WhiteheadGroup[.]co[.]nz-Release of Information 3[.]eml

WhiteheadGroup.co.nz-Release of Information 3.eml

SHA256 ecc0b03f9308a8277a239c4b7add67e7ebeee5f142df5b3b86efd9827e14b115
MD5 25d0baf8135a14ce211bb204352e389b
SHA1 ae732506c0cff57a077d64175f943482d56e15d1
SHA512 752703a9eaa327dc94ec67cc892472ac9f9a3045107aa004274dbd209439bf6f3af04e5254c6de3aa91b7b5553a8d49adefb67ff1ac69daf5cc427528b02176c
SSDEEP 49152:ikkVckjUqwjqKmDFCHcEuI5BMxGmXHXYTOYC5oSUTaw+Pn8vZGGgI78SJOwL+Yfo:0
TLSH
T1FDF6E0F103BC2F9E9F18162FE07425091FF4578BD8A562CD67E3BD036BAED040A16969
MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

To

[email protected]

From

[email protected]

Date

Fri, 31 Jul 2026 05:20:48 +0000

Subject

RE: Release of Information 3

Content-Type

multipart/mixed; boundary="_024_PSAPR02MB5350EB0483983144C1AAF749FDC82PSAPR02MB5350apcp_"

Message-Id

<PSAPR02MB5350EB0483983144C1AAF749FDC82@PSAPR02MB5350.apcprd02.prod.outlook.com>

Extracted URLs

file http://www.whiteheadgroup.co.nz

Settlement Invitation.eml

SHA256 79f21105c93ae55536e859d615ab1aa4a67b3e0bfaec09472eb92fe6bae102fb
MD5 2dd2a1f2150c8ca2964bad7e9dc4bf6e
SHA1 8ec18a9beca2ee8a7ac5468e90babfb9c1b7e5a9
SHA512 3705e3717a8ba5df0a5f982d5083e0e3c971ad2b2a62a1d8872b15d09419ab0d3c2d811e08589f6e4e3b084d5064c765da1a6f7f29d914598b3ce27885db0f8f
SSDEEP 3072:TXU0wIhYuvysYDVt+mfGPiWaxVaQ/JRQZWYes03BDowJghp/+FwQ9/OtUQQ3:TXU0FMzDVkPzQrob03xUhpmL2i3
TLSH
T1A3340243AD41140AB7AC534F4F2BEE5748736F3FAC870DFAB078514A01E976B95A488E
MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

To

[email protected]

From

[email protected]

Date

Mon, 2 Feb 2026 01:20:30 +0000

Subject

Golden- Problem Statement/ Settlement Invitation

Content-Type

multipart/mixed; boundary="_005_CAHYOhfeK9ypEy77UibJvn06fzpZ47saMK7LiUPFJEUyjAgmailgmai_"

Received

from ONENETEX17.services.onenet.co.nz (10.10.8.28) by ONENETEX20.services.onenet.co.nz (10.10.8.31) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2507.58 via Mailbox Transport; Mon, 2 Feb 2026 14:21:07 +1300

from ONENETEX14.services.onenet.co.nz (10.10.8.25) by ONENETEX17.services.onenet.co.nz (10.10.8.28) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2507.61; Mon, 2 Feb 2026 14:21:06 +1300

from mx02a.onenet.co.nz (10.10.131.42) by ONENETEX14.services.onenet.co.nz (10.10.8.25) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2507.58 via Frontend Transport; Mon, 2 Feb 2026 14:21:06 +1300

from mail-ed1-f41.google.com (Not Verified[209.85.208.41]) by mx02a.onenet.co.nz with OneNet Message Protect (using TLS: TLSv1.3, TLS_AES_256_GCM_SHA384) id <B697ffbf10002>; Mon, 02 Feb 2026 14:20:49 +1300

by mail-ed1-f41.google.com with SMTP id 4fb4d7f45d1cf-65807298140so6547872a12.2 for <[email protected]>; Sun, 01 Feb 2026 17:20:48 -0800 (PST)

Message-Id

<CAHYOhfeK9ypEy77UibJvn_0=6fzpZ47_sa+[email protected]>

ERA Problem Statement.docx.pdf

SHA256 fdf92d3c7905e6a788728e19360de5e9b361ee19d29f584845f0bb9d9a548044
MD5 47076de397f2c23a0d122593d937cb67
SHA1 847c03f9e799e5d10cc5ac68de55a8d09aadd8c6
SHA512 e444c96ed8c1de5a59e2ba2d923318deac76fe8ed84201cc3cb85aa7218b5c9cf8a121ff992966b79c3bad193e293829803d0720d56cd6e85309a59252f01dac
SSDEEP 1536:rJZZqNAk0i4Yey8MwyINdCCxU49VVcu3Zxq0T0X8b/6L2MDO/i7:rzZq0Ce1MwzNLJ9VVrZU00XhKMR7
TLSH
T12D83DFB0F49E6C8CFC80C609E62E7A4E4E5EB21B76D928C9003D0D82E1455A6EF965D7
MD5 SHA1 SHA512 SSDEEP TLSH

