General

  • Target

    http://Received: from CO6PR04MB7683.namprd04.prod.outlook.com (2603:10b6:303:a6::20) by CO1PR04MB8250.namprd04.prod.outlook.com with HTTPS; Thu, 25 Jan 2024 22:08:34 +0000 Received: from DM6PR07CA0102.namprd07.prod.outlook.com (2603:10b6:5:337::35) by CO6PR04MB7683.namprd04.prod.outlook.com (2603:10b6:303:a6::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7228.22; Thu, 25 Jan 2024 22:08:32 +0000 Received: from DS3PEPF000099D4.namprd04.prod.outlook.com (2603:10b6:5:337::4) by DM6PR07CA0102.outlook.office365.com (2603:10b6:5:337::35) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7228.22 via Frontend Transport; Thu, 25 Jan 2024 22:08:31 +0000 Received: from NAM11-CO1-obe.outbound.protection.outlook.com (40.92.18.67) by DS3PEPF000099D4.mail.protection.outlook.com (10.167.17.5) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7228.16 via Frontend Transport; Thu, 25 Jan 2024 22:08:31 +0000 Received: from CYYPR19MB8120.namprd19.prod.outlook.com (2603:10b6:930:b9::21) by BLAPR19MB4178.namprd19.prod.outlook.com (2603:10b6:208:27e::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7228.22; Thu, 25 Jan 2024 22:08:29 +0000 Received: from CYYPR19MB8120.namprd19.prod.outlook.com ([fe80::a2a6:8cfb:54:3843]) by CYYPR19MB8120.namprd19.prod.outlook.com ([fe80::a2a6:8cfb:54:3843%4]) with mapi id 15.20.7228.026; Thu, 25 Jan 2024 22:08:29 +0000 ARC-Seal: i=2; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=pass; b=NHAio45/SmNirjaEqymrSlFZUIK7G9vT1yVvxKPwGQ8QGwix0bZ7EvyAMCjkqKSf83uwAZ0pE5bzjIJIt5Da+3EzzSY3kvcyDlEoYajntTiUzjRqo0JCkmqO1BLYVKJ4sW0hCCi9HuE4O5IeA7U62RvbqEev95B8qvt2MKcQJC6JU+GBe9sQdWMBhIMKyfx8HDbH2FcC/5wLlLlopDi7oK+Dq0defSQYxHNccK6JnionyXln6NeHPqpepTgE06LSLQnyb4urxw1I0mIge3biiDVJRA3O2QpVhXfN7NEPqrFiba4RcZiEBrR28s+MRNx7V2UkvdODfnRxIyz6JiKBLg== ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=hYc+MNVz2sGOZOM6kGgfMPvmF0KGLN4afITjezQQ6tv+KG1ZYvAqHJQdISLZx9j/3SDDyD7MyfD9iRWzleZsJnzTXukUjdk5WhA1wWWlDKVdUvl06I+mPkXk29XtweCGxSTaiNc37HnOTSdYudVxmgyK/W3t1HsAFFyjnRIZpFC0R4WjYox2NVIuhnl/8rakMyyV82YlHcpgI0KfvZZUJGmnT1lbFEfGnH4Og/CjD6VpiEF16c3lBvEiflI9jfYEldpIt+LLBpus/KZwxYxPGtRM7ZoBcwRxW1P5ZLvamkvCtiSgFm0YRsEtnaZelyxx0y9huNy+esGHhYMRnd9XsQ== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=U29v+2wLrRJyGqULdMKqTlvJytdhPn7q6qAc0zLDorA=; b=EeAn+4VwBmg2AArSgsr+f5nM+9djmJ/f32OG36+jpShvktMEgCU7duPT8fMdFmsXJNXC15ujJ0ZlpbTH8YgTUx0h6CMZx2hpsAOdLQINsjglwBW7P7fVGoRTYCgdvZuyksp74hLs2yx4iP761n1YwmMMx6SG/an5i7OPxbY2VYcGIc2XOFrDpPFM0P1VwL9nUUvOCCzkR9mNVPnTrYeSOex/RDqIszh+7qsrNjHnmg042NKi7q8gFzEifXhKg5sikKjTbMDsGNwb2iZ/fq7+GY1148QsDPdwqpM8OBcoA28al64vsbwaBcqdhpuvp7EFwjEnbnTOKT0i9TwW4c7kQA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=U29v+2wLrRJyGqULdMKqTlvJytdhPn7q6qAc0zLDorA=; b=HERSjtv0fPZUewPxspzf7MfpdaT8dBUVWZJIvPhBN1KSXq6GA5uJT5nLjlNheNnFZOj8Ns7LgC54fPS8+ZhK2Zlae4LI5MrQS05bLv9B7DHuvUkBXJ+c2X3GXsca88vR0GuJ99xhojmQ5IjGEEqWZsS9OdcMK5bh5wp/LQ/ys4ZWU11/P3EIZ7MfCpwX4SK6JSL+CmVQkxKatGHQ/U0E2e1GBwerRZP67ywiiVQlBoYLMS8gBPGxzx1eGVakGQa+YemAGsHwbkrjWDOZG3i9g6Q6xoi34lUejTNIZi0QCcKoXP/Oczml0MSK/ltBeghSGl2VY2jLS8Azy6dA5RU1Xg== ARC-Authentication-Results: i=2; mx.microsoft.com 1; spf=pass (sender ip is 40.92.18.67) smtp.rcpttodomain=providence.org smtp.mailfrom=msn.com; dmarc=pass (p=none sp=quarantine pct=100) action=none header.from=msn.com; dkim=pass (signature was verified) header.d=msn.com; arc=pass (0 oda=0 ltdi=1) ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none; dkim=none; arc=none Authentication-Results: spf=pass (sender IP is 40.92.18.67) smtp.mailfrom=msn.com; dkim=pass (signature was verified) header.d=msn.com;dmarc=pass action=none header.from=msn.com;compauth=pass reason=100 Received-SPF: Pass (protection.outlook.com: domain of msn.com designates 40.92.18.67 as permitted sender) receiver=protection.outlook.com; client-ip=40.92.18.67; helo=NAM11-CO1-obe.outbound.protection.outlook.com; pr=C DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=msn.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=U29v+2wLrRJyGqULdMKqTlvJytdhPn7q6qAc0zLDorA=; b=jRolwMki6r90DqQjb44Gbgr3h66CP4WudWJ5lUB8m2uTtMknxLGtx1ShEiAECeuQr3t9vMvKalFmr6P4un7ZGnVgsFpwgu6UC3uE7O1Avd6SkgOdw/LAf0bgdR7TfoUdedxDOQN8Zvjs5Lg0/xKWWPuCozY3zKgQU8eYf8Jl8MIhwPpXaRCTPJ2LMcPsbnw0KmnnooJl4W6iYyObyGbZt0qW0dp40hbf80lNRnlVr0POzsufjEp/T88h3OV0OYnqbImzc9qa1t2Nz4XJOr32aIFLLTS9GOghl0wlNXngzB+HZ3Amlt/3qi/Ut7MwCSetkiwVKbXC2ahDOJQyQafOQw== From: "Beth Lucchi" <[email protected]> To: "Lucchi, Beth A" <[email protected]> Subject: [EXTERNAL] Fwd: (sad news) Jon Chenier Thread-Index: AQHaTvahWTEt0Bux7k+GqjWVNSj5mrDrGA96 Date: Thu, 25 Jan 2024 22:08:29 +0000 Message-ID: <CYYPR19MB8120E028475DAE63F8E903C3C67A2@CYYPR19MB8120.namprd19.prod.outlook.com> References: <AM9PR10MB399117123A1BB485824D8870C27B2@AM9PR10MB3991.EURPRD10.PROD.OUTLOOK.COM> In-Reply-To: <AM9PR10MB399117123A1BB485824D8870C27B2@AM9PR10MB3991.EURPRD10.PROD.OUTLOOK.COM> Accept-Language: en-US Content-Language: en-US x-ms-exchange-messagesentrepresentingtype: 1 x-tmn: [0YMfZ3X9mwIG+vekr1/j7uLGteCJlfxk] x-ms-traffictypediagnostic: CYYPR19MB8120:EE_|BLAPR19MB4178:EE_|DS3PEPF000099D4:EE_|CO6PR04MB7683:EE_|CO1PR04MB8250:EE_ X-MS-Office365-Filtering-Correlation-Id: e107247a-4296-4049-b701-08dc1df22af5 X-Microsoft-Antispam-Untrusted: BCL:0; X-Microsoft-Antispam-Message-Info-Original: NPjGq7y9tg2Qb2IhfdER6QW57nMUPM1CdvAZDjj5H09wxYtEXVV6S2pcl5/rA5mZJZjCq+/RDj6ZZHpWEbb9WfdN8veRQIBgTg2bbjoKNOFGtSoOdli8MqJbP1xxhF+1lZv7cal4GwtOmqQPzYI+uzbmyV9OwOoP1Ptanb+s+921dG80ggSu1UMRRASyLFZuhmilDXB5i2bY8ufQ0PKP83wx8Bi+gTCkaJjDxNyDmR1ln2BHqYPEUPMYoybPjyglRSSgOnChAHtYptUUjgM8EXzH3yfu1OBPn6TAmJwvjFcs9PbwEat0yxWX1CHoXSEpR6Dqf605L+MgslheAqT9zfFP5XeuAjSNDwNgU2iGEtv6v4B3X6YSHMGU/CakQiB+PQbVLHSTCwtC2aes/pe0fellkgdIYZsFnlifEVxNtQjJUvj6O5zu3nqggx5HtcguJLCYb61PEeIIh+7Sm1Q1Jf0Eid6kK7uEmH8wTwZccipor1kPjVN52N24vxOxHr71Q/6ZV5qjdryAj7xtRb8Z8EMBXGAgT/lzr0vGzCzeej6ObFro1HfiH/LPZiyccPj4zB1WmR58O7zdr0IveM2V97I2eHBufEBR4173hSvLLK5Jlob5K468gXoTP1efv56+0JbCswLAPjgNe6uoH1XcnzOqnc9kkT5NoR1zWUP3ABg= X-MS-Exchange-AntiSpam-MessageData-Original-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-Original-0: F5HPA6CZMXx18lHa1mltP21ftvtuShQg0B5klqnuTcYov8x2OjmNHmWMQW6DXw2hwIDtKx51bnN9hCD/a1HHmcyLUagxdhdSSqZo9H25Xi9cNXXbG9tP9VmINMuEEnghoMdv2ns9uTAts7Q82x0NSFjLIiXHZYLRGJawOjYd8NUCiHyh8OYPS1VRZGcG8EcrdjHI3njUpyQJhzAws+KhDwcwZNn/jvWJzfOtWDafli0GhW5MV3nxtDYWP4cLoGm6dft8sJNSH29/0I9h7l21rbkbzM3MSEpkBc6TjlThcpQPIm6DSv/wRIv4b5df4LTEGl9Qv8royqvhv+kiYinoxhf8RKo0yopPM38SunR91eSyitkktXiCAiYXWcRzT8qK+m9NhImVoq+j58JSTMXT0yRutR2YypKhBGGVa9E7lC6JX7TpcUgKctMVJcY6dnfspR+B8ehVxXxs68Mo8Nn5XkVf24NiYDqxHwVOYqXI5QqyoEQODsfQ+8ezWlcwqqNuUoHJrZusqwobchLlnOOI87C6UD8xMBZt1vfyiIa4H5q9ofy2nL4L+VorlcrxN83BV+2eYRM17R+jnA7WYApuZZzt1Hddw0cDqoPwBlTFKl+tqFBa/rnXoWsnWftj5z7HE0TWV9Av7lqX7JGnI6QWkI4TYEDEV2x0pxLTgIgyrhZgS6GRkagnRGM3y/a36aoUXFiCkBDY11tWut5pxYN40i3qZL0dydvcscI/XAaB96uLOWgk+RaZnUfQlkTwoY2n+p+U3Wxh+wADYuE9jDgcvIGhf+QZghhuWJNNQ9uUvlg17fAys9ZDtcvBa8HKe13OG4tWaAW/X10tEGTMpADjd8e7OR+18hI4oX1g8TE3YAvoTn7ycu8Bek9BBvfLnN+bwivMlBAY1i0VL29EV15H0H5u+Ap7q1GaAVCpIenz9kb79DJxv2lEM6dxNYJFRDsRHLvwce3/695AZT+dM/5wrnIxzbNFj7eVQqLDvl7eojaIq5F9TEGViTvjZ6I9a64oZPssvy6FZvAa3+I9K4FAzhmr3ZqeErWemYdMXJn5lnCa0FuWDEpW65nVF7C/H4dJubUzRHoFNE8gaytRTj3KpPQ2t+4x0UYgTcq5rNIKCW6d649ARCa1skHfjOXCUp/pSxDbOgv/XD67bjQfCKs/ElFvUQEgiY3j3c/T7ZAQFBG1J6dNAnay1TeIcMplZX+g+96AjNs2KkBClemvQ0ypPTmp+YA+U1Qz9jpeaRo6XDk= Content-Type: multipart/alternative MIME-Version: 1.0 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BLAPR19MB4178 