https://outlook.office365.com/Encryption/retrieve.ashx?recipientemailaddress=ap%40gswater.com&senderemailaddress=grainwater%40radianresearch.com&senderorganization=AwGKAAAAAoYAAAADAQAAAL%2bPwYr4eztBl9bc2pXl9%2f9PVT1XYXR0aG91ckVuZ2luZWVyaW5nLm9ubWljcm9zb2Z0LmNvbSxPVT1NaWNyb3NvZnQgRXhjaGFuZ2UgSG9zdGVkIE9yZ2FuaXphdGlvbnMsREM9TkFNUFIwMUEwMTAsREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTW3U2z0RbcxKmUtxcJ88CKJDTj1Db25maWd1cmF0aW9uLENOPVdhdHRob3VyRW5naW5lZXJpbmcub25taWNyb3NvZnQuY29tLENOPUNvbmZpZ3VyYXRpb25Vbml0cyxEQz1OQU1QUjAxQTAxMCxEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NAQ%3d%3d&messageid=%3cBN6PR0101MB299654BC7612BE90121C8E74BBF09%40BN6PR0101MB2996.prod.exchangelabs.com%3e&cfmRecipient=SystemMailbox%7bD0E409A0-AF9B-4720-92FE-AAC869B0D201%7d%40WatthourEngineering.onmicrosoft.com&consumerEncryption=false&senderorgid=1abee47c-68ca-4166-a776-68475cb4c2d2&urldecoded=1&e4e_sdata=NAlD4xF5G7xsjCpoXLsrqcFvJk6j2vhVIIKSh98po4JUh8sQDhUS2lu3%2f27pCMtALumoYdxBZFlm2ASgEEpgP3NQkpb%2bn1kpgDgOCtqD09%2bG%2bs8heIeUlJTsqucw0Zz9OP7E6qTSm5hEj40bLIFk1SDbdplq9xz8N2Bf2l3k4%2fRwKrYELyDkr67ZSu8gKah3uOJUUSAuDu5R6fJPiAjKampBbQQqlsds8zLPJ%2b3ltpS0fbh4UsFYc2O7%2bUSJWWZyaqmvnnGyYWLFrZs%2fgtJGXGapSFUFyG6YbDvs4i0ZVqatNUFdh07tVh62OLJ9%2fEix1dt9V%2frV%2fLktpIvUxQ6RgA%3d%3d

Status: finished

Submission Time: 2021-08-03 23:32:07 +02:00

Clean

Comments

Details

Analysis ID:
458973
API (Web) ID:
826542
Analysis Started:

2021-08-03 23:32:07 +02:00
Analysis Finished:

2021-08-03 23:37:13 +02:00
Technologies:

Engines
IOCs

Joe Sandbox

Engine	Download Report	Detection	Info
	Full Report Management Report IOC Report	clean Score: 1	System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01

IPs

IP	Country	Detection
40.101.137.66	United States
216.58.208.129	United States
216.58.208.174	United States
Click to see the 5 hidden entries
216.58.205.77	United States
239.255.255.250	Reserved
192.229.221.185	United States
152.199.21.175	United States
15.236.176.210	United States

Domains

Name	IP	Detection
assets.onestore.ms	0.0.0.0
amp.azure.net	0.0.0.0
login.microsoftonline.com	0.0.0.0
Click to see the 16 hidden entries
support.content.office.net	0.0.0.0
clients2.google.com	0.0.0.0
static2.sharepointonline.com	0.0.0.0
clients2.googleusercontent.com	0.0.0.0
mem.gfx.ms	0.0.0.0
outlook.office365.com	0.0.0.0
ajax.aspnetcdn.com	0.0.0.0
sni1gl.wpc.gammacdn.net	152.199.21.175
r1.res.office365.com	0.0.0.0
logincdn.msauth.net	0.0.0.0
googlehosted.l.googleusercontent.com	216.58.208.129
clients.l.google.com	216.58.208.174
HHN-efz.ms-acdc.office.com	40.101.137.66
cs1227.wpc.alphacdn.net	192.229.221.185
microsoftwindows.112.2o7.net	15.236.176.210
accounts.google.com	216.58.205.77