SETTLEMENT_ Fraudulent Dismissal.docx.pdf

SHA256 65e9ff7e77ceaf676e1fa0b3f0bddada0fe569f7bfaa4f52f2d6730a179cbb03
MD5 3385d52d2271ada03ef7c0b09d686bf5
SHA1 9186eca9045064256457cbcbca2e2d6a30c5d37f
SHA512 4009c6fdfa7cf9a35c7a7c9256d00fc73b02be564d02d9b2e68597ed564dc086d60b5329f69c549b6b23ded9c723f224690385f0c58bbd2cfe87558f97a46394
SSDEEP 1536:t4Is3i5Al+7AuHO8ZeXu/Yp0EHyCU+WNVJ+LCNiE86r72T:t4IX5Al+7nHOyR/C0ESCU+GJDNZhW
TLSH
T12583D034E84B8C8CF980C609D63E784A8E1EB52777DD394A127C0F99F41AED5AB53097
MD5 SHA1 SHA512 SSDEEP TLSH

email-html-2.txt

SHA256 48dd645a4e9ad56beed5493118c28f80f25df14707c194a66a0014bdd0081368
MD5 399c2748ce2d8ee0575fff28b09ad578
SHA1 17de1ac48543d63fb46839fc11cf141d9df3ac30
SHA512 53f1af2d281466df72e45d856822f5059152ce536471d379348fb6cb9af39bdc70c12f253859c8178ad34082b6ade86b10b5ce53907e8d10b70b7792d95de3c0
TLSH
T1A3F04CEB62611C0A0EB7493584332358C455F741B327B4001BDA43DBAEE9649DFF3491
MD5 SHA1 SHA512 TLSH

email-plain-1.txt

SHA256 56f5033563f0037dd581639e0b3c65b857f6f63c69db9cb3fbb327bba3da68cb
MD5 ecc87827969e9c5b702b974d032596c1
SHA1 449df8056fa0ecca92bc47ccfa741f9c4797b1b2
SHA512 20c247f43c21fa35ea401818d3468af36de7bfe41e7dff2e0d916fa5c0e0d949c091995822ba12d7dd21d8046b896ace0d6b51b5aab9dff05e33d79d72294e76
TLSH
T16AE0C6ABE3C32023076A81021A0725604AB854A7A03A08463D2882CC36389DDE7BB8B9
MD5 SHA1 SHA512 TLSH

=?utf-8?B?UmU6IE5leHQgc3RlcHMgYW5kIHN0cmF0ZWd5IOKAkyBFUkEgZmlsaW5nLmVt?= =?utf-8?Q?l?=

SHA256 413bd0be824240d5425f4b9fc9494898a60e949511c75336d23d9a40234436c7
MD5 05c43a8f213bc061e499f8e7d5a461c8
SHA1 f09cb9d935a1f40243b05e66fa203584e724076c
SHA512 47ba8d9242f8a346dd8c7b603380472be1d8cb49ea7b4cda1f34d3ed341f66dfb724caf4c00b0681578ca2a35b10f3b0bf37f130174ebbc5fbc0da067275cd08
SSDEEP 768:/3V6TgR3lqiQVu3CUCCjWPgrNJlh5ZPfS0Pg0gR0h+LJQ6ngbL6DjLw4t6PYxdb/:9Ksl0g3CUCCjcgr35ZPRPg0ZhE7aL6DB
TLSH
T190133B814EC217B6EB214E30885A7DD76124A74F2D86CC83A6B8CFC5E4F9AE15DC91DC
MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

To

[email protected]

From

[email protected]

In-Reply-To

[email protected]

Date

Sat, 31 Jan 2026 07:21:33 +0000

Subject

=?utf-8?B?UmU6IE5leHQgc3RlcHMgYW5kIHN0cmF0ZWd5IOKAkyBFUkEgZmlsaW5n?=

Content-Type

multipart/related; boundary="_004_CAHYOhfdUkEgs3gnAYjoq2gzmvqKGqhCVu3LU6dbgecqx1ETAAmailg_"; type="multipart/alternative"

