WhiteheadGroup[.]co[.]nz - Re_ Disputes tribunal notice of hearing - CIV-2026-044-000531[.]eml

WhiteheadGroup.co.nz - Re_ Disputes tribunal notice of hearing - CIV-2026-044-000531.eml

SHA256 c399720ce7113b50eb1b003d1967f7a82cc7478c2c8da06f6fe1a8fc96f5ac71
MD5 57e0d3c88070e4fdc0e6707ff7c30193
SHA1 eba5e2e4dbc63b172e47f2595f252a456e357f32
SHA512 4a7b6bbe9012e645b82f24cbb30675675f6a01eb45565b441c7ba02c15d3ebb212ecf7c99ae248cf13354c37dbad728eeb5efff3d363109001ac9181369dea92
SSDEEP 49152:qqIOqI8bK5dmhKbFkg/4w0rbK5dmhKbFkg/4wE:m
TLSH
T1B92622368E470ECA4F408A27A136BD527CFEA6C7549403F2035CDAE470F89799FA5C5A
MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

To

[email protected]

From

[email protected]

In-Reply-To

CAHYOhfecbbeTuMwpUgn+9dCUDsOk4FTD+[email protected]

Date

Sun, 10 May 2026 10:39:03 +0000

Subject

Re: Disputes tribunal notice of hearing - CIV-2026-044-000531

Content-Type

multipart/mixed; boundary="_015_PSAPR02MB5350699632F1E4514F09C0CDFD3B2PSAPR02MB5350apcp_"

Received

by 2002:a05:7208:c003:b0:104:ad20:7430 with SMTP id r3csp1165456rba; Sun, 10 May 2026 03:39:18 -0700 (PDT)

from OS8PR02CU002.outbound.protection.outlook.com (mail-japanwestazolkn190120001.outbound.protection.outlook.com. [2a01:111:f403:d406::1]) by mx.google.com with ESMTPS id 41be03b00d2f7-c8267775e2asi11541295a12.300.2026.05.10.03.39.13 for <[email protected]> (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sun, 10 May 2026 03:39:17 -0700 (PDT)

from PSAPR02MB5350.apcprd02.prod.outlook.com (2603:1096:301:5a::6) by SEYPR02MB6146.apcprd02.prod.outlook.com (2603:1096:101:b3::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9891.22; Sun, 10 May 2026 10:39:09 +0000

from PSAPR02MB5350.apcprd02.prod.outlook.com ([fe80::e3fa:8959:b91b:6ca6]) by PSAPR02MB5350.apcprd02.prod.outlook.com ([fe80::e3fa:8959:b91b:6ca6%4]) with mapi id 15.20.9891.021; Sun, 10 May 2026 10:39:09 +0000

Received-Spf

pass (google.com: domain of [email protected] designates 2a01:111:f403:d406::1 as permitted sender) client-ip=2a01:111:f403:d406::1;

Message-Id

<PSAPR02MB5350699632F1E4514F09C0CDFD3B2@PSAPR02MB5350.apcprd02.prod.outlook.com>

Extracted URLs

file http://www.justice.govt.nz/
file https://aka.ms/AAb9ysg
file https://www.disputestribunal.govt.nz
file https://www.disputestribunal.govt.nz/

Attachment 6- Letter of Dismissal-d56fb9f577b4c4aa (2).pdf

SHA256 2f04e88cbf393514b252bcae46caf46043ac72ae23672b020d0db12f1ddbc91d
MD5 a9eafa6256433213ce3f61ec78813c23
SHA1 ca10c22245cbaf7a2aa114c21e38c94f059f09a4
SHA512 c995fcaf97712a42cacdaaa0b5b65aaaae8adc507d55e8a99c5764606d02ba8991b1d992f64108cf172319a67c219d0f5a7be5d2b7002171dc84e7f4822313ed
SSDEEP 24576:A8hDFU7whN6wH3iUHZq4s00Lh6hyqz2yk/fMvKYuCFTRprsEuWWpiIP0:AUO7wawXx5r6wzsYuCvprjutpiO0
TLSH
T182552342E224D51ECF8A0455FDD61A8D3784A9343DFF3A4E034BB9EC355D8092AE8BD9
MD5 SHA1 SHA512 SSDEEP TLSH

