top title background image
flash

covid pool waiver.rtf

Status: finished
Submission Time: 2020-06-17 15:20:43 +02:00
Clean

Comments

Tags

Details

  • Analysis ID:
    239238
  • API (Web) ID:
    374345
  • Analysis Started:
    2020-06-17 15:20:44 +02:00
  • Analysis Finished:
    2020-06-17 15:28:11 +02:00
  • MD5:
    d3ee0765f8fb999d8a96de856efdb378
  • SHA1:
    55e7a06bb6085052f59f0261aa475144131cd91e
  • SHA256:
    19a3f8b1d7af40287653193d2ed53b105896669d26d12a67d826f1ffc418bcc4
  • Technologies:

Joe Sandbox

Engine Download Report Detection Info
clean
Score: 0
System: unknown
clean
Score: 0
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Run Condition: Potential for more IOCs and behavior

Dropped files

Name File Type Hashes Detection
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{119796B7-F0F3-4B7B-AC56-C94BFECCFB2B}.tmp
data
#
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{E4F42A7B-8259-49BF-BA94-492CAF26B61B}.tmp
data
#
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\covid pool waiver.LNK
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Tue Jan 28 13:45:43 2020, mtime=Tue Jan 28 13:45:43 2020, atime=Wed Jun 17 12:21:10 2020, length=193, window=hide
#
Click to see the 3 hidden entries
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat
ASCII text, with CRLF line terminators
#
C:\Users\user\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
data
#
C:\Users\user\Desktop\~$vid pool waiver.rtf
data
#