Received

from ONENETEX11.services.onenet.co.nz (10.10.8.22) by ONENETEX20.services.onenet.co.nz (10.10.8.31) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2507.58 via Mailbox Transport; Sat, 31 Jan 2026 20:22:00 +1300

from ONENETEX28.services.onenet.co.nz (10.10.2.106) by ONENETEX11.services.onenet.co.nz (10.10.8.22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2507.61; Sat, 31 Jan 2026 20:22:00 +1300

from mx02a.onenet.co.nz (10.10.131.42) by ONENETEX28.services.onenet.co.nz (10.10.2.106) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2507.58 via Frontend Transport; Sat, 31 Jan 2026 20:21:54 +1300

from mail-ed1-f51.google.com (Not Verified[209.85.208.51]) by mx02a.onenet.co.nz with OneNet Message Protect (using TLS: TLSv1.3, TLS_AES_256_GCM_SHA384) id <B697dad8f0000>; Sat, 31 Jan 2026 20:21:51 +1300

by mail-ed1-f51.google.com with SMTP id 4fb4d7f45d1cf-658034ce0e3so4614367a12.3 for <[email protected]>; Fri, 30 Jan 2026 23:21:52 -0800 (PST)

Message-Id

<CAHYOhfdUkEg=s3gnAYjoq2gzmvqKGqhCVu3LU6dbgecqx1ETAA@mail.gmail.com>

Extracted URLs

file http://www.whiteheadgroup.co.nz
file https://aka.ms/AAb9ysg

email-html-2.txt

SHA256 b5282d3b4f69da20ea38051b3b1d27349c256642afe55fe491a345f946233c10
MD5 ec6f24b29ab36124ae04e6e63d4ebd77
SHA1 559b51cfe431880a106a021e9b3a9b65db92bf3c
SHA512 48fc88d0a5e9e63f3123853c4e9ee1fdcbc1d8172eff8be1a63b369db2dd30efcb334b1118429dd139f4031759573d2bab51d1f982fefb63c2e02b4e55f508ca
SSDEEP 384:v0qG6UiE6W8q6Y06h9IBE8dD3bLYxnF+vPb1tP2FmbGs8cnV66Ty5Gk7hh9EFphn:sFx2/LT+JeMysLTq
TLSH
T101822F42E2450D1385F681FEE02E2744A4C1955C9363BC63A3EA15EBF69AC746E2A3CD
MD5 SHA1 SHA512 SSDEEP TLSH

email-plain-1.txt

SHA256 492f67488367fd3ea256441fece2c21b5743a1ff777ab36b0c65f331204edb0d
MD5 3c48351fa5ef75876144d294d52df939
SHA1 a1f9d5f3f4bd31bdaea9fc1ca67ac3ad2fde9bdd
SHA512 ef3fb4f44fd5ecdee772faa9a6f0c27383d19dedd8ce6c33eb9f07bd875b853d0a543f0d9383205bebc5be54d367ab4c16e58179a7e306144a1b6c5daa168e2a
SSDEEP 192:07llI/ik8uy3i5eLYiIzEy25EPIogi4QoCIJ+kS:Mlaik8RAeLYiI4yOUgi4QoCA+9
TLSH
T160F185CF23870336477A0154AD2E6DDDEB25C0AEEA666981B48C034C1F76D69537EACC
MD5 SHA1 SHA512 SSDEEP TLSH

image001.jpg

SHA256 b84ffd9ccb43cacc0e69e048ca72484f3b6d8d888003948d51de693c0514efcc
MD5 c49a619ef88885fa3ec62a18ac89f457
SHA1 0fa1ca732b94bff91ff3f84773c049cf93d9cfd6
SHA512 cb7c3cd83fbd268fc32009b71d1248fc06434e6061d8157414a788c2295e6c337ac99e94201c4ffe56d3fde5043baa2c3a673314bb137f709391ef8fac633600
TLSH
T12241D72F5263A3209C665E6F6A0D1373F5CF3B957140364E18E05EC26110CA8B355E68
MD5 SHA1 SHA512 TLSH

Clayton vs Golden.eml

SHA256 bc6a9212a57bff5040db7e935a28d1fed5d3cec099dbb79d98e86b223f0b508c
MD5 fcb6557fa634f9113d9000f46594a3e4
SHA1 baba78004112cccd2e22ebc55825e0cc7edbbe2f
SHA512 612b8817fcb58782da8293c00dac59d7c56cbb52803e793194e87364454bccc04dda4dc2cc74768809581001694112a391ee303d992ffabb52c9ae50951b5cfe
SSDEEP 24576:kl6G9os0RdbTXiQgzpQNxa3I0G1GpxwmuOPoJZbJdyrEHLa5S2DF0smsO7dUzZYT:u6EIXi7CoGJ044Dx25nZQC5
TLSH
T129B502F3997F4F894B1046865407FF81EC3B9AC318F823E4E7C53AD960DD6A25B58928
MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

To

[email protected]

From

[email protected]

Date

Mon, 9 Feb 2026 00:01:54 +0000

Subject

Clayton vs Golden

Content-Type

multipart/mixed; boundary="_006_CAHYOhfeMcdOiA2sJxqm4euuA3Fd7pekVpyQQd29Ky2zQQmailgmail_"

