ID: Cookbook: browseurl.jbs Time: 19:33:28 Date: 25/04/2018 Version:
|
|
|
- Lorena Reeves
- 5 years ago
- Views:
Transcription
1 ID: Cookbook: browseurl.jbs Time: 19:33:28 Date: 25/04/2018 Version:
2 Table of Contents Analysis Report Overview General Information Detection Confidence Classification Analysis Advice Signature Overview Networking: System Summary: Hooking and other Techniques for Hiding and Protection: Behavior Graph Simulations Behavior and APIs Antivirus Detection Initial Sample Dropped Files Unpacked PE Files Domains Yara Overview Initial Sample PCAP (Network Traffic) Dropped Files Memory Dumps Unpacked PEs Joe Sandbox View / Context IPs Domains ASN Dropped Files Screenshots Startup Created / dropped Files Contacted Domains/Contacted IPs Contacted Domains Contacted IPs Static File Info No static file info Network Behavior Network Port Distribution TCP Packets UDP Packets DNS Queries DNS Answers HTTP Request Dependency Graph HTTP Packets HTTPS Packets Code Manipulations Statistics Behavior Table of Contents Copyright Joe Security LLC 2018 Page 2 of
3 System Behavior Analysis iexplore.exe PID: 3336 Parent PID: 548 General File Activities Registry Activities Analysis iexplore.exe PID: 3428 Parent PID: 3336 General File Activities Registry Activities Analysis ssvagent.exe PID: 3500 Parent PID: 3428 General Registry Activities Disassembly Code Analysis Copyright Joe Security LLC 2018 Page 3 of 39
4 Analysis Report Overview General Information Joe Sandbox Version: Analysis ID: Start time: 19:33:28 Joe Sandbox Product: CloudBasic Start date: Overall analysis duration: Hypervisor based Inspection enabled: Report type: Cookbook file name: Sample URL: 0h 5m 25s light browseurl.jbs Analysis system description: Windows 7 SP1 (with Office 2010 SP2, IE 11, FF 54, Chrome 60, Acrobat Reader DC 17, Flash 26, Java ) Number of analysed new started processes analysed: 5 Number of new started drivers analysed: 0 Number of existing processes analysed: 0 Number of existing drivers analysed: 0 Number of injected processes analysed: 0 Technologies Analysis stop reason: Detection: Classification: HCA enabled EGA enabled HDC enabled Timeout CLEAN clean1.win@5/47@3/3 HCA Information: Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0 EGA Information: HDC Information: Cookbook Comments: Failed Failed Adjust boot time Correcting counters for adjusted boot time Browsing link: kup.cz/crir/signdenderereen/docusign5apps/ Real link is: up.cz/crir/signdenderereen/docusign5apps/ Warnings: Show All Exclude process from analysis (whitelisted): dllhost.exe Execution Graph export aborted for target iexplore.exe, PID 3428 because there are no executed function Report size getting too big, too many NtAllocateVirtualMemory calls found. Report size getting too big, too many NtDeviceIoControlFile calls found. Report size getting too big, too many NtEnumerateKey calls found. Report size getting too big, too many NtOpenKeyEx calls found. Report size getting too big, too many NtProtectVirtualMemory calls found. Report size getting too big, too many NtQueryValueKey calls found. Detection Strategy Score Range Reporting Detection Copyright Joe Security LLC 2018 Page 4 of 39
5 Strategy Score Range Reporting Detection Threshold Report FP / FN Confidence Strategy Score Range Further Analysis Required? Confidence Threshold true Classification Copyright Joe Security LLC 2018 Page 5 of 39
6 Ransomware Miner Spreading malicious malicious malicious Evader Phishing suspicious suspicious suspicious clean clean clean Exploiter Banker Spyware Trojan / Bot Adware Analysis Advice Sample HTTP request are all non existing, likely the sample is no longer working Sample has a GUI, but Joe Sandbox has not found any clickable buttons, likely more UI automation may extend behavior Uses HTTPS for network communication, use the 'Proxy HTTPS (port 443) to read its encrypted data' cookbook for further analysis Signature Overview Networking System Summary Copyright Joe Security LLC 2018 Page 6 of 39
7 Hooking and other Techniques for Hiding and Protection Click to jump to signature section Networking: Social media urls found in memory data Downloads files Downloads files from webservers via HTTP Found strings which match to known social media urls Performs DNS lookups Tries to download non-existing http data (HTTP/ Found) Urls found in memory or binary data Uses HTTPS System Summary: Searches the installation path of Mozilla Firefox Classification label Creates files inside the user directory Creates temporary files Reads ini files Reads software policies Spawns processes Uses an in-process (OLE) Automation server Found graphical window changes (likely an installer) Uses new MSVCR Dlls Binary contains paths to debug symbols Hooking and other Techniques for Hiding and Protection: Disables application error messsages (SetErrorMode) Behavior Graph Copyright Joe Security LLC 2018 Page 7 of 39
8 Behavior Graph ID: URL: Startdate: 25/04/2018 Architecture: WINDOWS Score: 1 Legend: Process Signature Created File DNS/IP Info Is Dropped Is Windows Process Hide Legend started Number of created Registry Values iexplore.exe started iexplore.exe Number of created Files Visual Basic Delphi Java.Net C# or VB.NET C, C++ or other language Is malicious , 443, 49170, PROTEXIA-EUEuropeanNetworkGB United Kingdom , 49168, 49169, 80 MACOSOFT-ASRO Romania , 49408, 50323, GOOGLE-GoogleIncUS United States started ssvagent.exe 6 Simulations Behavior and APIs Time Type Description 19:33:44 API Interceptor 1907x Sleep call for process: iexplore.exe modified 19:33:46 API Interceptor 1x Sleep call for process: ssvagent.exe modified Antivirus Detection Initial Sample Detection Scanner Label Link 1% virustotal Browse Dropped Files No Antivirus matches Unpacked PE Files No Antivirus matches Domains Detection Scanner Label Link 0% virustotal Browse Copyright Joe Security LLC 2018 Page 8 of 39
