General

  • Target

    http://Received: from VI0PR06MB9731.eurprd06.prod.outlook.com (2603:10a6:800:238::6) by DB9PR06MB7434.eurprd06.prod.outlook.com with HTTPS; Thu, 15 Aug 2024 16:00:08 +0000 Received: from AM5PR0601CA0077.eurprd06.prod.outlook.com (2603:10a6:206::42) by VI0PR06MB9731.eurprd06.prod.outlook.com (2603:10a6:800:238::6) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7849.22; Thu, 15 Aug 2024 16:00:05 +0000 Received: from AM2PEPF0001C711.eurprd05.prod.outlook.com (2603:10a6:206:0:cafe::50) by AM5PR0601CA0077.outlook.office365.com (2603:10a6:206::42) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7849.23 via Frontend Transport; Thu, 15 Aug 2024 16:00:05 +0000 Authentication-Results: spf=fail (sender IP is 143.55.150.29) smtp.mailfrom=eu2-mail.concursolutions.com; dkim=none (message not signed) header.d=none;dmarc=fail action=oreject header.from=eu2-mail.concursolutions.com;compauth=none reason=451 Received-SPF: Fail (protection.outlook.com: domain of eu2-mail.concursolutions.com does not designate 143.55.150.29 as permitted sender) receiver=protection.outlook.com; client-ip=143.55.150.29; helo=mx08-00661e01.pphosted.com; Received: from mx08-00661e01.pphosted.com (143.55.150.29) by AM2PEPF0001C711.mail.protection.outlook.com (10.167.16.181) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7849.8 via Frontend Transport; Thu, 15 Aug 2024 16:00:05 +0000 Received: from pps.filterd (m0365397.ppops.net [127.0.0.1]) by mx08-00661e01.pphosted.com (8.18.1.2/8.18.1.2) with ESMTP id 47FDMQUE031882 for <[email protected]>; Thu, 15 Aug 2024 16:00:04 GMT Authentication-Results-Original: ppops.net; spf=pass [email protected]; dmarc=pass header.from=eu2-mail.concursolutions.com Received: from eu2-mail.concursolutions.com (eu2-mail.concursolutions.com [3.64.98.8]) by mx08-00661e01.pphosted.com (PPS) with ESMTPS id 410xkt91je-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for <[email protected]>; Thu, 15 Aug 2024 16:00:04 +0000 (GMT) Received: from smtp-cognos.service.cnqr.tech (ip-10-105-0-10.eu-central-1.compute.internal [10.105.0.10]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by eu2-mail.concursolutions.com (Postfix) with ESMTPSA id 80467AD for <[email protected]>; Thu, 15 Aug 2024 16:00:03 +0000 (UTC) Received: from di6.cognos.local (ip-10-105-32-6.eu-central-1.compute.internal [10.105.32.6]) by smtp-cognos.service.cnqr.tech (Postfix) with ESMTPSA id 6685E1FA4B for <[email protected]>; Thu, 15 Aug 2024 16:00:03 +0000 (UTC) From: [email protected] Sender: [email protected] To: [email protected] Message-ID: <[email protected]> Subject: A new version of Expense Summary by Employee and Year is available Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Date: Thu, 15 Aug 2024 16:00:03 +0000 (UTC) X-Proofpoint-ORIG-GUID: OC4CL0pZB7WWqEphBuhu7SaJOg4Yxaym X-CLX-Response: 1TFkXGRsTEQpMehcaEQpZRBdnHVhzHhMZYURiTxEKWFgXYU4bc04SZ25dRU4 