Windows Analysis Report
https://url.us.m.mimecastprotect.com/s/x3ifCQWrRPfojJWkfxfvFG0Ghq?domain=apollomicsinc-my.sharepoint.com

Overview

General Information

Sample URL:	https://url.us.m.mimecastprotect.com/s/x3ifCQWrRPfojJWkfxfvFG0Ghq?domain=apollomicsinc-my.sharepoint.com
Analysis ID:	1545587

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

HTML body contains low number of good links

HTML title does not match URL

Stores files to the Windows start menu directory

Classification

Signatures

HTML body contains low number of good links

Source: https://security-us.m.mimecastprotect.com/ttpwp/?tkn=3.Pzfol_khYZHmpXi2uluBohLveVmyM4IGWCgKzZwikLUHATUP8RLrZfkNqjj2JruZbiFzfp4UoqZkf3MtoNwmGUs906ZVneV9B4XrfjS7kyTHjgv4hvfHBl5g2uE6C8h_2m1lmDIuIOTIr5tR2jmsbyf428LQT9Qz0s9WMUMWBEBCsziPlhMxvNDJaIRuTqeB.KWSPE8v7U3YyyWTfO5115g#/enrollment?key=f9abf9ab-3177-3a47-b029-81bb065eaf39

HTTP Parser: Number of links: 0

HTML title does not match URL

HTTP Parser: Title: Caris Life Sciences TTP Web Portal does not match URL

Source: https://security-us.m.mimecastprotect.com/ttpwp/?tkn=3.Pzfol_khYZHmpXi2uluBohLveVmyM4IGWCgKzZwikLUHATUP8RLrZfkNqjj2JruZbiFzfp4UoqZkf3MtoNwmGUs906ZVneV9B4XrfjS7kyTHjgv4hvfHBl5g2uE6C8h_2m1lmDIuIOTIr5tR2jmsbyf428LQT9Qz0s9WMUMWBEBCsziPlhMxvNDJaIRuTqeB.KWSPE8v7U3YyyWTfO5115g#/enrollment?key=f9abf9ab-3177-3a47-b029-81bb065eaf39	HTTP Parser: No <meta name="author".. found
Source: https://security-us.m.mimecastprotect.com/ttpwp/?tkn=3.Pzfol_khYZHmpXi2uluBohLveVmyM4IGWCgKzZwikLUHATUP8RLrZfkNqjj2JruZbiFzfp4UoqZkf3MtoNwmGUs906ZVneV9B4XrfjS7kyTHjgv4hvfHBl5g2uE6C8h_2m1lmDIuIOTIr5tR2jmsbyf428LQT9Qz0s9WMUMWBEBCsziPlhMxvNDJaIRuTqeB.KWSPE8v7U3YyyWTfO5115g#/enrollment?key=f9abf9ab-3177-3a47-b029-81bb065eaf39	HTTP Parser: No <meta name="author".. found

Source: https://security-us.m.mimecastprotect.com/ttpwp/?tkn=3.Pzfol_khYZHmpXi2uluBohLveVmyM4IGWCgKzZwikLUHATUP8RLrZfkNqjj2JruZbiFzfp4UoqZkf3MtoNwmGUs906ZVneV9B4XrfjS7kyTHjgv4hvfHBl5g2uE6C8h_2m1lmDIuIOTIr5tR2jmsbyf428LQT9Qz0s9WMUMWBEBCsziPlhMxvNDJaIRuTqeB.KWSPE8v7U3YyyWTfO5115g#/enrollment?key=f9abf9ab-3177-3a47-b029-81bb065eaf39	HTTP Parser: No <meta name="copyright".. found
Source: https://security-us.m.mimecastprotect.com/ttpwp/?tkn=3.Pzfol_khYZHmpXi2uluBohLveVmyM4IGWCgKzZwikLUHATUP8RLrZfkNqjj2JruZbiFzfp4UoqZkf3MtoNwmGUs906ZVneV9B4XrfjS7kyTHjgv4hvfHBl5g2uE6C8h_2m1lmDIuIOTIr5tR2jmsbyf428LQT9Qz0s9WMUMWBEBCsziPlhMxvNDJaIRuTqeB.KWSPE8v7U3YyyWTfO5115g#/enrollment?key=f9abf9ab-3177-3a47-b029-81bb065eaf39	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.16:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.23.209.181:443 -> 192.168.2.16:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.16:49736 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200

Source: global traffic	DNS traffic detected: DNS query: url.us.m.mimecastprotect.com
Source: global traffic	DNS traffic detected: DNS query: security-us.m.mimecastprotect.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.16:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.23.209.181:443 -> 192.168.2.16:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.16:49736 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@16/21@8/56