9 Detection Scanner Label Link 0% virustotal Browse Yara Overview Initial Sample No yara matches PCAP (Network Traffic) No yara matches Dropped Files No yara matches Memory Dumps No yara matches Unpacked PEs No yara matches Joe Sandbox View / Context IPs No context Domains No context ASN No context Dropped Files No context Screenshots Copyright Joe Security LLC 2018 Page 9 of 39
10 Startup System is w7 cleanup iexplore.exe (PID: 3336 cmdline: '' -Embedding CA1F703CD665867E8132D2946FB55750) iexplore.exe (PID: 3428 cmdline: '' SCODEF:3336 CREDAT: /prefetch:2 CA1F703CD665867E8132D2946FB55750) ssvagent.exe (PID: 3500 cmdline: 'C:\PROGRA~1\Java\JRE18~1.0_1\bin\ssvagent.exe' -new 0953A FD1E655B75B63B9083B7) Created / dropped Files C:\Users\HERBBL~1\AppData\Local\Temp\JavaDeployReg.log Size (bytes): 89 ASCII text, with CRLF line terminators Entropy (8bit): E1EAD9FBBD3A2BA351F5A5E8E3D6B52 2E87F D1EFC9AFA081ECA26E19D96 3D750890D21598EB9006C92342F5D53F2E241978B832C23BA7D5D5C69D53C ECE4FAF1E207BA F D06A0C AFB6CC251FCF39D57A29237CDB2D074776C20AD63504A C3FD53A C8FC12A0EF3F28F1A3718C Copyright Joe Security LLC 2018 Page 10 of 39
11 C:\Users\HERBBL~1\AppData\Local\Temp\~DF06BD76A F9.TMP FoxPro FPT, blocks size 258, next free block index Size (bytes): Entropy (8bit): F97F F3A252A5B9981F BB9F28FDB5507E735940E01BE5792C877F 0793CD8C3C A926A5725B4DC0AF978AE1DD4FA2F819C50A72ECFEEFF11 DCCF79E7793D714EFA27ADBAD0E93C4DCD1A13FBB0735F3A94D49155C7B3D19817E49CEBDE883A01D0708D20 E816D7E9F24DC02AA7B96E14A021F15A6E2D111E C:\Users\HERBBL~1\AppData\Local\Temp\~DF23B2D0D319FE2603.TMP FoxPro FPT, blocks size 258, next free block index Size (bytes): Entropy (8bit): B0DDA9FF60CE0553D26F3DB4AE65 A64ADE892B6B824DB85BE6C E A5E AE652097F4B8E0FF715891C41B9F52D4599C30B222EADCD50595FB F74B9561D7DF70D3E01C3F45274A4313A2C5F7A2152FAAF0035D9903DF926C0B614B060B977CF4A8EEF07F D00CDCB533AF40A6CEDF49C C:\Users\HERBBL~1\AppData\Local\Temp\~DFB75CF590E70C51B6.TMP FoxPro FPT, blocks size 258, next free block index Size (bytes): Entropy (8bit): A8C0221AB54C39043B05A4F7091B85 EB7828BC55E4C53ED3FC CAFD9BE 9E0A78D6F254F506A90FDC615C2E6A86328AB54F481956E4073CC45AAB9EBEA1 30F95A280080AA5EA64E8F5FCA3D262EE81DEF7A BDBF67F400580D1492FCE35AA5F9FBFDF4E4E7A E89C952F0637F1D7D23380CD76AE5D998B6 C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\57C8EDB95DF3F0AD4EE2DC2B8CFD4157 Size (bytes): Entropy (8bit): Microsoft Cabinet archive data, 6497 bytes, 1 file F1AB BD85220BA8C7E4217B6B C3B3A27FA A1BBB7102E45AEE2ABC09FB 7A35AC3BE379F28C2BF459E7897C331B7512D5CACC14AEFE8C814595A942A427 0BF4AF9BA99EA802DF7A886983C32BC62326E4D35A8FF5A0B1BE13F018B7643E9D3C2862DDD291D6F3793C E9A9B0D3263C397530CFCB9AD92C02278C C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\6BADA8974A10C4BD62CC921D13E43B18_BEB37ABADF B E0 4 data Size (bytes): 471 Entropy (8bit): F0210FCA CC216A E2 D10B86C6F353C30D98B55BFCAADD40E7D493397C 397AD878DB2D20AFD65BA634252E B089E1C9526BD D1221F9 Copyright Joe Security LLC 2018 Page 11 of 39
12 C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\6BADA8974A10C4BD62CC921D13E43B18_BEB37ABADF B E0 4 C5CA0CE0D36CB0716ECC6E37F96C261EF4E992C6C6B03D7EF703252D5494DE7AAFB222089C8BEC0A52ECD39D CF B994898E994C7D29C8C513BB690DA C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F Size (bytes): Entropy (8bit): Microsoft Cabinet archive data, bytes, 1 file true 43F15C11C0A671FE5B524D4BC7B632E8 FA048790DD259B7952A137360C0B B401 25ABF8F1CF E132B8E2E755AE B9A268BAFCBDADAE2FFEDBEC 2176D5FA855E0E12B B51CA6144E4D8E9B9C68EC84C0EDD1A2BA424713C A8194CAC59B1809 3CE176DA84023C02AA3E9C35BD320DBBB54D8 C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\82CB34DD3343FE727DF8890D352E0D8F data Size (bytes): 4267 Entropy (8bit): F8216FD354CA2C606769D95731D45B19 950CA8F6EE3A EB8BD1CF170C259D80 68B74DD2A491A8490A6DCF99AF4AC4F E712F92545DF678962EF2D903D 2E19E49E10747CCB526591CDFB4BBD7F0F55B8BB34F1C11509D130710EDCEE87E4FB313BC74164D4F1F1E1F91A F6ECF30ADB8A AC072D EC5 C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157 data Size (bytes): 1026 Entropy (8bit): A4FD9B6F0C06E8273DB14A6CB64297D5 6C60E5CFAEDF075D758D244D993F662A84F DC37A376B13A1BA414227BF49A0E DB9ED A D3EC368EF85265D23E52D67F1EB9AE BBA5C5306CD93BEF97214AF67EEF866469F945960C8837C976AD BF710EFA99CE7E9C7155E848CF4C513B33B5E C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\6BADA8974A10C4BD62CC921D13E43B18_BEB37ABADF B E04 data Size (bytes): 868 Entropy (8bit): EC60F367A6C3AC552880EDCE33413CEF 3628C23C09B62504FC034D3D6D9691ECBF9694CD E86B24D0937F5B1BD29CA553E17D33C34D66C45953E25EA9C5C3C50EAEE83F61 7B787585D7EF4B F50C899BF7CE327E9A038B33DCA05E38D1DE4A6E E95B63B2F65F846FFFBD5 4AD0372B836DED38082D1FAD36265EC5C5940 C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F data Copyright Joe Security LLC 2018 Page 12 of 39
