vhBfS8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8z30R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_910970442cef49b9be3e7615881d1835.lnk
Category:	dropped
Dump:	MFDBG_910970442cef49b9be3e7615881d1835.lnk.8.dr
ID:	dr_973
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:46 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.930275965022714
Encrypted:	false
Ssdeep:	24:8Y2hBfG48iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8ta0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_912b32319f464929b88178ad27931542.lnk
Category:	dropped
Dump:	MFDBG_912b32319f464929b88178ad27931542.lnk.8.dr
ID:	dr_890
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:49:59 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.93442356728658
Encrypted:	false
Ssdeep:	24:8+hBfv8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Us0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_917d94ec2dfb4d679777043e4d5dd621.lnk
Category:	dropped
Dump:	MFDBG_917d94ec2dfb4d679777043e4d5dd621.lnk.8.dr
ID:	dr_1051
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:56 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9390829177927955
Encrypted:	false
Ssdeep:	24:8fGhBfu8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8fMr0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_92067a47b8bf479b8f633c5fa442ace0.lnk
Category:	dropped
Dump:	MFDBG_92067a47b8bf479b8f633c5fa442ace0.lnk.8.dr
ID:	dr_689
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:45 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.934149456198824
Encrypted:	false
Ssdeep:	24:8ihBf38iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8I00R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_92089fb4ebaf4efbbba5202ef25e74c3.lnk
Category:	dropped
Dump:	MFDBG_92089fb4ebaf4efbbba5202ef25e74c3.lnk.8.dr
ID:	dr_592
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:45 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.944940139710639
Encrypted:	false
Ssdeep:	24:8KyhBfw8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8d90R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_922922aae6cc43c1b0e3fa1eeb9d3877.lnk
Category:	dropped
Dump:	MFDBG_922922aae6cc43c1b0e3fa1eeb9d3877.lnk.8.dr
ID:	dr_562
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:44 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.937854814618158
Encrypted:	false
Ssdeep:	24:8rhBfP48iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8PH90R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_9272c07835b444c4bbf8b49f790ec81a.lnk
Category:	dropped
Dump:	MFDBG_9272c07835b444c4bbf8b49f790ec81a.lnk.8.dr
ID:	dr_296
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:53 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.93580839699998
Encrypted:	false
Ssdeep:	24:8vhBfc8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8zR0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_92923e86b5b14885a7ccaa1b4fc336d6.lnk
Category:	dropped
Dump:	MFDBG_92923e86b5b14885a7ccaa1b4fc336d6.lnk.8.dr
ID:	dr_1016
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:47 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939793836777296
Encrypted:	false
Ssdeep:	24:8uphBft8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8upC0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_929d54178d5744bea81e55806feeed3c.lnk
Category:	dropped
Dump:	MFDBG_929d54178d5744bea81e55806feeed3c.lnk.8.dr
ID:	dr_1053
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:49 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936328300494061
Encrypted:	false
Ssdeep:	24:8b2hBfG448iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8bcu490R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_92e32799309041afbcd90b4d942645b4.lnk
Category:	dropped
Dump:	MFDBG_92e32799309041afbcd90b4d942645b4.lnk.8.dr
ID:	dr_1045
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:48 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9426529667313375
Encrypted:	false
Ssdeep:	24:87hBfc8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8/h0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_92f7e448be834d759e73cb46c668011a.lnk
Category:	dropped
Dump:	MFDBG_92f7e448be834d759e73cb46c668011a.lnk.8.dr
ID:	dr_34
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:41 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.949561384202125
Encrypted:	false
Ssdeep:	24:8BphBfF8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Bpa0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_931da369be7740e49ad3d1d7464cbea6.lnk
Category:	dropped
Dump:	MFDBG_931da369be7740e49ad3d1d7464cbea6.lnk.8.dr
ID:	dr_537
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:43 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.942856855149759
Encrypted:	false
Ssdeep:	24:8U2hBfsA8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8zE10R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_93459331dce848d0922ffb192ff40a21.lnk
Category:	dropped
Dump:	MFDBG_93459331dce848d0922ffb192ff40a21.lnk.8.dr
ID:	dr_570
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:45 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.937979668759193
Encrypted:	false
Ssdeep:	24:82hBff8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8cc0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_9352013fef514dbd99394b2a2fc1d8e8.lnk
Category:	dropped
Dump:	MFDBG_9352013fef514dbd99394b2a2fc1d8e8.lnk.8.dr
ID:	dr_328
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:09 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.941313815568689
Encrypted:	false
Ssdeep:	24:8rhBfg8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Pd0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_936109fd0d50419ab5426be7c0d4f5d0.lnk
Category:	dropped
Dump:	MFDBG_936109fd0d50419ab5426be7c0d4f5d0.lnk.8.dr
ID:	dr_56
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:42 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.940173699592387
Encrypted:	false
Ssdeep:	24:8WLhBfN8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8uy0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_93a18fbdc92d4800b5610401422ac6a2.lnk
Category:	dropped
Dump:	MFDBG_93a18fbdc92d4800b5610401422ac6a2.lnk.8.dr
ID:	dr_164
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:41 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939583682130046
Encrypted:	false
Ssdeep:	24:82hBfjqH8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8cLqc0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_93f5487182ce40a88a71a4d2cc51634d.lnk
Category:	dropped
Dump:	MFDBG_93f5487182ce40a88a71a4d2cc51634d.lnk.8.dr
ID:	dr_424
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:13 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.921167620517203
Encrypted:	false
Ssdeep:	24:8BhBfN8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8xC0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_94a9df81aba8412ba46b800b801a0ae8.lnk
Category:	dropped
Dump:	MFDBG_94a9df81aba8412ba46b800b801a0ae8.lnk.8.dr
ID:	dr_695
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:50 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938755514152354
Encrypted:	false
Ssdeep:	24:81hBfO8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8lr0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_95484e5ec5554b08bd280657452dcb2d.lnk
Category:	dropped
Dump:	MFDBG_95484e5ec5554b08bd280657452dcb2d.lnk.8.dr
ID:	dr_757
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:54 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938137769925787
Encrypted:	false
Ssdeep:	24:83hBfUxp8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8rl0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_95663137be014c25b1ef76f962743369.lnk
Category:	dropped
Dump:	MFDBG_95663137be014c25b1ef76f962743369.lnk.8.dr
ID:	dr_580
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:48 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.945372056006388
Encrypted:	false
Ssdeep:	24:89hBfU+8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:89cT0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_9571c40712e14645b34cf04396aa3470.lnk
Category:	dropped
Dump:	MFDBG_9571c40712e14645b34cf04396aa3470.lnk.8.dr
ID:	dr_574
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:48 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.937156468471753
Encrypted:	false
Ssdeep:	24:8kzhBfp8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8kHG0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_95763343891f47439a4a7b4af8b23ed3.lnk
Category:	dropped
Dump:	MFDBG_95763343891f47439a4a7b4af8b23ed3.lnk.8.dr
ID:	dr_532
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:46 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936612603574795
Encrypted:	false
Ssdeep:	24:8ihBfE8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Ip0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_95983e912aa547198f4ef99870e9cc67.lnk
Category:	dropped
Dump:	MFDBG_95983e912aa547198f4ef99870e9cc67.lnk.8.dr
ID:	dr_794
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:56 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.94260091325068
Encrypted:	false
Ssdeep:	24:8VGhBf08iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8iZ0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_95a5ce44e77f40e38f6bc6631b040559.lnk
Category:	dropped
Dump:	MFDBG_95a5ce44e77f40e38f6bc6631b040559.lnk.8.dr
ID:	dr_859
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:17 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.944940139710639
Encrypted:	false
Ssdeep:	24:8gmhBfV8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8gs60R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_95c4a620e7c54d51bcd5d5734b0b139b.lnk
Category:	dropped
Dump:	MFDBG_95c4a620e7c54d51bcd5d5734b0b139b.lnk.8.dr
ID:	dr_931
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:00 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936273669022362
Encrypted:	false
Ssdeep:	24:84hBfv8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8as0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_9625d98d0d614ec59810ba34cf1f8cff.lnk
Category:	dropped
Dump:	MFDBG_9625d98d0d614ec59810ba34cf1f8cff.lnk.8.dr
ID:	dr_611
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:53 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9418478269314985
Encrypted:	false
Ssdeep:	24:8RPhBfc8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8pR0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_96601eaaba1b459989c2abf8d14136cc.lnk
Category:	dropped
Dump:	MFDBG_96601eaaba1b459989c2abf8d14136cc.lnk.8.dr
ID:	dr_72
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:39 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935193987936468
Encrypted:	false
Ssdeep:	24:8jhBfR8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8X+0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_9780666724ff4169b97bfb2569b93c2e.lnk
Category:	dropped
Dump:	MFDBG_9780666724ff4169b97bfb2569b93c2e.lnk.8.dr
ID:	dr_395
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:26 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938323597856608
Encrypted:	false
Ssdeep:	24:8KhBfGy8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8guf0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_9781c34da5b4402889e2ee6d3c82b62e.lnk
Category:	dropped
Dump:	MFDBG_9781c34da5b4402889e2ee6d3c82b62e.lnk.8.dr
ID:	dr_455
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:27 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.934418572741603
Encrypted:	false
Ssdeep:	24:8xphBfi8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8xpn0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_978bbb88dbb143738e079d7a7a2368c0.lnk
Category:	dropped
Dump:	MFDBG_978bbb88dbb143738e079d7a7a2368c0.lnk.8.dr
ID:	dr_614
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:45 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.940838798713235
Encrypted:	false
Ssdeep:	24:8uhBff8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8kc0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_97925695eaeb4fa99ef3d07b3364a3aa.lnk
Category:	dropped
Dump:	MFDBG_97925695eaeb4fa99ef3d07b3364a3aa.lnk.8.dr
ID:	dr_840
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:16 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.941182727810648
Encrypted:	false
Ssdeep:	24:8FmhBfF8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Fs60R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_97938e630ee342b9b1a7c5aef13f50d9.lnk
Category:	dropped
Dump:	MFDBG_97938e630ee342b9b1a7c5aef13f50d9.lnk.8.dr
ID:	dr_880
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:18 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935738283031721
Encrypted:	false
Ssdeep:	24:8a+mhBfI+8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:85sgT0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_97a3a788c0654bc29dc0190cd145e9e0.lnk
Category:	dropped
Dump:	MFDBG_97a3a788c0654bc29dc0190cd145e9e0.lnk.8.dr
ID:	dr_485
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:28 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.93838080628504
Encrypted:	false
Ssdeep:	24:8E2hBfvl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8j3C0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_97e9c237220b40ad8e99692b732c4b7d.lnk
Category:	dropped
Dump:	MFDBG_97e9c237220b40ad8e99692b732c4b7d.lnk.8.dr
ID:	dr_696
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:54 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939207771933831
Encrypted:	false
Ssdeep:	24:8DhBfSr8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:83KI0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_980673ade9ce483cad468b08f5dae0fc.lnk
Category:	dropped
Dump:	MFDBG_980673ade9ce483cad468b08f5dae0fc.lnk.8.dr
ID:	dr_644
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:49 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935023900401569
Encrypted:	false
Ssdeep:	24:83hBfq8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8r/0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_98096ab2cce34311adf1f7fe4617ab69.lnk
Category:	dropped
Dump:	MFDBG_98096ab2cce34311adf1f7fe4617ab69.lnk.8.dr
ID:	dr_919
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:00 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935176653605764
Encrypted:	false
Ssdeep:	24:8cPhBfv8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8cTs0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_989e33c099f04c4f9a504b16fb321735.lnk
Category:	dropped
Dump:	MFDBG_989e33c099f04c4f9a504b16fb321735.lnk.8.dr
ID:	dr_747
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:54 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936733692354481
Encrypted:	false
Ssdeep:	24:8+qphBfUxp8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8zl0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_9981a7fb365c4aa8914c3e73a34ed02a.lnk
Category:	dropped
Dump:	MFDBG_9981a7fb365c4aa8914c3e73a34ed02a.lnk.8.dr
ID:	dr_742
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:50 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.944633077555928
Encrypted:	false
Ssdeep:	24:8bhBf3+8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8fPT0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_99db79fb29df4322b1bfd4f44b0fe2ba.lnk
Category:	dropped
Dump:	MFDBG_99db79fb29df4322b1bfd4f44b0fe2ba.lnk.8.dr
ID:	dr_292
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:53 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.940085712394054
Encrypted:	false
Ssdeep:	24:8F1hBfc8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8zR0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_99f7182c776948d984ab29938246ad87.lnk
Category:	dropped
Dump:	MFDBG_99f7182c776948d984ab29938246ad87.lnk.8.dr
ID:	dr_550
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:44 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.933127730404724
Encrypted:	false
Ssdeep:	24:81XhBfI8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:81LV0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_9a136defe1434961a1a61054cbd05e62.lnk
Category:	dropped
Dump:	MFDBG_9a136defe1434961a1a61054cbd05e62.lnk.8.dr
ID:	dr_406
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:27 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.937621631793056
Encrypted:	false
Ssdeep:	24:8qhBf1D8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8ANQ0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_9a15294d18aa45578e63e6b6310b9bf5.lnk
Category:	dropped
Dump:	MFDBG_9a15294d18aa45578e63e6b6310b9bf5.lnk.8.dr
ID:	dr_440
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:13 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9397978980972495
Encrypted:	false
Ssdeep:	24:89hBfGK8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:89un0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_9a3b2ddc65da4483af908f54339811fe.lnk
Category:	dropped
Dump:	MFDBG_9a3b2ddc65da4483af908f54339811fe.lnk.8.dr
ID:	dr_123
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:39 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936436198979831
Encrypted:	false
Ssdeep:	24:8wGhBfR8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8wM+0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_9a512bef118d466c86971eae5e0748fd.lnk
Category:	dropped
Dump:	MFDBG_9a512bef118d466c86971eae5e0748fd.lnk.8.dr
ID:	dr_835
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:16 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939508600471539
Encrypted:	false
Ssdeep:	24:8dhBfF8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8d60R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_9a637a42e43b4ae2b40d8296ccdf4f70.lnk
Category:	dropped
Dump:	MFDBG_9a637a42e43b4ae2b40d8296ccdf4f70.lnk.8.dr
ID:	dr_1042
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:52 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.932851426313453
Encrypted:	false
Ssdeep:	24:8qhBfV+8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8A50R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_9a6f6d299d334e33b96146fb96e82fa0.lnk
Category:	dropped
Dump:	MFDBG_9a6f6d299d334e33b96146fb96e82fa0.lnk.8.dr
ID:	dr_185
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:48 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.93437080329924
Encrypted:	false
Ssdeep:	24:8b2hBf/8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8bcM0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_9abfc9b689734b86937c4f842ff8ee6f.lnk
Category:	dropped
Dump:	MFDBG_9abfc9b689734b86937c4f842ff8ee6f.lnk.8.dr
ID:	dr_793
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:56 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.942293851095969
Encrypted:	false
Ssdeep:	24:8YphBf08iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8YpZ0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_9b4ad631314a41dcae46e30eaf1c544a.lnk
Category:	dropped
Dump:	MFDBG_9b4ad631314a41dcae46e30eaf1c544a.lnk.8.dr
ID:	dr_634
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:49 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.934270814082385
Encrypted:	false
Ssdeep:	24:8UXGhBfq8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:88M/0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_9bb82072f6e64ac4bfd5e88e9e99a8f9.lnk
Category:	dropped
Dump:	MFDBG_9bb82072f6e64ac4bfd5e88e9e99a8f9.lnk.8.dr
ID:	dr_1038
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:48 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.941847826931496
Encrypted:	false
Ssdeep:	24:8rhBf7T8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Pzg0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_9c25a43f6b9d44b1b091cd6a941fc93a.lnk
Category:	dropped
Dump:	MFDBG_9c25a43f6b9d44b1b091cd6a941fc93a.lnk.8.dr
ID:	dr_100
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:44 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935529394311225
Encrypted:	false
Ssdeep:	24:8CjhBf8p8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8CXh0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_9c33e7f6ca384817833fb2750876a3d9.lnk
Category:	dropped
Dump:	MFDBG_9c33e7f6ca384817833fb2750876a3d9.lnk.8.dr
ID:	dr_677
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:49 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935959194734427
Encrypted:	false
Ssdeep:	24:8whBfq8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8i/0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_9c571ce83fd641f7979d28f075139deb.lnk
Category:	dropped
Dump:	MFDBG_9c571ce83fd641f7979d28f075139deb.lnk.8.dr
ID:	dr_289
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:53 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9356045085815605
Encrypted:	false
Ssdeep:	24:8WphBfc8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8CR0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_9c6fa30d6f2e4293b1d641ce28009152.lnk
Category:	dropped
Dump:	MFDBG_9c6fa30d6f2e4293b1d641ce28009152.lnk.8.dr
ID:	dr_274
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:46 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9371897154973095
Encrypted:	false
Ssdeep:	24:8vhBfE8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8zp0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_9d26df292b2245e284cf42a9881fe8a4.lnk
Category:	dropped
Dump:	MFDBG_9d26df292b2245e284cf42a9881fe8a4.lnk.8.dr
ID:	dr_239
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:45 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936328300494061
Encrypted:	false
Ssdeep:	24:8bhBfQl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8f30R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_9d41223192a540b4b9e7401fd7dbe54a.lnk
Category:	dropped
Dump:	MFDBG_9d41223192a540b4b9e7401fd7dbe54a.lnk.8.dr
ID:	dr_683
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:49 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938210274627564
Encrypted:	false