RCnhOF2FrBUZhbQVrXAVdEQp5TBdsQkVmQEIBW0FYHBEKQ0gXBxkRCkNZFwcYGB4RCkNJFxoEGh oaEQpZTRdnZnIRCllJFxpxGhAadwYYExNxExIfEBp3BhgaBhoRClleF2NjeREKSUYXS0hIRl5Od UJFWV5PThEKSUcXeE9NEQpDThdlaR5pZhpacGgdfX1bb1pCaF9CXx15S2BlTR5zUktTRxEKWFwX HwQaBBkdGAUbGgQSGgQbGR4EGR4QGx4aHxoRCl5ZF04SEltMEQpNXBcaEQpMWhd4aU1NQxEKRVk XcxEKTF8XegUFBQUFBQUFE1sRCkJPF25eGXIFbRlyUnpsEQpDWhcZBBweBBMSBBIRCkJeFxsRCk JFF2FOG3NOEmduXUVOEQpCThdhawVGYW0Fa1wFXREKQkwXYU4bc04SZ25dRU4RCkJsF2FOG3NOE mduXUVOEQpCQBdsUx4aExwFHVpJYxEKQlgXbmtTRxpZRGZwHE0RCk1eFxsRCnlDF3psAWduZUBh E2JGEQpZSxcdHBISEQptfhcbEQpYTRdLESA= X-Proofpoint-GUID: OC4CL0pZB7WWqEphBuhu7SaJOg4Yxaym X-CLX-Shades: MLX X-Proofpoint-Virus-Version: X-Proofpoint-Spam-Details: rule=inbound_notspam policy=inbound score=0 spamscore=0 adultscore=0 phishscore=0 suspectscore=0 clxscore=319 lowpriorityscore=0 impostorscore=0 mlxlogscore=313 priorityscore=0 mlxscore=0 bulkscore=0 malwarescore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.19.0-2407110000 definitions=main-2408150116 domainage_hfrom=7688 Return-Path: [email protected] X-MS-Exchange-Organization-ExpirationStartTime: 15 Aug 2024 16:00:05.1707 (UTC) X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit X-MS-Exchange-Organization-ExpirationInterval: 1:00:00:00.0000000 X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit X-MS-Exchange-Organization-Network-Message-Id: d704a023-4cbe-4599-7dd9-08dcbd435421 X-EOPAttributedMessage: 0 X-EOPTenantAttributedMessage: 372ee9e0-9ce0-4033-a64a-c07073a91ecd:0 X-MS-Exchange-Organization-MessageDirectionality: Incoming X-MS-Exchange-SkipListedInternetSender: ip=[3.64.98.8];domain=eu2-mail.concursolutions.com X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: AM2PEPF0001C711:EE_|VI0PR06MB9731:EE_|DB9PR06MB7434:EE_ X-MS-Exchange-Organization-AuthSource: AM2PEPF0001C711.eurprd05.prod.outlook.com X-MS-Exchange-Organization-AuthAs: Anonymous X-MS-Office365-Filtering-Correlation-Id: d704a023-4cbe-4599-7dd9-08dcbd435421 X-MS-Exchange-AtpMessageProperties: SA|SL X-ABB-O365-EmailReceivedFromPP: sqPHC9fiEG X-MS-Exchange-Organization-SCL: -1 X-ABB-O365: AbbWhitelist-EmailDomainHeaderProofpoint X-Microsoft-Antispam: BCL:0;ARA:13230040|13102899012|13012899012|82310400026|12012899012|3092899012|2092899012|3072899012|5062899012; X-Forefront-Antispam-Report: CIP:143.55.150.29;CTRY:NL;LANG:en;SCL:-1;SRV:;IPV:CAL;SFV:NSPM;H:mx08-00661e01.pphosted.com;PTR:mx08-00661e01.pphosted.com;CAT:NONE;SFS:(13230040)(13102899012)(13012899012)(82310400026)(12012899012)(3092899012)(2092899012)(3072899012)(5062899012);DIR:INB; X-MS-Exchange-CrossTenant-OriginalArrivalTime: 15 Aug 2024 16:00:05.1238 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: d704a023-4cbe-4599-7dd9-08dcbd435421 X-MS-Exchange-CrossTenant-Id: 372ee9e0-9ce0-4033-a64a-c07073a91ecd X-MS-Exchange-CrossTenant-AuthSource: AM2PEPF0001C711.eurprd05.