13 C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F Size (bytes): 2310 Entropy (8bit): A1691DD4BBBCBC9BF EE97DF53 90A B73A735B94C0157EF D73F C2A0D1BA7E10F82525DDCFBD859DDD8E2B7AFA63C424E2F36BAF677ACB17CEDD 34D14886F9E2AB11A63DB4AF2BB8016FB2B41A88D8FB35F857DB5C25D44AF4922A80AEB74B1A40675D83A09AF B4E342E76CA7D8E5BB975DF8D08CBB4F86522A9 C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\82CB34DD3343FE727DF8890D352E0D8F data Size (bytes): 224 Entropy (8bit): D0069BA7500BEAE9D6ED65613E6DB17 FA2B2583F235A81984D8F594C6B5C24D1A466CDD 9D08C3CC479AFF178B1B445F85A03C4A D0F60F88205A2D39CA2A2E8AB 86F7D1CC872E23C6EE73CA CF22C0D7B7FBEFBBFD195BE04F3CA20E5F8EFB020A220356DD825DC CBE5D7E2AE2C8224A612E4809A5EBEA92D1F4A8 C:\Users\user\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D f-A0FF-E1416B8B2E3A}.ico Size (bytes): 237 Entropy (8bit): PNG image data, 16 x 16, 4-bit colormap, non-interlaced 9FB559A E77D F6541 EA13848D33C2C7F4F4BAA39348AEB1DBFAD3DF31 6D8A01DC7647BC218D003B58FE04049E24A B7E0CEBAE76EDF85B8B914 0E CD123BE8A20B87D9A3AAF5CB05249DE7F8286FF99D3FA35FC7AF7A9D9797DD6EFB6D1E722147DCF B74437DE D0009D452FB96A8ECE236B C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DomainSuggestions\en-US.1 data Size (bytes): Entropy (8bit): A34CB996293FDE2CB7A4AC A 3C96C D1A77873CD62BC639B3A10653F C6A5377CBC07EECE33790CFC70572E12C7A48AD8296BE25C0CC805A1F384DBAD E1B7D F E70F68B1BE6FD0CA65DCCF4FF D44278D3A77F704AEDFF59D2DBC0D56A6 09B2590C8EC0DD6BC48AB30F1DAD0C07A0A3EE C:\Users\user\AppData\Local\Microsoft\Internet Explorer\IECompatData\iecompatdata.xml Size (bytes): Entropy (8bit): XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators B0B76A817FCA34357FB30C32C515C90B FB80FD B639F57D2D339FA119CBBC7ACF E217BAD995F8A33E40132FF0B102E9B29FE3AA3DC1079F4531B EDC81A09FD5B811E7AF01FE76FFE9F9F112C3BD87B3A08670FDCFBA841FF3FB39ACB693EB002656AA813DAC4F FA9AF3FB65E2526B749E8706C6CA7A789541D72 Copyright Joe Security LLC 2018 Page 13 of 39
14 C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{CD308A21-48AE-11E8-B7AC-B2C276BF9C88}.dat Size (bytes): Microsoft Word Document Entropy (8bit): EC11CC8F8A4AC528233E58087CBA4D 2F58789F426A4053A8691FC5A62DF20DF15DC43A 5FEF FE87B21BFDC FBC4BFFF685EEE71B0417CCBC8A D1A340BC88CD4C208F436B402D6F793EACD532AC8670D8FD0906CFDD7DC C5BBA4A043B464172FABC F6FC48CBF8F398FDD98C0A3446A4863EC502A88 C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{CD308A23-48AE-11E8-B7AC-B2C276BF9C88}.dat Size (bytes): Microsoft Word Document Entropy (8bit): B7FF6DBA FDB6D788635A 27233F738D305DBF01BF9E6EAA9A74B84ECD D81C05633A74CC9A583E5A46B0B9E203B98178B5F770853CA2D3B431210FC2 B919F78C75CC37E6A6A389E338528C08AA6F1346B5D312F8631F34B8B283C61AFE5F3D87543ECC87CE39ACE C8EF5F82CF67FB7E14F06E1992D6FC452 C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{D6F AE-11E8-B7AC-B2C276BF9C88}.dat Size (bytes): Microsoft Word Document Entropy (8bit): D F4BCA37C642FDEC24B7F84E 37F29C22993F394CBB5959E2C03C DEE5AB B6FEF04F7D186D6CBBD C08B8B08EBAF4A97754 AFBE4762C5A29034CEE7B5FA3D9DEA7FE36988FA826CF654E29298BA75F8EC56EF7CDFF EB163082B E69F713BD2DFE3454D2BE169FDB2C4F008093BD C:\Users\user\AppData\Local\Microsoft\Internet Explorer\VersionManager\ver9DF7.tmp Size (bytes): Entropy (8bit): XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators 095C72688DE7D90E6526DC0D8878F3F6 A1CAE182FB7E86C74FB5467C0014B2A27472BE DA E9B4B0D245C5B7E1FAC1242A087DED44EAF3B792E4A231E AB7FD229A6F532AE11E4CCEB01F823810B33D5C740BC9F290C79646C422AFFC27DDB8476C931D6E4A9686EED97 0E219B6CEBBF68F9A12B6C629B6816CDE1615C C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0316J1PS\ErrorPageTemplate[1] Size (bytes): 2168 Entropy (8bit): UTF-8 Unicode (with BOM) text, with CRLF line terminators F4FE1CB77E758E1BA56B8A8EC20417C5 F4EDA06901EDB98633A686B11D02F4925F827BF0 8D B33DA8EB3CE0B21D11E1D414E59024C3689F92BE8904EB5779B5F 62514AB345B6648C A8E9530DFB88A0355E262069E0A694289C39A4A1C06C6143E BFAC A416C09733F24E B96843DC222B436 Copyright Joe Security LLC 2018 Page 14 of 39
15 C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0316J1PS\ErrorPageTemplate[1] C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0316J1PS\down[1] Size (bytes): 748 Entropy (8bit): PNG image data, 15 x 15, 8-bit colormap, non-interlaced C4F558C4C8B56858F15C09037CD6625A EE497CC061D6A7A59BB66DEFEA65F9A8145BA240 39E7DE847C9F731EAA72338AD B957859DE27B50B6474EC D60353D3FBEA2992D96795BA30B20727B022B9164B2094B922921D33CA7CE AC191F8F F76 8F4840BCD5B62CB6A032EF292A8B0E52A44 C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0316J1PS\errorPageStrings[1] Size (bytes): 3470 Entropy (8bit): UTF-8 Unicode (with BOM) text, with CRLF line terminators 6B26ECFA58E37D4B5EC861FCDD3F04FA B69CD71F68FE35A9CE0D7EA17B5F1B2BAD9EA8FA 7F7D1069CA8A852C1C8EB36E1D988FE6A9C17ECB8EFF1F66FC5EBFEB A 1676D43B977C07A3F6A5473F12FD16E A1CB9771D0F189B EE79480C33A010F08DC521E57332EC4 C4D888D693C6A2323C97750E C3F4 C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0316J1PS\iecompatviewlist[1].xml Size (bytes): Entropy (8bit): XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators 021B677623B5092A2049AEB828A9B0BA CE5DC9C5D8C065B D9BA0674F DC83EA97F10C5CE73FD1E2D4D32F BC58841EAF1185A13B977698B B5D1967C90442EE6F7AD77DB5D0FF4338E6A16C6EBCD18B447CC69A EB226F A7A705E B7ACA51F152CCF32A6E13D7688C240F C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0316J1PS\invalidcert[1] Size (bytes): 5123 Entropy (8bit): HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators DE640A4BFEBAB60DA20EA8D35B E1FDF9A543B44A0B0C3F51379FBC0E59AB2EFAD8 E8EC4E22DDCC6E52E242331CB84DDB1EAC45E8ABD51F1892DE33DC279E0E F57AE5C E0030C4B44A1FAB7C7991F6CFF8FB0C40A40C35D6C26C76BE5EAE8E22C5CFC89EE066 81F08A157B63C0A55B3557C08D331A7EC4B7C7 C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0316J1PS\red_shield[1] PNG image data, 14 x 16, 8-bit colormap, non-interlaced Size (bytes): 810 Entropy (8bit): DEF2ACBD0D2487DFFC287B27654D6 Copyright Joe Security LLC 2018 Page 15 of 39