Ssdeep:	24:8yhBfq8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:84/0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_9d5201f62c50497f916ab7157b02e060.lnk
Category:	dropped
Dump:	MFDBG_9d5201f62c50497f916ab7157b02e060.lnk.8.dr
ID:	dr_230
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:50 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939420613273204
Encrypted:	false
Ssdeep:	24:8AShBf+8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8jb0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_9d9486ade251498f98c4249964219fca.lnk
Category:	dropped
Dump:	MFDBG_9d9486ade251498f98c4249964219fca.lnk.8.dr
ID:	dr_920
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:00 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.930011544217322
Encrypted:	false
Ssdeep:	24:8C6hBfv8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Cws0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_9da94d02bbe74e74a8ef9f278a7e5322.lnk
Category:	dropped
Dump:	MFDBG_9da94d02bbe74e74a8ef9f278a7e5322.lnk.8.dr
ID:	dr_98
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:40 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.937877573692135
Encrypted:	false
Ssdeep:	24:8chBfU8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8up0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_9db4660aace442dd8b7810c0148dcdf0.lnk
Category:	dropped
Dump:	MFDBG_9db4660aace442dd8b7810c0148dcdf0.lnk.8.dr
ID:	dr_195
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:45 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.932903748897987
Encrypted:	false
Ssdeep:	24:8thBfQl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8N30R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_9dc272c65b504e3dabea49c32e467ec7.lnk
Category:	dropped
Dump:	MFDBG_9dc272c65b504e3dabea49c32e467ec7.lnk.8.dr
ID:	dr_645
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:53 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.931508322531931
Encrypted:	false
Ssdeep:	24:8tphBfc8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8bR0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_9ee16f3bb8754afbb241b8e7738a5f19.lnk
Category:	dropped
Dump:	MFDBG_9ee16f3bb8754afbb241b8e7738a5f19.lnk.8.dr
ID:	dr_774
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:50 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9365268885205
Encrypted:	false
Ssdeep:	24:8GhBf3+8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8MPT0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_9f22dc6317bb4809aa55af150f65c456.lnk
Category:	dropped
Dump:	MFDBG_9f22dc6317bb4809aa55af150f65c456.lnk.8.dr
ID:	dr_749
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:54 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938137769925788
Encrypted:	false
Ssdeep:	24:84hBfUxp8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8al0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_9f451b5fb8504d0d87344bc434c24738.lnk
Category:	dropped
Dump:	MFDBG_9f451b5fb8504d0d87344bc434c24738.lnk.8.dr
ID:	dr_150
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:44 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938942877113804
Encrypted:	false
Ssdeep:	24:8AWhBf8p8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8A8h0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_9fbded3883154d8c9365fcb9951f087a.lnk
Category:	dropped
Dump:	MFDBG_9fbded3883154d8c9365fcb9951f087a.lnk.8.dr
ID:	dr_706
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:54 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.937533644594722
Encrypted:	false
Ssdeep:	24:8thBfSr8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8NKI0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_9fc498ae8a0c4528b5aa9a6037cecfe5.lnk
Category:	dropped
Dump:	MFDBG_9fc498ae8a0c4528b5aa9a6037cecfe5.lnk.8.dr
ID:	dr_879
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:17 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.941094740612313
Encrypted:	false
Ssdeep:	24:8tXmhBfI+8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:85sgT0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_9fc4a9f3075147228229af24e5ed2cfb.lnk
Category:	dropped
Dump:	MFDBG_9fc4a9f3075147228229af24e5ed2cfb.lnk.8.dr
ID:	dr_778
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:55 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938630229813024
Encrypted:	false
Ssdeep:	24:8uhBfB8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8k+0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a0752aff04a142b9b3461178cc43c1e1.lnk
Category:	dropped
Dump:	MFDBG_a0752aff04a142b9b3461178cc43c1e1.lnk.8.dr
ID:	dr_291
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:53 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939420613273206
Encrypted:	false
Ssdeep:	24:8mPhBfc8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8mTR0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a09e8b29d0b94ca6adffee53b1a4df39.lnk
Category:	dropped
Dump:	MFDBG_a09e8b29d0b94ca6adffee53b1a4df39.lnk.8.dr
ID:	dr_47
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:39 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936254421164451
Encrypted:	false
Ssdeep:	24:8DGhBfQ8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8DMt0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a1029863047944d1b20165e73849f140.lnk
Category:	dropped
Dump:	MFDBG_a1029863047944d1b20165e73849f140.lnk.8.dr
ID:	dr_206
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:49 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938755514152355
Encrypted:	false
Ssdeep:	24:8ohBf48iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8qF0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a12c220d98064efea769272a4c478bf1.lnk
Category:	dropped
Dump:	MFDBG_a12c220d98064efea769272a4c478bf1.lnk.8.dr
ID:	dr_199
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:45 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936328300494061
Encrypted:	false
Ssdeep:	24:8DhBfQl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8330R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a1935dcbc3e448a1b11e3a8edf2e1b29.lnk
Category:	dropped
Dump:	MFDBG_a1935dcbc3e448a1b11e3a8edf2e1b29.lnk.8.dr
ID:	dr_746
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:50 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.942205863897635
Encrypted:	false
Ssdeep:	24:8LhBf3+8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8vPT0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a1b9a061317f42338cb95985a24a3681.lnk
Category:	dropped
Dump:	MFDBG_a1b9a061317f42338cb95985a24a3681.lnk.8.dr
ID:	dr_936
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:01 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935841752726613
Encrypted:	false
Ssdeep:	24:8VhBfv8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Fs0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a23d152fd6a84c319d9f126381af6aef.lnk
Category:	dropped
Dump:	MFDBG_a23d152fd6a84c319d9f126381af6aef.lnk.8.dr
ID:	dr_739
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:55 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.940173699592386
Encrypted:	false
Ssdeep:	24:8hhBfOe8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Rm0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a247d05953994bc4aca6775896188771.lnk
Category:	dropped
Dump:	MFDBG_a247d05953994bc4aca6775896188771.lnk.8.dr
ID:	dr_482
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:28 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.926346833060632
Encrypted:	false
Ssdeep:	24:8MGhBfGY8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8MMud0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a2886683de244325be147c05fd99a7a2.lnk
Category:	dropped
Dump:	MFDBG_a2886683de244325be147c05fd99a7a2.lnk.8.dr
ID:	dr_925
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:00 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9352646408041005
Encrypted:	false
Ssdeep:	24:8ehBfv8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:80s0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a31dbc9ee44d4bf99dc011da76dfd938.lnk
Category:	dropped
Dump:	MFDBG_a31dbc9ee44d4bf99dc011da76dfd938.lnk.8.dr
ID:	dr_90
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:39 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.942637780193382
Encrypted:	false
Ssdeep:	24:88hBfV8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8OK0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a32e812738254e43be67f547c7b740fa.lnk
Category:	dropped
Dump:	MFDBG_a32e812738254e43be67f547c7b740fa.lnk.8.dr
ID:	dr_733
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:54 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938137769925787
Encrypted:	false
Ssdeep:	24:8AhBfUxp8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Sl0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a344987f50164839be3abb7ccd59a908.lnk
Category:	dropped
Dump:	MFDBG_a344987f50164839be3abb7ccd59a908.lnk.8.dr
ID:	dr_489
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:28 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.933000387301571
Encrypted:	false
Ssdeep:	24:8wS2hBfZ8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8LcG0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a3de48b2c91f45cc867d4b2b2c9c15a4.lnk
Category:	dropped
Dump:	MFDBG_a3de48b2c91f45cc867d4b2b2c9c15a4.lnk.8.dr
ID:	dr_385
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:26 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.942388071911309
Encrypted:	false
Ssdeep:	24:8PhBfTl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8TW0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a3fa098697634d9ab04533a21a604762.lnk
Category:	dropped
Dump:	MFDBG_a3fa098697634d9ab04533a21a604762.lnk.8.dr
ID:	dr_69
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:39 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936895558882424
Encrypted:	false
Ssdeep:	24:8jXGhBfS8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8g30R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a45c21b0abaa461cad5331ab47086021.lnk
Category:	dropped
Dump:	MFDBG_a45c21b0abaa461cad5331ab47086021.lnk.8.dr
ID:	dr_902
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:18 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.941526656908063
Encrypted:	false
Ssdeep:	24:8yhBfFbD8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:849c0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a48b434b5de24134b68fb4f1c307b41c.lnk
Category:	dropped
Dump:	MFDBG_a48b434b5de24134b68fb4f1c307b41c.lnk.8.dr
ID:	dr_343
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:10 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.937658498735758
Encrypted:	false
Ssdeep:	24:8VhBfbp8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8FDO0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a4da11300f1e4bb8a5b107ecf81790ae.lnk
Category:	dropped
Dump:	MFDBG_a4da11300f1e4bb8a5b107ecf81790ae.lnk.8.dr
ID:	dr_158
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:40 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936868545473873
Encrypted:	false
Ssdeep:	24:8Z7qb9hBfU8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Ap0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a4dedbd018c441d39feaf0436b7c61e1.lnk
Category:	dropped
Dump:	MFDBG_a4dedbd018c441d39feaf0436b7c61e1.lnk.8.dr
ID:	dr_87
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:39 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936786014939012
Encrypted:	false
Ssdeep:	24:8K/GhBfV8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:85K0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a4ea4c869518476aad3894c5286de939.lnk
Category:	dropped
Dump:	MFDBG_a4ea4c869518476aad3894c5286de939.lnk.8.dr
ID:	dr_481
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:28 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.930413724703579
Encrypted:	false
Ssdeep:	24:81PhBfGY8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:81Tud0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a5140013bd524588a82e603e4a25c8f4.lnk
Category:	dropped
Dump:	MFDBG_a5140013bd524588a82e603e4a25c8f4.lnk.8.dr
ID:	dr_823
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:15 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9340755768692155
Encrypted:	false
Ssdeep:	24:84hBfNbD8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8alc0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a52e2ea18f2e451d88bf0b836968f8a1.lnk
Category:	dropped
Dump:	MFDBG_a52e2ea18f2e451d88bf0b836968f8a1.lnk.8.dr
ID:	dr_983
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:47 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939332626074869
Encrypted:	false
Ssdeep:	24:8+hBfO8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Ur0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a598f9273e984120acacebb5b593b3b5.lnk
Category:	dropped
Dump:	MFDBG_a598f9273e984120acacebb5b593b3b5.lnk.8.dr
ID:	dr_465
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:28 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.942205863897635
Encrypted:	false
Ssdeep:	24:89hBfEH8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:898c0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a5c73ebc5d854883ba34c91e58c60c38.lnk
Category:	dropped
Dump:	MFDBG_a5c73ebc5d854883ba34c91e58c60c38.lnk.8.dr
ID:	dr_389
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:11 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.94427504058979
Encrypted:	false
Ssdeep:	24:8CnihBf58iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8CnI20R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a5d0177667d146c7b00864692eb8815a.lnk
Category:	dropped
Dump:	MFDBG_a5d0177667d146c7b00864692eb8815a.lnk.8.dr
ID:	dr_122
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:39 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936291003353065
Encrypted:	false
Ssdeep:	24:8FhBfR8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8V+0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a5e9a431f4fb43d9b7e4903659053b52.lnk
Category:	dropped
Dump:	MFDBG_a5e9a431f4fb43d9b7e4903659053b52.lnk.8.dr
ID:	dr_488
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:28 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9293394683609595
Encrypted:	false
Ssdeep:	24:809hBfGY8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Mud0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a74e34057cfb4321aff7029dc61d0c99.lnk
Category:	dropped
Dump:	MFDBG_a74e34057cfb4321aff7029dc61d0c99.lnk.8.dr
ID:	dr_378
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:10 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.93986421984943
Encrypted:	false
Ssdeep:	24:8JhBfR8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Je0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a75643c3a25a4802abb44f8fb5fa9d85.lnk
Category:	dropped
Dump:	MFDBG_a75643c3a25a4802abb44f8fb5fa9d85.lnk.8.dr
ID:	dr_115
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:43 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9404401294430444
Encrypted:	false
Ssdeep:	24:8MhBfk8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8+p0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a76b11238e5e4ea4a7c4f64244f37158.lnk
Category:	dropped
Dump:	MFDBG_a76b11238e5e4ea4a7c4f64244f37158.lnk.8.dr
ID:	dr_521
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:43 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.941759839733162
Encrypted:	false
Ssdeep:	24:8GMphBfsA8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8dE10R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a7eb904bea854a7280e4f92877d2e46b.lnk
Category:	dropped
Dump:	MFDBG_a7eb904bea854a7280e4f92877d2e46b.lnk.8.dr
ID:	dr_731
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:54 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.931141365256665
Encrypted:	false
Ssdeep:	24:8S9hBfUxp8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:86l0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a8355d4b20d34289be110f352898fbf4.lnk
Category:	dropped
Dump:	MFDBG_a8355d4b20d34289be110f352898fbf4.lnk.8.dr
ID:	dr_49
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:39 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.931241892681271
Encrypted:	false
Ssdeep:	24:8thBfQ8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Nt0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a847ec8b9c2e4a94b2e0dcfb7fff20fd.lnk
Category:	dropped
Dump:	MFDBG_a847ec8b9c2e4a94b2e0dcfb7fff20fd.lnk.8.dr
ID:	dr_445
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:14 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.93519398793647
Encrypted:	false
Ssdeep:	24:8IhBfeczp8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Ke0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a8d336e23ec14c28892bc3ac641ee9ce.lnk
Category:	dropped
Dump:	MFDBG_a8d336e23ec14c28892bc3ac641ee9ce.lnk.8.dr
ID:	dr_31
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:39 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936254421164451
Encrypted:	false
Ssdeep:	24:8ad2hBfQ8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Ht0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a93a72c9e1ff456296b25c49375fccc2.lnk
Category:	dropped
Dump:	MFDBG_a93a72c9e1ff456296b25c49375fccc2.lnk.8.dr
ID:	dr_949
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:01 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935231285077465
Encrypted:	false
Ssdeep:	24:8uhBfeIl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8knC0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_a9a49bd8dba1474094f92e43723dd28b.lnk
Category:	dropped
Dump:	MFDBG_a9a49bd8dba1474094f92e43723dd28b.lnk.8.dr
ID:	dr_588
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:44 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9387758556380845
Encrypted:	false
Ssdeep:	24:8LhBff8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8vM0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_aa3b85b3484b4425bbe3f99d7eb1349a.lnk
Category:	dropped
Dump:	MFDBG_aa3b85b3484b4425bbe3f99d7eb1349a.lnk.8.dr
ID:	dr_111
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:43 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.944815285569603
Encrypted:	false
Ssdeep:	24:8vhBfk8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8zp0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_aa4bd929e5904685b217e4a7eef980c2.lnk
Category:	dropped
Dump:	MFDBG_aa4bd929e5904685b217e4a7eef980c2.lnk.8.dr
ID:	dr_214
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:49 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.941935814129833
Encrypted:	false
Ssdeep:	24:83hBfp8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8rm0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ab2cdac6611847ea8a143f601e78aaff.lnk
Category:	dropped
Dump:	MFDBG_ab2cdac6611847ea8a143f601e78aaff.lnk.8.dr
ID:	dr_37
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:41 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.94612514232557
Encrypted:	false
Ssdeep:	24:80hBfF8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:82a0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ab4761927eb94698be41afc460dc5cbc.lnk
Category:	dropped
Dump:	MFDBG_ab4761927eb94698be41afc460dc5cbc.lnk.8.dr
ID:	dr_877
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:49:59 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936938768143211
Encrypted:	false
Ssdeep:	24:8chBfv8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8us0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_abc121e444974972935dceed6f5f292d.lnk
Category:	dropped
Dump:	MFDBG_abc121e444974972935dceed6f5f292d.lnk.8.dr
ID:	dr_651
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:45 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936649470517497
Encrypted:	false
Ssdeep:	24:8mhBfw8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8s90R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_abd0916e77224f19ad1fdc655746e28c.lnk
Category:	dropped
Dump:	MFDBG_abd0916e77224f19ad1fdc655746e28c.lnk.8.dr
ID:	dr_595
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:49 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.930845282174904
Encrypted:	false
Ssdeep:	24:8ChBfq8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8ov0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_abf66f6440c84a118d840c5b2539bffa.lnk
Category:	dropped
Dump:	MFDBG_abf66f6440c84a118d840c5b2539bffa.lnk.8.dr
ID:	dr_681
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:49 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.937846163412908
Encrypted:	false
Ssdeep:	24:8/hBfq8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8j/0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ac962a43e1774db5bb2304fe08ac26c7.lnk
Category:	dropped
Dump:	MFDBG_ac962a43e1774db5bb2304fe08ac26c7.lnk.8.dr
ID:	dr_177
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:48 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936837787410434
Encrypted:	false
Ssdeep:	24:8aJphBf98iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8eC0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ad0370ce75524c669e52ec8ab6d0eaab.lnk
Category:	dropped
Dump:	MFDBG_ad0370ce75524c669e52ec8ab6d0eaab.lnk.8.dr
ID:	dr_906
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:19 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.93827489518922
Encrypted:	false
Ssdeep:	24:8nhBfsl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:87EC0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ad336e1bb4b24e628091fbd3a8fa0ac7.lnk
Category:	dropped
Dump:	MFDBG_ad336e1bb4b24e628091fbd3a8fa0ac7.lnk.8.dr
ID:	dr_543
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:43 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.937826453436501
Encrypted:	false
Ssdeep:	24:8aRphBffD8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Gp3Q0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ad4ddd47ffe04ed19857261440f78e16.lnk
Category:	dropped