Received

from ONENETEX19.services.onenet.co.nz (10.10.8.30) by ONENETEX20.services.onenet.co.nz (10.10.8.31) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2507.58 via Mailbox Transport; Mon, 9 Feb 2026 13:02:38 +1300

from ONENETEX10.services.onenet.co.nz (10.10.8.21) by ONENETEX19.services.onenet.co.nz (10.10.8.30) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2507.61; Mon, 9 Feb 2026 13:02:37 +1300

from mx01a.onenet.co.nz (10.10.131.41) by ONENETEX10.services.onenet.co.nz (10.10.8.21) with Microsoft SMTP Server id 15.1.2507.58 via Frontend Transport; Mon, 9 Feb 2026 13:02:37 +1300

from mail-ed1-f49.google.com (Not Verified[209.85.208.49]) by mx01a.onenet.co.nz with OneNet Message Protect (using TLS: TLSv1.3, TLS_AES_256_GCM_SHA384) id <B6989240a0000>; Mon, 09 Feb 2026 13:02:19 +1300

by mail-ed1-f49.google.com with SMTP id 4fb4d7f45d1cf-64bea6c5819so5612908a12.3 for <[email protected]>; Sun, 08 Feb 2026 16:02:18 -0800 (PST)

Message-Id

<CAHYOhfeMcdOi+A2sJxqm4eu+uA3Fd7pekVpyQ_=Qd29K+[email protected]>

Gmail - Driver Licence Access Log Request- Jason Peter Clayton.pdf

SHA256 07337f94d985e2bd16e68b761687cb36187fc0c82420279759c837e7fda72ea5
MD5 59233e333337228d8c62632570e52f2b
SHA1 6733d7cd6fa9c692ce0609e603648a53cfbf09bf
SHA512 d6cbd33720e3abf87ea07e1f9247805a3d2e561eb856138e559b7449c5cf6ec02fc67e6175715da8c12f59a0e16e19fbccc4af980b9b246f143753ce40df2a52
SSDEEP 3072:0uDgJUS4BdW+4lIZSFqPptAWUjYVdysGRfpz3D9PPg+d:0uGxkBSaRDlCRPo+d
TLSH
T108E3AD74FC8E98CCFC86C649D6B9354E5E5CF21B6ADC389101380A21F5056A87BB72DB
MD5 SHA1 SHA512 SSDEEP TLSH

Extracted URLs

file https://aka.ms/LearnAboutSenderIdentification
file https://nzta.govt.nz/vehicles/how-the-motor-vehicle-register-affects-you/requesting-register-information/motochek
file https://www.nzta.govt.nz/commercial-driving/transport-organisation-register-online-toro
file mailto:[email protected]

Letter of Dismissal without Notice - 19.12.25.pdf

SHA256 2f04e88cbf393514b252bcae46caf46043ac72ae23672b020d0db12f1ddbc91d
MD5 a9eafa6256433213ce3f61ec78813c23
SHA1 ca10c22245cbaf7a2aa114c21e38c94f059f09a4
SHA512 c995fcaf97712a42cacdaaa0b5b65aaaae8adc507d55e8a99c5764606d02ba8991b1d992f64108cf172319a67c219d0f5a7be5d2b7002171dc84e7f4822313ed
SSDEEP 24576:A8hDFU7whN6wH3iUHZq4s00Lh6hyqz2yk/fMvKYuCFTRprsEuWWpiIP0:AUO7wawXx5r6wzsYuCvprjutpiO0
TLSH
T182552342E224D51ECF8A0455FDD61A8D3784A9343DFF3A4E034BB9EC355D8092AE8BD9
MD5 SHA1 SHA512 SSDEEP TLSH

Metadata-Formal Disciplinary Hearing.json-metadata.pdf

SHA256 528c80d21324abe81baae00d42547e9350b7d300aafbf860ce77a118044f32fb
MD5 42c9692ee2820ca5b9a89d5dc8e57889
SHA1 dfeaabf37afb79c2f9f932903d4f87f199bf0f03
SHA512 64a86d29b2d789e4cadba7265f12c515f8fad056c7a64c0dbc6a22ae3ba2d5a703d070ff077c0f584fbc85629123c5d6371486ee77c96136d7afd2a2166725cc
SSDEEP 1536:c1bkFWbRbkEdzd5RyBdzlfSbM3E+1hHC/2csnIKRnpALbcc8q4bhsqlL:cIWi1lL
TLSH
T1EA342E2776A094EBD19FC6BF605948868B19ED191F99C1FCA444FF3BA9FC8061F2D108
MD5 SHA1 SHA512 SSDEEP TLSH