16 C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0316J1PS\red_shield[1] C95647A113AFC5241BDB313F911BF338B9AEFFDC 4BD9F96D6971C7D37D03D7DEA4AF922420BB7C6DD46446F05B8E917C33CF9E4E 9DABF92CE2846D8D86E20550C749EFBC4A1AF23C2319E6CE65A00DC8CBC75AC95A CAB1536C A 8739B D0BA562F48F4D3C25104B059A04 C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0316J1PS\urlblockindex[1].bin Size (bytes): 16 Entropy (8bit): data FA518E3DFAE8CA3A0E495460FD60C791 E4F30E D37267C0162FD4A C C4B4E5F883F9FD5A278E61C471B3EE B6D129499AA7 D21667F3FB081D39B579178E74E9BB1B6E9A97F C165729A58F1787DC0ADADD980CD026C7A601D416665A 81AC13A69E49A6A2FE2FDD AA645C07 C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0TZNT9WD\background_gradient_red[1] JPEG image data, JFIF standard 1.01 Size (bytes): 868 Entropy (8bit): E78CF3C521402FC7352BDD5EA6 017EAF48983C31AE36B5DE5DE4DB36BF953B3136 FBC23311FB5EB53C73A7CA6BFC93E8FA3530B07100A128B4905F8FB7CB145B D382338F467D0374CCE3FF3C392833FE13AC595943E7C5F2AEE4DDB3AF DD5DDC716DD17AEF ED4C2A1AB7FE6E E36EE98A7D C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0TZNT9WD\errorPageStrings[1] Size (bytes): 3470 Entropy (8bit): UTF-8 Unicode (with BOM) text, with CRLF line terminators 6B26ECFA58E37D4B5EC861FCDD3F04FA B69CD71F68FE35A9CE0D7EA17B5F1B2BAD9EA8FA 7F7D1069CA8A852C1C8EB36E1D988FE6A9C17ECB8EFF1F66FC5EBFEB A 1676D43B977C07A3F6A5473F12FD16E A1CB9771D0F189B EE79480C33A010F08DC521E57332EC4 C4D888D693C6A2323C97750E C3F4 C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0TZNT9WD\green_shield[1] Size (bytes): 810 Entropy (8bit): PNG image data, 14 x 16, 8-bit colormap, non-interlaced C6452B941907E0F0865CA7CF9E59B97D F9A2C03D1BE04B53F2301D3D984D73BF BA122F4B39A33339FA9935BF656BB0B4B45CDDED78AFB16AAFD73717D BEB58C06C2C1016A7C7C8289D967EB7FFE D9205A37C6D97BD51B153F4A053E661AD4145F23F56CE0AEB DA101932B8ED64B1CD4178D127C9E2A20A1F58 C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0TZNT9WD\httpErrorPagesScripts[1] UTF-8 Unicode (with BOM) text, with CRLF line terminators Copyright Joe Security LLC 2018 Page 16 of 39
17 C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0TZNT9WD\httpErrorPagesScripts[1] Size (bytes): 8714 Entropy (8bit): F57B781CB3EF114DD0B B7B CE6A63F996DF3A1CCCB81720E21204B825E0238C 46E019FA34465F4ED096A9665D1827B AD82E98BE01EDB1DDBC94D3AD 8CBF4EF582332AE7EA605F910AD6F8A4BC FA84F08943A72CAC2CF0FA32B6AF4C20C697E1FAC2C5B A16B5A64A23AF0C11EEFBF69625B8F9F90C8FA C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0TZNT9WD\red_shield_48[1] Size (bytes): 4127 Entropy (8bit): PNG image data, 40 x 48, 8-bit/color RGBA, non-interlaced 7C588D6BB88D85C7040C6FFEF8D753EC 7FDD217323D2DCC4A25B024EAFD09AE34DA3BFEF 5E2CD0990D6D3B0B2345C75B890493B A8104DE59C A826E3E0 0A3ADD1FF681D C59CAFFDE B9A0F85828AB751E59FDF24403A4EF D158E6B8A4C59C5B DAF563535FF5F097F EA19A9B0DC4D C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\77PTX9DT\favicon[1].ico Size (bytes): 237 Entropy (8bit): PNG image data, 16 x 16, 4-bit colormap, non-interlaced 9FB559A E77D F6541 EA13848D33C2C7F4F4BAA39348AEB1DBFAD3DF31 6D8A01DC7647BC218D003B58FE04049E24A B7E0CEBAE76EDF85B8B914 0E CD123BE8A20B87D9A3AAF5CB05249DE7F8286FF99D3FA35FC7AF7A9D9797DD6EFB6D1E722147DCF B74437DE D0009D452FB96A8ECE236B C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\77PTX9DT\green_shield[1] Size (bytes): 810 Entropy (8bit): PNG image data, 14 x 16, 8-bit colormap, non-interlaced C6452B941907E0F0865CA7CF9E59B97D F9A2C03D1BE04B53F2301D3D984D73BF BA122F4B39A33339FA9935BF656BB0B4B45CDDED78AFB16AAFD73717D BEB58C06C2C1016A7C7C8289D967EB7FFE D9205A37C6D97BD51B153F4A053E661AD4145F23F56CE0AEB DA101932B8ED64B1CD4178D127C9E2A20A1F58 C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\77PTX9DT\httpErrorPagesScripts[1] Size (bytes): 8714 Entropy (8bit): UTF-8 Unicode (with BOM) text, with CRLF line terminators 3F57B781CB3EF114DD0B B7B CE6A63F996DF3A1CCCB81720E21204B825E0238C 46E019FA34465F4ED096A9665D1827B AD82E98BE01EDB1DDBC94D3AD 8CBF4EF582332AE7EA605F910AD6F8A4BC FA84F08943A72CAC2CF0FA32B6AF4C20C697E1FAC2C5 BA16B5A64A23AF0C11EEFBF69625B8F9F90C8FA Copyright Joe Security LLC 2018 Page 17 of 39
18 C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\77PTX9DT\invalidcert[1] Size (bytes): 5123 Entropy (8bit): HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators DE640A4BFEBAB60DA20EA8D35B E1FDF9A543B44A0B0C3F51379FBC0E59AB2EFAD8 E8EC4E22DDCC6E52E242331CB84DDB1EAC45E8ABD51F1892DE33DC279E0E F57AE5C E0030C4B44A1FAB7C7991F6CFF8FB0C40A40C35D6C26C76BE5EAE8E22C5CFC89EE066 81F08A157B63C0A55B3557C08D331A7EC4B7C7 C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\77PTX9DT\red_shield[1] Size (bytes): 810 Entropy (8bit): PNG image data, 14 x 16, 8-bit colormap, non-interlaced 006DEF2ACBD0D2487DFFC287B27654D6 C95647A113AFC5241BDB313F911BF338B9AEFFDC 4BD9F96D6971C7D37D03D7DEA4AF922420BB7C6DD46446F05B8E917C33CF9E4E 9DABF92CE2846D8D86E20550C749EFBC4A1AF23C2319E6CE65A00DC8CBC75AC95A CAB1536C A 8739B D0BA562F48F4D3C25104B059A04 C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\77PTX9DT\rr[1].htm Size (bytes): 125 Entropy (8bit): HTML document, ASCII text, with CRLF line terminators 2FEF98B45E1BD3556FCA48604B844ED8 D75D055315CFC2427DFAA61F2975A EE FF4738C29713C420B2C2AE9F37B0E7E3D85BB5D92D15DC99F82D428633D6185D 