Dump:	MFDBG_ad4ddd47ffe04ed19857261440f78e16.lnk.8.dr
ID:	dr_88
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:39 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9426377801933805
Encrypted:	false
Ssdeep:	24:88DhBfV8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8SK0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ad57bda2814b4209af97577db1066336.lnk
Category:	dropped
Dump:	MFDBG_ad57bda2814b4209af97577db1066336.lnk.8.dr
ID:	dr_635
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:53 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.932914889065354
Encrypted:	false
Ssdeep:	24:8pPhBfSr8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8RKI0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ade4a40fd52d4581b5fd9e711532b68f.lnk
Category:	dropped
Dump:	MFDBG_ade4a40fd52d4581b5fd9e711532b68f.lnk.8.dr
ID:	dr_143
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:47 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.937588384767501
Encrypted:	false
Ssdeep:	24:8aDhBfu8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:86r0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ade8168caa304defb9fd6993b7da1e0e.lnk
Category:	dropped
Dump:	MFDBG_ade8168caa304defb9fd6993b7da1e0e.lnk.8.dr
ID:	dr_781
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:55 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935521391576911
Encrypted:	false
Ssdeep:	24:8/6GhBfB8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8x+0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ae8f64e2e0c141b0995ea63ae1997a02.lnk
Category:	dropped
Dump:	MFDBG_ae8f64e2e0c141b0995ea63ae1997a02.lnk.8.dr
ID:	dr_256
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:46 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935626188986307
Encrypted:	false
Ssdeep:	24:8sGhBfeh8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8D/0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ae9f1b2d875a4c85a3db0db707256d46.lnk
Category:	dropped
Dump:	MFDBG_ae9f1b2d875a4c85a3db0db707256d46.lnk.8.dr
ID:	dr_868
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:17 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.933381183341685
Encrypted:	false
Ssdeep:	24:8SxmhBfI+8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8SxsgT0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_aecca6b893474e0ab7279cf77f79b93d.lnk
Category:	dropped
Dump:	MFDBG_aecca6b893474e0ab7279cf77f79b93d.lnk.8.dr
ID:	dr_373
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:26 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.934762501839016
Encrypted:	false
Ssdeep:	24:8JhBfTl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8JW0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_af3af6aee69b43088de5d06f31e379f0.lnk
Category:	dropped
Dump:	MFDBG_af3af6aee69b43088de5d06f31e379f0.lnk.8.dr
ID:	dr_346
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:10 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939420613273203
Encrypted:	false
Ssdeep:	24:8auhBfbp8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8JDO0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_af4b21bcebd1434f98a43f1c14237ba0.lnk
Category:	dropped
Dump:	MFDBG_af4b21bcebd1434f98a43f1c14237ba0.lnk.8.dr
ID:	dr_503
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:42 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.937226582440011
Encrypted:	false
Ssdeep:	24:85hBfo8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8ZV0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_af60f4207fa445d1b7e4e942cbf6678b.lnk
Category:	dropped
Dump:	MFDBG_af60f4207fa445d1b7e4e942cbf6678b.lnk.8.dr
ID:	dr_1005
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:51 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.937007507483636
Encrypted:	false
Ssdeep:	24:8GhBfw8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8M90R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_af69a3071f6e43b8b81e8b2f718a041f.lnk
Category:	dropped
Dump:	MFDBG_af69a3071f6e43b8b81e8b2f718a041f.lnk.8.dr
ID:	dr_933
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:01 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935051799464729
Encrypted:	false
Ssdeep:	24:8i2hBfv8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8ds0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_af7ec0ac3f13462aaca14bbd82265ede.lnk
Category:	dropped
Dump:	MFDBG_af7ec0ac3f13462aaca14bbd82265ede.lnk.8.dr
ID:	dr_250
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:51 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.93956580889997
Encrypted:	false
Ssdeep:	24:8c2hBfKP8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8rC00R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_afaf4dccd905426faaf620c19b3e015f.lnk
Category:	dropped
Dump:	MFDBG_afaf4dccd905426faaf620c19b3e015f.lnk.8.dr
ID:	dr_464
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:28 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.940284445864697
Encrypted:	false
Ssdeep:	24:8ShBfEH8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Y8c0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b00f70e7ed5446ad9c6cbb3e625f9dab.lnk
Category:	dropped
Dump:	MFDBG_b00f70e7ed5446ad9c6cbb3e625f9dab.lnk.8.dr
ID:	dr_978
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:47 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939508600471537
Encrypted:	false
Ssdeep:	24:8yhBfF+8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:84p0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b012f022d6074980a6835c869e5ea68c.lnk
Category:	dropped
Dump:	MFDBG_b012f022d6074980a6835c869e5ea68c.lnk.8.dr
ID:	dr_908
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:19 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939764542370615
Encrypted:	false
Ssdeep:	24:8MkhBfsl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8/EC0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b012f08c72b347dbb48d71f975dd5760.lnk
Category:	dropped
Dump:	MFDBG_b012f08c72b347dbb48d71f975dd5760.lnk.8.dr
ID:	dr_227
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:46 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.932695742735106
Encrypted:	false
Ssdeep:	24:8mhBfeh8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8s/0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b01cdfae68524a3482baa9c671f97148.lnk
Category:	dropped
Dump:	MFDBG_b01cdfae68524a3482baa9c671f97148.lnk.8.dr
ID:	dr_798
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:14 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.945028126908974
Encrypted:	false
Ssdeep:	24:8ohBfeczp8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8qe0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b03ca0ee841c40dead9070634e6b0cd6.lnk
Category:	dropped
Dump:	MFDBG_b03ca0ee841c40dead9070634e6b0cd6.lnk.8.dr
ID:	dr_676
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:53 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938128629747311
Encrypted:	false
Ssdeep:	24:8ChBfSr8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8oKI0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b057ec2bd0c348378b631d5935d81a41.lnk
Category:	dropped
Dump:	MFDBG_b057ec2bd0c348378b631d5935d81a41.lnk.8.dr
ID:	dr_806
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:15 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9379651306921755
Encrypted:	false
Ssdeep:	24:8SYhBft8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8S6C0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b08e6c8c2aff492085dc1a9d7fa6a78c.lnk
Category:	dropped
Dump:	MFDBG_b08e6c8c2aff492085dc1a9d7fa6a78c.lnk.8.dr
ID:	dr_766
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:55 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.940048845451351
Encrypted:	false
Ssdeep:	24:8BhBfOe8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8xm0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b08f69648bab4b0995f720d130e2ca1c.lnk
Category:	dropped
Dump:	MFDBG_b08f69648bab4b0995f720d130e2ca1c.lnk.8.dr
ID:	dr_140
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:47 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9418478269314985
Encrypted:	false
Ssdeep:	24:8LhBfu8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8vr0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b0bf43189bc84c2bb590ac1213d99c1d.lnk
Category:	dropped
Dump:	MFDBG_b0bf43189bc84c2bb590ac1213d99c1d.lnk.8.dr
ID:	dr_625
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:45 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939793836777296
Encrypted:	false
Ssdeep:	24:8M8hBfc8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8MOh0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b0d0a33890754d73b5bb487c3a3b8c45.lnk
Category:	dropped
Dump:	MFDBG_b0d0a33890754d73b5bb487c3a3b8c45.lnk.8.dr
ID:	dr_1029
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:48 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.941555951314742
Encrypted:	false
Ssdeep:	24:85hBfc8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Zh0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b0e4010ffb824a23b208857940907bcb.lnk
Category:	dropped
Dump:	MFDBG_b0e4010ffb824a23b208857940907bcb.lnk.8.dr
ID:	dr_231
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:46 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935594622435584
Encrypted:	false
Ssdeep:	24:8KshBfQD8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8jp0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b1130f88b1cc4f99925df37afab6548c.lnk
Category:	dropped
Dump:	MFDBG_b1130f88b1cc4f99925df37afab6548c.lnk.8.dr
ID:	dr_979
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:47 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9401736995923855
Encrypted:	false
Ssdeep:	24:8phBfF+8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8pp0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b12d5cba80e04db5821b8948f8be8fea.lnk
Category:	dropped
Dump:	MFDBG_b12d5cba80e04db5821b8948f8be8fea.lnk.8.dr
ID:	dr_128
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:40 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.942874728379834
Encrypted:	false
Ssdeep:	24:80hBfe8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:82L0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b1a08f77256e4599ad80d9a4518f045f.lnk
Category:	dropped
Dump:	MFDBG_b1a08f77256e4599ad80d9a4518f045f.lnk.8.dr
ID:	dr_882
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:18 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.931361669378191
Encrypted:	false
Ssdeep:	24:8+5hBfI+8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:80gT0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b1e434ab00a1404780827bb258ed3264.lnk
Category:	dropped
Dump:	MFDBG_b1e434ab00a1404780827bb258ed3264.lnk.8.dr
ID:	dr_487
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:28 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.933528796556697
Encrypted:	false
Ssdeep:	24:8BhBfGY8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8xud0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b1e78cc89e4a4ec8bc205103648b0741.lnk
Category:	dropped
Dump:	MFDBG_b1e78cc89e4a4ec8bc205103648b0741.lnk.8.dr
ID:	dr_179
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:48 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.942944842348092
Encrypted:	false
Ssdeep:	24:8+phBf98iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:86C0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b219d9deccd34c16b60c71974e822938.lnk
Category:	dropped
Dump:	MFDBG_b219d9deccd34c16b60c71974e822938.lnk.8.dr
ID:	dr_597
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:53 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938323597856608
Encrypted:	false
Ssdeep:	24:8vphBfc8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8hR0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b2387fddc2664a4280c96adc0f3e7566.lnk
Category:	dropped
Dump:	MFDBG_b2387fddc2664a4280c96adc0f3e7566.lnk.8.dr
ID:	dr_495
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:28 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.931101582898404
Encrypted:	false
Ssdeep:	24:81hBfGY8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8lud0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b28f60621b8f487889e77987019ecbd2.lnk
Category:	dropped
Dump:	MFDBG_b28f60621b8f487889e77987019ecbd2.lnk.8.dr
ID:	dr_656
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:53 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9342653574189095
Encrypted:	false
Ssdeep:	24:88hBfSr8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8OKI0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b2ca93e6b67249ac823791c65cfa1194.lnk
Category:	dropped
Dump:	MFDBG_b2ca93e6b67249ac823791c65cfa1194.lnk.8.dr
ID:	dr_698
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:50 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.934134269660868
Encrypted:	false
Ssdeep:	24:8OhBfO8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Er0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b2fc07bda9e246b4adb2f2651995d85a.lnk
Category:	dropped
Dump:	MFDBG_b2fc07bda9e246b4adb2f2651995d85a.lnk.8.dr
ID:	dr_229
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:46 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935589322043604
Encrypted:	false
Ssdeep:	24:88hBfeh8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8O/0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b305c360ee544cf6bf1a6d6871254fa9.lnk
Category:	dropped
Dump:	MFDBG_b305c360ee544cf6bf1a6d6871254fa9.lnk.8.dr
ID:	dr_769
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:55 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939164671374125
Encrypted:	false
Ssdeep:	24:86hBfOe8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8wm0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b34edfd887484fb086fc599bcee7b270.lnk
Category:	dropped
Dump:	MFDBG_b34edfd887484fb086fc599bcee7b270.lnk.8.dr
ID:	dr_755
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:54 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936189827457523
Encrypted:	false
Ssdeep:	24:8yhBfUxp8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:84l0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b356f458cc1942beac49db1dd62ab3b1.lnk
Category:	dropped
Dump:	MFDBG_b356f458cc1942beac49db1dd62ab3b1.lnk.8.dr
ID:	dr_396
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:26 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9352312850774664
Encrypted:	false
Ssdeep:	24:8FhBfGy8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Vuf0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b3e4e583a6134d6795886ed29f57944e.lnk
Category:	dropped
Dump:	MFDBG_b3e4e583a6134d6795886ed29f57944e.lnk.8.dr
ID:	dr_754
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:50 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938073744130329
Encrypted:	false
Ssdeep:	24:87phBf3+8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8lPT0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b424387ba4b74536956ade76de67be28.lnk
Category:	dropped
Dump:	MFDBG_b424387ba4b74536956ade76de67be28.lnk.8.dr
ID:	dr_189
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:40 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938380806285038
Encrypted:	false
Ssdeep:	24:8i8hBfo8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8iOV0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b434c086ed634ffd823752749a7ea0e3.lnk
Category:	dropped
Dump:	MFDBG_b434c086ed634ffd823752749a7ea0e3.lnk.8.dr
ID:	dr_720
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:50 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.93836423016066
Encrypted:	false
Ssdeep:	24:8yhBfO8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:84r0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b45060d654474d14b17946be679c6ff0.lnk
Category:	dropped
Dump:	MFDBG_b45060d654474d14b17946be679c6ff0.lnk.8.dr
ID:	dr_953
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:01 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935751188571547
Encrypted:	false
Ssdeep:	24:8p9hBfeIl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:83nC0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b4a1c675b78d4a1d9120b8b8aa23045b.lnk
Category:	dropped
Dump:	MFDBG_b4a1c675b78d4a1d9120b8b8aa23045b.lnk.8.dr
ID:	dr_165
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:41 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.937086354503494
Encrypted:	false
Ssdeep:	24:8FhBfjqH8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8VLqc0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b4b68bbf53db433da461f5d189c9e4b7.lnk
Category:	dropped
Dump:	MFDBG_b4b68bbf53db433da461f5d189c9e4b7.lnk.8.dr
ID:	dr_232
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:46 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.933832507898139
Encrypted:	false
Ssdeep:	24:8BhBfQD8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8xp0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b4f0d6da3a2541299ea0bb4e1c8f96f4.lnk
Category:	dropped
Dump:	MFDBG_b4f0d6da3a2541299ea0bb4e1c8f96f4.lnk.8.dr
ID:	dr_112
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:47 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935859517255612
Encrypted:	false
Ssdeep:	24:8OhBfO8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8E70R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b4ff9e27b4934c66980e5f39c73e0341.lnk
Category:	dropped
Dump:	MFDBG_b4ff9e27b4934c66980e5f39c73e0341.lnk.8.dr
ID:	dr_601
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:53 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9302954327315
Encrypted:	false
Ssdeep:	24:8VhBfc8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8FR0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b5125903cdc740a19e29bc0a302e9266.lnk
Category:	dropped
Dump:	MFDBG_b5125903cdc740a19e29bc0a302e9266.lnk.8.dr
ID:	dr_697
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:50 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936905412416575
Encrypted:	false
Ssdeep:	24:8+hBfO8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Ur0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b538170f89d74383a2aa1cc9f8178927.lnk
Category:	dropped
Dump:	MFDBG_b538170f89d74383a2aa1cc9f8178927.lnk.8.dr
ID:	dr_841
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:16 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.940750811514902
Encrypted:	false
Ssdeep:	24:8jxmhBfX8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8NsU0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b566c2cf104544b482d0ce698b688b5b.lnk
Category:	dropped
Dump:	MFDBG_b566c2cf104544b482d0ce698b688b5b.lnk.8.dr
ID:	dr_523
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:43 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.930485186444942
Encrypted:	false
Ssdeep:	24:8xhBf98iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8BS0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b675142499f544fc9596aea88454a06c.lnk
Category:	dropped
Dump:	MFDBG_b675142499f544fc9596aea88454a06c.lnk.8.dr
ID:	dr_865
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:17 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.94846436878553
Encrypted:	false
Ssdeep:	24:8fmhBfV8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8fs60R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b70492d6fe284eaf8449c2dd17bcfd11.lnk
Category:	dropped
Dump:	MFDBG_b70492d6fe284eaf8449c2dd17bcfd11.lnk.8.dr
ID:	dr_997
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:51 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.940085712394052
Encrypted:	false
Ssdeep:	24:8OhBf/D8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8EXQ0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b708bfeb75c84dcbb2e0c68b7e81f3ca.lnk
Category:	dropped
Dump:	MFDBG_b708bfeb75c84dcbb2e0c68b7e81f3ca.lnk.8.dr
ID:	dr_730
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:50 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939764542370617
Encrypted:	false
Ssdeep:	24:8MhBfO8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8+r0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b772cf2aff784413adc938d4128c157f.lnk
Category:	dropped
Dump:	MFDBG_b772cf2aff784413adc938d4128c157f.lnk.8.dr
ID:	dr_975
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:46 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935883478658487
Encrypted:	false
Ssdeep:	24:8BhBfG48iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8xa0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b7786e667e024e43a0d0175985386028.lnk
Category:	dropped
Dump:	MFDBG_b7786e667e024e43a0d0175985386028.lnk.8.dr
ID:	dr_1000
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:47 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938411585054941
Encrypted:	false
Ssdeep:	24:8WhBfX8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:88E0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b821951bfe25422098f0e1647de353bf.lnk
Category:	dropped
Dump:	MFDBG_b821951bfe25422098f0e1647de353bf.lnk.8.dr
ID:	dr_633
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:53 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.937189715497309
Encrypted:	false
Ssdeep:	24:8khBfSr8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8GKI0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b828bd63f8ab42f4a4d10739314e21dc.lnk
Category:	dropped
Dump:	MFDBG_b828bd63f8ab42f4a4d10739314e21dc.lnk.8.dr
ID:	dr_469
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:28 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939350499304946
Encrypted:	false
Ssdeep:	24:8XhBfvl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8L3C0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b8982795395448b2af5a7d2228283738.lnk
Category:	dropped
Dump:	MFDBG_b8982795395448b2af5a7d2228283738.lnk.8.dr
ID:	dr_946
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:01 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939164671374125
