Windows Analysis Report
Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf

Overview

General Information

Sample name: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf
Analysis ID: 1542342
MD5: 3f6cad68f1064b77fde1b9f6178e96f2
SHA1: e531433cd0052beac41e05f2a06ffe5747b1222f
SHA256: c1989e3bc34bdd2dee1738fbd697c91c6be63499462041ab3a570f8ca1532bdc
Infos:

Detection

Score: 2
Range: 0 - 100
Whitelisted: false
Confidence: 80%

Signatures

IP address seen in connection with other malware
Potential document exploit detected (performs DNS queries)
Potential document exploit detected (performs HTTP gets)
Potential document exploit detected (unknown TCP traffic)
Uses a known web browser user agent for HTTP communication

Classification

Potential document exploit detected (performs DNS queries)
Source: global traffic DNS query: name: x1.i.lencr.org
Potential document exploit detected (performs HTTP gets)
Source: global traffic TCP traffic: 192.168.2.4:49750 -> 96.7.168.138:443
Source: global traffic TCP traffic: 192.168.2.4:49750 -> 96.7.168.138:443
Source: global traffic TCP traffic: 192.168.2.4:49750 -> 96.7.168.138:443
Source: global traffic TCP traffic: 192.168.2.4:49750 -> 96.7.168.138:443
Source: global traffic TCP traffic: 192.168.2.4:49750 -> 96.7.168.138:443
Source: global traffic TCP traffic: 192.168.2.4:49750 -> 96.7.168.138:443
Source: global traffic TCP traffic: 192.168.2.4:49750 -> 96.7.168.138:443
Source: global traffic TCP traffic: 192.168.2.4:49750 -> 96.7.168.138:443
Source: global traffic TCP traffic: 192.168.2.4:49750 -> 96.7.168.138:443
Source: global traffic TCP traffic: 192.168.2.4:49750 -> 96.7.168.138:443
Source: global traffic TCP traffic: 192.168.2.4:49750 -> 96.7.168.138:443
Source: global traffic TCP traffic: 192.168.2.4:49750 -> 96.7.168.138:443
Source: global traffic TCP traffic: 192.168.2.4:49750 -> 96.7.168.138:443
Potential document exploit detected (unknown TCP traffic)
Source: global traffic TCP traffic: 192.168.2.4:49750 -> 96.7.168.138:443
Source: global traffic TCP traffic: 96.7.168.138:443 -> 192.168.2.4:49750
Source: global traffic TCP traffic: 192.168.2.4:49750 -> 96.7.168.138:443
Source: global traffic TCP traffic: 192.168.2.4:49750 -> 96.7.168.138:443
Source: global traffic TCP traffic: 96.7.168.138:443 -> 192.168.2.4:49750
Source: global traffic TCP traffic: 96.7.168.138:443 -> 192.168.2.4:49750
Source: global traffic TCP traffic: 192.168.2.4:49750 -> 96.7.168.138:443
Source: global traffic TCP traffic: 96.7.168.138:443 -> 192.168.2.4:49750
Source: global traffic TCP traffic: 96.7.168.138:443 -> 192.168.2.4:49750
Source: global traffic TCP traffic: 192.168.2.4:49750 -> 96.7.168.138:443
Source: global traffic TCP traffic: 192.168.2.4:49750 -> 96.7.168.138:443
Source: global traffic TCP traffic: 192.168.2.4:49750 -> 96.7.168.138:443
Source: global traffic TCP traffic: 96.7.168.138:443 -> 192.168.2.4:49750
Source: global traffic TCP traffic: 96.7.168.138:443 -> 192.168.2.4:49750
Source: global traffic TCP traffic: 192.168.2.4:49750 -> 96.7.168.138:443
Source: global traffic TCP traffic: 96.7.168.138:443 -> 192.168.2.4:49750
Source: global traffic TCP traffic: 192.168.2.4:49750 -> 96.7.168.138:443
Source: global traffic TCP traffic: 96.7.168.138:443 -> 192.168.2.4:49750
Source: global traffic TCP traffic: 96.7.168.138:443 -> 192.168.2.4:49750
Source: global traffic TCP traffic: 192.168.2.4:49750 -> 96.7.168.138:443
Source: global traffic TCP traffic: 192.168.2.4:49750 -> 96.7.168.138:443
Source: global traffic TCP traffic: 96.7.168.138:443 -> 192.168.2.4:49750
Source: global traffic TCP traffic: 192.168.2.4:49750 -> 96.7.168.138:443
Source: global traffic TCP traffic: 192.168.2.4:49750 -> 96.7.168.138:443
IP address seen in connection with other malware
Source: Joe Sandbox View IP Address: 96.7.168.138 96.7.168.138
Uses a known web browser user agent for HTTP communication
Source: global traffic HTTP traffic detected: GET /onboarding/smskillreader.txt HTTP/1.1Host: armmf.adobe.comConnection: keep-aliveAccept-Language: en-US,en;q=0.9User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) ReaderServices/23.6.20320 Chrome/105.0.0.0 Safari/537.36Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brIf-None-Match: "78-5faa31cce96da"If-Modified-Since: Mon, 01 May 2023 15:02:33 GMT
Source: unknown TCP traffic detected without corresponding DNS query: 96.7.168.138
Source: unknown TCP traffic detected without corresponding DNS query: 96.7.168.138
Source: unknown TCP traffic detected without corresponding DNS query: 96.7.168.138
Source: unknown TCP traffic detected without corresponding DNS query: 96.7.168.138
Source: unknown TCP traffic detected without corresponding DNS query: 96.7.168.138
Source: unknown TCP traffic detected without corresponding DNS query: 96.7.168.138
Source: unknown TCP traffic detected without corresponding DNS query: 96.7.168.138
Source: unknown TCP traffic detected without corresponding DNS query: 96.7.168.138