Chat Session - a442b6b9-edff-44d1-a5b8-c9f629c (1) (1).html

SHA256 380b38cf47ab97a36ec1bd690294aa6e44f1c48cda07375550410583832c7371
MD5 a8f0bfb3885db441150395d294c64a4f
SHA1 075b1e8091ee60fbcbf2fc2a8d40805e512186ef
SHA512 3a5840b26c9b4c1736edc74430915af8b873dd2988574514f51a08a5cd6a0b1b47d47e46d0eb2ca1307640be7d54bbcf38a4b8658d81c452cadcd83cb0b2540e
SSDEEP 1536:kdMozIViKXWZdH47v2oZFWNQmU9WuTUrSybh:k2ozGiKXWLH47p4q97yN
TLSH
T1D173A6479329033D0E720A82691D17EF775CE0ECF35612E278DAE278211995247B7EEB
MD5 SHA1 SHA512 SSDEEP TLSH

Defamation and Privacy in Employm-22a6279f9385c4ef (1) (1).pdf

SHA256 3433d776d2d89a4164a65da469b46624e41629b4c2dc38626570bc8d3f79c4c8
MD5 b535c5ba82bc7b0d002ceff406e483a7
SHA1 79a0fadbb7988553a1a1d1996be3931bcd64e42e
SHA512 733b351b8d05f3a35dfc5229439de945e4ae0822e86232bae3d2907baaa426669c113e85d404a5a2cdda8e8af2054d9ea6e1c19902b63bfc7ff4d149672d8704
SSDEEP 1536:OT8Y4LhAG/BBwX9y3gMGC1N5HGdjlHwhuom2oOfpMYhFcTjQhk4CNQ5X:3Yk2NywMzJmd9wcomVMMY7WQhkfoX
TLSH
T12763BE74F8DE4C9DF80AC608C2BE750A4F1EB52BB2CD348500AD0B15E0059E5EBA66DB
MD5 SHA1 SHA512 SSDEEP TLSH

Formal Disciplinary Hearing-59772d23ba1c0518 (1) (1).pdf

SHA256 8afd05291314a82534132457cb22fecee40f7ae0706cf5c19e4ce97bc64a515b
MD5 f401aff85a160f17b03a68186ef41f15
SHA1 5b5fdf4bb6cc6aacb085784c9ec102f72ed7d467
SHA512 29f296e54bd8203d061914f24dd68a5ae06a4ca77aa7dd18ef113ce3f88c0142ef1cb6364467f746985e65302caa802da6eb9aaa97fabcada725e8e86c67124e
SSDEEP 768:aX0O5YLtijt+eoG/P1EZqZdSuSd3HnxcXruAwcJ843sL:q0NAt+eJPsJuSxHxcXrV3sL
TLSH
T1C413C066D9DA1CDCF8D7DB525234786D843E721357C87C82717C0B8AAC14A88AB718EB
MD5 SHA1 SHA512 SSDEEP TLSH

Extracted URLs

file https://turboscribe.ai/?ref=pdf_export_upsell
file https://turboscribe.ai/subscribed?ref=pdf_export_upsell

Jason_s Accusations_ Negligence a-88710b2c965b4a0c (1) (1).pdf

SHA256 afe3428e183223af83102db6425b5259ef6865f705971a53552b826762ac5423
MD5 4cf62452ab63dbe9523761dad6237953
SHA1 430c2e62ef4ad5a7cd6f4352795ef1d0e4e80508
SHA512 2378d9e2d44bb266587f3b24784108588f674bae387839e1c5bdf07a271eaf596b8aab791fddf3e56eab56223127fb277285948352fcf6756373c513ea8e1678
SSDEEP 768:PGfl/+epOMO5PTBOeZ6S6YRd6uH7nrfHgYPgPWxiSM1ixtgmA3n988ohhcBe1OaF:PGf1+epLOnIRqfwPk
TLSH
T1D013AE31F99E5D9CE94AC21AE27D3C1F4F6DBA6BA6CC35C1003D0B05F105A50AF626C6
MD5 SHA1 SHA512 SSDEEP TLSH