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2168 --field-trial-handle=1980,i,16656756989231278098,3729110447749152099,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://url.us.m.mimecastprotect.com/s/x3ifCQWrRPfojJWkfxfvFG0Ghq?domain=apollomicsinc-my.sharepoint.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2168 --field-trial-handle=1980,i,16656756989231278098,3729110447749152099,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown

Source: Window Recorder

Window detected: More than 3 window changes detected

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Screenshots

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.181.238	unknown	United States	15169	GOOGLEUS	false
205.139.111.117	url.us.m.mimecastprotect.com	United States	30031	MIMECAST-US	false
1.1.1.1	unknown	Australia	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.186.163	unknown	United States	15169	GOOGLEUS	false
170.10.128.89	security-us.m.mimecastprotect.com	United States	30031	MIMECAST-US	false
173.194.76.84	unknown	United States	15169	GOOGLEUS	false
142.250.184.228	www.google.com	United States	15169	GOOGLEUS	false
170.10.132.87	unknown	United States	30031	MIMECAST-US	false
142.250.184.202	unknown	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.16

Contacted Domains

Name	IP	Active
url.us.m.mimecastprotect.com	205.139.111.117	true
security-us.m.mimecastprotect.com	170.10.128.89	true
www.google.com	142.250.184.228	true

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://security-us.m.mimecastprotect.com/ttpwp/?tkn=3.Pzfol_khYZHmpXi2uluBohLveVmyM4IGWCgKzZwikLUHATUP8RLrZfkNqjj2JruZbiFzfp4UoqZkf3MtoNwmGUs906ZVneV9B4XrfjS7kyTHjgv4hvfHBl5g2uE6C8h_2m1lmDIuIOTIr5tR2jmsbyf428LQT9Qz0s9WMUMWBEBCsziPlhMxvNDJaIRuTqeB.KWSPE8v7U3YyyWTfO5115g#/enrollment?key=f9abf9ab-3177-3a47-b029-81bb065eaf39	false		unknown

ID:	1545587
Product:	CloudBasic
Start time:	17:42:20
Start date:	30.10.2024
Cookbook:	defaultwindowsinteractivecookbook.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS

Name	Type	MD5	SHA1	SHA256
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 30 15:42:52 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	8DB8E9209CC0BDA3F7F73B7CB4CE5AEC	E49635AFEECC20F19940FA6D51A7C03C70A65792	03DF8DD0E118258F88D3ADA7F7CCE7F263B489C66AD1BFE8216CF59732757F30
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 30 15:42:52 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	0BEE9849BFBE9748AC91CBFA076D2FEC	4053E3AE81D52A1C5FC12725E3CCDB6C0F0F05C6	AA1A6CF0E6AB336864F20DC6DA3D1B89B4929F78ADF8073B0D6DCDD85E4B5C70
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	637565C79DAED75D67ED299EACC0F383	2814C97F55E092C5B3CB82764A1F5D3DC2CBC4D2	3FA0DD7338A8A54B143E527BA1EDC34AF23CDBA5398B99950A1BE91D44DAE209
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 30 15:42:52 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	B812B9EB334D4DF8872EABE3073F6FA5	71C5114154E016428F5EB82BD0C9AD1568747348	15E42FD16F921930B83CDF313C4F316990FE7B927CFB8BFDD91E24471B156A49
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 30 15:42:52 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	E4CDEB7072DEB68C728209302A083C65	6A0C480CA40A4EAC9710BBCFDC4C3FCF9752F329	B240341F17FD8E3939354682C383057A5591C11167552D521C32BDA52F767245
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 30 15:42:52 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	EB80905AD95F25B85ED22B58908E16FC	6281DF44943FF03B81EA95A5AEFB9766FE2B9E9B	91D5F1DEDA2079214CB46B147ABE878CC4F65D4B9746C6288530BC4E8FD21203
Chrome Cache Entry: 71	HTML document, ASCII text, with very long lines (4460)	F7A669898A858B0EB93EBB3CCE74526A	B98B8E24743E3FF5B1C5CBC5CED20E2BE4C2E73B	F2027CF2D197787DA664359DD4F5BAED4E1665C21C5669EF444D392D210BFFD0
Chrome Cache Entry: 72	Web Open Font Format (Version 2), TrueType, length 37608, version 1.0	E5231978386520AFD0019A8F5D007882	5E06725A18323ED9372E3E488D4F6DF1A56B3091	71BF29B23EAACC10ACE4DB7E3711FD8F16F199F8F5F8FF5895A0BB0C13546509
Chrome Cache Entry: 73	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 145x120, components 3	01C5C8ECFEA83976892FF6E7C70A4C4E	2B5946F5B5D382DD829F6BCCD83A9C2F4477B075	3C337E1E2A13F18D935637D8BCC58628E91A02AD64761AE77044F38B3C5C039A
Chrome Cache Entry: 75	ASCII text, with very long lines (1492), with no line terminators	3AD4DE7EFFAAC3D0048EF54F8491451F	B807DD524C22B9F6241B1EF14AD6902D5C9D9215	6C36E59711DF161A3D7A2D6FB3E5C17A8767A2F42AEADD9BF166830FDB8ACD5E
Chrome Cache Entry: 78	ASCII text, with no line terminators	4ED71EED77D1C12FE35CBE4D591F22F5	60AC07F101FC34AEB416E9C89BA1D5C9F42ED33B	6CB2B24E7310C9007261AC7DE5BB5BCE1DC1AFD914250345DF157CDC064DFE38
Chrome Cache Entry: 79	ASCII text, with very long lines (2652)	8A328F393CCFDD81019705392BA6A1E1	E9EF00029BBE7735404B46FC4051C31673960D12	C7B6FDE2F4D282442471C3E2A54E22C790DAA94C34A1AE7B19F604E7726278A9
Chrome Cache Entry: 80	ASCII text, with very long lines (65536), with no line terminators	A792F7BBECA0147C515D7ECAA5479B83	B6B6AB4BA9403B8934E36EF587C612F86180D18B	FA9682F24595628BABEF9DAC52F38DCB373C4EBA5E555339CC0666B67EEADDAE
Chrome Cache Entry: 81	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel	44385673EEF386EC121603CD302FD05F	C15A6D61054FFB16D8DF4DA943B545349FC82631	069E8A1E31ABA074CC28BC9D6D54C67495BD42A02115DC232BE7C8D9F83E40A8
Chrome Cache Entry: 82	JSON data	BEC66575E1C280E5041EFB0665141845	42893859EA2DE523193BD7CBD4173E52E9B402C1	0367BF9BDDF7F8747008FA412393A70E505BBFB63A0F6CEF23D319EE932B786A
Chrome Cache Entry: 83	PNG image data, 278 x 28, 8-bit/color RGBA, non-interlaced	07B8BD39C8F13A94F1CCD97F7653D428	FE66A7D2E3671B1543D0386A6FC6B3B33E8D9F1B	8E1D77F207216CE9BEE61B3DF07A4D368A83409EB166816B5A9A197B9FFBEB9C
Chrome Cache Entry: 84	ASCII text, with very long lines (65536), with no line terminators	5F0D3A7E853059D6E1BF72263336A1B6	1D2860B87C7C0DFBC8A4BB72733BFA811108826D	C1C6725B64EE8DDB255DE008BDFFB528CB91B10DE40B67737E0B6DD9C47C6096
Chrome Cache Entry: 87	Web Open Font Format (Version 2), TrueType, length 137104, version 331.-31196	DBF1FC91F1BEEC2915123257EA4D58EF	D2A6D5D31334F6D0831F1C17D26E23FE0AA6A8DB	8D4D29042C23B5FCBED3AF690421776DE0F8AD3D308D66E24A9D80BCC8CCB522
Chrome Cache Entry: 89	ASCII text, with very long lines (4401)	50DC06FBE5ED931646416798DE4090E1	F2579E1FE6EB207B7D1BD1B8DF4916AF7E585950	C9299EE9C6AA69D713F227D07B15DA2F72B638C04E3BE7209363C585007AA049
Chrome Cache Entry: 91	ASCII text, with very long lines (65536), with no line terminators	0AF2F9447CC29B13B5986BB0B2DF1201	18A26C55CB12A8CB5A40738D63EBBADFF9C9E157	DD23B2D3B699647A55640F98703B96CF76473C19969E11AB05653DBDF5ABCE0C
Chrome Cache Entry: 92	HTML document, ASCII text, with CRLF line terminators	EAC0A6A53D4A4353AACE122055B4B4C8	B400D2A40C870DD448EED9B418297C3038B9D023	5FD55DA8747D933410BB637571802ACA2EEDF3314039722E2B9D6F37AFDAD97E

Windows Analysis Report
https://url.us.m.mimecastprotect.com/s/x3ifCQWrRPfojJWkfxfvFG0Ghq?domain=apollomicsinc-my.sharepoint.com

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Screenshots

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report https://url.us.m.mimecastprotect.com/s/x3ifCQWrRPfojJWkfxfvFG0Ghq?domain=apollomicsinc-my.sharepoint.com

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Screenshots

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report
https://url.us.m.mimecastprotect.com/s/x3ifCQWrRPfojJWkfxfvFG0Ghq?domain=apollomicsinc-my.sharepoint.com