Encrypted:	false
Ssdeep:	24:8ThBfeIl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8nnC0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b8d81aeec5c6454d916a5df05e9a3f89.lnk
Category:	dropped
Dump:	MFDBG_b8d81aeec5c6454d916a5df05e9a3f89.lnk.8.dr
ID:	dr_341
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:10 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9412910564947135
Encrypted:	false
Ssdeep:	24:8ve9hBfg8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8ve9d0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b90891abee684028ab1b15d92eb5238b.lnk
Category:	dropped
Dump:	MFDBG_b90891abee684028ab1b15d92eb5238b.lnk.8.dr
ID:	dr_502
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:42 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.940750811514901
Encrypted:	false
Ssdeep:	24:8NhBfo8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8tV0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b94fe754db30423491b6289885370700.lnk
Category:	dropped
Dump:	MFDBG_b94fe754db30423491b6289885370700.lnk.8.dr
ID:	dr_722
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:50 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938913615318948
Encrypted:	false
Ssdeep:	24:8+phBfO8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:86r0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b9e9b71df7e74fb78dc3194b8f7967b0.lnk
Category:	dropped
Dump:	MFDBG_b9e9b71df7e74fb78dc3194b8f7967b0.lnk.8.dr
ID:	dr_367
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:10 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939420613273202
Encrypted:	false
Ssdeep:	24:8ihBfR8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Ie0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_b9f067218d9c4ddd86d955cc7edfa6e8.lnk
Category:	dropped
Dump:	MFDBG_b9f067218d9c4ddd86d955cc7edfa6e8.lnk.8.dr
ID:	dr_535
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:46 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935859517255612
Encrypted:	false
Ssdeep:	24:86hBfE8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8wp0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ba0647e87d174101967374f78a4911a2.lnk
Category:	dropped
Dump:	MFDBG_ba0647e87d174101967374f78a4911a2.lnk.8.dr
ID:	dr_888
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:18 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.940750811514902
Encrypted:	false
Ssdeep:	24:8WhBfFbD8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:889c0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ba34d1e44675424b9c5154d3e72c824c.lnk
Category:	dropped
Dump:	MFDBG_ba34d1e44675424b9c5154d3e72c824c.lnk.8.dr
ID:	dr_518
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:43 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.940429641491467
Encrypted:	false
Ssdeep:	24:8yhBfA8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8490R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_bafc4a94acbc4ef393d61b2e14e0b2aa.lnk
Category:	dropped
Dump:	MFDBG_bafc4a94acbc4ef393d61b2e14e0b2aa.lnk.8.dr
ID:	dr_48
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:41 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.947134170543832
Encrypted:	false
Ssdeep:	24:8ShBfF8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Ya0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_bb07012e56ee49609fa25b2b97943965.lnk
Category:	dropped
Dump:	MFDBG_bb07012e56ee49609fa25b2b97943965.lnk.8.dr
ID:	dr_145
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:47 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938755514152358
Encrypted:	false
Ssdeep:	24:8ShBfu8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Yr0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_bb4907949cad41ddb5daa29805914775.lnk
Category:	dropped
Dump:	MFDBG_bb4907949cad41ddb5daa29805914775.lnk.8.dr
ID:	dr_104
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:47 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.941935814129833
Encrypted:	false
Ssdeep:	24:8dhBfO8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8d70R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_bba021d010974598acfcd7086cb5c6aa.lnk
Category:	dropped
Dump:	MFDBG_bba021d010974598acfcd7086cb5c6aa.lnk.8.dr
ID:	dr_1001
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:51 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.93045059164628
Encrypted:	false
Ssdeep:	24:8ThBfw8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8n90R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_bbb3003492d946edae68eba36fffba82.lnk
Category:	dropped
Dump:	MFDBG_bbb3003492d946edae68eba36fffba82.lnk.8.dr
ID:	dr_572
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:48 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.934242598344935
Encrypted:	false
Ssdeep:	24:8HnhBfp8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8H7G0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_bbdb0c2f79b4403fa949451a75908dd7.lnk
Category:	dropped
Dump:	MFDBG_bbdb0c2f79b4403fa949451a75908dd7.lnk.8.dr
ID:	dr_926
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:00 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.933502526266656
Encrypted:	false
Ssdeep:	24:8KuhBfv8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8ps0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_bbfc91f83c894056881b8a1d7f47bc55.lnk
Category:	dropped
Dump:	MFDBG_bbfc91f83c894056881b8a1d7f47bc55.lnk.8.dr
ID:	dr_221
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:46 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.937695365678462
Encrypted:	false
Ssdeep:	24:8NGhBfeh8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8NM/0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_bc376507c86b4f8e80256b2ecbf35a91.lnk
Category:	dropped
Dump:	MFDBG_bc376507c86b4f8e80256b2ecbf35a91.lnk.8.dr
ID:	dr_1010
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:47 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939872871054679
Encrypted:	false
Ssdeep:	24:8vhBf7T8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8zzg0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_bc7633581f1949d6973146bfd014dfa6.lnk
Category:	dropped
Dump:	MFDBG_bc7633581f1949d6973146bfd014dfa6.lnk.8.dr
ID:	dr_636
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:49 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.934197080196982
Encrypted:	false
Ssdeep:	24:8whBfq8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8i/0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_bc9d2157f26d4bd68eae970630422e06.lnk
Category:	dropped
Dump:	MFDBG_bc9d2157f26d4bd68eae970630422e06.lnk.8.dr
ID:	dr_236
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:50 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.942512926052346
Encrypted:	false
Ssdeep:	24:8QhBf1kD8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Cr0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_bcbbd113b8444f75a54cd0eecf67a2b0.lnk
Category:	dropped
Dump:	MFDBG_bcbbd113b8444f75a54cd0eecf67a2b0.lnk.8.dr
ID:	dr_483
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:28 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.940358179750101
Encrypted:	false
Ssdeep:	24:8dPhBfGY8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8dTud0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_bcbe86e7e21c47aba1370d72bcab92b7.lnk
Category:	dropped
Dump:	MFDBG_bcbe86e7e21c47aba1370d72bcab92b7.lnk.8.dr
ID:	dr_201
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:45 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.934222256859204
Encrypted:	false
Ssdeep:	24:8YhBfQl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8630R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_bcc8b82efc7843dfba7345b4386399d1.lnk
Category:	dropped
Dump:	MFDBG_bcc8b82efc7843dfba7345b4386399d1.lnk.8.dr
ID:	dr_870
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:17 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938235610658272
Encrypted:	false
Ssdeep:	24:8bmhBfI+8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8bsgT0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_bce814e4d34b4f13ad46659db63c6755.lnk
Category:	dropped
Dump:	MFDBG_bce814e4d34b4f13ad46659db63c6755.lnk.8.dr
ID:	dr_950
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:01 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9337534736207544
Encrypted:	false
Ssdeep:	24:8WhBfeIl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:88nC0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_bd31f310ca414cbb98878df64b025c54.lnk
Category:	dropped
Dump:	MFDBG_bd31f310ca414cbb98878df64b025c54.lnk.8.dr
ID:	dr_770
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:51 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.933716461233845
Encrypted:	false
Ssdeep:	24:8QhBfw8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8C90R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_bd71295ddb7f4db984192b958404a49a.lnk
Category:	dropped
Dump:	MFDBG_bd71295ddb7f4db984192b958404a49a.lnk.8.dr
ID:	dr_797
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:56 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.932898620786461
Encrypted:	false
Ssdeep:	24:8uhBf08iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8kZ0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_bdefcc6f3d394b7daf45ac4210f5bc78.lnk
Category:	dropped
Dump:	MFDBG_bdefcc6f3d394b7daf45ac4210f5bc78.lnk.8.dr
ID:	dr_895
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:49:59 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936273669022361
Encrypted:	false
Ssdeep:	24:8dhBfv8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8ds0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_bdf629e416c34531ad018c25bd923da4.lnk
Category:	dropped
Dump:	MFDBG_bdf629e416c34531ad018c25bd923da4.lnk.8.dr
ID:	dr_844
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:17 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.94141591063575
Encrypted:	false
Ssdeep:	24:8AmhBfX8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8AsU0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_be31a607f0544ed187a67a415ecce1e5.lnk
Category:	dropped
Dump:	MFDBG_be31a607f0544ed187a67a415ecce1e5.lnk.8.dr
ID:	dr_154
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:44 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.933695818032414
Encrypted:	false
Ssdeep:	24:8CbhBf8p8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Cfh0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_be5003a434484a24a6b277ffdfd4200e.lnk
Category:	dropped
Dump:	MFDBG_be5003a434484a24a6b277ffdfd4200e.lnk.8.dr
ID:	dr_705
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:49 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939128737656448
Encrypted:	false
Ssdeep:	24:8KhBfDD8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8grQ0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_be680303084c4489ba5abc953d023483.lnk
Category:	dropped
Dump:	MFDBG_be680303084c4489ba5abc953d023483.lnk.8.dr
ID:	dr_302
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:08 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.93632830049406
Encrypted:	false
Ssdeep:	24:88hBfB8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Oe0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_be8484b63e634cdcb2ce08c651739d26.lnk
Category:	dropped
Dump:	MFDBG_be8484b63e634cdcb2ce08c651739d26.lnk.8.dr
ID:	dr_878
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:49:59 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9296712350370555
Encrypted:	false
Ssdeep:	24:8QahBfv8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8QQs0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_bf0738652fd14533a84754e2181230ef.lnk
Category:	dropped
Dump:	MFDBG_bf0738652fd14533a84754e2181230ef.lnk.8.dr
ID:	dr_382
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:10 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.943609941468943
Encrypted:	false
Ssdeep:	24:8iqphBfR8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8iqpe0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_bf4e12728eed47fe9359b1e32d2ddb56.lnk
Category:	dropped
Dump:	MFDBG_bf4e12728eed47fe9359b1e32d2ddb56.lnk.8.dr
ID:	dr_353
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:26 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.944275040589791
Encrypted:	false
Ssdeep:	24:8bBhBfW8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:81D0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_bfac68d9ea5743b582369b6dc35a8c6b.lnk
Category:	dropped
Dump:	MFDBG_bfac68d9ea5743b582369b6dc35a8c6b.lnk.8.dr
ID:	dr_999
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:51 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939434721141928
Encrypted:	false
Ssdeep:	24:87hBfw8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8/90R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c0133a9a266c474bb15d0b59916863bd.lnk
Category:	dropped
Dump:	MFDBG_c0133a9a266c474bb15d0b59916863bd.lnk.8.dr
ID:	dr_61
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:42 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.943266012371529
Encrypted:	false
Ssdeep:	24:8MhBfF8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8+a0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c0253a757bce4f23a63591497c29c69e.lnk
Category:	dropped
Dump:	MFDBG_c0253a757bce4f23a63591497c29c69e.lnk.8.dr
ID:	dr_472
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:28 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.937658498735759
Encrypted:	false
Ssdeep:	24:8dPhBfvl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8dT3C0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c0f3f84e12244eeabed9c2c4dfa460e3.lnk
Category:	dropped
Dump:	MFDBG_c0f3f84e12244eeabed9c2c4dfa460e3.lnk.8.dr
ID:	dr_578
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:48 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.944706956885539
Encrypted:	false
Ssdeep:	24:81hBfU+8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8lcT0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c1018111a58b4311852c93aa20af5b5d.lnk
Category:	dropped
Dump:	MFDBG_c1018111a58b4311852c93aa20af5b5d.lnk.8.dr
ID:	dr_317
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:09 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.93248048380749
Encrypted:	false
Ssdeep:	24:8MhBf98iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8+i0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c141824c9440408d8da30f5d3ab1160b.lnk
Category:	dropped
Dump:	MFDBG_c141824c9440408d8da30f5d3ab1160b.lnk.8.dr
ID:	dr_131
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:40 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9382534838883485
Encrypted:	false
Ssdeep:	24:8vhBfe8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8zL0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c1ba56bbbd55421e877d43b1043c0b9c.lnk
Category:	dropped
Dump:	MFDBG_c1ba56bbbd55421e877d43b1043c0b9c.lnk.8.dr
ID:	dr_310
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:09 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936129567023416
Encrypted:	false
Ssdeep:	24:8ChBfB8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8oe0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c1ca3351b2b04078a903c3367a8fd27e.lnk
Category:	dropped
Dump:	MFDBG_c1ca3351b2b04078a903c3367a8fd27e.lnk.8.dr
ID:	dr_529
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:43 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9357382830317205
Encrypted:	false
Ssdeep:	24:81hBffD8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8l3Q0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c223b32efe5547e2a3f8b745db182b0f.lnk
Category:	dropped
Dump:	MFDBG_c223b32efe5547e2a3f8b745db182b0f.lnk.8.dr
ID:	dr_332
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:09 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.942476059109644
Encrypted:	false
Ssdeep:	24:8vhBfg8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8zd0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c26e81fdad5c4066a40cdf36abd223d6.lnk
Category:	dropped
Dump:	MFDBG_c26e81fdad5c4066a40cdf36abd223d6.lnk.8.dr
ID:	dr_180
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:45 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9407735705888784
Encrypted:	false
Ssdeep:	24:8JhBf98iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Jy0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c28c27afbfd748d2b91dd95569be9371.lnk
Category:	dropped
Dump:	MFDBG_c28c27afbfd748d2b91dd95569be9371.lnk.8.dr
ID:	dr_95
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:40 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.942154458887913
Encrypted:	false
Ssdeep:	24:8HhBfR8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8b+0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c2916b6ca2874a76be4a319c6a588fb7.lnk
Category:	dropped
Dump:	MFDBG_c2916b6ca2874a76be4a319c6a588fb7.lnk.8.dr
ID:	dr_522
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:42 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936240313295726
Encrypted:	false
Ssdeep:	24:8phBf98iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8pS0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c3082c993133418db6a8c1feea72ff60.lnk
Category:	dropped
Dump:	MFDBG_c3082c993133418db6a8c1feea72ff60.lnk.8.dr
ID:	dr_121
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:39 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.932580946347355
Encrypted:	false
Ssdeep:	24:868hBfR8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:86O+0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c342f47409694bfaa385595d164d8103.lnk
Category:	dropped
Dump:	MFDBG_c342f47409694bfaa385595d164d8103.lnk.8.dr
ID:	dr_364
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:10 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.944141535243504
Encrypted:	false
Ssdeep:	24:8ghBfD8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8yI0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c34ec169bdf7478c9a2ffdf43b5b5764.lnk
Category:	dropped
Dump:	MFDBG_c34ec169bdf7478c9a2ffdf43b5b5764.lnk.8.dr
ID:	dr_993
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:51 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.934901463848777
Encrypted:	false
Ssdeep:	24:8SxhBfw8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8SB90R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c3598ef0ccf74439831c1343e28277dd.lnk
Category:	dropped
Dump:	MFDBG_c3598ef0ccf74439831c1343e28277dd.lnk.8.dr
ID:	dr_127
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:47 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938499572253277
Encrypted:	false
Ssdeep:	24:8JhBfO8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8J70R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c3dfdef25250423380341d7d1b97d247.lnk
Category:	dropped
Dump:	MFDBG_c3dfdef25250423380341d7d1b97d247.lnk.8.dr
ID:	dr_548
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:44 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935057799642913
Encrypted:	false
Ssdeep:	24:8phBfI8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8pV0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c47d330043334a54ab7f33e3a8e936a5.lnk
Category:	dropped
Dump:	MFDBG_c47d330043334a54ab7f33e3a8e936a5.lnk.8.dr
ID:	dr_125
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:39 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936868115275579
Encrypted:	false
Ssdeep:	24:8U6GhBfR8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Up+0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c517acafa21340a0b32725dcec6b4477.lnk
Category:	dropped
Dump:	MFDBG_c517acafa21340a0b32725dcec6b4477.lnk.8.dr
ID:	dr_147
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:47 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.93950860047154
Encrypted:	false
Ssdeep:	24:8jhBfu8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Xr0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c53a03234b394652808b5989c3f54c0a.lnk
Category:	dropped
Dump:	MFDBG_c53a03234b394652808b5989c3f54c0a.lnk.8.dr
ID:	dr_247
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:46 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.943609941468943
Encrypted:	false
Ssdeep:	24:8khBf48iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Gl0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c5880f24e0b7406e80953d578a4a1ae0.lnk
Category:	dropped
Dump:	MFDBG_c5880f24e0b7406e80953d578a4a1ae0.lnk.8.dr
ID:	dr_398
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:11 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.942856855149758
Encrypted:	false
Ssdeep:	24:8zhBf58iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8H20R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c58a5ea717114af1a7b07d0d1fdc8645.lnk
Category:	dropped
Dump:	MFDBG_c58a5ea717114af1a7b07d0d1fdc8645.lnk.8.dr
ID:	dr_847
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:17 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939508600471538
Encrypted:	false
Ssdeep:	24:8A1mhBfX8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8A1sU0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c5924d2887fb4bd793943ed6e679b5fe.lnk
Category:	dropped
Dump:	MFDBG_c5924d2887fb4bd793943ed6e679b5fe.lnk.8.dr
ID:	dr_593
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:45 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.940085712394054
Encrypted:	false
Ssdeep:	24:8khBfw8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8G90R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c5bdfc922218435dbc3b4c6f99f65f4c.lnk
Category:	dropped
Dump:	MFDBG_c5bdfc922218435dbc3b4c6f99f65f4c.lnk.8.dr
ID:	dr_897
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:49:59 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.933093369044885
Encrypted:	false