Extracted URLs

file http://Disci...www.metadata2go.com

email-html-2.txt

SHA256 12d07ac6dba7f208c3e4cfd5dc0efd84d57f548741ef2186450bd3d3afa23ba7
MD5 9f843cb8f5791f455162cf0a0d813def
SHA1 83952c8d05a2a8c8298c3c605d0e1a667bc1c3b1
SHA512 644686b699b16d7c76135bc269749293097a24fc37a35c943b471964982560e3bf3fd45dfe5464f5037d8ae237bd3663f3c56fe9a8f198453f317ff6d011e56c
TLSH
T1BE61819377241B750BB30271B42D43CAEB19E3A83323A6001A9E66DFA6C046DCFB31D1
MD5 SHA1 SHA512 TLSH

email-plain-1.txt

SHA256 3ead9a0863741544b1dabc47005d1b34ab406ef6f38d6940df7ad3ab92e6f474
MD5 03ef964811dd2478a4260c0d81426836
SHA1 d8bd7c51594639411673b9d3fa425aa8f037a7bb
SHA512 dd45262b3f738cae3703da6f1c12ed44863ae33ccc80ad0a32308cd8a13fe7947e444745dff99f21273d582b81bba1b02a351f451f0366a558d8aef0c837f442
TLSH
T19D51E893BB5A137203A203903A0E53C6F72DD0EC73124B117C5E699C37408BC9B76AE9
MD5 SHA1 SHA512 TLSH

Draft JC ERA Employment Problem.docx

SHA256 99736279729e4d42f774a060ea7e6ed54335e533cfd35c5764dbcfac03a4058b
MD5 47749fef117c247ed1ad6a5fe4eac0b0
SHA1 9cf4fdf0530ed788759f22be7e656689d1dc4e8f
SHA512 ae88fe88e7faf13286dcd9ae63358744837211d89c80181b8a05117a7c40e5d105700ea7b7339322a7625071e9b20211b8366c24a10eef833c58f0e14a2d94cc
SSDEEP 192:yunOwWv1hxL3RnpJHY4pEHfIRNxCw6aDmLb7sARLfnZCXOY/yvUm+V4WOOdus:yufO1hZLl4SNxJssA1fZwO6yvk4OX
TLSH
T18C328E65C26408FAD72D097449945ACCFCE43222C26A96EA27BED19CCBBB5D63704C84
MD5 SHA1 SHA512 SSDEEP TLSH

office2007

ERA Problem Statement.docx.pdf

SHA256 fdf92d3c7905e6a788728e19360de5e9b361ee19d29f584845f0bb9d9a548044
MD5 47076de397f2c23a0d122593d937cb67
SHA1 847c03f9e799e5d10cc5ac68de55a8d09aadd8c6
SHA512 e444c96ed8c1de5a59e2ba2d923318deac76fe8ed84201cc3cb85aa7218b5c9cf8a121ff992966b79c3bad193e293829803d0720d56cd6e85309a59252f01dac
SSDEEP 1536:rJZZqNAk0i4Yey8MwyINdCCxU49VVcu3Zxq0T0X8b/6L2MDO/i7:rzZq0Ce1MwzNLJ9VVrZU00XhKMR7
TLSH
T12D83DFB0F49E6C8CFC80C609E62E7A4E4E5EB21B76D928C9003D0D82E1455A6EF965D7
MD5 SHA1 SHA512 SSDEEP TLSH

Fwd: Driver Licence Access Log Request- Jason Peter Clayton.eml

SHA256 3464a07e643efc32571c95d3fac4bb293f42d1fa496c970dfe9102ca0be3c6bd
MD5 810ecf56029e2fca5d20493fd82a39e5
SHA1 58793d7bdb64fd6ca01ab5caf1c031bc8ece9493
SHA512 c473b6cc73f31d76df2130f2a057ee81bb5a9007bdd99272d48766536bc2eac3c864597b35482076cdfbea03fff43e8280eaf6c8ece45c5c40c043ca8b0f9bcf
SSDEEP 384:gYhHXLBHmIqH2yV+xLmEJB9TluJhl/S7l5OIPImVAZEDZLvreUNyLZ9NYh9rr6yH:gqRmyMgyA9Ru1/SnOsnVJlfsv0
TLSH
T15CC26EC287C422B6DDA42F24E93A37A771FC2D972CF2A886563F4FD69190F9515C02D8
MD5 SHA1 SHA512 SSDEEP TLSH

Gmail - Driver Licence Access Log Request- Jason Peter Clayton.pdf

SHA256 07337f94d985e2bd16e68b761687cb36187fc0c82420279759c837e7fda72ea5
MD5 59233e333337228d8c62632570e52f2b
SHA1 6733d7cd6fa9c692ce0609e603648a53cfbf09bf
SHA512 d6cbd33720e3abf87ea07e1f9247805a3d2e561eb856138e559b7449c5cf6ec02fc67e6175715da8c12f59a0e16e19fbccc4af980b9b246f143753ce40df2a52
SSDEEP 3072:0uDgJUS4BdW+4lIZSFqPptAWUjYVdysGRfpz3D9PPg+d:0uGxkBSaRDlCRPo+d
TLSH
T108E3AD74FC8E98CCFC86C649D6B9354E5E5CF21B6ADC389101380A21F5056A87BB72DB
MD5 SHA1 SHA512 SSDEEP TLSH