X-MS-Exchange-Transport-CrossTenantHeadersStamped: CO6PR04MB7683 Return-Path: [email protected] X-MS-Exchange-Organization-ExpirationStartTime: 25 Jan 2024 22:08:31.9805 (UTC) X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit X-MS-Exchange-Organization-ExpirationInterval: 1:00:00:00.0000000 X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit X-MS-Exchange-Organization-Network-Message-Id: e107247a-4296-4049-b701-08dc1df22af5 X-EOPAttributedMessage: 0 X-EOPTenantAttributedMessage: 2e319086-9a26-46a3-865f-615bed576786:0 X-MS-Exchange-Organization-MessageDirectionality: Incoming X-MS-Exchange-Transport-CrossTenantHeadersStripped: DS3PEPF000099D4.namprd04.prod.outlook.com X-MS-Exchange-Transport-CrossTenantHeadersPromoted: DS3PEPF000099D4.namprd04.prod.outlook.com X-MS-PublicTrafficType: Email X-MS-Exchange-Organization-AuthSource: DS3PEPF000099D4.namprd04.prod.outlook.com X-MS-Exchange-Organization-AuthAs: Anonymous X-MS-Office365-Filtering-Correlation-Id-Prvs: 3c336971-7f2d-4a00-1a34-08dc1df2296b X-MS-Exchange-AtpMessageProperties: SA|SL X-MS-Exchange-Organization-SCL: 1 X-Microsoft-Antispam: BCL:0; X-Forefront-Antispam-Report: CIP:40.92.18.67;CTRY:US;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:NAM11-CO1-obe.outbound.protection.outlook.com;PTR:mail-co1nam11olkn2067.outbound.protection.outlook.com;CAT:NONE;SFS:(13230031)(4636009)(230173577357003)(230273577357003)(451199024)(6916009)(166002)(6506007)(86362001)(45080400002)(9686003)(26005)(336012)(33656002)(53546011)(966005)(7636003)(83380400001)(82202003)(356005)(7696005)(82960400001)(1096003)(55016003)(5660300002)(52536014)(34756004)(8676002)(16372002);DIR:INB; X-MS-Exchange-CrossTenant-OriginalArrivalTime: 25 Jan 2024 22:08:31.7773 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: e107247a-4296-4049-b701-08dc1df22af5 X-MS-Exchange-CrossTenant-Id: 2e319086-9a26-46a3-865f-615bed576786 X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000 X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000 X-MS-Exchange-CrossTenant-AuthSource: DS3PEPF000099D4.namprd04.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: Internet X-MS-Exchange-Transport-EndToEndLatency: 00:00:02.9770388 X-MS-Exchange-Processed-By-BccFoldering: 15.20.7228.022 X-Microsoft-Antispam-Mailbox-Delivery: ucf:0;jmr:0;auth:0;dest:I;ENG:(910001)(944506478)(944626604)(920097)(930097)(140003)(1420123); X-Microsoft-Antispam-Message-Info: 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

Score
1/10

Malware Config

Signatures

Files