Ssdeep:	24:8rhBfv8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Ps0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c6bfa9f00681492aa27b712b14f24156.lnk
Category:	dropped
Dump:	MFDBG_c6bfa9f00681492aa27b712b14f24156.lnk.8.dr
ID:	dr_1044
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:52 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.943302879314231
Encrypted:	false
Ssdeep:	24:8uhBfB8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8kO0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c6d9721842fa4795b560cdfc31b3fc05.lnk
Category:	dropped
Dump:	MFDBG_c6d9721842fa4795b560cdfc31b3fc05.lnk.8.dr
ID:	dr_1018
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:47 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939346733943593
Encrypted:	false
Ssdeep:	24:8P2hBft8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8PcC0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c6ef5d4e08644bfdaaf54d99c1048004.lnk
Category:	dropped
Dump:	MFDBG_c6ef5d4e08644bfdaaf54d99c1048004.lnk.8.dr
ID:	dr_1047
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:48 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9433180658521865
Encrypted:	false
Ssdeep:	24:8JhBfc8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Jh0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c72640d80e024c3093041efed84190ae.lnk
Category:	dropped
Dump:	MFDBG_c72640d80e024c3093041efed84190ae.lnk.8.dr
ID:	dr_135
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:48 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.941367207968362
Encrypted:	false
Ssdeep:	24:8ohBf/8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8qM0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c7bb7a50a6aa470ba259858720d316a4.lnk
Category:	dropped
Dump:	MFDBG_c7bb7a50a6aa470ba259858720d316a4.lnk.8.dr
ID:	dr_660
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:46 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935604508581558
Encrypted:	false
Ssdeep:	24:8d8hBf38iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8I00R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c84a59c801344e36b1b454faf359f0ca.lnk
Category:	dropped
Dump:	MFDBG_c84a59c801344e36b1b454faf359f0ca.lnk.8.dr
ID:	dr_79
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:43 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.944150186448754
Encrypted:	false
Ssdeep:	24:8CrhBfk8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8CPp0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c8948a144fa94fd89a26f0fd5e8662d5.lnk
Category:	dropped
Dump:	MFDBG_c8948a144fa94fd89a26f0fd5e8662d5.lnk.8.dr
ID:	dr_442
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:13 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.944494115546166
Encrypted:	false
Ssdeep:	24:8ehBfGK8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:80un0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c8a0ac06d84c4932976a633c0127b383.lnk
Category:	dropped
Dump:	MFDBG_c8a0ac06d84c4932976a633c0127b383.lnk.8.dr
ID:	dr_46
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:42 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.944706956885539
Encrypted:	false
Ssdeep:	24:8sn8hBfF8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8sOa0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_c918a05284ab40aabd80aca24da504eb.lnk
Category:	dropped
Dump:	MFDBG_c918a05284ab40aabd80aca24da504eb.lnk.8.dr
ID:	dr_375
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:26 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936524616376461
Encrypted:	false
Ssdeep:	24:8ShBfTl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8YW0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ca6279c90497473da9eeaf052027a05f.lnk
Category:	dropped
Dump:	MFDBG_ca6279c90497473da9eeaf052027a05f.lnk.8.dr
ID:	dr_457
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:27 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9374025568366795
Encrypted:	false
Ssdeep:	24:8SShBfi8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8SYn0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ca6dfc71008f4746a0658b4d5bd44cf6.lnk
Category:	dropped
Dump:	MFDBG_ca6dfc71008f4746a0658b4d5bd44cf6.lnk.8.dr
ID:	dr_80
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:43 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.944275040589791
Encrypted:	false
Ssdeep:	24:8DhBf08iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:83p0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ca8f37c74491461fb1029e469a342984.lnk
Category:	dropped
Dump:	MFDBG_ca8f37c74491461fb1029e469a342984.lnk.8.dr
ID:	dr_509
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:42 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9419050353599285
Encrypted:	false
Ssdeep:	24:85hBfC8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Zn0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_cae2bb32b24a467bb47cab04b2ac7109.lnk
Category:	dropped
Dump:	MFDBG_cae2bb32b24a467bb47cab04b2ac7109.lnk.8.dr
ID:	dr_507
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:41 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939076684175792
Encrypted:	false
Ssdeep:	24:8CS2hBfE8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8CNJ0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_caefef7d34ca43d18364ce8fa3e1d1f2.lnk
Category:	dropped
Dump:	MFDBG_caefef7d34ca43d18364ce8fa3e1d1f2.lnk.8.dr
ID:	dr_526
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:43 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.934711381583383
Encrypted:	false
Ssdeep:	24:8shBfA8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8e90R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_caf7b4de2bb341f0b7fb720126ba0272.lnk
Category:	dropped
Dump:	MFDBG_caf7b4de2bb341f0b7fb720126ba0272.lnk.8.dr
ID:	dr_790
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:56 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.944363027788126
Encrypted:	false
Ssdeep:	24:8/hBf08iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8jZ0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_cb1adbe12aa041aca61bf30904dd87ce.lnk
Category:	dropped
Dump:	MFDBG_cb1adbe12aa041aca61bf30904dd87ce.lnk.8.dr
ID:	dr_390
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:26 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939960858253016
Encrypted:	false
Ssdeep:	24:8ZhBfGy8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:85uf0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_cba6bb6abdcf4794883dbc1c51f530f6.lnk
Category:	dropped
Dump:	MFDBG_cba6bb6abdcf4794883dbc1c51f530f6.lnk.8.dr
ID:	dr_726
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:50 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.934855483582328
Encrypted:	false
Ssdeep:	24:8vhBfO8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8zr0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_cbce2985e29d45f1b5e05f70743ebace.lnk
Category:	dropped
Dump:	MFDBG_cbce2985e29d45f1b5e05f70743ebace.lnk.8.dr
ID:	dr_362
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:10 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938190092510321
Encrypted:	false
Ssdeep:	24:8ihBfD8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8II0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_cbdac840314b4e39939141c1268b9a4d.lnk
Category:	dropped
Dump:	MFDBG_cbdac840314b4e39939141c1268b9a4d.lnk.8.dr
ID:	dr_244
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:51 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939113551118494
Encrypted:	false
Ssdeep:	24:8tphBf9l8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8bA0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_cc5db3a0f8a24f979af728d5365609d8.lnk
Category:	dropped
Dump:	MFDBG_cc5db3a0f8a24f979af728d5365609d8.lnk.8.dr
ID:	dr_894
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:49:59 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.932651599214987
Encrypted:	false
Ssdeep:	24:8LPhBfv8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8LTs0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ccad92900c8c4193b607ef59847cda31.lnk
Category:	dropped
Dump:	MFDBG_ccad92900c8c4193b607ef59847cda31.lnk.8.dr
ID:	dr_951
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:01 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935910492067039
Encrypted:	false
Ssdeep:	24:8dhBfeIl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8dnC0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_cd40846565324e8281f6b0f324b68759.lnk
Category:	dropped
Dump:	MFDBG_cd40846565324e8281f6b0f324b68759.lnk.8.dr
ID:	dr_463
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:27 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.941182727810649
Encrypted:	false
Ssdeep:	24:8thBfEH8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8N8c0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_cd58754fc3a945719ca732a998602fc9.lnk
Category:	dropped
Dump:	MFDBG_cd58754fc3a945719ca732a998602fc9.lnk.8.dr
ID:	dr_342
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:10 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939778650239341
Encrypted:	false
Ssdeep:	24:8QhBfbp8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8CDO0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_cd754b152c07487f891e558fa7520219.lnk
Category:	dropped
Dump:	MFDBG_cd754b152c07487f891e558fa7520219.lnk.8.dr
ID:	dr_965
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:46 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.942512926052345
Encrypted:	false
Ssdeep:	24:8ShBfJe8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8YF0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_cd83b9e0eb2b42e0add1555e4c6bb103.lnk
Category:	dropped
Dump:	MFDBG_cd83b9e0eb2b42e0add1555e4c6bb103.lnk.8.dr
ID:	dr_910
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:00 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.937282697240622
Encrypted:	false
Ssdeep:	24:8EhBfv8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8ms0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_cd9a16a74f3b4674af31b2ca23b5aeef.lnk
Category:	dropped
Dump:	MFDBG_cd9a16a74f3b4674af31b2ca23b5aeef.lnk.8.dr
ID:	dr_922
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:00 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935520582703178
Encrypted:	false
Ssdeep:	24:8khBfv8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Gs0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ce6365559b084014afc5415ac9fb6b32.lnk
Category:	dropped
Dump:	MFDBG_ce6365559b084014afc5415ac9fb6b32.lnk.8.dr
ID:	dr_773
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:55 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.940406882417489
Encrypted:	false
Ssdeep:	24:838hBfOe8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8+m0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ce64f1b1b1fa4b25a0311a1af3166050.lnk
Category:	dropped
Dump:	MFDBG_ce64f1b1b1fa4b25a0311a1af3166050.lnk.8.dr
ID:	dr_188
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:44 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.941722972790462
Encrypted:	false
Ssdeep:	24:8shBfWw48iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8e+e0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_cea6073b703e4a058317a79e3a72153a.lnk
Category:	dropped
Dump:	MFDBG_cea6073b703e4a058317a79e3a72153a.lnk.8.dr
ID:	dr_264
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:52 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.928236219327358
Encrypted:	false
Ssdeep:	24:8uhBf38iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8kU0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ced965accfc543619117890ebe04cf64.lnk
Category:	dropped
Dump:	MFDBG_ced965accfc543619117890ebe04cf64.lnk.8.dr
ID:	dr_1022
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:47 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.940750811514899
Encrypted:	false
Ssdeep:	24:8o9hBft8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:84C0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_cf0bd73e176e42e9bdb0fc27a7891d49.lnk
Category:	dropped
Dump:	MFDBG_cf0bd73e176e42e9bdb0fc27a7891d49.lnk.8.dr
ID:	dr_780
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:55 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939960428054721
Encrypted:	false
Ssdeep:	24:8HhBfB8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8b+0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_cf241dc160b74cf2a83d463ad069cfa7.lnk
Category:	dropped
Dump:	MFDBG_cf241dc160b74cf2a83d463ad069cfa7.lnk.8.dr
ID:	dr_658
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:45 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.933177294923264
Encrypted:	false
Ssdeep:	24:8R9hBf38iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8R900R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_cf43af7575bb460d897f86fe45931f77.lnk
Category:	dropped
Dump:	MFDBG_cf43af7575bb460d897f86fe45931f77.lnk.8.dr
ID:	dr_117
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:43 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9420669018878725
Encrypted:	false
Ssdeep:	24:8qhBfk8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Ap0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_cfd6e741141644d3889916d0882a8b67.lnk
Category:	dropped
Dump:	MFDBG_cfd6e741141644d3889916d0882a8b67.lnk.8.dr
ID:	dr_50
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:39 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.937560658003273
Encrypted:	false
Ssdeep:	24:8vhBfS8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8z30R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d0370c6642344559a3096f792221f32b.lnk
Category:	dropped
Dump:	MFDBG_d0370c6642344559a3096f792221f32b.lnk.8.dr
ID:	dr_741
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:55 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.940406882417488
Encrypted:	false
Ssdeep:	24:8UqhBfOe8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8pm0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d059a33fa80e4293b5146a8e6274690b.lnk
Category:	dropped
Dump:	MFDBG_d059a33fa80e4293b5146a8e6274690b.lnk.8.dr
ID:	dr_171
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:49 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.93974178329664
Encrypted:	false
Ssdeep:	24:8mhBfp8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8sm0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d0a42b37d20a4b66a6f8299696e494ec.lnk
Category:	dropped
Dump:	MFDBG_d0a42b37d20a4b66a6f8299696e494ec.lnk.8.dr
ID:	dr_724
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:50 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.940861557787212
Encrypted:	false
Ssdeep:	24:8BhBfO8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8xr0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d0dafb514152435ba85fef3ee19cab0e.lnk
Category:	dropped
Dump:	MFDBG_d0dafb514152435ba85fef3ee19cab0e.lnk.8.dr
ID:	dr_962
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:46 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.937570511537423
Encrypted:	false
Ssdeep:	24:8VhBfJe8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8FF0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d151d01a270b4c38af8e5299390a154b.lnk
Category:	dropped
Dump:	MFDBG_d151d01a270b4c38af8e5299390a154b.lnk.8.dr
ID:	dr_760
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:50 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939852529568951
Encrypted:	false
Ssdeep:	24:81hBfO8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8lr0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d18148800bd44e0086416b10637da48f.lnk
Category:	dropped
Dump:	MFDBG_d18148800bd44e0086416b10637da48f.lnk.8.dr
ID:	dr_1033
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:52 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.940875665655939
Encrypted:	false
Ssdeep:	24:8XhBfB8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8LO0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d194456edfc2452999383a0243c4bcb0.lnk
Category:	dropped
Dump:	MFDBG_d194456edfc2452999383a0243c4bcb0.lnk.8.dr
ID:	dr_652
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:45 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.944940139710639
Encrypted:	false
Ssdeep:	24:8JhBfw8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8J90R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d1bb165fa30b4a90a1406eee498d999f.lnk
Category:	dropped
Dump:	MFDBG_d1bb165fa30b4a90a1406eee498d999f.lnk.8.dr
ID:	dr_467
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:28 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.94427504058979
Encrypted:	false
Ssdeep:	24:8k2hBfEH8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8D8c0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d1f077e0861b44359694aa86ac4c1f8f.lnk
Category:	dropped
Dump:	MFDBG_d1f077e0861b44359694aa86ac4c1f8f.lnk.8.dr
ID:	dr_945
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:01 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.934099674862207
Encrypted:	false
Ssdeep:	24:8MhBfeIl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8+nC0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d23b69cc2383447fb982c96745391c74.lnk
Category:	dropped
Dump:	MFDBG_d23b69cc2383447fb982c96745391c74.lnk.8.dr
ID:	dr_714
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:46 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.937463530626462
Encrypted:	false
Ssdeep:	24:8rhBfP8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Ps0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d25ffff78ca246d7b68597965c17ceab.lnk
Category:	dropped
Dump:	MFDBG_d25ffff78ca246d7b68597965c17ceab.lnk.8.dr
ID:	dr_991
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:51 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.934148377529595
Encrypted:	false
Ssdeep:	24:8fhBfw8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8D90R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d268c7bcbba1419ab7aaede5978c7a7e.lnk
Category:	dropped
Dump:	MFDBG_d268c7bcbba1419ab7aaede5978c7a7e.lnk.8.dr
ID:	dr_736
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:50 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938002427833172
Encrypted:	false
Ssdeep:	24:8khBfO8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Gr0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d2cc2b0faf374fa9ac65d3168962eaf7.lnk
Category:	dropped
Dump:	MFDBG_d2cc2b0faf374fa9ac65d3168962eaf7.lnk.8.dr
ID:	dr_717
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:54 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.934957469948311
Encrypted:	false
Ssdeep:	24:8chBfUxp8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8ul0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d2dc673412774fd19838c32c3a6c4750.lnk
Category:	dropped
Dump:	MFDBG_d2dc673412774fd19838c32c3a6c4750.lnk.8.dr
ID:	dr_504
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:41 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.937189715497309
Encrypted:	false
Ssdeep:	24:8OhBf+8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8E70R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d35789e73b36439093fc8282c6d719c1.lnk
Category:	dropped
Dump:	MFDBG_d35789e73b36439093fc8282c6d719c1.lnk.8.dr
ID:	dr_400
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:11 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935143297879129
Encrypted:	false
Ssdeep:	24:8thBfM8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Nx0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d38a6d2e704045e1a12ba9d6465e9cdc.lnk
Category:	dropped
Dump:	MFDBG_d38a6d2e704045e1a12ba9d6465e9cdc.lnk.8.dr
ID:	dr_81
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:43 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938542672812984
Encrypted:	false
Ssdeep:	24:8sGhBf08iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Np0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d447c00cecf44d9488253d4c6b16fe71.lnk
Category:	dropped
Dump:	MFDBG_d447c00cecf44d9488253d4c6b16fe71.lnk.8.dr
ID:	dr_716
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:46 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939350499304944
Encrypted:	false
Ssdeep:	24:8JhBfP8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Js0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d49905921b1c437fb0166246505ce1fb.lnk
Category:	dropped
Dump:	MFDBG_d49905921b1c437fb0166246505ce1fb.lnk.8.dr
ID:	dr_313
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:09 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.928649192577889
Encrypted:	false
Ssdeep:	24:8thBf98iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Ni0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d4a1590890a04f499d0caa58cc4f7bec.lnk
Category:	dropped
Dump:	MFDBG_d4a1590890a04f499d0caa58cc4f7bec.lnk.8.dr
ID:	dr_476
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:28 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.943609941468942
Encrypted:	false
Ssdeep:	24:8QhBfvl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8C3C0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d4aa9c81e5d84142b432bf9b01384f40.lnk
Category:	dropped
Dump:	MFDBG_d4aa9c81e5d84142b432bf9b01384f40.lnk.8.dr
ID:	dr_799
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:14 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.94326601237153
Encrypted:	false
Ssdeep:	24:8HphBfeczp8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Je0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d4f1e28a86cd43abb942f5de328ec0ed.lnk
Category:	dropped
Dump:	MFDBG_d4f1e28a86cd43abb942f5de328ec0ed.lnk.8.dr
ID:	dr_203
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:45 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.937337328712323
Encrypted:	false
Ssdeep:	24:8QGhBfQl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8QM30R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d5822b57c88c48f7bb07450f57992d5f.lnk
