top title background image
flash

__ EXTERNAL __ .eml

Status: finished
Submission Time: 2023-06-06 17:15:17 +02:00
Clean

Comments

Tags

Details

  • Analysis ID:
    882702
  • API (Web) ID:
    1249688
  • Analysis Started:
    2023-06-06 17:15:18 +02:00
  • Analysis Finished:
    2023-06-06 17:18:34 +02:00
  • MD5:
    0e7c2724d4a7fd642a09152fb8bdf975
  • SHA1:
    fd2013b09273fa3a55c0a956840e135cbb2448b2
  • SHA256:
    0ed963d906095c42fabc5b2ced49f3354fa273ef564b9be8b6aeb23edcfcb032
  • Technologies:

Joe Sandbox

Engine Download Report Detection Info
clean
Score: 0
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01

IPs

IP Country Detection
52.113.194.132
United States
52.109.13.62
United States
1.1.1.1
Australia
Click to see the 3 hidden entries
52.109.76.225
United States
52.109.44.89
United States
52.109.28.62
United States

Dropped files

Name File Type Hashes Detection
C:\Users\user\AppData\Local\Microsoft\FORMS\FRMDATA64.DAT
data
#
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\FAB46BF9-2267-4C1D-9AD7-3A45B7558D0C
XML 1.0 document, ASCII text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Office\16.0\outlook.exe_Rules.xml
XML 1.0 document, ASCII text, with very long lines (65536), with no line terminators
#
Click to see the 12 hidden entries
C:\Users\user\AppData\Local\Microsoft\Office\OTele\outlook.exe.db-shm
data
#
C:\Users\user\AppData\Local\Microsoft\Office\OTele\outlook.exe.db-wal
SQLite Write-Ahead Log, version 3007000
#
C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\089d66ba04a8cec4bdc5267f42f39cf84278bb67.tbres
data
#
C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\5475cb191e478c39370a215b2da98a37e9dc813d.tbres
data
#
C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\9aad439831564ef9f88438a70a63c87e26ef3852.tbres
data
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Outlook\PSFUO2BE\IMG_0515 (002).jpg:Zone.Identifier
ASCII text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Outlook\PSFUO2BE\IMG_0515.jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 20, Exif Standard: [TIFF image data, big-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 1536x2048, components 3
#
C:\Users\user\AppData\Local\Temp\Outlook Logging\OUTLOOK_16_0_13929_20386-20230606T1715490538-3604.etl
DIY-Thermocam raw data (Lepton 2.x), scale 0-0, spot sensor temperature 0.000000, unit celsius, color scheme 0, calibration: offset 0.000000, slope 134217728.000000
#
C:\Users\user\AppData\Local\Temp\olk7A73.tmp
data
#
C:\Users\user\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC
Unicode text, UTF-16, little-endian text, with CRLF line terminators
#
C:\Users\user\Documents\Outlook Files\Outlook Data File - NoEmail.pst
Microsoft Outlook email folder (>=2003)
#
C:\Users\user\Documents\Outlook Files\~Outlook Data File - NoEmail.pst.tmp
data
#