Source: unknown TCP traffic detected without corresponding DNS query: 96.7.168.138
Source: unknown TCP traffic detected without corresponding DNS query: 96.7.168.138
Source: unknown TCP traffic detected without corresponding DNS query: 96.7.168.138
Source: unknown TCP traffic detected without corresponding DNS query: 96.7.168.138
Source: unknown TCP traffic detected without corresponding DNS query: 96.7.168.138
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: global traffic HTTP traffic detected: GET /onboarding/smskillreader.txt HTTP/1.1Host: armmf.adobe.comConnection: keep-aliveAccept-Language: en-US,en;q=0.9User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) ReaderServices/23.6.20320 Chrome/105.0.0.0 Safari/537.36Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brIf-None-Match: "78-5faa31cce96da"If-Modified-Since: Mon, 01 May 2023 15:02:33 GMT
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf String found in binary or memory: <</Subtype/Link/Rect[ 321.75 431.16 491.58 444.92] /BS<</W 0>>/F 4/A<</Type/Action/S/URI/URI(https://www.youtube.com/watch?v=VYEUShIP7Rs) >>/StructParent 77>> equals www.youtube.com (Youtube)
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf String found in binary or memory: <</Subtype/Link/Rect[ 321.75 444.92 545.49 458.67] /BS<</W 0>>/F 4/A<</Type/Action/S/URI/URI(https://www.youtube.com/watch?v=VYEUShIP7Rs) >>/StructParent 76>> equals www.youtube.com (Youtube)
Source: global traffic DNS traffic detected: DNS query: x1.i.lencr.org
Source: 77EC63BDA74BD0D0E0426DC8F80085060.1.dr String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
Source: 2D85F72862B55C4EADD9E66E06947F3D0.1.dr String found in binary or memory: http://x1.i.lencr.org/
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf String found in binary or memory: https://ai4ph-hrtp.ca/wp-content/uploads/2024/06/AI-to-advance-public-health-in-Canada-2024-FINAL.pd
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf String found in binary or memory: https://bc.ctvnews.ca/b-c-nurses-speak-out-amid-concerns-about-drug-use-in-hospitals-1.6834635)
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf String found in binary or memory: https://canjhealthtechnol.ca/index.php/cjht/article/download/EH0125/EH0125/7118)
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf String found in binary or memory: https://cap-cpma.ca/the-council-of-atlantic-premiers-presented-the-golden-scissors-award-from-the-ca
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf String found in binary or memory: https://cifar.ca/wp-content/uploads/2020/11/AI-health-policy-report-ENG.pdf)
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf String found in binary or memory: https://energyfuturesinstitute.ca/f/new-ipsos-poll-reveals-concerns-about-bc%E2%80%99s-energy-polici
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf String found in binary or memory: https://globalnews.ca/news/9478783/ottawa-health-funding-deal-leblanc/)
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf String found in binary or memory: https://nursesunions.ca/wp-content/uploads/2017/05/CFNU_Enough-is-Enough_June1_FINALlow.pdf)
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf String found in binary or memory: https://occupations.esdc.gc.ca/sppc-cops/.4cc.5p.1t.3onsummaryd.2tail%40-eng.jsp?tid=104)
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf String found in binary or memory: https://pubmed.ncbi.nlm.nih.gov/36474786/)
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf String found in binary or memory: https://qane-afi.casn.ca/cgi/viewcontent.cgi?article=1408&context=journal)
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf String found in binary or memory: https://rnao.ca/bpg/get-involved/acpf/enhancing-violence-prevention-for-health-care-workers-employed
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf String found in binary or memory: https://secondstreet.org/2022/07/19/policy-brief-copy-eu-policy-reduce-patient-suffering/)
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf String found in binary or memory: https://secondstreet.org/sweden/)
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf String found in binary or memory: https://secondstreet.org/wp-content/uploads/2023/12/Policy-Brief-Died-on-a-Waiting-List-2023-FINAL.p
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf String found in binary or memory: https://secure.cihi.ca/free_products/ActivityBasedFundingManualEN-web_Nov2013.pdf)
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf String found in binary or memory: https://smractionplan.ca/)
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf String found in binary or memory: https://uploads-ssl.webflow.com/64108fa6cd96c24e82418a19/641c495696ff766b26d9e1b6_Viewpoints%20-%20V
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf String found in binary or memory: https://vancouversun.com/health/local-health/bc-no-family-doctor-care-options#%3A~%3Atext%3DNearly%2