Category:	dropped
Dump:	MFDBG_d5822b57c88c48f7bb07450f57992d5f.lnk.8.dr
ID:	dr_437
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:27 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936305541420084
Encrypted:	false
Ssdeep:	24:8nPhBfi8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Tn0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d58c2f7caa77410d9888d463a35b45ee.lnk
Category:	dropped
Dump:	MFDBG_d58c2f7caa77410d9888d463a35b45ee.lnk.8.dr
ID:	dr_86
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:39 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.937550170051693
Encrypted:	false
Ssdeep:	24:8VhBfV8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8FK0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d5d2c7dde9cd4444ba3b3bcd92c6dffa.lnk
Category:	dropped
Dump:	MFDBG_d5d2c7dde9cd4444ba3b3bcd92c6dffa.lnk.8.dr
ID:	dr_218
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:41 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.941071981538337
Encrypted:	false
Ssdeep:	24:8QhBfU8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8C50R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d5e062a43dee4c1ba0efaa40c929e25d.lnk
Category:	dropped
Dump:	MFDBG_d5e062a43dee4c1ba0efaa40c929e25d.lnk.8.dr
ID:	dr_355
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:26 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.944275040589791
Encrypted:	false
Ssdeep:	24:8YPhBfW8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8yD0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d682292737b2404f98cb194cbf2d7a6c.lnk
Category:	dropped
Dump:	MFDBG_d682292737b2404f98cb194cbf2d7a6c.lnk.8.dr
ID:	dr_75
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:47 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.931932693127906
Encrypted:	false
Ssdeep:	24:8EhBfnD8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8mo0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d6abd362aa874bb3afcfb9932c44e746.lnk
Category:	dropped
Dump:	MFDBG_d6abd362aa874bb3afcfb9932c44e746.lnk.8.dr
ID:	dr_818
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:15 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.941555951314744
Encrypted:	false
Ssdeep:	24:8jhBfNbD8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Xlc0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d6d3f705877a4d5dbdbe55f0078f6633.lnk
Category:	dropped
Dump:	MFDBG_d6d3f705877a4d5dbdbe55f0078f6633.lnk.8.dr
ID:	dr_163
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:41 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.931363126905163
Encrypted:	false
Ssdeep:	24:8dqphBfjqH8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8dqpLqc0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d6e27dc19c764926a4c9533c2d1404eb.lnk
Category:	dropped
Dump:	MFDBG_d6e27dc19c764926a4c9533c2d1404eb.lnk.8.dr
ID:	dr_976
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:46 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.934191478089299
Encrypted:	false
Ssdeep:	24:83hBfG48iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8ra0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d6fd2c316f6f44ed80569713b08a30b1.lnk
Category:	dropped
Dump:	MFDBG_d6fd2c316f6f44ed80569713b08a30b1.lnk.8.dr
ID:	dr_759
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:54 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.940564983584081
Encrypted:	false
Ssdeep:	24:83hBfUxp8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8rl0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d749aa6443894771aed71c54dcdbfe12.lnk
Category:	dropped
Dump:	MFDBG_d749aa6443894771aed71c54dcdbfe12.lnk.8.dr
ID:	dr_671
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:49 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.931690530545604
Encrypted:	false
Ssdeep:	24:859hBfDD8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:859rQ0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d74dea811c4544e68702619f2f0e7192.lnk
Category:	dropped
Dump:	MFDBG_d74dea811c4544e68702619f2f0e7192.lnk.8.dr
ID:	dr_324
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:09 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.930055759111315
Encrypted:	false
Ssdeep:	24:85hBf98iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Zi0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d7677638331541c29d384b53f96550ee.lnk
Category:	dropped
Dump:	MFDBG_d7677638331541c29d384b53f96550ee.lnk.8.dr
ID:	dr_73
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:39 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.937245400099625
Encrypted:	false
Ssdeep:	24:8aohBfR8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8aq+0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d7788557f463461084769439b4c95751.lnk
Category:	dropped
Dump:	MFDBG_d7788557f463461084769439b4c95751.lnk.8.dr
ID:	dr_917
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:00 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.93693876814321
Encrypted:	false
Ssdeep:	24:82PhBfv8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:82Ts0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d7a16febdd494848a699d5383d1e5b48.lnk
Category:	dropped
Dump:	MFDBG_d7a16febdd494848a699d5383d1e5b48.lnk.8.dr
ID:	dr_325
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:09 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.94141591063575
Encrypted:	false
Ssdeep:	24:8lhBfg8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:81d0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d7c46f9736e74bdf8ee3d247159bb7d4.lnk
Category:	dropped
Dump:	MFDBG_d7c46f9736e74bdf8ee3d247159bb7d4.lnk.8.dr
ID:	dr_1004
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:47 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.933235987714919
Encrypted:	false
Ssdeep:	24:8c0hBfX8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8zE0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d7c6bdc968d148e4884cea716af6b891.lnk
Category:	dropped
Dump:	MFDBG_d7c6bdc968d148e4884cea716af6b891.lnk.8.dr
ID:	dr_524
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:43 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9348221278556945
Encrypted:	false
Ssdeep:	24:8ohBf98iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8qS0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d7e4a9ff581a4baca940ba6f2c9aeb72.lnk
Category:	dropped
Dump:	MFDBG_d7e4a9ff581a4baca940ba6f2c9aeb72.lnk.8.dr
ID:	dr_452
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:27 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.933753473620754
Encrypted:	false
Ssdeep:	24:8HhBfi8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8bn0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d896d82f401c4f359c86ef9aad600b72.lnk
Category:	dropped
Dump:	MFDBG_d896d82f401c4f359c86ef9aad600b72.lnk.8.dr
ID:	dr_255
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:46 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.941540764776787
Encrypted:	false
Ssdeep:	24:8mhBf48iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8sl0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d8cf33e0336f40c68ce809226c63f3a5.lnk
Category:	dropped
Dump:	MFDBG_d8cf33e0336f40c68ce809226c63f3a5.lnk.8.dr
ID:	dr_120
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:39 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935467803065622
Encrypted:	false
Ssdeep:	24:8UhBfR8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8W+0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d8ecca115d024b618e2b7ac1d3cd109c.lnk
Category:	dropped
Dump:	MFDBG_d8ecca115d024b618e2b7ac1d3cd109c.lnk.8.dr
ID:	dr_903
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:18 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9380089900021265
Encrypted:	false
Ssdeep:	24:8vhBfFbD8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8z9c0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_d93a921c27904f018602e47ec9f7be65.lnk
Category:	dropped
Dump:	MFDBG_d93a921c27904f018602e47ec9f7be65.lnk.8.dr
ID:	dr_183
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:48 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.943521954270608
Encrypted:	false
Ssdeep:	24:88qhBf98iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8RC0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_da1e4f8ccbae417893432587d2d9d6d6.lnk
Category:	dropped
Dump:	MFDBG_da1e4f8ccbae417893432587d2d9d6d6.lnk.8.dr
ID:	dr_851
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:17 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936911974585528
Encrypted:	false
Ssdeep:	24:84mhBfV8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:84s60R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_da50214132cf4ecf9199b4cb27b35eb2.lnk
Category:	dropped
Dump:	MFDBG_da50214132cf4ecf9199b4cb27b35eb2.lnk.8.dr
ID:	dr_155
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:40 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.931940238827678
Encrypted:	false
Ssdeep:	24:80hBfU8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:82p0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_da8fb3c233ba4d2d9512810d4de047c7.lnk
Category:	dropped
Dump:	MFDBG_da8fb3c233ba4d2d9512810d4de047c7.lnk.8.dr
ID:	dr_623
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:45 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.943843124294043
Encrypted:	false
Ssdeep:	24:89hBf98iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:89y0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_da98fab3a5c7479a9dbe40d1bb2d6d01.lnk
Category:	dropped
Dump:	MFDBG_da98fab3a5c7479a9dbe40d1bb2d6d01.lnk.8.dr
ID:	dr_433
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:27 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9330883744999054
Encrypted:	false
Ssdeep:	24:8VQhBfi8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8VCn0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_daad120b9e87447fa5f2c40794122154.lnk
Category:	dropped
Dump:	MFDBG_daad120b9e87447fa5f2c40794122154.lnk.8.dr
ID:	dr_559
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:44 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.931954346696401
Encrypted:	false
Ssdeep:	24:8aphBf2p8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8+eO0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_dabc8ec786c647bb82945a67af44f0e2.lnk
Category:	dropped
Dump:	MFDBG_dabc8ec786c647bb82945a67af44f0e2.lnk.8.dr
ID:	dr_116
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:47 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.931932693127906
Encrypted:	false
Ssdeep:	24:80hBfnD8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:82o0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_db0177c0828b4dc49c129371314006c6.lnk
Category:	dropped
Dump:	MFDBG_db0177c0828b4dc49c129371314006c6.lnk.8.dr
ID:	dr_409
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:12 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.928874939457085
Encrypted:	false
Ssdeep:	24:8YhBfi+8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8620R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_db5099a348a64be98b858e3b9b00fdc0.lnk
Category:	dropped
Dump:	MFDBG_db5099a348a64be98b858e3b9b00fdc0.lnk.8.dr
ID:	dr_867
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:17 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.941094740612313
Encrypted:	false
Ssdeep:	24:83mhBfI+8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:83sgT0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_dc12cffcf5674e3dac7864fe65e074e8.lnk
Category:	dropped
Dump:	MFDBG_dc12cffcf5674e3dac7864fe65e074e8.lnk.8.dr
ID:	dr_589
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:48 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939653796098305
Encrypted:	false
Ssdeep:	24:8FGhBfp8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8yG0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_dc8535ec4f724213b4d1bd7019e68b34.lnk
Category:	dropped
Dump:	MFDBG_dc8535ec4f724213b4d1bd7019e68b34.lnk.8.dr
ID:	dr_403
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:11 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9331162885216555
Encrypted:	false
Ssdeep:	24:8RhBfM8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8hx0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_dca227188acb4d00900d40093ea97da1.lnk
Category:	dropped
Dump:	MFDBG_dca227188acb4d00900d40093ea97da1.lnk.8.dr
ID:	dr_734
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:50 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936598350261864
Encrypted:	false
Ssdeep:	24:8DhBfO8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:83r0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_dcc39410dfa5480fa6497fd9a1759e09.lnk
Category:	dropped
Dump:	MFDBG_dcc39410dfa5480fa6497fd9a1759e09.lnk.8.dr
ID:	dr_687
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:45 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.937914440634835
Encrypted:	false
Ssdeep:	24:8X2hBfGI+8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8MuIT0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_dd25dde6927f41fc8d091ec61d7a4a1c.lnk
Category:	dropped
Dump:	MFDBG_dd25dde6927f41fc8d091ec61d7a4a1c.lnk.8.dr
ID:	dr_314
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:09 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.931383468390894
Encrypted:	false
Ssdeep:	24:8aIhBf98iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8ri0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_dd60d4a53b734f768fe171360d6b4407.lnk
Category:	dropped
Dump:	MFDBG_dd60d4a53b734f768fe171360d6b4407.lnk.8.dr
ID:	dr_1025
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:51 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.940173699592388
Encrypted:	false
Ssdeep:	24:8ChBfyQ8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8oaF0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ddaef215b5f94e928806881b30c4c26d.lnk
Category:	dropped
Dump:	MFDBG_ddaef215b5f94e928806881b30c4c26d.lnk.8.dr
ID:	dr_948
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:01 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936649470517497
Encrypted:	false
Ssdeep:	24:87hBfeIl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8/nC0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ddc955f30f9b4f6f99fa4ab917be3982.lnk
Category:	dropped
Dump:	MFDBG_ddc955f30f9b4f6f99fa4ab917be3982.lnk.8.dr
ID:	dr_563
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:48 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.940085712394053
Encrypted:	false
Ssdeep:	24:8m8hBfU+8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8mOcT0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_dde913478f3f4b66b2515de970ea98fb.lnk
Category:	dropped
Dump:	MFDBG_dde913478f3f4b66b2515de970ea98fb.lnk.8.dr
ID:	dr_286
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:52 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.931314424237777
Encrypted:	false
Ssdeep:	24:8GhBf38iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8MU0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_dee55a598a2e4884956b7924d2644937.lnk
Category:	dropped
Dump:	MFDBG_dee55a598a2e4884956b7924d2644937.lnk.8.dr
ID:	dr_998
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:47 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.929988370576785
Encrypted:	false
Ssdeep:	24:8dhBfF+8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8dp0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_def8380d59e54e0f8d0f5f8362f85511.lnk
Category:	dropped
Dump:	MFDBG_def8380d59e54e0f8d0f5f8362f85511.lnk.8.dr
ID:	dr_486
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:28 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.945372056006388
Encrypted:	false
Ssdeep:	24:8nhBfvl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:873C0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_df03a40df7ad40d0819e45451f9c1fae.lnk
Category:	dropped
Dump:	MFDBG_df03a40df7ad40d0819e45451f9c1fae.lnk.8.dr
ID:	dr_337
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:09 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.940304787350428
Encrypted:	false
Ssdeep:	24:8ThBfg8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8nd0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_df463de95cfc4ad6b1346b0de02f2218.lnk
Category:	dropped
Dump:	MFDBG_df463de95cfc4ad6b1346b0de02f2218.lnk.8.dr
ID:	dr_53
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:42 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.934086914766588
Encrypted:	false
Ssdeep:	24:8ahBfe8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8QL0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e005f46db1714f66941dc766c86f6feb.lnk
Category:	dropped
Dump:	MFDBG_e005f46db1714f66941dc766c86f6feb.lnk.8.dr
ID:	dr_808
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:15 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.933974535967082
Encrypted:	false
Ssdeep:	24:8xhBft8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8BC0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e0940e3ad6d54c9798ce1b470d503ef8.lnk
Category:	dropped
Dump:	MFDBG_e0940e3ad6d54c9798ce1b470d503ef8.lnk.8.dr
ID:	dr_305
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:08 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9403188952191535
Encrypted:	false
Ssdeep:	24:8KphBfB8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8ue0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e095a6273b0d41578f3db1061cacdbeb.lnk
Category:	dropped
Dump:	MFDBG_e095a6273b0d41578f3db1061cacdbeb.lnk.8.dr
ID:	dr_501
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:42 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9371385952416755
Encrypted:	false
Ssdeep:	24:8CvhBfo8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8CzV0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e09f473151f143708d16f28544d8e6f9.lnk
Category:	dropped
Dump:	MFDBG_e09f473151f143708d16f28544d8e6f9.lnk.8.dr
ID:	dr_384
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:10 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.94238807191131
Encrypted:	false
Ssdeep:	24:808hBfR8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:80Oe0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e10a0d5600924d7f9711173f58589b12.lnk
Category:	dropped
Dump:	MFDBG_e10a0d5600924d7f9711173f58589b12.lnk.8.dr
ID:	dr_266
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:52 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.928153532521004
Encrypted:	false
Ssdeep:	24:8C9hBf38iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8KU0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e11bd1d4941146a39db31ec8567536fa.lnk
Category:	dropped
Dump:	MFDBG_e11bd1d4941146a39db31ec8567536fa.lnk.8.dr
ID:	dr_58
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:42 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938866260424666
Encrypted:	false
Ssdeep:	24:8NhBfN8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8ty0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e186ad06bd804f24967476b4eab606f8.lnk
Category:	dropped
Dump:	MFDBG_e186ad06bd804f24967476b4eab606f8.lnk.8.dr
ID:	dr_233
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:50 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9389886969774555
Encrypted:	false
Ssdeep:	24:8ShBf+8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Yb0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e20b84685af747ee80c613d4d97e7e0d.lnk
Category:	dropped
Dump:	MFDBG_e20b84685af747ee80c613d4d97e7e0d.lnk.8.dr
ID:	dr_64
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:39 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935710556267493
Encrypted:	false
Ssdeep:	24:8dGhBfS8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8dM30R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e26e8e8c2b0540f4b5c780c6b7c26a0c.lnk
Category:	dropped
Dump:	MFDBG_e26e8e8c2b0540f4b5c780c6b7c26a0c.lnk.8.dr
ID:	dr_89
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:39 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9370443744263355
Encrypted:	false
Ssdeep:	24:852hBfV8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8CK0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e2725ce6fbf2436795ffb62ffcd699cd.lnk
Category:	dropped
Dump:	MFDBG_e2725ce6fbf2436795ffb62ffcd699cd.lnk.8.dr
ID:	dr_223
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:46 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.940122579336755
Encrypted:	false
Ssdeep:	24:81PhBfeh8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:81T/0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e2bf8a46a40e45b0bf0140684ab6c6e7.lnk
Category:	dropped
Dump:	MFDBG_e2bf8a46a40e45b0bf0140684ab6c6e7.lnk.8.dr
ID:	dr_118
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:47 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9217057717469785
Encrypted:	false
Ssdeep:	24:8ehBfnD8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:80o0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e2cba24955d84e648d6095b89866b737.lnk
Category:	dropped
Dump:	MFDBG_e2cba24955d84e648d6095b89866b737.lnk.8.dr
ID:	dr_293
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:53 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.93479936878172
Encrypted:	false
Ssdeep:	24:8XhBfc8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8LR0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e321a888e42246d1a7351c5ebfd84a72.lnk
Category:	dropped
Dump:	MFDBG_e321a888e42246d1a7351c5ebfd84a72.lnk.8.dr
ID:	dr_710
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:54 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.937533644594722
Encrypted:	false
Ssdeep:	24:8ChBfSr8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8oKI0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e326a108ecb64e3085e14c24a660d7e9.lnk
Category:	dropped
Dump:	MFDBG_e326a108ecb64e3085e14c24a660d7e9.lnk.8.dr
ID:	dr_872