URLs

Name	Detection
https://logincdn.msauth.net/16.000/content/js/MeControl_EgJbqJOU_WgTDwJ3YZdEcg2.jsaD
https://mem.gfx.ms/scripts/me/MeControl/10.21162.3/en-US/meBoot.min.js
https://ajax.aspnetcdn.com/
Click to see the 67 hidden entries
https://login.microsoftonline.com/common/oauth2/authorize?response_mode=form_post&response_type=id_t
https://ajax.aspnetcdn.com/ajax/jQuery/jquery-1.12.4.min.js
https://mem.gfx.ms/scripts/me/MeControl/10.21162.3/de-DE/meBoot.min.jsaD
https://r1.res.office365.com/owa/prem/15.20.4373.26/resources/images/0/favicon.ico
https://r1.res.office365.com/owa/prem/15.20.4373.26/resources/images/0/favicon.icod
https://mem.gfx.ms
https://outlook.office365.com/Encryption/retrieve.ashx?recipientemailaddress=ap%40gswater.com&sender
https://outlook.office365.com/Encryption/OTPSend.ashx?itemID=E4E_M_91d82880-d398-4e45-87e4-14d1f09b1
https://office365.com/
https://mem.gfx.ms/meversion?partner=SMCConvergence&market=en-us&uhf=1
https://hangouts.google.com/
https://www.google.com;
https://mem.gfx.ms/meversion?partner=OfficeProducts&market=de-ch&uhf=1
https://payments.google.com/payments/v4/js/integrator.js
https://support.google.com/chromecast/troubleshooter/2995236
https://amp.azure.net/libs/amp/1.8.0/azuremediaplayer.min.jsaD
https://clients2.google.com/service/update2/crx
https://feedback.googleusercontent.com
https://www.google.com/
https://logincdn.msauth.net
https://mem.gfx.ms/scripts/me/MeControl/10.21162.3/de-DE/meCore.min.jsaD
https://mem.gfx.ms/meversion?partner=SMCConvergence&market=en-us&uhf=1aD
https://outlook.office365.com/Encryption/OTPSigninPage.aspx?itemID=E4E_M_91d82880-d398-4e45-87e4-14d1f09b1851&OTPMessageId=a557b07c-3e5d-4f44-9102-c532f82c6ab9%40MW2PR0102MB3531.prod.exchangelabs.com&OTPReferenceId=6261
https://clients2.googleusercontent.com
https://login.microsoftonline.comh
https://amp.azure.net/libs/amp/1.8.0/azuremediaplayer.min.jsa
https://support.google.com/chromecast/answer/2998456
https://r1.res.office365.com/
https://outlook.office365.com/Encryption/OTPSigninPage.aspx?itemID=E4E_M_91d82880-d398-4e45-87e4-14d
https://amp.azure.net/libs/amp/1.8.0/azuremediaplayer.min.js
https://ajax.aspnetcdn.com/ajax/jQuery/jquery-1.9.1.min.jsaD
https://identity.nel.measure.office.net/api/report?catId=GW
https://static2.sharepointonline.com/files/fabric/office-ui-fabric-js/1.2.0/js/fabric.min.jsaD
https://outlook.office365.com/
https://www.google.com
https://live.com/3
https://mem.gfx.ms/scripts/me/MeControl/10.21162.3/de-DE/meCore.min.js
https://csp.withgoogle.com/csp/report-to/downloads-lorryc
https://consentreceiverfd-prod.azurefd.net/v1
https://sandbox.google.com/payments/v4/js/integrator.js
https://ajax.aspnetcdn.com/ajax/jQuery/jquery-1.9.1.min.js
http://amp.azure.net/libs/amp/
https://mem.gfx.ms/scripts/me/MeControl/10.21162.3/de-DE/meBoot.min.js
https://mem.gfx.ms/scripts/me/MeControl/10.21162.3/en-US/meBoot.min.jsaD
https://outlook.office365.com/Encryption/OTPSigninPage.aspx
https://ajax.aspnetcdn.com
https://mem.gfx.ms/scripts/me/MeControl/10.21162.3/en-US/meCore.min.jsaD
https://play.google.com
https://outlook.office365.com/Encryption/default.aspx?itemID=E4E_M_91d82880-d398-4e45-87e4-14d1f09b1
https://login.microsoftonline.com/
https://static2.sharepointonline.com/files/fabric/office-ui-fabric-js/1.2.0/js/fabric.min.js
https://ogs.google.com
https://dns.google
https://ajax.aspnetcdn.com/ajax/jQuery/jquery-1.12.4.min.jsaD
https://mem.gfx.ms/meversion?partner=MSHomePage&market=de-ch&uhf=1
https://clients2.google.com
https://logincdn.msauth.net/16.000/content/js/MeControl_EgJbqJOU_WgTDwJ3YZdEcg2.js
https://csp.withgoogle.com/csp/report-to/downloads-lorry
https://outlook.office365.com/Encryption/OTPSigninPage.aspx?itemID=E4E_M_91d82880-d398-4e45-87e4-14d1f09b1851&OTPMessageId=35fe9d4e-7cc6-4b62-855d-ffa889425e4e%40MW2PR0102MB3531.prod.exchangelabs.com&OTPReferenceId=4473
https://static2.sharepointonline.com/files/fabric/office-ui-fabric-js/1.2.0/js/fabric.min.jsa
https://static2.sharepointonline.com
https://apis.google.com
https://static2.sharepointonline.com/
https://accounts.google.com
https://mem.gfx.ms/scripts/me/MeControl/10.21162.3/en-US/meCore.min.js
https://login.microsoftonline.com
https://outlook.office365.com/Encryption/authenticationpage.aspx?st=Microsoft&ru=https%3a%2f%2foutlo

