Managed XDR

c-users-user-appdata-r...rams-startup-paint.lnk — malware analysis report

File info

Filename
c-users-user-appdata-roaming-microsoft-windows-start-menu-programs-startup-paint.lnk
File type
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Tue Jul 23 10:58:22 2024, mtime=Tue Jul 23 10:58:22 2024, atime=Tue Jul 23 10:58:22 2024, length=844288, window=hide
File size
753 Bytes
First seen
Last seen

Environment

w10/x64 en

Hashes

SHA1
22f1a054df93770b7c3143458e9a41d4acb458ee
SHA256
7c2b21219dbe969e2285370bbb8b80f90678542995d755a4451f5b38204a0efa
MD5
546717fad2c105854c84c1bc3ba78fbb

Signatures

Other

yara_rules: Static rules
create_process_failed: Could not start the process
no_graphical_activity: No graphic activity
creates_suspended_process: Creates suspended process
test_check_service: Starts services