QuarantineMessage (5)[.]zip

QuarantineMessage (5).zip

SHA256 d47db954c9629c2fefa6b69d3ccd5c3cf88e2fede1ee6f26e88054032f0c64be
MD5 b76749e812aabf7a5d3ae0fe9e3259cb
SHA1 bff3be43fe74644821fcbcfd3700bf6cc2c9ab52
SHA512 db56ed56addeccaa1913bb9289648bb859c89b235734cc6cf18ad0e6936b574674bbfd534274b9ed2633c998bacf97b58be83e6b8dcaede61ea8b550fd152fb3
SSDEEP 1536:hfD9RbSXi/9TMd9iurGvdgpM3PLd8jpSQtQgNy4XHNJVwvdvZ8DvkonYi:1/B/S9iqhiONSgtt3N4vdhYv
TLSH
T14E830256E13BB6C7E042C791FA4D613C1D96CB221384B83A6BE78561BACA373B42C0D1
MD5 SHA1 SHA512 SSDEEP TLSH

Password

1234

dfa8c664-2b8d-4286-cf04-08df22fbfd0a/1cdf335e-06da-f350-24f3-e890c332aef2.eml

SHA256 5e4bbe0e97ad4c3591a18cfa538a8ce6632851424ad60dd25311bf3528394929
MD5 2a8cbc8525b8deca1726ed089d30dd98
SHA1 a3c29573f7c69f14b449515e97a8bf5320c457f8
SHA512 94fedb89fdd83b25c99c7e17080c085d2a166375c0980bbc814358e408d2a289a715513290008ad68a52b740f1a5345b660b6f6f2eeb0fce2608e7753c43c4b6
SSDEEP 3072:e/ZgnghNojszEx/t87ZWe188Em0wJgnbBJar4mW:e/Zgng/EOZQwJm
TLSH
T11FF35C33A6878FEDDFAA0C00A107BFB86D7425CFD226446D758E36A90769961C7C0DB4
MD5 SHA1 SHA512 SSDEEP TLSH

Password

1234

Email Headers

To

[email protected]

From

[email protected]

Return-Path

[email protected]

Date

Mon, 5 Oct 2026 09:16:04 -0700

Subject

[EXTERNAL]New submission and revised statement

Content-Type

multipart/mixed; boundary="000000000000a496b5065d1a3359"

Received

from SA3PR22MB4426.namprd22.prod.outlook.com (2603:10b6:806:382::12) by EA3PR22MB000494.namprd22.prod.outlook.com with HTTPS; Mon, 5 Oct 2026 16:20:25 +0000

from PH7PR02CA0009.namprd02.prod.outlook.com (2603:10b6:510:33d::11) by SA3PR22MB4426.namprd22.prod.outlook.com (2603:10b6:806:382::12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.472.20; Mon, 5 Oct 2026 16:16:20 +0000

from CY4PEPF000392D7.namprd03.prod.outlook.com (2603:10b6:510:33d:cafe::71) by PH7PR02CA0009.outlook.office365.com (2603:10b6:510:33d::11) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.472.20 via Frontend Transport; Mon, 5 Oct 2026 16:16:19 +0000

from mail-pj2-x0c.google.com (2607:f8b0:4864:39::c) by CY4PEPF000392D7.mail.protection.outlook.com (2603:10b6:93f:fff6::d5) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.472.14 via Frontend Transport; Mon, 5 Oct 2026 16:16:18 +0000

by mail-pj2-x0c.google.com with SMTP id 98e67ed59e1d1-3a7d725ca09so668195a91.0 for <[email protected]>; Mon, 05 Oct 2026 09:16:18 -0700 (PDT)

X-Received

by 2002:a17:90b:58c5:b0:3a0:f559:824d with SMTP id 98e67ed59e1d1-3a6ce82b3fbmr8726656a91.50.1791216977206; Mon, 05 Oct 2026 09:16:17 -0700 (PDT)

Received-Spf

Pass (protection.outlook.com: domain of fralichlandscape.com designates 2607:f8b0:4864:39::c as permitted sender) receiver=protection.outlook.com; client-ip=2607:f8b0:4864:39::c; helo=mail-pj2-x0c.google.com; pr=C

Message-Id

<CACf5txEkAx+D=CyP54fmz3p2z+[email protected]>

Extracted URLs

file https://aka.ms/LearnAboutSenderIdentification
file https://app.smartsheet.com/b/form/01a10c4b8a737ff495dc1f93004f5dfb
file https://ci3.googleusercontent.com/mail-sig/AIorK4w0iz5H-55gP_tySM4zhHC_LkcZoR3RaIAQarCb5gJTJaAzhuMSgrgJMO8NTRonmmJXuvcBDhIP38rF]

STMT-000293970.xls

SHA256 6ac691ae2229720764f12a0a397fafede1fd3e48b8599c4648f0942078cf5f88
MD5 1f7dee1879d9aa0985ce72872f1495e2
SHA1 06bd292e87222a50d837938c39ca6f6be1750625
SHA512 bc07275d1e7e90a9b175daef07d7135170ca84c3a71d297874a6eeff27b7a3086ce7f0b9ffd996559249a837da0a1bf4634381ffd8dc9aba92ee2682accb321f
SSDEEP 1536:mSFsv66g3KnF439NKC54kkGfn+cL2XrAAiC10aC07CZ+UlH9f0QyqBzvvt7uBkuQ:mSFsv66g3KnF439NKC54kkGfn+cL2Xra
TLSH
T1A6A35CB7F7B15857F82403711412430251726CAE2A7EF94661C6BE0E1B3EFE8BE3195A
MD5 SHA1 SHA512 SSDEEP TLSH

windows office2003

email-html-2.txt

SHA256 c01ce3aec2938caf80781a0ca36035eb74ef4ddcdd7eda8b236436d290b71cf1
MD5 1fc66da92067a72da1b65dead495f42a
SHA1 535b31887f1a4a4ba9b5648b99e1e500bd68256b
SHA512 a69543aab71d48bc87d7aca7574d0b8eeb604007a45f283751f354a7921793cefbb533c6260acd4e63bc35df457811265f98980fb4c1058e2486c4ba81352820
SSDEEP 192:Px2PUx2Sx2Bx23Bx2QGx2YOBx27OOI8XF:J7BmOTc5OTQV
TLSH
T1B152D517F3C019159E9F4960A543377D7F3991CA9F224D78A9CB6B2E0B4CCE386C2649
MD5 SHA1 SHA512 SSDEEP TLSH

email-plain-1.txt

SHA256 c677b10d7c462ce6e8c8d13c1f77fb8feb7cb4bab92d4ffe466172a482f6a598
MD5 d8951a83e2d7e28f88cb7307f81d2457
SHA1 4be476d81ca78a452e6f97cb6aeccff31b648d82
SHA512 e50a02e780c97564adc9beb335c18df226e3a0e0e9c8af09ae2dc39c7b7a5eaa72ea24f8537ec16c99a3b43497dd2b5d14a9dd02329a99589ee262287507d2e4
TLSH
T1890165FBB9072424697B90E4F70063A7F7A2A4215F085A0AB836C81DA38457B775BE4D
MD5 SHA1 SHA512 TLSH

Sharing

General

Malware Config

Signatures

File Explorer