Windows Analysis Report
https://dormakaba-safelocks.link/Apexx-Calculator

Overview

General Information

Sample URL:	https://dormakaba-safelocks.link/Apexx-Calculator
Analysis ID:	1525238

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Stores files to the Windows start menu directory

Classification

Signatures

Source: https://dormakaba-safe-locks.convertcalculator.com/apexx-ip-calculator/	HTTP Parser: No favicon
Source: https://dormakaba-safe-locks.convertcalculator.com/apexx-ip-calculator/	HTTP Parser: No favicon
Source: https://dormakaba-safe-locks.convertcalculator.com/apexx-ip-calculator/	HTTP Parser: No favicon
Source: https://dormakaba-safe-locks.convertcalculator.com/apexx-ip-calculator/	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.17:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.17:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.17:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.17:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.5.88:443 -> 192.168.2.17:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.160.14:443 -> 192.168.2.17:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.23.209.176:443 -> 192.168.2.17:49772 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: dormakaba-safelocks.link
Source: global traffic	DNS traffic detected: DNS query: dormakaba-safe-locks.convertcalculator.com
Source: global traffic	DNS traffic detected: DNS query: worker.convertstaging.com
Source: global traffic	DNS traffic detected: DNS query: imagedelivery.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.convertcalculator.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49691
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49691 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746

Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.17:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.17:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.17:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.17:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.5.88:443 -> 192.168.2.17:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.160.14:443 -> 192.168.2.17:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.23.209.176:443 -> 192.168.2.17:49772 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@18/35@22/209

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2180 --field-trial-handle=1944,i,9636785370861239824,5136804964622494886,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://dormakaba-safelocks.link/Apexx-Calculator"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2180 --field-trial-handle=1944,i,9636785370861239824,5136804964622494886,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown

Source: Window Recorder

Window detected: More than 3 window changes detected

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Screenshots

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
52.72.49.79	dormakaba-safelocks.link	United States	14618	AMAZON-AESUS	false
1.1.1.1	unknown	Australia	13335	CLOUDFLARENETUS	false
142.250.186.170	unknown	United States	15169	GOOGLEUS	false
76.76.21.123	dormakaba-safe-locks.convertcalculator.com	United States	16509	AMAZON-02US	false
104.18.2.36	imagedelivery.net	United States	13335	CLOUDFLARENETUS	false
76.76.21.142	www.convertcalculator.com	United States	16509	AMAZON-02US	false
76.76.21.241	unknown	United States	16509	AMAZON-02US	false
216.58.206.67	unknown	United States	15169	GOOGLEUS	false
172.217.18.3	unknown	United States	15169	GOOGLEUS	false
142.250.185.100	www.google.com	United States	15169	GOOGLEUS	false
142.250.185.202	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.97.3	unknown	European Union	13335	CLOUDFLARENETUS	false
188.114.96.3	worker.convertstaging.com	European Union	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
142.250.184.206	unknown	United States	15169	GOOGLEUS	false
216.58.212.174	unknown	United States	15169	GOOGLEUS	false
142.250.74.195	unknown	United States	15169	GOOGLEUS	false
66.102.1.84	unknown	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.17

Contacted Domains

Name	IP	Active
a.nel.cloudflare.com	35.190.80.1	true
imagedelivery.net	104.18.2.36	true
worker.convertstaging.com	188.114.96.3	true
dormakaba-safe-locks.convertcalculator.com	76.76.21.123	true
www.google.com	142.250.185.100	true
www.convertcalculator.com	76.76.21.142	true
dormakaba-safelocks.link	52.72.49.79	true

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://dormakaba-safe-locks.convertcalculator.com/apexx-ip-calculator/	false		unknown

ID:	1525238
Product:	CloudBasic
Start time:	22:56:10
Start date:	03.10.2024
Cookbook:	defaultwindowsinteractivecookbook.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS

Name	Type	MD5	SHA1	SHA256
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 3 19:56:41 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	9D5530D114E5FE91BF4A4AFF95CD502B	C051D2EADB508B788188BD16CEDA536EAEB04232	D159F7A56B8FCDE4669784FD246EE26260263FF4F601123D6F3596805DEB3341
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 3 19:56:40 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	9361ED3E645ECC7AA3A6CC7618586E15	B0FC55306EE812808E5548818E905481D2E2365B	D8CE09AF96BA7633B31D2CBB1D035D91D68693A824F85F546F935494E8D9F10A
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:54:41 2023, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	3E7FFB2AA338007490D372CE6137B04C	C5773E88C14309C6B8232B82F597A8F86649D1EA	9DC9340D4BF375FA6692AC75CD44E0FDF2D37905F245E39523176DF3406F76B8
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 3 19:56:40 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	76E8F688909AB1DA23C2318D6261CCA5	AB1301FEF949DFC8FFAA6E664AB8D2006F7BE163	697483BCB049B267A56D436DDB4B71788BCFFE7D3970713FD8BFDB2E9F615980
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 3 19:56:40 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	EFA7FF389770AD350DAC1E988E020C23	D0C4EAE9AD70C68F91D90A649518EF2DCED929B5	3FBC94FBBDA7BE21C87F349F42E8EE9DC1A0E6D48F7B5A8E61102211027A70E0
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 3 19:56:40 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	23D106A527F750E680BD2E5E2D64EE75	74E9FF39F2C245B04478C703B2EBB1F7F3FDEEC6	FED2D276449A03DC11B8A727883F2C98CBCDA0A6BE9F742D097AF539A987D629
Chrome Cache Entry: 101	ISO Media, AVIF Image	85DF4958D3F6ED18867789F70D1E66D7	935774526F58B794D6E7E468AF706C74E72FBF9E	0A9B008240866A2689DDB0678721BD2418FDC560FB453BDB80C5F90782754B64
Chrome Cache Entry: 102	ISO Media, AVIF Image	DC4D7956D51D4A1239EFB67BCA6ED0CB	44AD9A177362AA6603DE8B02A1BBB56BEDFF2829	1777E2545E93A438123867D13ACC5D451299D0568BBE89A90AA845798255718B
Chrome Cache Entry: 103	Unicode text, UTF-8 text, with very long lines (65532), with no line terminators	969B570FC761B042581DF51926C1351C	DFAF0C23B59DC0DC21F67A6BC63B732792118D40	C85443486B1214A839265EE7FE5E0456DA20561147EA650F5A2256008D847A23
Chrome Cache Entry: 104	ISO Media, AVIF Image	B5C1AFD34D51456869993A91656BDD46	5C49A399996D1B612CEE0BFE3F26B7876C9E2A69	D5DABCE7D4210AA285562F513B921CA0ECE84DFFD0E03DEF1675489F424C157B
Chrome Cache Entry: 106	PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced	BB97ADA0A90DE04191B0F88B39FB5619	0AF9D1769D47544B941CDC275A546BA3A0AFA74D	43377C7802F07613D8D74FC421587D227533CBAE02D40474B3E331C7242A31A3
Chrome Cache Entry: 107	Web Open Font Format (Version 2), TrueType, length 7824, version 1.0	AF4D371A10271DAFEB343F1EACE762BC	6D11D743BC3CFB169D70BC86450F18351DC1A905	60BF0ABA6526436F3930C58C12047687FBB6BFF4DD180CCE4613458ED3439EA2
Chrome Cache Entry: 108	PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced	4C90FF6D82D570542ADC1777338A8E34	C2865E7D40F9D85DF72AFA1462CEB85B3252AA62	CF951F3A9B42A45A4F114F2CF5F8E50583E4FD15D716275682BFA5E6C8164360
Chrome Cache Entry: 109	SVG Scalable Vector Graphics image	3CB2D424F1081877FA8F811ED11F8FBE	D65FE1B91A6D91FDABE6DF857AFF32A5DD123DD9	2BDCB9FA5DD542200F23634C45D7AD90D1DBB9252F39CAFCEB81C09FE2383FEE
Chrome Cache Entry: 110	ASCII text, with no line terminators	D71531CCAF0E02DB679345076BA44CE9	A5BE8FA8E7BC168D1275A5459F7F5C4B274255D9	C1EB22DCF69C5A15B59F3B685B8C7283D9A8B5ACB3A9A9EF1F146837E1E8C713
Chrome Cache Entry: 111	MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel	631DC268D624CA75ED22FD73BAE319E7	BC9913B32BB02768794E4D22096D4E385FAF1CFE	EE1F1298338FA41E2191CE235095904F29D1679DB479E9F543E14DD9BF769967
Chrome Cache Entry: 112	Unicode text, UTF-8 text, with very long lines (32599)	349C6A6E39641D4F5C369CE34743A1D8	08FCEEB1AB3FAF2823B853DC9C422D6C863A2558	09D35590A6CD320232B35F0BDDC19331E69D599EA8752B777F914E8822443E0F