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: Internet X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI0PR06MB9731 X-MS-Exchange-Transport-EndToEndLatency: 00:00:03.8089963 X-MS-Exchange-Processed-By-BccFoldering: 15.20.7849.021 X-Microsoft-Antispam-Mailbox-Delivery: ucf:0;jmr:0;auth:0;dest:I;ENG:(910001)(944506478)(944626604)(920097)(930097)(140003)(1420198); X-Microsoft-Antispam-Message-Info: =?us-ascii?Q?0kc77I39xeSYubQCFUVEZo/LFn9SDBUQ4j1zgmy4D1XVX3r4vjK1mVFZlCZ0?= =?us-ascii?Q?ytRbotCOmmvfY7YhvN6a05illzxlCBHwti3Q6YoI2ScmUbNQ0O2ATOy6JdcZ?= =?us-ascii?Q?cOYNEJnvDAdZl6LDFZb2NB4WD4+GRWUl41F54Akz3muMPRiKA4HdmVbiXl7L?= =?us-ascii?Q?g3MsqP7kjPG521y+DJ66VSBhJUkSUY89ANpPDX3PMMli8Ma+F5pG9K33opmk?= =?us-ascii?Q?TYZVI3IYk8/yOQkqFJxwya6qgodaZyPCDVTiEBaCGEt/ukDE9NPnRkUS7dEM?= =?us-ascii?Q?YwM+gdcd6czDM/gNRmyeXyP66SoF/agKcjZFL739DjaX06JNx+TI4fpykcYY?= =?us-ascii?Q?wsbJWDtjsxCw4e1iBYFGxeLQbwJGpmQdkScBeCobssq0EvpxpZClxgRGkr6C?= =?us-ascii?Q?06dKRjBgVNwSXHFOk45K8VnfL5tch2vWu/42W0khjRwdbAriAe+PoIpyyQbv?= =?us-ascii?Q?K9lhbOc5jplOHsl3HRQS/1KdRGQbTryl1nPTGxRhxpjd+oU8k9RphBDJn5wg?= =?us-ascii?Q?HMtm+tExjgSlKEA17ef7FI8luSHk2lfJ3tCxrSdcPA6/b/+FFS2JCYhLfYGa?= =?us-ascii?Q?WU31t2zzSUqk89CT37quqUdabuWJdr78qEyPreewsgaOXOvCXxid2MPWAX/t?= =?us-ascii?Q?XdyteUiEO/072RsxqjxSaWxpptY96j4bt0JGdY7yt8DitvrrCRuX2O6Gdwym?= =?us-ascii?Q?gREgyW/EJ8Pjua1F9AyMuI7AK30cBWWdzLUR3efM6xPUoPsJb7HQEgV9+wOd?= =?us-ascii?Q?NTU25uxuFdKjijyrFvKQRvbV8w+z0tG7YAr37elp4+Mwn+xZPKWZ9TepaLDS?= =?us-ascii?Q?GpRA0fwMXQ5ZsD8tfhzlEFdFo0hPKzedG8O//N1LpTw3/TumFrpkB3mM8s9l?= =?us-ascii?Q?e7wTfzVvwqQzYQurAOBYHjygA3DquG5/Ua+TNnrX7lmuXhD1j6WXa8Q9nUFS?= =?us-ascii?Q?xhfsGXzTbhjwHuPwTmiANjtf2J/aj5cpu4uEjmgZXd/jU6dJVgfYHebL+l3e?= =?us-ascii?Q?mEiijwl9mAP5kTbn9Uhq9gfyMRs+Yve9MWWTzZ5MDdyvCXPBW51s8/d2AEdH?= =?us-ascii?Q?gZUZD40ShGWm///t7JP2yhydlz4P6yY59B16hiXAFEEyfF2L5yEVfl6Bq3IV?= =?us-ascii?Q?s9dR2IMr+tZmxtEYqXIvLWXwyP6Fe5ZOtDp6Y5YPo1Jfj2GNSHUNJF5cvIEI?= =?us-ascii?Q?/NbfVYarU7ZmPEIPrdIM+UASH5jc6+DjA4aYlMLlkviQIFcKsqTB6L/SoaEs?= =?us-ascii?Q?C58scfTTKi4Nr6EVk6/l1+MF2sJGYKTpoz+w+qupxf/h0o9ANQzGLW2KEqmP?= =?us-ascii?Q?usXdcq1pyrgyUz3Aqj2TSinlQPXmxDUYOb5bhDXtGfwclBEC/O30rIM2U/J6?= =?us-ascii?Q?SP+CjkxRIKtXPdLyJKghECJa1Hhq/MpRwUw/klt1o8Ix73N1vYx46clgLdF6?= =?us-ascii?Q?NHCcenNtMCPOJIvXbWd844oCAwTdwEq5/FKo9VgFTZXz+6yVg3ia7+yiToDT?= =?us-ascii?Q?eeCJuu4UJaZg6btZ7/DocqXFFGLBY+3+2pqnIuAXokjZc4ezx1WPwx4AN80d?= =?us-ascii?Q?uG7GQ8x0+w0P7hjGFWt5Tjf09ULPjA2/5waOdjNNDYzyRSt32HfNzGKtsRzw?= =?us-ascii?Q?gTLx/IF6YbAuj3/SCY4Ed95L5G/z7eAzg58qv6Fu5oWmCVVNqYtY2tnJ/fr7?= =?us-ascii?Q?oqgbqbim7OJbQHkfBqAvk9HVNdUGKkubyf5i+o79P5Pr3qm/HGcAkSDs5eg4?= =?us-ascii?Q?Yo+bpxh9CxNfWSyTo4gOt0V7NniAn+7yX6YMlQoc/hXVGWa0BVOyvIv3gkRa?= =?us-ascii?Q?WxZAE2VoLfwigog4O2Ig1VGaQzvH71vggzkdtiq96Ok/qcLQujpLfB/oAGCW?= =?us-ascii?Q?O+MJ7poPfn29rcRHUVJZOYCJUcuRY96QPX9zDmWbUB5Q0CA0d6WVaSJ80Fbs?= =?us-ascii?Q?5Ul1leUkQN7oamWhih+KbQ=3D=3D?= MIME-Version: 1.0

Score
1/10

Malware Config

Signatures

Files