General

  • Target
    uploads_b7c38216-2abf-4b6d-82aa-04fa9fc2cf24.eml
  • Size 465KB
  • Sample261110-rp618sbs8v
  • SHA256 0577606b1774e9764ebc6058328f60f97c5530e369353737c3101d23435dfc48
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • uploads_b7c38216-2abf-4b6d-82aa-04fa9fc2cf24.eml
    .eml 465KB
  • Blank 5.pages
    .zip 327KB
  • Index/AnnotationAuthorStorage-1732635.iwa
    23B
  • Index/CalculationEngine-1732636.iwa
    534B
  • Index/Document.iwa
    15KB
  • Index/DocumentMetadata.iwa
    77B
  • Index/DocumentStylesheet.iwa
    45KB
  • Index/Metadata.iwa
    16KB
  • Index/ViewState.iwa
    824B
  • Metadata/BuildVersionHistory.plist
    .xml 273B
  • Metadata/DocumentIdentifier
    36B
  • Metadata/Properties.plist
    525B
  • preview-micro.jpg
    .jpg 1KB
  • preview-web.jpg
    .jpg 14KB
  • preview.jpg
    .jpg 230KB
  • email-html-2.txt
    .html 583B
  • email-plain-1.txt
    190B

uploads_b7c38216-2abf-4b6d-82aa-04fa9fc2cf24.eml

  • SHA256 0577606b1774e9764ebc6058328f60f97c5530e369353737c3101d23435dfc48
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Date

Mon, 9 Nov 2026 14:49:53 +0000

Subject

Town of Tainter, Dunn County 770th Avenue Road Repair

Content-Type

multipart/mixed; boundary="_004_29D7205D422342BF968C18FD6281452Egmailcom_"

Received

from AT6PR09MB12729.namprd09.prod.outlook.com (2603:10b6:170:108::23) by SJ0PR09MB6302.namprd09.prod.outlook.com with HTTPS; Mon, 9 Nov 2026 14:50:21 +0000

from CYXPR09CA0007.namprd09.prod.outlook.com (2603:10b6:930:d4::25) by AT6PR09MB12729.namprd09.prod.outlook.com (2603:10b6:170:108::23) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.592.10; Mon, 9 Nov 2026 14:50:18 +0000

from SJ1PEPF000037B1.namprd09.prod.outlook.com (2603:10b6:930:d4::4) by CYXPR09CA0007.outlook.office365.com (2603:10b6:930:d4::25) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.592.13 via Frontend Transport; Mon, 9 Nov 2026 14:50:18 +0000

from mail.wisconsin.gov (165.189.205.20) by SJ1PEPF000037B1.mail.protection.outlook.com (10.167.242.133) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.615.4 via Frontend Transport; Mon, 9 Nov 2026 14:50:18 +0000

from APWMAD0P6574.accounts.wistate.us (165.189.205.20) by APWMAD0P6574.accounts.wistate.us (165.189.205.20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.56; Mon, 9 Nov 2026 08:50:13 -0600

from PH0PR09CU001.outbound.protection.outlook.com (40.93.23.60) by APWMAD0P6574.accounts.wistate.us (165.189.205.20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.56 via Frontend Transport; Mon, 9 Nov 2026 08:50:13 -0600

from BL0PR0901CA0030.namprd09.prod.outlook.com (2603:10b6:208:1c0::40) by SA1PR09MB8874.namprd09.prod.outlook.com (2603:10b6:806:28b::21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.592.13; Mon, 9 Nov 2026 14:50:10 +0000

from BN7PEPF0000009A.namprd09.prod.outlook.com (2603:10b6:208:1c0:cafe::a9) by BL0PR0901CA0030.outlook.office365.com (2603:10b6:208:1c0::40) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.592.13 via Frontend Transport; Mon, 9 Nov 2026 14:50:10 +0000

from meamad0p5157.wi.gov (165.189.88.237) by BN7PEPF0000009A.mail.protection.outlook.com (10.167.243.198) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.615.4 via Frontend Transport; Mon, 9 Nov 2026 14:50:10 +0000

from mail-pf1-f175.google.com ([209.85.210.175]) by meamad0p5157.wi.gov with ESMTP/TLS/ECDHE-RSA-AES128-GCM-SHA256; 09 Nov 2026 08:50:09 -0600

by mail-pf1-f175.google.com with SMTP id d2e1a72fcca58-8b6a88e4341so423340b3a.1 for <[email protected]>; Mon, 09 Nov 2026 06:50:09 -0800 (PST)

from smtpclient.apple ([71.89.121.57]) by smtp.gmail.com with ESMTPSA id d2e1a72fcca58-8b648e55303sm1440970b3a.19.2026.11.09.06.50.05 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 09 Nov 2026 06:50:05 -0800 (PST)

X-Received

by 2002:a05:6a00:1701:b0:8a0:3336:4b45 with SMTP id d2e1a72fcca58-8b66c3f0e05mr4029755b3a.12.1794235807700; Mon, 09 Nov 2026 06:50:07 -0800 (PST)

Received-Spf

None (meamad0p5157.wi.gov: no sender authenticity information available from domain of [email protected]) identity=helo; client-ip=209.85.210.175; receiver=meamad0p5157.wi.gov; envelope-from="[email protected]"; x-sender="[email protected]"; x-conformance=spf_only

X-Mailer

iPad Mail (24B119)

Message-Id

<[email protected]>