Letter of Dismissal without Notic-fdb8f8743badb107 (2).pdf

SHA256 2f04e88cbf393514b252bcae46caf46043ac72ae23672b020d0db12f1ddbc91d
MD5 a9eafa6256433213ce3f61ec78813c23
SHA1 ca10c22245cbaf7a2aa114c21e38c94f059f09a4
SHA512 c995fcaf97712a42cacdaaa0b5b65aaaae8adc507d55e8a99c5764606d02ba8991b1d992f64108cf172319a67c219d0f5a7be5d2b7002171dc84e7f4822313ed
SSDEEP 24576:A8hDFU7whN6wH3iUHZq4s00Lh6hyqz2yk/fMvKYuCFTRprsEuWWpiIP0:AUO7wawXx5r6wzsYuCvprjutpiO0
TLSH
T182552342E224D51ECF8A0455FDD61A8D3784A9343DFF3A4E034BB9EC355D8092AE8BD9
MD5 SHA1 SHA512 SSDEEP TLSH

PNG image 3-b5121102a66da6bd.jpg

SHA256 3c795cd04685f4b8f0257d40fc1da0678b9ca970ed8908644b904d4d11991b33
MD5 3a179d3310efbb82464493222e5ad96a
SHA1 d01e39aa793ce6e57b79876d4f67a30da549917d
SHA512 29ef8abd1d9d7fa2a6493bdf2c0291e6f6f81aab9973057e38d49f992d6563dbd6af03a86ed82186b3d55a808d48d4e0ab20eb1358d8401c095250a3c223cbcc
SSDEEP 1536:BSvY2T0O1ZoIzzu/JAd3rGiWSGGT1rttEO7DwZUK5MBHv8LZQlSX5cFNN0iA49LN:B/DO1ZtSBAd3yGJZZxBHv8LZXJcd2Kj
TLSH
T182B3020B9FCF0F67DDD695318C0A76C9C1812DECF1EC6A01D0CF1E25C8A3A96585A5AE
MD5 SHA1 SHA512 SSDEEP TLSH

Sandbox- Letter in Response[.]pdf-6ee1f1cfbe95f98d (2).pdf

SHA256 8d341b8284d02bf3aa47ec7f899e9e52b84803c8c07bcf1d3bbc54d16a9c4014
MD5 1aaf3bc9c5579875e3896676ca966f01
SHA1 c47eeb590c504a6e390cb0229df4fc6882dc44aa
SHA512 9b0987b268727c7fd2f94eac55fb7f1486541e7a1b52c2137fa36ecb16a6d9b73c259f23164bf17ea61653279e70d22a2db3fcb4db4aa19787a9b15d811ea451
SSDEEP 768:0OIFBLzdYXqENLK868+URF9qPtTMJWYSvfjA/6BLRnItpp+QaEG/+TtRvq3XiqfO:h2HMRFieK8/jpGk56mr3xBX0NeAsmyj
TLSH
T1DE137C78F98A989DFC82C605C63D390D4E8DF35B97CD3894013D0A6AF205A65A3663D7
MD5 SHA1 SHA512 SSDEEP TLSH

Extracted URLs

file https://tria.ge/
file https://tria.ge/s?q=tags:pdf

Screenshot 2026-01-15 at 8.45.28 -1a040476c0547f5a (1).jpg

SHA256 4deb44c4be36d372d59a74632f8e13a80e103bcd1fbbe92f74a9c8caf7a2dd11
MD5 cd2568269c0f0d11e6707f6a2bddcbda
SHA1 4f5fa4c6fec9920ce6c1ad004f89bdc581cf81dc
SHA512 b86ec4fa891ec161b338a6532eca30eb3942d4295ddd5abfaebc9d110f86db954b1c36ecf5bd57d3209cd701afa9f3f83607eb3823d7924d4f733a537acad076
SSDEEP 3072:njJRDbsa7MCkhNoqMAxVFFQ6DTBjgygs7w+PRU:n91bP7WqqMAxu69p5U
TLSH
T1E5D30282A319D8DEC334CF3B329DB68586D8F45CBB811B445DABA779297FE143D26408
MD5 SHA1 SHA512 SSDEEP TLSH