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf String found in binary or memory: https://vancouversun.com/news/local-news/bc-physician-assistants-patient-waitlists)
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf String found in binary or memory: https://www.bcauditor.com/sites/default/files/publications/reports/Report%20Rural%20Nursing%20FINAL.
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf String found in binary or memory: https://www.bclaws.gov.bc.ca/civix/document/id/complete/statreg/08038_01)
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf String found in binary or memory: https://www.bcnu.org/News-Events/CampaignsInitiatives/Documents/Future_of_Nursing_in_BC.pdf)
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf String found in binary or memory: https://www.cadth.ca/sites/default/files/Tech%20Trends/2023/ER0013%20-%202023%20Watch%20List%20Final
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf String found in binary or memory: https://www.cdhowe.org/intelligence-memos/tingting-zhang-five-ways-address-our-family-physician-shor
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf String found in binary or memory: https://www.cdhowe.org/sites/default/files/2024-05/Commentary_660.pdf)
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf String found in binary or memory: https://www.cfib-fcei.ca/en/research-economic-analysis/patients-before-paperwork)
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf String found in binary or memory: https://www.cfp.ca/content/69/4/269.long#ref-27)
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf String found in binary or memory: https://www.cfpc.ca/CFPC/media/Resources/Health-Policy/HPGR-FP-Reform-Policy-EN.pdf)
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf String found in binary or memory: https://www.cihi.ca/en/wait-times-for-priority-procedures-in-canada-2024)
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf String found in binary or memory: https://www.cma.ca/latest-stories/addressing-physicians-administrative-burden-invisible-crisis-famil
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf String found in binary or memory: https://www.cma.ca/sites/default/files/pdf/Media-Releases/Conference%20Board%20of%20Canada%20-%20Mee
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf String found in binary or memory: https://www.finances.gouv.qc.ca/Budget_and_update/budget/documents/Budget2425_BudgetPlan.pdf)
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf String found in binary or memory: https://www.fraserinstitute.org/sites/default/files/price-of-public-health-care-insurance-2021.pdf)
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf String found in binary or memory: https://www.fraserinstitute.org/sites/default/files/understanding-british-columbias-public-managemen
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf String found in binary or memory: https://www.fraserinstitute.org/studies/10-years-on-revisiting-the-saskatchewan-surgical-initiative)
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf String found in binary or memory: https://www.hee.nhs.uk/our-work/topol-review)
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf String found in binary or memory: https://www.heu.org/sites/default/files/2022-03/NR%2003%2032%2022%20HEU_Poll.pdf)
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf String found in binary or memory: https://www.hospitalmanagementasia.com/tech-innovation/the-increasing-importance-of-integrated-opera
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf String found in binary or memory: https://www.informationsverige.se/en/om-sverige/att-varda-sin-halsa-i-sverige/rattigheter-och-skyldi
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf String found in binary or memory: https://www.jobbank.gc.ca/trend-analysis/job-market-reports/britishcolumbia/sectoral-profile-agricul
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf String found in binary or memory: https://www.ontario.ca/document/ohip-infobulletins-2024/bulletin-240404-new-e-form-application-out-c
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf String found in binary or memory: https://www.ontario.ca/laws/regulation/900552?search=552&BK12)
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf String found in binary or memory: https://www.ourcommons.ca/Content/Committee/441/HESA/Reports/RP12260300/hesarp10/hesarp10-e.pdf)
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf String found in binary or memory: https://www.ourcommons.ca/content/committee/421/hesa/brief/br10576965/br-external/britishcolumbianur
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf String found in binary or memory: https://www.priv.gc.ca/en/opc-actions-and-decisions/investigations/investigations-into-federal-insti
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf String found in binary or memory: https://www.rbcroyalbank.com/healthcare-financial-solutions/advice-learning/article/?title=canada-ne