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:17 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.934957469948311
Encrypted:	false
Ssdeep:	24:8kXmhBfI+8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8kXsgT0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e39c2d4be5494a23863e8ade3681d4a6.lnk
Category:	dropped
Dump:	MFDBG_e39c2d4be5494a23863e8ade3681d4a6.lnk.8.dr
ID:	dr_429
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:27 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935036316968169
Encrypted:	false
Ssdeep:	24:8HphBf1D8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8HpNQ0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e3a635a7c16f481d91145d23741e11a3.lnk
Category:	dropped
Dump:	MFDBG_e3a635a7c16f481d91145d23741e11a3.lnk.8.dr
ID:	dr_628
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:53 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935018443738094
Encrypted:	false
Ssdeep:	24:8RhBfSr8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8hKI0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e436e92b18fd42119ac65f8b20f4cedb.lnk
Category:	dropped
Dump:	MFDBG_e436e92b18fd42119ac65f8b20f4cedb.lnk.8.dr
ID:	dr_306
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:08 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.933810682049186
Encrypted:	false
Ssdeep:	24:8xhBfB8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Be0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e448970bbd29477e92319460d1bc8f7f.lnk
Category:	dropped
Dump:	MFDBG_e448970bbd29477e92319460d1bc8f7f.lnk.8.dr
ID:	dr_1036
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:51 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939997725195718
Encrypted:	false
Ssdeep:	24:8phBfyQ8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8paF0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e4997006db3d43beaadc2093986766c1.lnk
Category:	dropped
Dump:	MFDBG_e4997006db3d43beaadc2093986766c1.lnk.8.dr
ID:	dr_152
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:44 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938365765191289
Encrypted:	false
Ssdeep:	24:8w2hBf8p8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8wch0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e510074b623e42789af397d94db3b224.lnk
Category:	dropped
Dump:	MFDBG_e510074b623e42789af397d94db3b224.lnk.8.dr
ID:	dr_886
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:18 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9393326260748704
Encrypted:	false
Ssdeep:	24:8B8hBfFbD8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8BO9c0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e51d8e533a3c47a98e68cb1ccb5aa2e7.lnk
Category:	dropped
Dump:	MFDBG_e51d8e533a3c47a98e68cb1ccb5aa2e7.lnk.8.dr
ID:	dr_369
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:10 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.946037155127236
Encrypted:	false
Ssdeep:	24:8ZhBfR8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:85e0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e52b3c00bdc14d389bf596e1f17c8288.lnk
Category:	dropped
Dump:	MFDBG_e52b3c00bdc14d389bf596e1f17c8288.lnk.8.dr
ID:	dr_568
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:44 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.928799926264344
Encrypted:	false
Ssdeep:	24:8MhBfI8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8+V0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e6128621d8704ee88f0f9f8751f4f055.lnk
Category:	dropped
Dump:	MFDBG_e6128621d8704ee88f0f9f8751f4f055.lnk.8.dr
ID:	dr_839
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:16 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.943266012371529
Encrypted:	false
Ssdeep:	24:8TmhBfF8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Ts60R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e6732c3d34c4434ab577f5e64b9359ff.lnk
Category:	dropped
Dump:	MFDBG_e6732c3d34c4434ab577f5e64b9359ff.lnk.8.dr
ID:	dr_52
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:42 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.93550510020662
Encrypted:	false
Ssdeep:	24:8ThBfe8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8nL0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e6c62a64244f441fb5dc87c9bbd1e47a.lnk
Category:	dropped
Dump:	MFDBG_e6c62a64244f441fb5dc87c9bbd1e47a.lnk.8.dr
ID:	dr_359
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:10 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939952207047766
Encrypted:	false
Ssdeep:	24:8Wb2hBfD8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8WwI0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e73e5de0c7954b38a82fe935a886dc3a.lnk
Category:	dropped
Dump:	MFDBG_e73e5de0c7954b38a82fe935a886dc3a.lnk.8.dr
ID:	dr_783
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:55 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938149610849889
Encrypted:	false
Ssdeep:	24:8chBfB8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8u+0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e7783c63bc7e45c6bc81ae741411aa40.lnk
Category:	dropped
Dump:	MFDBG_e7783c63bc7e45c6bc81ae741411aa40.lnk.8.dr
ID:	dr_338
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:26 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.940142920822484
Encrypted:	false
Ssdeep:	24:8BPhBfW8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:85D0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e779db2c10c042fdb17e61ed30c6bcfd.lnk
Category:	dropped
Dump:	MFDBG_e779db2c10c042fdb17e61ed30c6bcfd.lnk.8.dr
ID:	dr_220
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:50 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.940230908020818
Encrypted:	false
Ssdeep:	24:8xhBfKP8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8BC00R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e7eaed14f64c497fbdce24fb9b969c26.lnk
Category:	dropped
Dump:	MFDBG_e7eaed14f64c497fbdce24fb9b969c26.lnk.8.dr
ID:	dr_329
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:09 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.941166202353677
Encrypted:	false
Ssdeep:	24:8JhBfg8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Jd0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e828bb1103fc47478b5baf8c097e150f.lnk
Category:	dropped
Dump:	MFDBG_e828bb1103fc47478b5baf8c097e150f.lnk.8.dr
ID:	dr_172
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:45 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.93179504320091
Encrypted:	false
Ssdeep:	24:8hhBfW8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8RD0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e8979552fa4a4e85b702a01d3cd44f04.lnk
Category:	dropped
Dump:	MFDBG_e8979552fa4a4e85b702a01d3cd44f04.lnk.8.dr
ID:	dr_1007
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:51 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.94427504058979
Encrypted:	false
Ssdeep:	24:8l9hBfyQ8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8l9aF0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e8be84038d194f549112b270022c2dd3.lnk
Category:	dropped
Dump:	MFDBG_e8be84038d194f549112b270022c2dd3.lnk.8.dr
ID:	dr_460
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:28 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.94260091325068
Encrypted:	false
Ssdeep:	24:8Sd9hBfEH8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8ST8c0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e8d9a5a9610748e7aeb1011d3870d093.lnk
Category:	dropped
Dump:	MFDBG_e8d9a5a9610748e7aeb1011d3870d093.lnk.8.dr
ID:	dr_415
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:27 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935683542858943
Encrypted:	false
Ssdeep:	24:8SahBf1D8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8SQNQ0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e9401d77f4e84a148d3f4fea641a205c.lnk
Category:	dropped
Dump:	MFDBG_e9401d77f4e84a148d3f4fea641a205c.lnk.8.dr
ID:	dr_960
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:46 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9383235978566065
Encrypted:	false
Ssdeep:	24:8uhBfJe8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8kF0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e942cdb351be4dd2b9c9c7aac6676aff.lnk
Category:	dropped
Dump:	MFDBG_e942cdb351be4dd2b9c9c7aac6676aff.lnk.8.dr
ID:	dr_807
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:15 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.932918488276036
Encrypted:	false
Ssdeep:	24:8lhBft8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:81C0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_e9d800f0607d4b6c8f9ecc231ff1eea0.lnk
Category:	dropped
Dump:	MFDBG_e9d800f0607d4b6c8f9ecc231ff1eea0.lnk.8.dr
ID:	dr_896
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:49:59 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.931740411729209
Encrypted:	false
Ssdeep:	24:8RphBfv8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Rps0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_eac8906e93cc439ebba661a4dff00dfd.lnk
Category:	dropped
Dump:	MFDBG_eac8906e93cc439ebba661a4dff00dfd.lnk.8.dr
ID:	dr_1032
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:52 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939113551118495
Encrypted:	false
Ssdeep:	24:8ghBfB8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8yO0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_eb4669958ef44724896cc3d462a67254.lnk
Category:	dropped
Dump:	MFDBG_eb4669958ef44724896cc3d462a67254.lnk.8.dr
ID:	dr_134
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:44 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.942512926052347
Encrypted:	false
Ssdeep:	24:8chBfWw48iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8u+e0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ebfe8cade73a4850a370894c531900b9.lnk
Category:	dropped
Dump:	MFDBG_ebfe8cade73a4850a370894c531900b9.lnk.8.dr
ID:	dr_514
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:42 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.942856855149758
Encrypted:	false
Ssdeep:	24:8J9hBfC8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Xn0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ece8984ee16a465d8880fd6e6da94f1b.lnk
Category:	dropped
Dump:	MFDBG_ece8984ee16a465d8880fd6e6da94f1b.lnk.8.dr
ID:	dr_59
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:42 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.941415910635751
Encrypted:	false
Ssdeep:	24:8ahBfN8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Qy0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ed0bf28d96ba4e7a90433560f8efc86c.lnk
Category:	dropped
Dump:	MFDBG_ed0bf28d96ba4e7a90433560f8efc86c.lnk.8.dr
ID:	dr_321
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:09 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.930755236212747
Encrypted:	false
Ssdeep:	24:8SBhBf98iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Sxi0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ed285fff72364bada87ca04536afc6d4.lnk
Category:	dropped
Dump:	MFDBG_ed285fff72364bada87ca04536afc6d4.lnk.8.dr
ID:	dr_62
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:39 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.932677869505028
Encrypted:	false
Ssdeep:	24:8YhBfS8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8630R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_edbe482667e441758fdc21dea76d1595.lnk
Category:	dropped
Dump:	MFDBG_edbe482667e441758fdc21dea76d1595.lnk.8.dr
ID:	dr_393
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:26 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.940702108847514
Encrypted:	false
Ssdeep:	24:8EphBfGy8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Muf0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_eddd5c6b3ac2495c908ba32f04a4fa3d.lnk
Category:	dropped
Dump:	MFDBG_eddd5c6b3ac2495c908ba32f04a4fa3d.lnk.8.dr
ID:	dr_653
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:45 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.933950722728179
Encrypted:	false
Ssdeep:	24:8vphBfc8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8vph0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ee22200383724c299307df580b4ca9e1.lnk
Category:	dropped
Dump:	MFDBG_ee22200383724c299307df580b4ca9e1.lnk.8.dr
ID:	dr_612
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:49 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.937226582440013
Encrypted:	false
Ssdeep:	24:8RhBfp8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8hG0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_eeab86af164245c885f55f60d190dbb9.lnk
Category:	dropped
Dump:	MFDBG_eeab86af164245c885f55f60d190dbb9.lnk.8.dr
ID:	dr_228
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:50 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.942944842348093
Encrypted:	false
Ssdeep:	24:8FhBf+8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Vb0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ef055db1f58e458d8c27b3179234581e.lnk
Category:	dropped
Dump:	MFDBG_ef055db1f58e458d8c27b3179234581e.lnk.8.dr
ID:	dr_964
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:46 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936045345186431
Encrypted:	false
Ssdeep:	24:8ihBfP8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Is0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ef08fd21eb664aa79c1ea5b4f18dc1e6.lnk
Category:	dropped
Dump:	MFDBG_ef08fd21eb664aa79c1ea5b4f18dc1e6.lnk.8.dr
ID:	dr_477
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:28 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939420613273205
Encrypted:	false
Ssdeep:	24:8RhBfvl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8h3C0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ef77917b2c2b4bf49c9312ae8c6ae1e4.lnk
Category:	dropped
Dump:	MFDBG_ef77917b2c2b4bf49c9312ae8c6ae1e4.lnk.8.dr
ID:	dr_1026
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:47 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939690663041005
Encrypted:	false
Ssdeep:	24:8T2hBft8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8TcC0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_efb9fd4e36c1408e8652770eb11d6d97.lnk
Category:	dropped
Dump:	MFDBG_efb9fd4e36c1408e8652770eb11d6d97.lnk.8.dr
ID:	dr_893
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:49:59 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.93693876814321
Encrypted:	false
Ssdeep:	24:8fhBfv8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Ds0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f066faed82d54fb3ac2dc041d211387f.lnk
Category:	dropped
Dump:	MFDBG_f066faed82d54fb3ac2dc041d211387f.lnk.8.dr
ID:	dr_889
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:49:59 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.933772576034458
Encrypted:	false
Ssdeep:	24:8ghBfv8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8ys0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f070b3ef56b04545beb4676e54038d38.lnk
Category:	dropped
Dump:	MFDBG_f070b3ef56b04545beb4676e54038d38.lnk.8.dr
ID:	dr_93
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:43 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9397750303221954
Encrypted:	false
Ssdeep:	24:8YhBfk8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:86p0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f0ef2c9bfc054c6d9c6d9c3d49f65a71.lnk
Category:	dropped
Dump:	MFDBG_f0ef2c9bfc054c6d9c6d9c3d49f65a71.lnk.8.dr
ID:	dr_311
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:09 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9334104777483665
Encrypted:	false
Ssdeep:	24:8j8hBfB8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Ce0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f0f9615c7619495c8da602df4a7117d9.lnk
Category:	dropped
Dump:	MFDBG_f0f9615c7619495c8da602df4a7117d9.lnk.8.dr
ID:	dr_768
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:55 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939164671374125
Encrypted:	false
Ssdeep:	24:8OhBfOe8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Em0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f1b34b6067a24618ac47b9854a2eed8e.lnk
Category:	dropped
Dump:	MFDBG_f1b34b6067a24618ac47b9854a2eed8e.lnk.8.dr
ID:	dr_1046
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:52 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.943302879314231
Encrypted:	false
Ssdeep:	24:8602hBfB8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:860cO0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f22898f3c73549338a5d8adccc3a949c.lnk
Category:	dropped
Dump:	MFDBG_f22898f3c73549338a5d8adccc3a949c.lnk.8.dr
ID:	dr_665
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:49 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.934753581529891
Encrypted:	false
Ssdeep:	24:8DhBfDD8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:83rQ0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f23fc7a81bd3412987a1d0fdfc007332.lnk
Category:	dropped
Dump:	MFDBG_f23fc7a81bd3412987a1d0fdfc007332.lnk.8.dr
ID:	dr_454
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:27 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.942512926052346
Encrypted:	false
Ssdeep:	24:82hBfEH8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8c8c0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f24236f8b25a4e9a81d2ca710d1809b6.lnk
Category:	dropped
Dump:	MFDBG_f24236f8b25a4e9a81d2ca710d1809b6.lnk.8.dr
ID:	dr_874
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:49:58 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.929409691030296
Encrypted:	false
Ssdeep:	24:8jhBfv8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Xs0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f26fb15c1e1a4631a4551e5722b16c44.lnk
Category:	dropped
Dump:	MFDBG_f26fb15c1e1a4631a4551e5722b16c44.lnk.8.dr
ID:	dr_107
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:44 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.93497781143404
Encrypted:	false
Ssdeep:	24:8ahBf/D8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8QnQ0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f28755209ba048569fbf4daf694ab1ce.lnk
Category:	dropped
Dump:	MFDBG_f28755209ba048569fbf4daf694ab1ce.lnk.8.dr
ID:	dr_354
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:26 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936427977972878
Encrypted:	false
Ssdeep:	24:8EhBfW8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8mD0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f335786c4f8d47ceaa9ca13846301356.lnk
Category:	dropped
Dump:	MFDBG_f335786c4f8d47ceaa9ca13846301356.lnk.8.dr
ID:	dr_275
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:52 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.942512926052347
Encrypted:	false
Ssdeep:	24:8ThBf9l8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8nA0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f34e7e1fc69c4e9fb9f088eeafb60680.lnk
Category:	dropped
Dump:	MFDBG_f34e7e1fc69c4e9fb9f088eeafb60680.lnk.8.dr
ID:	dr_585
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:44 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.937729960477121
Encrypted:	false
Ssdeep:	24:8A9hBff8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8A9M0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f380f482b40d4f48b4d28f3c28dcec37.lnk
Category:	dropped
Dump:	MFDBG_f380f482b40d4f48b4d28f3c28dcec37.lnk.8.dr
ID:	dr_196
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:50 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.94612514232557
Encrypted:	false
Ssdeep:	24:8shBf1kD8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8er0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f394e560da884f218d4d174761443775.lnk
Category:	dropped
Dump:	MFDBG_f394e560da884f218d4d174761443775.lnk.8.dr
ID:	dr_380
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:10 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.942081009756598
Encrypted:	false
Ssdeep:	24:8B2hBfR8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:86e0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f3f35018572b4e30beaf27a2130b03a6.lnk
Category:	dropped
Dump:	MFDBG_f3f35018572b4e30beaf27a2130b03a6.lnk.8.dr
ID:	dr_956
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:01 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.934152142890945
Encrypted:	false
Ssdeep:	24:8uhBfeIl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8knC0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f4098c5c0f4b48b9b90efcf8339b120c.lnk
Category:	dropped
Dump:	MFDBG_f4098c5c0f4b48b9b90efcf8339b120c.lnk.8.dr
ID:	dr_992
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:47 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.94427504058979
Encrypted:	false
Ssdeep:	24:8w2hBft8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8wcC0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f42281232a554203a4a99f7e4d319284.lnk
Category:	dropped
Dump:	MFDBG_f42281232a554203a4a99f7e4d319284.lnk.8.dr
ID:	dr_772
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:51 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935102774276154
Encrypted:	false
Ssdeep:	24:8Z9hBf3+8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8HPT0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f470ccf3d44b48a18282adb2bc22ac19.lnk
Category:	dropped
Dump:	MFDBG_f470ccf3d44b48a18282adb2bc22ac19.lnk.8.dr
ID:	dr_805
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:15 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.933332480674299
Encrypted:	false
Ssdeep:	24:82hBfy8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8cn0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f47c171e690d4b0699c72a82229c15cd.lnk
Category:	dropped
Dump:	MFDBG_f47c171e690d4b0699c72a82229c15cd.lnk.8.dr
ID:	dr_802
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:14 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.933813099637434