Screenshot 2026-01-15 at 8.45.28 -b5121102a66da6bd (1).jpg

SHA256 4deb44c4be36d372d59a74632f8e13a80e103bcd1fbbe92f74a9c8caf7a2dd11
MD5 cd2568269c0f0d11e6707f6a2bddcbda
SHA1 4f5fa4c6fec9920ce6c1ad004f89bdc581cf81dc
SHA512 b86ec4fa891ec161b338a6532eca30eb3942d4295ddd5abfaebc9d110f86db954b1c36ecf5bd57d3209cd701afa9f3f83607eb3823d7924d4f733a537acad076
SSDEEP 3072:njJRDbsa7MCkhNoqMAxVFFQ6DTBjgygs7w+PRU:n91bP7WqqMAxu69p5U
TLSH
T1E5D30282A319D8DEC334CF3B329DB68586D8F45CBB811B445DABA779297FE143D26408
MD5 SHA1 SHA512 SSDEEP TLSH

email-html-2.txt

SHA256 02787a928a17dcafe50a450cb23197c4800bb91750b4cebdee696368f8d7f13e
MD5 53efd71e1d71d7a14d0d0f797a61ae2c
SHA1 ef14205431db55f694129a90575dd09a77862470
SHA512 88cc9880d7a381d44c2b9bd61d9ae0e3c9a62551ce942e90e98746ef985d184acfd1e16d1c9ab3d2fe8f90b7dc06b091b615c9b4dcb76f180be38cfb9fbd519b
SSDEEP 96:SYoiuNv/GXWo68XoAVAnAVAhdyAVAet2AVAtKwumAVApBRdWdBmAVAxAJDAVAc/F:SYoiuNv/toLgdpKFdWdBReqO
TLSH
T1D4029E42D3010E5B61F2C2FDE06AE78594855184E3172B3AE3AC77B7B5CED31312A79A
MD5 SHA1 SHA512 SSDEEP TLSH

email-plain-1.txt

SHA256 c4ac8a36b8a276264d5d7b862f73122a708f7fe74c3d919cd655ed92eb844bc6
MD5 84c1fcf0b4e97e9231fad2de99536e1a
SHA1 4fae5a3e3cd0ecc6f2c31168e7eb852bf75c700e
SHA512 52df4784868ef812736865ef6c17d17e3780e12d3c15a31e1c358e85b15438ee5e7dbc032b90905bb8c9405cce2f094da15cf765dd7479ca1c1c7ea2622ae097
TLSH
T19D41DCEDDC0F03249322F5B03153CDDDD6635008EEED52A6B029C399215AA7A443E96E
MD5 SHA1 SHA512 TLSH

image001.png

SHA256 ffda1704b4346b326bd0298a123becc77d8c3ec35dd4defaeb0274ba84e4aabe
MD5 4f068d1431a9307bc6e99122cd5b3735
SHA1 4d10472bae89ad1b4a1c86b59609381f89802e15
SHA512 ea25075a0d01875502868ea0d14fe1c4e762848fee58c196cec20c6d0abf41d5eddbd8f3daaaed1d8cfd6160b13d248b6569d17851f3ed0b9e05f2f487b18e64
SSDEEP 384:ZWTbkm3ahKThwTrt+5XRwlSb2NheKht3Wa4cjD+B33HcQ5MqjK:0TzqhqwpchwheKht3g2+BHT58
TLSH
T1C692E1BAEC36BB257680239799F9AD4D0F31A50D81779A8701326213691395017CFEB3
MD5 SHA1 SHA512 SSDEEP TLSH

Sharing

General

Malware Config

Signatures

File Explorer

WhiteheadGroup.co.nz - Re_ Disputes tribunal notice of hearing - CIV-2026-044-000531.eml

Email Headers

Extracted URLs

Attachment 6- Letter of Dismissal-d56fb9f577b4c4aa (2).pdf

Chat Session - a442b6b9-edff-44d1-a5b8-c9f629c (1) (1).html

Defamation and Privacy in Employm-22a6279f9385c4ef (1) (1).pdf

Formal Disciplinary Hearing-59772d23ba1c0518 (1) (1).pdf

Extracted URLs

Jason_s Accusations_ Negligence a-88710b2c965b4a0c (1) (1).pdf

Letter of Dismissal without Notic-fdb8f8743badb107 (2).pdf

PNG image 3-b5121102a66da6bd.jpg

Sandbox- Letter in Response[.]pdf-6ee1f1cfbe95f98d (2).pdf

Extracted URLs

Screenshot 2026-01-15 at 8.45.28 -1a040476c0547f5a (1).jpg

Screenshot 2026-01-15 at 8.45.28 -b5121102a66da6bd (1).jpg

email-html-2.txt

email-plain-1.txt

image001.png