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf String found in binary or memory: https://www.thejournal.ie/belfast-of-blind-cataract-bus-michael-collins-5164956-Jul2020/)
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf String found in binary or memory: https://www.timescolonist.com/local-news/plan-for-private-mri-clinic-at-hillside-scrapped-after-fail
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf String found in binary or memory: https://www.youtube.com/watch?v=VYEUShIP7Rs)
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf String found in binary or memory: https://www150.statcan.gc.ca/t1/tbl1/en/tv.action?pid=3210023001&pickMembers%5B0%5D=1.11&cubeTimeFra
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf String found in binary or memory: https://www2.gov.bc.ca/assets/gov/data/statistics/business-industry-trade/small-business/small_busin
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown Network traffic detected: HTTP traffic on port 49750 -> 443
Source: classification engine Classification label: clean2.winPDF@14/46@1/1
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://vancouversun.com/news/local-news/bc-physician-assistants-patient-waitlists
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://nursesunions.ca/wp-content/uploads/2017/05/CFNU_Enough-is-Enough_June1_FINALlow.pdf
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://www.cfpc.ca/cfpc/media/resources/health-policy/hpgr-fp-reform-policy-en.pdf
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://www.ontario.ca/laws/regulation/900552?search=552&bk12
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://www.fraserinstitute.org/sites/default/files/price-of-public-health-care-insurance-2021.pdf
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://www.bcnu.org/news-events/campaignsinitiatives/documents/future_of_nursing_in_bc.pdf
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://www.ourcommons.ca/content/committee/441/hesa/reports/rp12260300/hesarp10/hesarp10-e.pdf
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://vancouversun.com/health/local-health/bc-no-family-doctor-care-options#%3A~%3Atext%3DNearly%20one%20million%20people%20in%2Cdoctor%20%E2%80%94%20roughly%20one%20in%20five
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://secondstreet.org/wp-content/uploads/2023/12/Policy-Brief-Died-on-a-Waiting-List-2023-FINAL.pdf
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://canjhealthtechnol.ca/index.php/cjht/article/download/EH0125/EH0125/7118
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://www.bcauditor.com/sites/default/files/publications/reports/report%20rural%20nursing%20final.pdf
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://www.ontario.ca/laws/regulation/900552?search=552&BK12
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://www.fraserinstitute.org/sites/default/files/understanding-british-columbias-public-management-challenge.pdf
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://www.heu.org/sites/default/files/2022-03/NR%2003%2032%2022%20HEU_Poll.pdf
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://www.heu.org/sites/default/files/2022-03/nr%2003%2032%2022%20heu_poll.pdf
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://cap-cpma.ca/the-council-of-atlantic-premiers-presented-the-golden-scissors-award-from-the-canadian-federation-of-independent-business-cfib-recognizing-the-atlantic-physician-registry/
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://rnao.ca/bpg/get-involved/acpf/enhancing-violence-prevention-for-health-care-workers-employed-in-the-home-0
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://qane-afi.casn.ca/cgi/viewcontent.cgi?article=1408&context=journal
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://www.fraserinstitute.org/studies/10-years-on-revisiting-the-saskatchewan-surgical-initiative
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://smractionplan.ca/
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://www.cfp.ca/content/69/4/269.long#ref-27
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://www.bcauditor.com/sites/default/files/publications/reports/Report%20Rural%20Nursing%20FINAL.pdf
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://secure.cihi.ca/free_products/ActivityBasedFundingManualEN-web_Nov2013.pdf
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://www.cadth.ca/sites/default/files/Tech%20Trends/2023/ER0013%20-%202023%20Watch%20List%20Final.pdf
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://www.hospitalmanagementasia.com/tech-innovation/the-increasing-importance-of-integrated-operation-centres-in-hospitals/
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://occupations.esdc.gc.ca/sppc-cops/.4cc.5p.1t.3onsummaryd.2tail%40-eng.jsp?tid=104