Dropped files

Name	File Type	Hashes
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\edce433eec3e6459_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_metadata\computed_hashes.json	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG.old. (copy)	ASCII text	#
Click to see the 97 hidden entries
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\000003.log	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG.old (copy)	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\000003.log	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Current Tabs	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Current Session	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cookies-journal	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cookies	SQLite 3.x database, last written using SQLite version 3032001	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\f990a944bf0059f7_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\8520.615.0.5_1\_metadata\computed_hashes.json	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\e76eeaeb7f6700e1_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\e562ecd571f64bac_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\e4b9b26cef092fbf_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\e3e88e3254f8115d_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\dfb81c1b3493e456_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\da5d5e3543c44acc_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\d2f1203102966a36_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\bba728cf7d8d85ff_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\b595a7abbf56db39_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\b20b274cdd4d9114_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\b180e6523891105c_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History-journal	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences (copy)	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\LOG.old.7 (copy)	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Persistent Statemp (copy)	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Persistent Statea (copy)	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Action Predictor-journal	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Action Predictor	SQLite 3.x database, last written using SQLite version 3032001	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG.old (copy)	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\000003.log	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Last Tabske (copy)	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Last Session. (copy)	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\aff8b63bdc36cb2b_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	SQLite 3.x database, last written using SQLite version 3032001	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\LOG.old.d (copy)	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\EventDB\LOG.old (copy)	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\EventDB\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG.old (copy)	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\000003.log	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Favicons-journal	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Favicons	SQLite 3.x database, last written using SQLite version 3032001	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\7b8d1cde-8e11-45d9-a452-83da7f69e15f.tmp	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\0dc8e4beee7ad97a_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\08f1a8bfdd0963ec_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\07e591cc9237b16e_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\07018f0058501c54_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase\LOG.old (copy)	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase\LOG.old (copy)	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\9f902b39-2e69-4be4-b41c-97c747353afa.tmp	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\99511c22-5d76-4cbf-af42-17ec31a106ff.tmp	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\88ff584c-be93-4054-abeb-1f3c399e4dcb.tmp	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\8292e245-de15-4a9b-a5ac-37bf54bf0ec5.tmp	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\0fa6b51446c8bf26_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\74fef32d-db62-40ef-93c7-89bd2c2c8141.tmp	UTF-8 Unicode text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\67606d7d-aa9d-4fc8-85ec-570432687f68.tmp	very short file (no magic)	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\5ef90ca6-f568-4f43-b106-4e7725230326.tmp	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\4fb7962b-d760-4cde-b891-f422da9bd01b.tmp	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\415ddf19-0564-4f35-b4b8-62482e9ee79d.tmp	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\361b6e30-734e-4d00-941f-733b89b7075a.tmp	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\8fb7abc0-17e1-4c42-848b-3d04112069ab.tmp	SysEx File -	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\6098a914-205a-4d5a-aaa7-704c6e64a986.tmp	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\39eec20c-825c-4532-8a97-99c87a155249.tmp	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\19539538-d8b1-4dc4-a6f1-0a44e45145d3.tmp	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\59a8cca6e4f3998e_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\a8edac07534ab3ec_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\a638cd841fb21f98_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\91e887711a548594_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\8f3c2e2c260a7099_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\8bd751b01a0ac2c6_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\8a41173cbadc68f7_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\87c9707040e653d1_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\87aef5dbae583360_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\7801a9a904161a21_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\6a8c63844138b23f_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\6424745969b4f2a1_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\5e26752cdd389193_0	data	#
C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\4ac2f448771ab57b_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\42019e3973afeed0_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\2ca3f69ffae31103_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\2ba56d1e276a69f0_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\29fd944161e42a84_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\2847712ffa08e54e_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\282edb9c7e8884e8_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\1cadb05993d4cd38_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\185fb8be4e716935_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\166ee82c52b87e97_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\10048766a3a6676d_0	data	#

Comments

Tags

Available tags:

Details

Joe Sandbox

IPs

Domains

URLs

Dropped files

Comments

Tags

Available tags:

Details

Joe Sandbox

IPs

Domains

URLs

Dropped files

Search started