PBE Security Analysis Report
Disposition
Recommended action: No CAPE indicators were found after filtering. Release is reasonable if the source matches user expectation.
This disposition is based on the v0.2 scoring model calibrated against benign Microsoft binaries. It is informational, not a guarantee.
Drafted for the requester. Adjust greeting/closing as needed.
Thanks for checking with us on https://www.yahoo.com before you opened it.
IT ran the file in our analysis sandbox for 7 minute(s) and 11 seconds. Our analysis rated this at 0.00 out of 10, which we classify as Clean (high confidence). During the analysis, the file launched 1 process(es), contacted 301 network indicator(s), did not drop any files to disk.
Based on what we observed, this file is reasonable to open if it came from a source you recognize and expected.
Please continue to forward anything you are unsure about. Catching it before you open is exactly the right move.
PBE IT Security
| STRONG signatures | 0 signature(s), contributed 0.0 |
|---|---|
| UNBACKED family (capped at 2.0) | raw=0.0, applied=0.0 |
| AMBIGUOUS re-amplification | 0 signature(s), contributed 0.0 (only fires when 2+ STRONG present) |
| UNKNOWN signatures (half weight) | contributed 0.0 |
| Detection floor applied? | no |
| Final v0.2 Score | 0.00 / 10 |
No strong signatures.
No ambiguous signatures.
No unbacked signatures.
No unknown signatures.
| Signature | Sev | Weight | Conf | Score Δ | Description |
|---|---|---|---|---|---|
stealth_network | 1 | 1.0 | 100.0% | 0.0 | Network activity detected but not expressed in monitor API logs |
dllload_suspicious_directory | 2 | 1.0 | 50.0% | 0.0 | A DLL was loaded from a suspicious directory |
No shell_host signatures.
| File name | |
|---|---|
| File type | |
| Size (bytes) | |
| MD5 | |
| SHA1 | |
| SHA256 | |
| VirusTotal | No SHA256 available |
| Task ID | 30 |
|---|---|
| Started | 2026-06-30 15:56:28 |
| Ended | 2026-06-30 16:03:39 |
| Duration (sec) | 431 |
| Package | edge |
| Route | internet |
| Machine | cuckoo1 |
No override active. The model verdict above is the current classification.
Report generated on 06-30-2026 16:05:02 by PBESANDBOX.PBESECURE.COM