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://www150.statcan.gc.ca/t1/tbl1/en/tv.action?pid=3210023001&pickMembers%5B0%5D=1.11&cubeTimeFrame.startYear=2001&cubeTimeFrame.endYear=2021&referencePeriods=20010101%2C20210101
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://www.informationsverige.se/en/om-sverige/att-varda-sin-halsa-i-sverige/rattigheter-och-skyldigheter-i-motet-med-varden.html
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://www.timescolonist.com/local-news/plan-for-private-mri-clinic-at-hillside-scrapped-after-failed-appeals-9069562
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://www.cma.ca/sites/default/files/pdf/media-releases/conference%20board%20of%20canada%20-%20meeting%20the%20care%20needs%20of%20canada%27s%20aging%20population.pdf
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://cifar.ca/wp-content/uploads/2020/11/AI-health-policy-report-ENG.pdf
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://energyfuturesinstitute.ca/f/new-ipsos-poll-reveals-concerns-about-bc%e2%80%99s-energy-policies
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://www.ourcommons.ca/content/committee/421/hesa/brief/br10576965/br-external/britishcolumbianursesunion-e.pdf
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://uploads-ssl.webflow.com/64108fa6cd96c24e82418a19/641c495696ff766b26d9e1b6_viewpoints%20-%20v2.pdf
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://cifar.ca/wp-content/uploads/2020/11/ai-health-policy-report-eng.pdf
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://www.finances.gouv.qc.ca/budget_and_update/budget/documents/budget2425_budgetplan.pdf
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://nursesunions.ca/wp-content/uploads/2017/05/cfnu_enough-is-enough_june1_finallow.pdf
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://www.hee.nhs.uk/our-work/topol-review
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://vancouversun.com/health/local-health/bc-no-family-doctor-care-options#%3a~%3atext%3dnearly%20one%20million%20people%20in%2cdoctor%20%e2%80%94%20roughly%20one%20in%20five
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://www150.statcan.gc.ca/t1/tbl1/en/tv.action?pid=3210023001&pickmembers%5b0%5d=1.11&cubetimeframe.startyear=2001&cubetimeframe.endyear=2021&referenceperiods=20010101%2c20210101
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://www.cma.ca/latest-stories/addressing-physicians-administrative-burden-invisible-crisis-family-medicine
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://www.youtube.com/watch?v=vyeuship7rs
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://www.cdhowe.org/sites/default/files/2024-05/commentary_660.pdf
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://ai4ph-hrtp.ca/wp-content/uploads/2024/06/ai-to-advance-public-health-in-canada-2024-final.pdf
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://canjhealthtechnol.ca/index.php/cjht/article/download/eh0125/eh0125/7118
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://www.cfpc.ca/CFPC/media/Resources/Health-Policy/HPGR-FP-Reform-Policy-EN.pdf
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://secondstreet.org/2022/07/19/policy-brief-copy-eu-policy-reduce-patient-suffering/
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://bc.ctvnews.ca/b-c-nurses-speak-out-amid-concerns-about-drug-use-in-hospitals-1.6834635
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://globalnews.ca/news/9478783/ottawa-health-funding-deal-leblanc/
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://www.priv.gc.ca/en/opc-actions-and-decisions/investigations/investigations-into-federal-institutions/2022-23/pa_20230529_pc/
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://pubmed.ncbi.nlm.nih.gov/36474786/
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://www.youtube.com/watch?v=VYEUShIP7Rs
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://www.ourcommons.ca/Content/Committee/441/HESA/Reports/RP12260300/hesarp10/hesarp10-e.pdf
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://www.cma.ca/sites/default/files/pdf/Media-Releases/Conference%20Board%20of%20Canada%20-%20Meeting%20the%20Care%20Needs%20of%20Canada%27s%20Aging%20Population.PDF
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://www.jobbank.gc.ca/trend-analysis/job-market-reports/britishcolumbia/sectoral-profile-agriculture
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://www.thejournal.ie/belfast-of-blind-cataract-bus-michael-collins-5164956-jul2020/
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://energyfuturesinstitute.ca/f/new-ipsos-poll-reveals-concerns-about-bc%E2%80%99s-energy-policies
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://secondstreet.org/wp-content/uploads/2023/12/policy-brief-died-on-a-waiting-list-2023-final.pdf
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://secure.cihi.ca/free_products/activitybasedfundingmanualen-web_nov2013.pdf
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://ai4ph-hrtp.ca/wp-content/uploads/2024/06/AI-to-advance-public-health-in-Canada-2024-FINAL.pdf