259C611A08B9E580B6972DE1AAF9372F87E9A2B6D24483EBAAF139D80EF63134B9147AA0F8FC6F6A7735C F8AEBF74D89A989EFA229F159D2674ADB4BCF C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DEWWYACU\ErrorPageTemplate[1] Size (bytes): 2168 Entropy (8bit): UTF-8 Unicode (with BOM) text, with CRLF line terminators F4FE1CB77E758E1BA56B8A8EC20417C5 F4EDA06901EDB98633A686B11D02F4925F827BF0 8D B33DA8EB3CE0B21D11E1D414E59024C3689F92BE8904EB5779B5F 62514AB345B6648C A8E9530DFB88A0355E262069E0A694289C39A4A1C06C6143E BFAC A416C09733F24E B96843DC222B436 C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DEWWYACU\background_gradient_red[1] JPEG image data, JFIF standard 1.01 Size (bytes): 868 Entropy (8bit): E78CF3C521402FC7352BDD5EA6 017EAF48983C31AE36B5DE5DE4DB36BF953B3136 FBC23311FB5EB53C73A7CA6BFC93E8FA3530B07100A128B4905F8FB7CB145B D382338F467D0374CCE3FF3C392833FE13AC595943E7C5F2AEE4DDB3AF DD5DDC716DD17AEF ED4C2A1AB7FE6E E36EE98A7D Copyright Joe Security LLC 2018 Page 18 of 39
19 C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DEWWYACU\background_gradient_red[1] C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DEWWYACU\down[1] Size (bytes): 748 Entropy (8bit): PNG image data, 15 x 15, 8-bit colormap, non-interlaced C4F558C4C8B56858F15C09037CD6625A EE497CC061D6A7A59BB66DEFEA65F9A8145BA240 39E7DE847C9F731EAA72338AD B957859DE27B50B6474EC D60353D3FBEA2992D96795BA30B20727B022B9164B2094B922921D33CA7CE AC191F8F F76 8F4840BCD5B62CB6A032EF292A8B0E52A44 C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DEWWYACU\invalidcert[1] Size (bytes): 3084 Entropy (8bit): UTF-8 Unicode (with BOM) text, with CRLF line terminators F927FC64C6CCF8F9E508B5C8510C8D26 9AAAD2E C151FF294A116D66D7286CC052 D1122EFA5A5D7CF93E9DA4CB8525CC7E6CCF50B9FA16C167A5D7E A5FA A70CE43D8497EF7D91D8C2C78DFB52FAE9AA1C39691D46D8EE3A2E65D82482E8F2916C39B3D85CE8B8F9A0647 FCCDC831C1FD6824FD300AA91818D0191AA4C50 C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DEWWYACU\invalidcert[2] Size (bytes): 3084 Entropy (8bit): UTF-8 Unicode (with BOM) text, with CRLF line terminators F927FC64C6CCF8F9E508B5C8510C8D26 9AAAD2E C151FF294A116D66D7286CC052 D1122EFA5A5D7CF93E9DA4CB8525CC7E6CCF50B9FA16C167A5D7E A5FA A70CE43D8497EF7D91D8C2C78DFB52FAE9AA1C39691D46D8EE3A2E65D82482E8F2916C39B3D85CE8B8F9A0647 FCCDC831C1FD6824FD300AA91818D0191AA4C50 C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DEWWYACU\red_shield_48[1] Size (bytes): 4127 Entropy (8bit): PNG image data, 40 x 48, 8-bit/color RGBA, non-interlaced 7C588D6BB88D85C7040C6FFEF8D753EC 7FDD217323D2DCC4A25B024EAFD09AE34DA3BFEF 5E2CD0990D6D3B0B2345C75B890493B A8104DE59C A826E3E0 0A3ADD1FF681D C59CAFFDE B9A0F85828AB751E59FDF24403A4EF D158E6B8A4C59C5B DAF563535FF5F097F EA19A9B0DC4D C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DEWWYACU\suggestions[1].en-US data Size (bytes): Entropy (8bit): A34CB996293FDE2CB7A4AC A Copyright Joe Security LLC 2018 Page 19 of 39
20 C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DEWWYACU\suggestions[1].en-US 3C96C D1A77873CD62BC639B3A10653F C6A5377CBC07EECE33790CFC70572E12C7A48AD8296BE25C0CC805A1F384DBAD E1B7D F E70F68B1BE6FD0CA65DCCF4FF D44278D3A77F704AEDFF59D2DBC0D56A6 9B2590C8EC0DD6BC48AB30F1DAD0C07A0A3EE Contacted Domains/Contacted IPs Contacted Domains Name IP Active Malicious Antivirus Detection Reputation true 0%, virustotal, Browse unknown true 0%, virustotal, Browse unknown Contacted IPs No. of IPs < 25% 25% < No. of IPs < 50% 50% < No. of IPs < 75% 75% < No. of IPs IP Country Flag ASN ASN Name Malicious Romania MACOSOFT-ASRO United States GOOGLE-GoogleIncUS United Kingdom PROTEXIA- EUEuropeanNetworkGB Static File Info No static file info Network Behavior Network Port Distribution Copyright Joe Security LLC 2018 Page 20 of 39
21 Total Packets: (HTTPS) 80 (HTTP) 53 (DNS) TCP Packets Timestamp Port Dest Port IP Dest IP Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Copyright Joe Security LLC 2018 Page 21 of 39
22 Timestamp Port Dest Port IP Dest IP Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Copyright Joe Security LLC 2018 Page 22 of 39
23 Timestamp Port Dest Port IP Dest IP Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Copyright Joe Security LLC 2018 Page 23 of 39
24 Timestamp Port Dest Port IP Dest IP Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: UDP Packets Timestamp Port Dest Port IP Dest IP Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Copyright Joe Security LLC 2018 Page 24 of 39
25 Timestamp Port Dest Port IP Dest IP Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Copyright Joe Security LLC 2018 Page 25 of 39
26 Timestamp Port Dest Port IP Dest IP Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: Apr 25, :34: DNS Queries Timestamp IP Dest IP Trans ID OP Code Name Type Class Apr 25, :34: x7646 Standard query (0) Apr 25, :34: x2c32 Standard query (0) Apr 25, :34: xb43f Standard query (0) uto.ro A (IP address) IN (0x0001) A (IP address) IN (0x0001) A (IP address) IN (0x0001) DNS Answers Timestamp IP Dest IP Trans ID Replay Code Name CName Address Type Class Apr 25, x7646 No error (0) 19:34: uto.ro A (IP address) IN (0x0001) Apr 25, x2c32 No error (0) A (IP address) IN (0x0001) 19:34: Apr 25, xb43f No error (0) A (IP address) IN (0x0001) 19:34: HTTP Request Dependency Graph HTTP Packets Session ID IP Port Destination IP Destination Port Process Timestamp kbytes transferred Direction Data Apr 25, :34: OUT GET /rr.htm HTTP/1.1 Accept: text/html, application/xhtml+xml, */* Accept-Language: en-us User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: DNT: 1 Connection: Keep-Alive Copyright Joe Security LLC 2018 Page 26 of 39
