Managed XDR

c-users-user-appdata-r...c-faster-uninstall.lnk — malware analysis report

File info

Filename
c-users-user-appdata-roaming-microsoft-windows-start-menu-programs-startup-baidu-pc-faster-uninstall.lnk
File type
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Normal, ctime=Wed Apr 11 23:34:59 2018, mtime=Mon Nov 25 05:30:16 2024, atime=Wed Apr 11 23:34:59 2018, length=61952, window=hide
File size
1.2 KB
First seen
Last seen

Environment

win7/x64 en

Hashes

SHA1
6d9953a299725a4a265190cc7e550562b3908acb
SHA256
e4789858d7f8b2408bf513ac592dea0c5a27c4b540216f4428d9afbd61a51020
MD5
c837258b7ac15c48b7ea38dfb2d3e131

Signatures

Defense Evasion

T1218 suspicious_cmdline: Executes a suspicious command
T1027.002 unnamed_memory_regions: Code was executed in unnamed regions

Other

unexpected_exception: Unexpected exception
no_graphical_activity: No graphic activity
creates_suspended_process: Creates suspended process
message_box: Displays a message