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://www2.gov.bc.ca/assets/gov/data/statistics/business-industry-trade/small-business/small_business_profile_highlights_2023.pdf
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://www.finances.gouv.qc.ca/Budget_and_update/budget/documents/Budget2425_BudgetPlan.pdf
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://www.cdhowe.org/sites/default/files/2024-05/Commentary_660.pdf
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://www.thejournal.ie/belfast-of-blind-cataract-bus-michael-collins-5164956-Jul2020/
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://www.cihi.ca/en/wait-times-for-priority-procedures-in-canada-2024
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://www.ontario.ca/document/ohip-infobulletins-2024/bulletin-240404-new-e-form-application-out-country-health-services
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://secondstreet.org/sweden/
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://www.cadth.ca/sites/default/files/tech%20trends/2023/er0013%20-%202023%20watch%20list%20final.pdf
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://www.rbcroyalbank.com/healthcare-financial-solutions/advice-learning/article/?title=canada-needs-more-doctors-and-fast
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://www.cfib-fcei.ca/en/research-economic-analysis/patients-before-paperwork
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://www.bclaws.gov.bc.ca/civix/document/id/complete/statreg/08038_01
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://www.bcnu.org/News-Events/CampaignsInitiatives/Documents/Future_of_Nursing_in_BC.pdf
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://uploads-ssl.webflow.com/64108fa6cd96c24e82418a19/641c495696ff766b26d9e1b6_Viewpoints%20-%20V2.pdf
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: https://www.cdhowe.org/intelligence-memos/tingting-zhang-five-ways-address-our-family-physician-shortage
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe File created: C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe File created: C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-10-25 13-58-10-016.log Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA Jump to behavior
Source: unknown Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf"
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2088 --field-trial-handle=1736,i,14481799690591012217,13194473589811774586,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215 Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2088 --field-trial-handle=1736,i,14481799690591012217,13194473589811774586,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8 Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process created: unknown unknown Jump to behavior
Source: Window Recorder Window detected: More than 3 window changes detected
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Static file information: File size 9790721 > 6291456
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: PDF keyword /JS count = 0
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: PDF keyword /JavaScript count = 0
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: PDF keyword /Page count = 114
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: PDF keyword stream count = 292
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: PDF keyword /EmbeddedFile count = 0
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: PDF keyword /ObjStm count = 8
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: PDF keyword endobj count = 766
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: PDF keyword endstream count = 292
Source: Conservative_Party_of_British_Columbia_Policy_Platform_(2).pdf Initial sample: PDF keyword obj count = 766
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
windows-stand
Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Is Windows Process
  • Number of created Registry Values
  • Number of created Files
  • Visual Basic
  • Delphi
  • Java
  • .Net C# or VB.NET
  • C, C++ or other language
  • Is malicious
  • Internet
behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 1542342 Sample: Conservative_Party_of_Briti... Startdate: 25/10/2024 Architecture: WINDOWS Score: 2 14 x1.i.lencr.org 2->14 7 Acrobat.exe 20 76 2->7         started        process3 process4 9 AcroCEF.exe 107 7->9         started        process5 11 AcroCEF.exe 2 9->11         started        dnsIp6 16 96.7.168.138, 443, 49750 INTERNEXABRASILOPERADORADETELECOMUNICACOESSABR United States 11->16
  • No. of IPs < 25%
  • 25% < No. of IPs < 50%
  • 50% < No. of IPs < 75%
  • 75% < No. of IPs

Contacted Public IPs

IP Domain Country Flag ASN ASN Name Malicious
96.7.168.138
 unknown United States
262589 INTERNEXABRASILOPERADORADETELECOMUNICACOESSABR false

Contacted Domains

Name IP Active
x1.i.lencr.org unknown unknown