JC_ERA_Draft (1).docx

SHA256 a168b9ec8e98ad6b359397e19605ffc18775dfa2dddbffff602b38a3bda5767e
MD5 5ba43512895113a8e5c477e3fd4c5f4e
SHA1 cb8c7f4e5b529b0b3f303acacf1467ed8ee07658
SHA512 c2f638cd6407fd7dba0a8441c9dfc78c707e23eda06507dc33d082d9a659a56d8a9bd070a898edd93bd15918b7f156f410ad4d559dc93c9659d9b12cab40dd81
SSDEEP 768:Vqrinm7rdW8Rhej3aCRWrY/CGD5uLiNTKUUPBvAHfoZ4u8:8am7rZHIDr/CGD5uLmdUJYF
TLSH
T18AF2F134CA176071F4D7FA73E91909A4F1B85AA081C63B5B7D3BC25BA0F3B4D6A27205
MD5 SHA1 SHA512 SSDEEP TLSH

office2007

Letter- Parvez to Mark.eml

SHA256 e8e79b970216a4b3703b093826d3d7d543eb74933b2c66dad4cf5d3a5fe4a6fe
MD5 1a9e6774e4e3d5e97c75231ef05967a3
SHA1 e6de78ac9b2a5ab5931730a6dcc39f61d48c8ab0
SHA512 3fb3b641e32e5e941c28d9bf01976bc7a75ece1e5c854dd8f9e642e1b0d76f8e82753e5ef9657885a72ce1b0b67d794e9b61939dbe408e81d114806855be7a2d
SSDEEP 24576:kRCT5vqHb2gzpQNxa3I0G1GpxwmuOPoJZbJdyrEHLa5S2DF0smsO7dUzZYiATN1x:kRCixCoGJ044Dx25nZQCj
TLSH
T1AB952323CE031D450F904B1B62FB7F927DFDAECA50AC46F11349B9D1A0ECB1A86E9855
MD5 SHA1 SHA512 SSDEEP TLSH

Metadata-Formal Disciplinary Hearing.json-metadata.pdf

SHA256 528c80d21324abe81baae00d42547e9350b7d300aafbf860ce77a118044f32fb
MD5 42c9692ee2820ca5b9a89d5dc8e57889
SHA1 dfeaabf37afb79c2f9f932903d4f87f199bf0f03
SHA512 64a86d29b2d789e4cadba7265f12c515f8fad056c7a64c0dbc6a22ae3ba2d5a703d070ff077c0f584fbc85629123c5d6371486ee77c96136d7afd2a2166725cc
SSDEEP 1536:c1bkFWbRbkEdzd5RyBdzlfSbM3E+1hHC/2csnIKRnpALbcc8q4bhsqlL:cIWi1lL
TLSH
T1EA342E2776A094EBD19FC6BF605948868B19ED191F99C1FCA444FF3BA9FC8061F2D108
MD5 SHA1 SHA512 SSDEEP TLSH

RE: Clayton vs Golden.eml

SHA256 f0b9f5dc61ed3f000dd3a3653676433f1b0ea3fbd3473cd176dfff0e585494f9
MD5 ceeec1ff4dfe97648e6068b139205d21
SHA1 3ab616fefdc6784091a50e6a506e3e7d0631f313
SHA512 c3a40dc0f8535b1195e3e769de9e9b9ec8b4f1960abb61bfbaacfd622f7831b6e459fd3806009882706553ec28c9ad15be33b30028ccbf8bf96ef73700ce8273
SSDEEP 1536:wN4IK57OLFAKMxcOTKAWH9ibsj6UHtHAlyRCvw:ALFADxcOWAe9ibsjlHkckw
TLSH
T1BF33AF706CE22BC2E7564E709DDE69466E256B4F726388D74828CFCAC19FE7118C24DC
MD5 SHA1 SHA512 SSDEEP TLSH

Re: Revised ERA Filing Documents.eml

SHA256 aca912eb4076d2bd91e984a8f4791ed8e5dde7de17f620cb0d3209d5ec2aa29a
MD5 cf7127ddb35c980ce2679e5cb2090ba7
SHA1 1813dd5e238d8671dd07f4dfed4189c93bf6e7c2
SHA512 5d5778709ff4852fd4ed0b8cdc776e6b264f1875cf2feea020ee9d1f06b7167b972447d1bec7980e1030db9782badff8be04a9fef52250c002e3a03ab281e6c4
SSDEEP 384:IOoFQJ/yhzYDls5NxMZR6KJwdiBl+NH2oa5S2sO3c7243iMB:qm/Q8hs5NCZR6KG4CNWT/sQcK433
TLSH
T189726D439DC126A5FE600D00DD59FE4AF1390B873AE3CB836B7CC2C84625D953AE65AD
MD5 SHA1 SHA512 SSDEEP TLSH