ID: Cookbook: browseurl.jbs Time: 03:38:04 Date: 30/04/2018 Version:
ID: 57282 Cookbook: browseurl.jbs Time: 03:38:04 Date: 30/04/2018 Version: 22.0.0 Table of Contents Analysis Report Overview General Information Detection Confidence Classification Analysis Advice Signature
ID: Cookbook: browseurl.jbs Time: 15:40:31 Date: 11/04/2018 Version:
ID: 54174 Cookbook: browseurl.jbs Time: 15:40:31 Date: 11/04/2018 Version: 22.0.0 Table of Contents Table of Contents Analysis Report Overview General Information Detection Confidence Classification Analysis
ID: Cookbook: browseurl.jbs Time: 17:57:53 Date: 27/04/2018 Version:
ID: 57046 Cookbook: browseurl.jbs Time: 17:57:53 Date: 27/04/2018 Version: 22.0.0 Table of Contents Table of Contents Analysis Report Overview General Information Detection Confidence Classification Analysis
ID: Cookbook: browseurl.jbs Time: 10:30:00 Date: 09/01/2018 Version:
ID: 42036 Cookbook: browseurl.jbs Time: 10:30:00 Date: 09/01/2018 Version: 20.0.0 Table of Contents Analysis Report Overview General Information Detection Confidence Classification Analysis Advice Signature
ID: Cookbook: browseurl.jbs Time: 21:16:31 Date: 24/04/2018 Version:
ID: 56483 Cookbook: browseurl.jbs Time: 21:16:31 Date: 24/04/2018 Version: 22.0.0 Table of Contents Table of Contents Analysis Report Overview General Information Detection Confidence Classification Analysis
ID: Cookbook: browseurl.jbs Time: 01:14:26 Date: 03/05/2018 Version:
ID: 57739 Cookbook: browseurl.jbs Time: 01:14:26 Date: 03/05/2018 Version: 22.0.0 Table of Contents Table of Contents Analysis Report Overview General Information Detection Confidence Classification Analysis
ID: Cookbook: browseurl.jbs Time: 01:54:38 Date: 10/05/2018 Version:
ID: 58820 Cookbook: browseurl.jbs Time: 01:54:38 Date: 10/05/2018 Version: 22.0.0 Table of Contents Table of Contents Analysis Report Overview General Information Detection Confidence Classification Analysis
ID: Cookbook: browseurl.jbs Time: 22:08:00 Date: 05/07/2018 Version:
ID: 66955 Cookbook: browseurl.jbs Time: 22:08:00 Date: 05/07/2018 Version: 23.0.0 Table of Contents Table of Contents Analysis Report Overview General Information Detection Confidence Classification Analysis
ID: Cookbook: browseurl.jbs Time: 18:33:33 Date: 06/04/2018 Version:
ID: 53568 Cookbook: browseurl.jbs Time: 18:33:33 Date: 06/04/2018 Version: 22.0.0 Table of Contents Analysis Report Overview General Information Detection Confidence Classification Analysis Advice Signature
ID: Cookbook: browseurl.jbs Time: 21:49:21 Date: 20/04/2018 Version:
ID: 55777 Cookbook: browseurl.jbs Time: 21:49:21 Date: 20/04/2018 Version: 22.0.0 Table of Contents Table of Contents Analysis Report Overview General Information Detection Confidence Classification Analysis
ID: Cookbook: browseurl.jbs Time: 20:25:07 Date: 07/05/2018 Version:
ID: 58298 Cookbook: browseurl.jbs Time: 20:25:07 Date: 07/05/2018 Version: 22.0.0 Table of Contents Analysis Report Overview General Information Detection Confidence Classification Analysis Advice Signature
ID: Cookbook: browseurl.jbs Time: 16:38:13 Date: 14/04/2018 Version:
ID: 54814 Cookbook: browseurl.jbs Time: 16:38:13 Date: 14/04/2018 Version: 22.0.0 Table of Contents Table of Contents Analysis Report Overview General Information Detection Confidence Classification Analysis
ID: Sample Name: html Cookbook: defaultwindowshtmlcookbook.jbs Time: 15:11:10 Date: 11/04/2018 Version: 22.0.
ID: 54166 Sample Name: 14527716735276.html Cookbook: defaultwindowshtmlcookbook.jbs Time: 15:11:10 Date: 11/04/2018 Version: 22.0.0 Table of Contents Analysis Report Overview General Information Detection
ID: Sample Name: sentenza berwind.pdf Cookbook: defaultwindowspdfcookbook.jbs Time: 21:41:19 Date: 11/04/2018 Version: 22.0.
ID: 54234 Sample Name: sentenza berwind.pdf Cookbook: defaultwindowspdfcookbook.jbs Time: 21:41:19 Date: 11/04/2018 Version: 22.0.0 Table of Contents Analysis Report Overview General Information Detection
ID: Cookbook: urldownload.jbs Time: 15:58:06 Date: 04/06/2018 Version:
ID: 62516 Cookbook: urldownload.jbs Time: 15:58:06 Date: 04/06/2018 Version: 22.0.0 Table of Contents Analysis Report Overview General Information Detection Confidence Classification Analysis Advice Signature
ID: Sample Name: Harry Potter and the Sorcerer's Stone.pdf Cookbook: defaultwindowspdfcookbook.jbs Time: 06:34:30 Date: 24/04/2018 Version:
ID: 56310 Sample Name: Harry Potter and the Sorcerer's Stone.pdf Cookbook: defaultwindowspdfcookbook.jbs Time: 06:34:30 Date: 24/04/2018 Version: 22.0.0 Table of Contents Analysis Report Overview General
ID: Cookbook: browseurl.jbs Time: 09:15:48 Date: 09/01/2018 Version:
ID: 42027 Cookbook: browseurl.jbs Time: 0:15:48 Date: 0/01/2018 Version: 20.0.0 Table of Contents Analysis Report Overview General Information Detection Confidence Classification Analysis Advice Signature
ID: Sample Name: message_zdm.html Cookbook: default.jbs Time: 17:40:56 Date: 04/05/2018 Version:
ID: 58003 Sample Name: message_zdm.html Cookbook: default.jbs Time: 17:40:56 Date: 04/05/2018 Version: 22.0.0 Table of Contents Table of Contents Analysis Report Overview General Information Detection
ID: Sample Name: Zipongo Value for Investment_ Theresa & Year 1 ROI vs. treatment costs.pdf Cookbook: defaultwindowspdfcookbook.