Chrome Cache Entry: 76	ASCII text, with very long lines (55494)	1D3E7347DE1D51A0C62C421097302B14	CE3377F47651E8FAFE85E622A13288ABCD6BD19E	C4D0813C06F006575BD4B81C621F37238EF9A714C1C7AB0EF3C724C5B08E8AB2
Chrome Cache Entry: 80	JSON data	8681F41444EC5DE5F6D1FEBE6300F9D7	E81E964E8BCFCD59F2780CA631646EC9765F2609	30562844A46BC2155EC095C5B2BC83FB3D02F888FEB72B83F38E16581315470C
Chrome Cache Entry: 81	PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced	9D4EA315D0011C4C684EB97DAE242B52	A7E2C26FD67B9CA40AA6B5F28857E341B39BDB21	D651C38BDB518C150A4A56F035806686D8DA056C75DD801C9F8094596CF52A64
Chrome Cache Entry: 82	PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced	DFE92A44909D902CD34E75E5DC567651	738BAB052CDB9C83FE18311DC42456A6EEF7BFD6	BBA584DF3699C17AEAEA9D272258644DDCF719FE651BA1793E939F0ED7D16B40
Chrome Cache Entry: 83	ASCII text, with no line terminators	957E6BD86E7BB8F29D838291B6716401	E721F546D89076F05A71FA0D13DE5DD96F193102	3DD0C1587475C66B12537772909D9DA3E398E191461527C48B18CA2B692B845B
Chrome Cache Entry: 84	PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced	7CE767B4C34CD5CAE4B0F26770FEA049	D0B459ACB77FB177DD8A97847BB11568669F3508	27BE20ED376A44E777D49B94F8FAAE97084CBCFE931401368E7006FC76EE56E7
Chrome Cache Entry: 85	ISO Media, AVIF Image	930A95248C314192EE24CD3310F22610	9FA63E45B33AEBE3B131FD7B22455B2CF210BA2B	48BFC0280DFD291A97ADC13F65E8AE54018D0ECDBE2F93DE8E8AB1F8378C823B
Chrome Cache Entry: 86	Web Open Font Format (Version 2), TrueType, length 615828, version 1.0	DC5D7AAE5636974D5E7C08E36F659B0A	2393A0677F3662694E4954D4472107ADD4D0AB26	D2F6430C5B37BF086DABB4C6379AD4BC976047266DA7C008677BB5943BF75CC5
Chrome Cache Entry: 87	HTML document, ASCII text, with very long lines (10747)	2F4FA383CAAE30D6C7BDD891FE8DEB84	2468F16816994E5CFB8273236CDE507891387F40	6426D3B16759A8ABA01CDF19D886C844304C1DBDA0D1B9135E27E7D5E922F2B8
Chrome Cache Entry: 88	PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced	049026FD09CBC73FB6462BD6B70EB597	6D0C05174179BABB2BA6CE78439AC6F63AF95AFB	09B8815139D310A5341B59701EBD5D9A35DFAFA145374AF39C570CC1D00E22F3
Chrome Cache Entry: 89	ISO Media, AVIF Image	3C0B5D4B578F995655201EC249BB8974	6588E8322523FE8221869DBF112B095BCDE2E4F5	57A73565C853CDD8850E1C6789FAE7F2D6FFF43469C164DDD5F53B88ADB6F67F
Chrome Cache Entry: 90	ISO Media, AVIF Image	D48A97A604F3CCFF0DEBB7314FA6612A	139C7548A035EF2F63BAEE9FF41A88C885129D75	48292D822BE2A85C4D6DB19F45A097527027E5CB6620E5ADFF0FAB68F1BB02F2
Chrome Cache Entry: 92	ISO Media, AVIF Image	57586EB2E95C75D82EB863A185468EBD	7FCB702E354B217814D791099BFEC35EDB460BF7	99235E3509C01419A445B23AD1D434A98E991A3733F538FD29BB6B5364824F3B
Chrome Cache Entry: 93	ASCII text, with no line terminators	68934A3E9455FA72420237EB05902327	7CB6EFB98BA5972A9B5090DC2E517FE14D12CB04	FCBCF165908DD18A9E49F7FF27810176DB8E9F63B4352213741664245224F8AA
Chrome Cache Entry: 94	PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced	68EF777986A830248510089AEBC6B661	F627C4C7959D30AD88F333C76CE0798F02F6CE09	A085D92F8422DABA914C13F28632FCD6DE86204677849106407B9B40F3DF4F89
Chrome Cache Entry: 95	ASCII text	27A9207A02A236F50633F29810E61667	401A0448204B681D40A58556EDC17A20539A9E96	1122AE372F9FAAD0733EEB68861EC214DE496B81CAE4EA903BA9D28C58AFF30D
Chrome Cache Entry: 97	ISO Media, AVIF Image	C6AC990005BD61D260E673A21914AF3B	869408183470DABAA700A4636DDBDCC3C9C655D0	6ADB545E93C0851817F8CD40CFF21C38F731859D7B06C8BE7B5212BDE51F69CE
Chrome Cache Entry: 99	PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced	A7D04621431545F150B205F5E3788D49	F68CD6DD10FF23C0A88CFD8B630EDAD5B0870B82	0DACAA5C1E50BBC95F5C251B66D029E13EAEDCB9C6FDF908576B197AD1A9CCF5

Windows Analysis Report
https://dormakaba-safelocks.link/Apexx-Calculator

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Screenshots

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report https://dormakaba-safelocks.link/Apexx-Calculator

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Screenshots

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report
https://dormakaba-safelocks.link/Apexx-Calculator