Revised ERA Application 090226.docx

SHA256 39489d2734b1a4750bdea8fc4a15f529ba05bba7fcfdaa0f76947fc59caf55b8
MD5 210fa45f998325fabd7e229c3c9ee261
SHA1 163a3bfd8757b01176c19490423635c163b69504
SHA512 eb06d3255f35ba7edc5edc68ca7bec85f45ab6584350f5691b011fde7cc33580ba3f2518cc07796a963bdc28c820050656eb345b08b622a06b71e5ed7efa8da6
SSDEEP 384:dxOvkVZ3aMciMP+YNqi/RLymSajMZknwfxCtBUYw2DhN:znVZqMci6+ni/wGJwIBUX4
TLSH
T11692DFBDCD0B690FC50328FCE05058F5E18B4257BBD2EA6BC484A99C5664E935F2F1D0
MD5 SHA1 SHA512 SSDEEP TLSH

office2007

Revised ERA Application.docx

SHA256 4e03574e965d1e776c6751fe967126b278aa21d9e00d61ff91506e48320d0082
MD5 4e8cf390a323505406494ae497ee03fa
SHA1 935561891c8dd62ba2b040129a5eb7b4ea76dd03
SHA512 1dcfcefea111aca6a50cb4fb5b464c6c98d055b3544cac365e9b4d247dc9b4a4143f1dc6191fdac83a19c31d5ca9324aa1527dfc4527cecac2df15cab3f0d370
SSDEEP 192:mKelfXuccp3vZazZTo8awaTfKNuqiDo//dhhoFJywfIETBfuqsjyEMAwU2+NWK5C:mdfspBKTgDrKNuqiDM/mUGBfHWyEINP
TLSH
T17492C03ED7A07C3FC596C4BD445819B2E60D10C2D686537B3D54B2DD8BB038B63A05AD
MD5 SHA1 SHA512 SSDEEP TLSH

office2007

Revised ERA Filing Documents.eml

SHA256 22659b9aee602c4e4d794262e567a91e049c823137c2e75d389fe82dd141d455
MD5 0a4fc3724ec2572f8fd780f1cd15e625
SHA1 d0a32c0e82d9d3573a6ad73090ee7bccb7f1e33b
SHA512 b3f6d4e58ab3b78f9c4fd273cda5296fb944d0fd6a5d85b8fb3941b6d012b463403a5bdfe8d0998a79e30af7b7b34a50e1735c0c8ada5c83eaf7ec67d6e8c917
SSDEEP 3072:886Cki8DgyaG+SNk6LnvqjJOcpsdY1TAzlSL/p0sGYY0xxm7:88ll8VaGzRLnybU01T9xxk
TLSH
T1EA04F123BD512454B3B4565B8B0BEE4358A79E3FACCBDDDCB938018B41ED7BA608085D
MD5 SHA1 SHA512 SSDEEP TLSH

SETTLEMENT_ Fraudulent Dismissal.docx.pdf

SHA256 65e9ff7e77ceaf676e1fa0b3f0bddada0fe569f7bfaa4f52f2d6730a179cbb03
MD5 3385d52d2271ada03ef7c0b09d686bf5
SHA1 9186eca9045064256457cbcbca2e2d6a30c5d37f
SHA512 4009c6fdfa7cf9a35c7a7c9256d00fc73b02be564d02d9b2e68597ed564dc086d60b5329f69c549b6b23ded9c723f224690385f0c58bbd2cfe87558f97a46394
SSDEEP 1536:t4Is3i5Al+7AuHO8ZeXu/Yp0EHyCU+WNVJ+LCNiE86r72T:t4IX5Al+7nHOyR/C0ESCU+GJDNZhW
TLSH
T12583D034E84B8C8CF980C609D63E784A8E1EB52777DD394A127C0F99F41AED5AB53097
MD5 SHA1 SHA512 SSDEEP TLSH