ID: 56479 Sample Name: Zipongo Value for Investment_ Theresa & Year 1 ROI vs. treatment costs.pdf Cookbook: defaultwindowspdfcookbook.jbs Time: 20:35:00 Date: 24/04/2018 Version: 22.0.0 Table of Contents
Cisco SIP Proxy Server (CSPS) Compliance Information
APPENDIX A Cisco SIP Proxy Server (CSPS) Compliance Information This appendix describes how the CSPS complies with the IETF definition of SIP (Internet Draft draft-ietf-sip-rfc2543bis-04.txt, based on
XC2 Client/Server Installation & Configuration
XC2 Client/Server Installation & Configuration File downloads Server Installation Backup Configuration Services Client Installation Backup Recovery Troubleshooting Aug 12 2014 XC2 Software, LLC Page 1
FAQs GOLF CANADA KIOSK
FAQs GOLF CANADA KIOSK WHY THE GOLF CANADA KIOSK? The kiosk web address is generally used at the course because of its basic features and user-friendly interface. There is no password required for entry,
PRODUCT MANUAL. Diver-Mobile for Android
PRODUCT MANUAL Diver-Mobile for Android Contact details: Van Essen Instruments B.V. Van Essen Instruments - Canada Delftechpark 20 630 Riverbend Drive, Suite 100 2628 XH Delft Kitchener, ON, The Netherlands
The MQ Console and REST API
The MQ Console and REST API Matt Leming lemingma@uk.ibm.com Agenda Existing capabilities What s new? The mqweb server The MQ REST API The MQ Console 1 Existing capabilities Administering software MQ Queue
Oxygen Meter User Manual
Oxygen Meter User Manual Monday, July 23, 2007 1. Outline...2 2. Program...3 2.1. Environment for program execution...3 2.2. Installation...3 2.3. Un installation...3 2.4. USB driver installation...3 2.5.
86 5A 62 DF 67 3A 7B A F A 65 F6 95 F4. win7-sp1-x64-app02-1 win7-sp1-x64-app02-1 KVM :32: :51:37
9B 76 FE 5B 89 51 68 06 67 62 A5 4A 06 67 7C 7B 57 5F 00 59 CB F6 95 F4 7E D3 67 5F F6 95 F4 63 01 7E ED F6 95 F4 06 67 5F 15 64 CE 72 48 67 2C FILE 2017-01-31 15:32:29 2017-01-31 15:51:38 1149 79 D2 1.4-Maldun
ACI_Release_Notes.txt VERSION Fixed Tank info for ELITE in Dive section 2. Fixed USB port initializing for old DC VERSION
VERSION 2.4.0 1. Fixed Tank info for ELITE in Dive section 2. Fixed USB port initializing for old DC VERSION 2.3.9 1. Fixed Dive Computer configuration section error 2. Fixed message for download/upload
Diver Training Options
MAIN INTERNET ON-SITE TAILORED PACKAGES INTER-COMPANY Diver Training Options DBI offers a menu of tailored courses Designed for users as well as IT Professionals to learn how to master the functionality
THE STATCREW SYSTEM For Basketball - What's New Page 1
THE STATCREW SYSTEM For Basketball - What's New 2000-2011 - Page 1 What's New For 2011: Version 4.13.0 (available June 2011) Access to all updates from June 2011 through May 2012 (i.e., versions 4.13.1-4.13.xx)
REMOTE CLIENT MANAGER HELP VERSION 1.0.2
VERSION 1.0.2 MERCHANT SALES: 800-637-8268 New Merchant Accounts PARTNER PROGRAMS: 800-637-8268 New and existing partnerships CUSTOMER CARE: 800-338-6614 Existing merchant account support Statements and
Tennis...32 Stay above...34 Decimal...36 Bundesliga simulator...38 Shooter management...41 Installation...43 Registration...45 Where do I get the
Content ShotAnalyzer with Scatt and the Häring target system... 3 ShotAnalyzer with Scatt and the Meyton target system... 5 ShotAnalyzer with Scatt and the Disag target system... 7 ShotAnalyzer with Scatt
We release Mascot Server 2.6 at the end of last year. There have been a number of changes and improvements in the search engine and reports.
1 We release Mascot Server 2.6 at the end of last year. There have been a number of changes and improvements in the search engine and reports. I ll also be covering some enhancements and changes in Mascot
Using the Lego NXT with Labview.
Using the Lego NXT with Labview http://www.legoengineering.com/component/content/article/105 The Lego NXT 32-bit ARM microcontroller - an Atmel AT91SAM7S256. Flash memory/file system (256 kb), RAM (64
AGW SYSTEMS. Blue Clock W38X
AGW SYSTEMS Blue Clock W38X Contents table BLUECLOCKS...3 THE EVOLUTION...4 WHAT S NEW!...5 HARDWARE...6 SOFTWARE...7 MULTI COMPANY...8 INSTANTLY...9 EVEN MORE!...10 WHAT S INSIDE HOW DOES IT WORK...11...12
Integrate Riverbed SteelHead. EventTracker v8.x and above
EventTracker v8.x and above Publication Date: March 27, 2018 Abstract This guide provides instructions to configure a Riverbed SteelHead to send its syslog to EventTracker Enterprise Scope The configurations
BVIS Beach Volleyball Information System
BVIS Beach Volleyball Information System Developments in computer science over the past few years, together with technological innovation, has in turn stimulated the development of tailored software solutions
Version 3.1.0: New Features/Improvements: Improved Bluetooth connection on Windows 10
Version 3.1.0: Improved Bluetooth connection on Windows 10 ***Important notice for Mac Users: Upgrading from Shearwater Desktop 3.0.8 to 3.1.0 will not cause issues. Upgrading from any 2.X.X to any 3.X.X
SQL LiteSpeed 3.0 Installation Guide
SQL LiteSpeed 3.0 Installation Guide Revised January 27, 2004 Written by: Jeremy Kadlec Edgewood Solutions www.edgewoodsolutions.com 888.788.2444 2 Introduction This guide outlines the SQL LiteSpeed 3.0
DESKTOP SKILLS COURSEWARE
Introducing Mac OS X Yosemite Course... ds_maco_a01_dt_enus Working with Mac OS X Yosemite Course... ds_maco_a02_dt_enus Installing Mac OS X Yosemite Course... ds_macp_a01_dt_enus Managing and Configuring
Quintic Automatic Putting Report
Quintic Automatic Putting Report Tutorial www.quintic.com Introduction The Quintic Automatic Putting Report is designed to work as an add on to our premier Quintic Biomechanics analysis software. Auto
Microsoft Windows Software Manual for FITstep Stream Version 4
Thank you for purchasing this product from Gopher. If you are not satisfied with any Gopher purchase for any reason at any time, contact us and we will replace the product, credit your account, or refund
Blackwave Dive Table Creator User Guide
Blackwave Dive Table Creator User Guide Copyright 2002-2009 Blackwave. All rights reserved. These materials (including without limitation all articles, text, images, logos, compilation, and design) are
The Race Director. IPICO Integration Direct Connect [IPICO INTEGRATION]
![The Race Director. IPICO Integration Direct Connect [IPICO INTEGRATION]](/thumbs/72/67145921.jpg "The Race Director. IPICO Integration Direct Connect [IPICO INTEGRATION]")
2017 The Race Director IPICO Integration Direct Connect [IPICO INTEGRATION] This document explains how to manage the results data between your IPCIO readers and Race Director using a direct connection
Previous Release Notes
Release Notes Shearwater Desktop 3.1.5 Support for NERD 2. Previous Release Notes Version 3.1.4 Improved Bluetooth Reliability with the initial connection. Bug Notes: dded software workaround to allow
Meter Data Distribution User Manual
0.1 Meter Data Distribution User Manual February 2016 Public Copyright 2015 Independent Electricity System Operator. All rights reserved. Public Page 2 of 24 Table of Contents Contents 1. Overview... 4
Curl To Win By Russ Howard
Curl To Win By Russ Howard Curl is a command line tool for transferring data with URL syntax, supporting If you're using the curl command line tool on Windows, curl will Kick-off the New Year by playing
Instrument pucks. Copyright MBARI Michael Risi SIAM design review November 17, 2003
Instrument pucks Michael Risi SIAM design review November 17, 2003 Instrument pucks Pucks and Plug-and-Work The MBARI puck prototype Puck software interface Pucks in practice (A Puck s Tale) Embedding
APP NOTES Onsight Connect Cisco Integration. July 2016
APP NOTES Onsight Connect Cisco Integration July 2016 Table of Contents 1. Direct Onsight Device to Cisco Endpoint Calling... 4 2. Onsight Device to Onsight Device (including Cisco Endpoint) Calling...