Encrypted:	false
Ssdeep:	24:8ghBfy8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8yn0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f493e8cfba83467e92a6dc8d60879a01.lnk
Category:	dropped
Dump:	MFDBG_f493e8cfba83467e92a6dc8d60879a01.lnk.8.dr
ID:	dr_241
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:45 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935231285077466
Encrypted:	false
Ssdeep:	24:8ChBfQl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8o30R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f4d26bdc53e642a09298e752a8f87d23.lnk
Category:	dropped
Dump:	MFDBG_f4d26bdc53e642a09298e752a8f87d23.lnk.8.dr
ID:	dr_475
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:28 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.94118272781065
Encrypted:	false
Ssdeep:	24:83hBfvl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8r3C0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f4edaf51c7924e10a088f778e5976e51.lnk
Category:	dropped
Dump:	MFDBG_f4edaf51c7924e10a088f778e5976e51.lnk.8.dr
ID:	dr_176
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:49 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9443630277881265
Encrypted:	false
Ssdeep:	24:8nhBfp8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:87m0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f523f702d3174430bb9d19d9756cbd44.lnk
Category:	dropped
Dump:	MFDBG_f523f702d3174430bb9d19d9756cbd44.lnk.8.dr
ID:	dr_579
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:48 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.941526656908063
Encrypted:	false
Ssdeep:	24:8NhBfU+8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8tcT0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f5341c85c3bf42749041840cb418f84c.lnk
Category:	dropped
Dump:	MFDBG_f5341c85c3bf42749041840cb418f84c.lnk.8.dr
ID:	dr_447
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:14 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.943266012371529
Encrypted:	false
Ssdeep:	24:8KthBfeczp8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Me0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f640051222b6478c9dd5424d8d59753b.lnk
Category:	dropped
Dump:	MFDBG_f640051222b6478c9dd5424d8d59753b.lnk.8.dr
ID:	dr_904
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:18 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938499572253276
Encrypted:	false
Ssdeep:	24:8okGhBfsl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8CEC0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f658052666cb48f980321b1dfd8983c1.lnk
Category:	dropped
Dump:	MFDBG_f658052666cb48f980321b1dfd8983c1.lnk.8.dr
ID:	dr_278
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:53 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.940443749360191
Encrypted:	false
Ssdeep:	24:8dphBfr48iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8LJ0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f730c617283b43f8b1b8782fd73c8827.lnk
Category:	dropped
Dump:	MFDBG_f730c617283b43f8b1b8782fd73c8827.lnk.8.dr
ID:	dr_987
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:51 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935998479265372
Encrypted:	false
Ssdeep:	24:8jhBfw8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8X90R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f75882516e374f43aa308c2a749e88c0.lnk
Category:	dropped
Dump:	MFDBG_f75882516e374f43aa308c2a749e88c0.lnk.8.dr
ID:	dr_641
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:53 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936092700080713
Encrypted:	false
Ssdeep:	24:8dSb9hBfSr8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8dmKI0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f77d0d349bd64140892ec937334c0296.lnk
Category:	dropped
Dump:	MFDBG_f77d0d349bd64140892ec937334c0296.lnk.8.dr
ID:	dr_905
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:19 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935208526003488
Encrypted:	false
Ssdeep:	24:8MEhBfsl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8MmEC0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f7a783f0a3b0495bbd3de794711e9797.lnk
Category:	dropped
Dump:	MFDBG_f7a783f0a3b0495bbd3de794711e9797.lnk.8.dr
ID:	dr_813
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:15 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.942154458887914
Encrypted:	false
Ssdeep:	24:8phBft8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8pC0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f7b4708f420a49658ac3f55bb4da2f31.lnk
Category:	dropped
Dump:	MFDBG_f7b4708f420a49658ac3f55bb4da2f31.lnk.8.dr
ID:	dr_506
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:41 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.940085712394053
Encrypted:	false
Ssdeep:	24:8khBfE8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8GJ0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f86dc83e02cb48b88d9bf5df2f42b3e9.lnk
Category:	dropped
Dump:	MFDBG_f86dc83e02cb48b88d9bf5df2f42b3e9.lnk.8.dr
ID:	dr_721
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:54 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936375655388342
Encrypted:	false
Ssdeep:	24:8I2hBfUxp8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Icl0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f8c4a12a97944dfd8117f7d0308895a5.lnk
Category:	dropped
Dump:	MFDBG_f8c4a12a97944dfd8117f7d0308895a5.lnk.8.dr
ID:	dr_57
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:42 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936305541420085
Encrypted:	false
Ssdeep:	24:8LhBfN8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8vy0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f918a8989fa8404d8e9d19d67633cc51.lnk
Category:	dropped
Dump:	MFDBG_f918a8989fa8404d8e9d19d67633cc51.lnk.8.dr
ID:	dr_217
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:41 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.943266012371529
Encrypted:	false
Ssdeep:	24:8shBfev8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8eN0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f93b0e35a24d485f99ae0c8dc646351a.lnk
Category:	dropped
Dump:	MFDBG_f93b0e35a24d485f99ae0c8dc646351a.lnk.8.dr
ID:	dr_383
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:26 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.939207771933833
Encrypted:	false
Ssdeep:	24:84hBfTl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8aW0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f957bb9da74943bdb46330edfe5f9aa1.lnk
Category:	dropped
Dump:	MFDBG_f957bb9da74943bdb46330edfe5f9aa1.lnk.8.dr
ID:	dr_83
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:43 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.945372056006388
Encrypted:	false
Ssdeep:	24:8MhBf08iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8+p0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f984056428e044859b348d2a07b26830.lnk
Category:	dropped
Dump:	MFDBG_f984056428e044859b348d2a07b26830.lnk.8.dr
ID:	dr_594
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:53 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936254421164453
Encrypted:	false
Ssdeep:	24:8S7hBfc8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8S/R0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_f98804a0cd6840998a6537020e2b674f.lnk
Category:	dropped
Dump:	MFDBG_f98804a0cd6840998a6537020e2b674f.lnk.8.dr
ID:	dr_812
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:15 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.937300031571327
Encrypted:	false
Ssdeep:	24:8zhBft8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8HC0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_fa117d51d4d84c2990b3bd713ecfd142.lnk
Category:	dropped
Dump:	MFDBG_fa117d51d4d84c2990b3bd713ecfd142.lnk.8.dr
ID:	dr_620
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:45 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9396537960983045
Encrypted:	false
Ssdeep:	24:892hBf98iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:89cy0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_fa225c5c8c6a46eca66358d18fff48cd.lnk
Category:	dropped
Dump:	MFDBG_fa225c5c8c6a46eca66358d18fff48cd.lnk.8.dr
ID:	dr_855
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:17 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.941458077970433
Encrypted:	false
Ssdeep:	24:85mhBfV8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:85s60R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_fa6d0b760aac4715b2cbec0dd459c0b7.lnk
Category:	dropped
Dump:	MFDBG_fa6d0b760aac4715b2cbec0dd459c0b7.lnk.8.dr
ID:	dr_788
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:56 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.943032829546429
Encrypted:	false
Ssdeep:	24:8mHhBf08iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8mbZ0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_faba8bbb391a42e0a9e7b81a7d967de5.lnk
Category:	dropped
Dump:	MFDBG_faba8bbb391a42e0a9e7b81a7d967de5.lnk.8.dr
ID:	dr_312
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:09 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.933577499224087
Encrypted:	false
Ssdeep:	24:8uhBf98iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8ki0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_faf31ea11d0e41e5a3a1fbca3187105b.lnk
Category:	dropped
Dump:	MFDBG_faf31ea11d0e41e5a3a1fbca3187105b.lnk.8.dr
ID:	dr_170
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:45 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936072358594983
Encrypted:	false
Ssdeep:	24:8SJhBfW8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8SJD0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_fb22b5a7cc6e4a5d8cedaca1ee7bea24.lnk
Category:	dropped
Dump:	MFDBG_fb22b5a7cc6e4a5d8cedaca1ee7bea24.lnk.8.dr
ID:	dr_738
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:50 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.935094595211742
Encrypted:	false
Ssdeep:	24:8ZhBfO8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:85r0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_fba9ede8f7ed4c72a109bd75eae9bb85.lnk
Category:	dropped
Dump:	MFDBG_fba9ede8f7ed4c72a109bd75eae9bb85.lnk.8.dr
ID:	dr_92
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:39 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.932918488276035
Encrypted:	false
Ssdeep:	24:8qGhBfR8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:85+0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_fbce3ab8ad844b3987c030e282dd30fa.lnk
Category:	dropped
Dump:	MFDBG_fbce3ab8ad844b3987c030e282dd30fa.lnk.8.dr
ID:	dr_63
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:39 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.934088482409039
Encrypted:	false
Ssdeep:	24:8ChBfS8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8o30R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_fbd1fadcac8d4c2784bb3db2ee5eb0ec.lnk
Category:	dropped
Dump:	MFDBG_fbd1fadcac8d4c2784bb3db2ee5eb0ec.lnk.8.dr
ID:	dr_480
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:28 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.928563622967799
Encrypted:	false
Ssdeep:	24:8uqphBfGY8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8lpud0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_fbea7fa699714f67a11920af29246ebd.lnk
Category:	dropped
Dump:	MFDBG_fbea7fa699714f67a11920af29246ebd.lnk.8.dr
ID:	dr_596
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:49 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936919520285301
Encrypted:	false
Ssdeep:	24:8thBfq8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Nv0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_fbee565988024a8eb39c4bda9e966cde.lnk
Category:	dropped
Dump:	MFDBG_fbee565988024a8eb39c4bda9e966cde.lnk.8.dr
ID:	dr_391
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:26 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.945372056006387
Encrypted:	false
Ssdeep:	24:8bhBfGy8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8fuf0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_fc242fdc2f874367ba93f4d856344845.lnk
Category:	dropped
Dump:	MFDBG_fc242fdc2f874367ba93f4d856344845.lnk.8.dr
ID:	dr_958
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:46 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9383235978566065
Encrypted:	false
Ssdeep:	24:8BhBfJe8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8xF0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_fc44f9292ccf4d1ead70ab5716374224.lnk
Category:	dropped
Dump:	MFDBG_fc44f9292ccf4d1ead70ab5716374224.lnk.8.dr
ID:	dr_564
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:44 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.942168996954933
Encrypted:	false
Ssdeep:	24:8+hBfP48iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8UH90R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_fc4da1e4dc0e42809919ec721c4aa1cf.lnk
Category:	dropped
Dump:	MFDBG_fc4da1e4dc0e42809919ec721c4aa1cf.lnk.8.dr
ID:	dr_544
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:47 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.932975646037057
Encrypted:	false
Ssdeep:	24:8ehBfvl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:803C0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_fc58de2bd70c4166a41b792de69d047e.lnk
Category:	dropped
Dump:	MFDBG_fc58de2bd70c4166a41b792de69d047e.lnk.8.dr
ID:	dr_587
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:48 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.933935536190223
Encrypted:	false
Ssdeep:	24:80hBfp8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:82G0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_fc6a04b85f4742d18761c1c44171709b.lnk
Category:	dropped
Dump:	MFDBG_fc6a04b85f4742d18761c1c44171709b.lnk.8.dr
ID:	dr_686
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:45 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.933410504584615
Encrypted:	false
Ssdeep:	24:8bhBfGI+8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8fuIT0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_fcaea971f3614df3b46f3787237996ba.lnk
Category:	dropped
Dump:	MFDBG_fcaea971f3614df3b46f3787237996ba.lnk.8.dr
ID:	dr_446
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:27 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.941591885032419
Encrypted:	false
Ssdeep:	24:8yhBfi8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:84n0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_fcbd6f8c8aec442abee7e3f5d14e845c.lnk
Category:	dropped
Dump:	MFDBG_fcbd6f8c8aec442abee7e3f5d14e845c.lnk.8.dr
ID:	dr_971
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:46 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9436099414689405
Encrypted:	false
Ssdeep:	24:86hBfT8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8wo0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_fcbf874b8a964199a56ff2ea752269dc.lnk
Category:	dropped
Dump:	MFDBG_fcbf874b8a964199a56ff2ea752269dc.lnk.8.dr
ID:	dr_821
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:15 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.936357594900744
Encrypted:	false
Ssdeep:	24:8CGhBfNbD8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8CMlc0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_fcdecea6209c4159a6ad4d17abc33f4b.lnk
Category:	dropped
Dump:	MFDBG_fcdecea6209c4159a6ad4d17abc33f4b.lnk.8.dr
ID:	dr_401
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:11 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.933901086835768
Encrypted:	false
Ssdeep:	24:8ohBfM8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8qx0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_fcf8d790abbc41a78602a0d98dcba51a.lnk
Category:	dropped
Dump:	MFDBG_fcf8d790abbc41a78602a0d98dcba51a.lnk.8.dr
ID:	dr_307
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:08 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9368826533425985
Encrypted:	false
Ssdeep:	24:8NhBfB8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8te0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_fd30e8814c1e478c99f0123a42860820.lnk
Category:	dropped
Dump:	MFDBG_fd30e8814c1e478c99f0123a42860820.lnk.8.dr
ID:	dr_78
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:43 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.942819988207057
Encrypted:	false
Ssdeep:	24:8YhBfk8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:86p0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_fd65c9e76b2d4c35a2480bd50efb9093.lnk
Category:	dropped
Dump:	MFDBG_fd65c9e76b2d4c35a2480bd50efb9093.lnk.8.dr
ID:	dr_181
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:48 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.937695365678459
Encrypted:	false
Ssdeep:	24:8PhBf98iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8TC0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_fd8c0fc36a9841039b7a1bad72fcc1f7.lnk
Category:	dropped
Dump:	MFDBG_fd8c0fc36a9841039b7a1bad72fcc1f7.lnk.8.dr
ID:	dr_175
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:45 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9343674524859695
Encrypted:	false
Ssdeep:	24:8/hBfW8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8jD0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_fdc67670ff6a4b218ed0a69524016ef0.lnk
Category:	dropped
Dump:	MFDBG_fdc67670ff6a4b218ed0a69524016ef0.lnk.8.dr
ID:	dr_60
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:42 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.942870963018484
Encrypted:	false
Ssdeep:	24:8+hBfF8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Ua0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_fdce15cf8ed748709b8797c4e2d8e03f.lnk
Category:	dropped
Dump:	MFDBG_fdce15cf8ed748709b8797c4e2d8e03f.lnk.8.dr
ID:	dr_192
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:40 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.933252563839297
Encrypted:	false
Ssdeep:	24:8SXhBfo8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8SLV0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_fdd56662140b430d88d48dcdf5c3bb73.lnk
Category:	dropped
Dump:	MFDBG_fdd56662140b430d88d48dcdf5c3bb73.lnk.8.dr
ID:	dr_907
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:19 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.937351436581048
Encrypted:	false
Ssdeep:	24:8dhBfsl8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8dEC0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_fe3e22a5cd27431b918c1dfdba8511de.lnk
Category:	dropped
Dump:	MFDBG_fe3e22a5cd27431b918c1dfdba8511de.lnk.8.dr
ID:	dr_319
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:09 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.933577499224086
Encrypted:	false
Ssdeep:	24:8GhBf98iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Mi0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_fea3fd30906f4f4293d9939cd494c87c.lnk
Category:	dropped
Dump:	MFDBG_fea3fd30906f4f4293d9939cd494c87c.lnk.8.dr
ID:	dr_934
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:01 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938700882680655
Encrypted:	false
Ssdeep:	24:8YhBfv8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:86s0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_fec3cee92a4c46719cde09ba7ed190d9.lnk
Category:	dropped
Dump:	MFDBG_fec3cee92a4c46719cde09ba7ed190d9.lnk.8.dr
ID:	dr_451
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:27 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.938155643155864
Encrypted:	false
Ssdeep:	24:86hBfi8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8wn0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_fed91f7c667545fc9facb56716212d13.lnk
Category:	dropped
Dump:	MFDBG_fed91f7c667545fc9facb56716212d13.lnk.8.dr
ID:	dr_1040
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:48 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9433180658521865
Encrypted:	false
Ssdeep:	24:8dhBfc8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8dh0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_fedf3ff26cc84090adf445aafa2b2176.lnk
Category:	dropped
Dump:	MFDBG_fedf3ff26cc84090adf445aafa2b2176.lnk.8.dr
ID:	dr_729
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:50:54 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.9388028690466355
Encrypted:	false
Ssdeep:	24:8/phBfUxp8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8xl0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ff735f8e953e4a16b00999999debd483.lnk
Category:	dropped
Dump:	MFDBG_ff735f8e953e4a16b00999999debd483.lnk.8.dr
ID:	dr_552
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:52:44 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.932732681051679
Encrypted:	false
Ssdeep:	24:8VhBfI8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8FV0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MFDBG_ffb693950192432088179fe25fd0f531.lnk
Category:	dropped
Dump:	MFDBG_ffb693950192432088179fe25fd0f531.lnk.8.dr
ID:	dr_30
Target ID:	8
Process:	C:\Users\user\AppData\Local\Temp\Malewmf\MFDBG.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Sep 25 17:49:58 2024, mtime=Wed Sep 25 17:51:41 2024, atime=Wed Sep 25 17:49:58 2024, length=26112, window=hide
Entropy:	4.94749220750997
Encrypted:	false
Ssdeep:	24:8ihBfF8iVR6lgKhvEhlDBoNRABVDi0RTp1A6LpLgUqygm:8Ia0R6rMhpBoUBxdRd1nYyg
Size:	1135
Whitelisted:	false
Reputation:	timeout

Details

File:	\Device\ConDrv
Category:	dropped
Dump:	ConDrv.10.dr
ID:	dr_1054
Target ID:	10
Process:	C:\ProgramData\EBGDHJECFC.exe
Type:	ASCII text, with CRLF, LF line terminators
Entropy:	2.2845972159140855
Encrypted:	false
Ssdeep:	3:i6vvRyMivvRya:iKvHivD
Size:	33
Whitelisted:	false
Reputation:	timeout

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

IOC Report
file.exe

Files

Processes

URLs

Domains

IPs

Registry

Memdumps

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

IOC Reportfile.exe

Files

Processes

URLs

Domains

IPs

Registry

Memdumps

IOC Report
file.exe