Urgent ERA filing.eml

SHA256 3913eecd82dd6541ede753524a4633749b5d6ac4361274697fb2f68be59f1439
MD5 41e72980ae85d61eaef6fec7e06c7c4a
SHA1 c088be053e7aaee47492b787a69f2015a15257e7
SHA512 b5d5060a052a66ffdc3aa2d0d20062062a55fc1fc33f936d1c9b5f28e34460679648001d58123647e024b27ac1dd5de7212c14a3ab88a92d91407fa50e8232b9
SSDEEP 49152:CjxZBxlgB5wGJydVgX21TWVuPGazRxx05xItDD1KqHPB9UIGt1AkTTDFeJYswJuZ:o
TLSH
T1406623328E572E054FE08B27A17B7E233DE5DDC350AC66F63346B5E8A0ECB535616818
MD5 SHA1 SHA512 SSDEEP TLSH

email-html-2.txt

SHA256 f333703fcf37f25327850ad917656f95dace7378b2d4d03b106179dc1ee3cc6e
MD5 5d6944768cbb2fc87caafe5e6f05dd08
SHA1 eeaedc3092f080684b22bfe24a46e5cae82014ae
SHA512 61e0b318f99b899e17c4cc2dcc2df682cbff792e627980d4e3604f333afcd93d0c8b8050574aca1b040d9e9eab2c013f69d0a41eeed1448048ca17ed32b9d327
SSDEEP 384:eKREz7FLcP97F/xFbFbF8FxF2FLkzC3rq++xM0isAZLLFa/flaAAapEa9ELCBTa/:eaeiQBEYiiyUwB
TLSH
T1DAB23F21F9180D4B81FB62F5E06B2B14D083D75DC756BEE1A66992E7B88DE901B133CC
MD5 SHA1 SHA512 SSDEEP TLSH

email-plain-1.txt

SHA256 19bc5b3df7f3408ef6d8e08847760e4a3d9c26c818e9183564d34b80deacd3cb
MD5 3e6891eeabc9601079a3374bbaa0a077
SHA1 c82ad44ef33b36be2c1475d4d30beca875915ffb
SHA512 b2bed5c69ff8fbe52b3f3dce313f448f66ca8b077dbbcc510c0cca6e279241cf2e1f72c531bfeaf143691dfddc14b364f50b645aaf657b63521bc3092cafff3d
SSDEEP 96:n8A4LlqZhXsdo8Z+Zz0Gwv/6helId4HJikFCFX7Fdo8Z+SxX/698QH6t98luL:nUl+X898wh/nI4HZFGX7H9B/698r8li
TLSH
T1C3D177DB9286133209520296BAEE69D4FF59C07CFB6F4A517C1C819C1352A24973F2DC
MD5 SHA1 SHA512 SSDEEP TLSH

image001.jpg

SHA256 b84ffd9ccb43cacc0e69e048ca72484f3b6d8d888003948d51de693c0514efcc
MD5 c49a619ef88885fa3ec62a18ac89f457
SHA1 0fa1ca732b94bff91ff3f84773c049cf93d9cfd6
SHA512 cb7c3cd83fbd268fc32009b71d1248fc06434e6061d8157414a788c2295e6c337ac99e94201c4ffe56d3fde5043baa2c3a673314bb137f709391ef8fac633600
TLSH
T12241D72F5263A3209C665E6F6A0D1373F5CF3B957140364E18E05EC26110CA8B355E68
MD5 SHA1 SHA512 TLSH

Sharing

General

Malware Config

Signatures

File Explorer

WhiteheadGroup.co.nz-Release of Information 3.eml

Email Headers

Extracted URLs

Settlement Invitation.eml

Email Headers

ERA Problem Statement.docx.pdf

SETTLEMENT_ Fraudulent Dismissal.docx.pdf

email-html-2.txt

email-plain-1.txt

=?utf-8?B?UmU6IE5leHQgc3RlcHMgYW5kIHN0cmF0ZWd5IOKAkyBFUkEgZmlsaW5nLmVt?= =?utf-8?Q?l?=

Email Headers

Extracted URLs

email-html-2.txt

email-plain-1.txt

image001.jpg

Clayton vs Golden.eml

Email Headers

Gmail - Driver Licence Access Log Request- Jason Peter Clayton.pdf

Extracted URLs

Letter of Dismissal without Notice - 19.12.25.pdf

Metadata-Formal Disciplinary Hearing.json-metadata.pdf

Extracted URLs

email-html-2.txt

email-plain-1.txt

Draft JC ERA Employment Problem.docx

ERA Problem Statement.docx.pdf

Fwd: Driver Licence Access Log Request- Jason Peter Clayton.eml

Gmail - Driver Licence Access Log Request- Jason Peter Clayton.pdf

JC_ERA_Draft (1).docx

Letter- Parvez to Mark.eml

Metadata-Formal Disciplinary Hearing.json-metadata.pdf

RE: Clayton vs Golden.eml

Re: Revised ERA Filing Documents.eml

Revised ERA Application 090226.docx

Revised ERA Application.docx

Revised ERA Filing Documents.eml

SETTLEMENT_ Fraudulent Dismissal.docx.pdf

Urgent ERA filing.eml

email-html-2.txt

email-plain-1.txt

image001.jpg