Using MATLAB with CANoe
Version 2.0 2017-03-09 Application Note AN-IND-1-007 Author Restrictions Abstract Vector Informatik GmbH Public Document This application note describes the usage of MATLAB /Simulink combined with CANoe.
Totalflow Web Interface (TWI) software Help notes v1.0 Oct. 3, 2014
Technical reference Totalflow products Totalflow Web Interface (TWI) software Help notes v1.0 Oct. 3, 2014 File name: Totalflow products 2105166MNAA.docx Document name: Document status: Totalflow products
by Robert Gifford and Jorge Aranda University of Victoria, British Columbia, Canada
Manual for FISH 4.0 by Robert Gifford and Jorge Aranda University of Victoria, British Columbia, Canada Brief Introduction FISH 4.0 is a microworld exercise designed by University of Victoria professor
Excel 2013 Pivot Table Calculated Field Greyed Out
Excel 2013 Pivot Table Calculated Field Greyed Out Use Excel pivot table calculated item to create unique items in a pivot table field. (00:47 minute mark) Group By Date: Excel PivotTable: 1) Drag Date
Skillsoft Course Catalog. Desktop Collection
Skillsoft Course Catalog Desktop Collection Adobe Reader X Course... at_adre_a01_dt_enus Adobe Air 3 for Flash CS5.5 Developers Course... at_airr_a01_it_enus Adobe InDesign CS5: Fundamentals Course...
Australian Ice Hockey League Limited Privacy Policy
Australian Ice Hockey League Limited Privacy Policy 1. AIHL Australian Ice Hockey League Ltd (ACN 114 658 123) of GPO Box 329, Melbourne VIC 3001 (AIHL) is the administrator of the Australian Ice Hockey
Software for electronic scorekeeping of volleyball matches, developed and distributed by:
Software for electronic scorekeeping of volleyball matches, developed and distributed by: Developed for the rules of USports 2017-18 As adopted by Ontario University Athletics for Men s & Women s Volleyball
[CROSS COUNTRY SCORING]
![[CROSS COUNTRY SCORING]](/thumbs/89/99405973.jpg "[CROSS COUNTRY SCORING]")
2018 The Race Director Guide [CROSS COUNTRY SCORING] This document describes the setup and scoring processes employed when scoring a cross country race with Race Director. Contents Intro... 3 Division
Table of Content IMPORTANT NOTE: Before using this guide, please make sure you have already set up your settings in
Quick Start Guide Table of Content Introduction... 3 Prerequisites... 3 How to Open QQEvolution 2... 4 How to do Carrier Downloads... 5 Locating a Client in QQEvolution 2... 7 Adding a New Client... 8
Flow Vision I MX Gas Blending Station
Flow Vision I MX Gas Blending Station Alicat Scientific, Inc. 7641 N Business Park Drive Tucson, Arizona 85743 USA alicat.com 1 Notice: Alicat Scientific, Inc. reserves the right to make any changes and
Multi Class Event Results Calculator User Guide Updated Nov Resource
Multi Class Event Results Calculator User Guide Updated Nov 2011 The Multi Class Point Score has been developed as part of Swimming Australia Ltd. s commitment to creating opportunities for people with
NETDIVER TUTORIAL. Revision Doc-NDT Dimensional Insight
NETDIVER TUTORIAL Revision Doc-NDT-121411-02 2011 Dimensional Insight NetDiver 6.3 Tutorial, Manual Revision Doc-NDT-021411-02. Dimensional Insight, Inc. disclaims the implied warranties of merchantability
Inspection User Manual This application allows you to easily inspect equipment located in Onix Work.
2016 TABLE OF CONTENTS Inspection User Manual This application allows you to easily inspect equipment located in Onix Work. Onix AS Version 1.0.15.0 03.06.2016 0 P a g e TABLE OF CONTENTS TABLE OF CONTENTS
Inspection User Manual
2016 TABLE OF CONTENTS Inspection User Manual This application allows you to easily inspect equipment located in Onix Work. Onix AS Version 1.0.15.0 03.06.2016 0 P a g e TABLE OF CONTENTS TABLE OF CONTENTS
Section 8: Model-View-Controller. Slides adapted from Alex Mariakakis, with material from Krysta Yousoufian and Kellen Donohue
Section 8: Model-View-Controller Slides adapted from Alex Mariakakis, with material from Krysta Yousoufian and Kellen Donohue Agenda MVC MVC example 1: traffic light MVC example 2: registration HW8 info
Software Manual for FITstep Pro Version 2
Thank you for purchasing this product from Gopher. If you are not satisfied with any Gopher purchase for any reason at any time, contact us and we will replace the product, credit your account, or refund
- 2 - Companion Web Site. Back Cover. Synopsis
Companion Web Site A Programmer's Introduction to C# by Eric Gunnerson ISBN: 1893115860 Apress 2000, 358 pages This book takes the C programmer through the all the details from basic to advanced-- of the
Section 8: Model-View-Controller
Section 8: Model-View-Controller Slides by Alex Mariakakis with material from Krysta Yousoufian and Kellen Donohue Agenda MVC MVC example 1: traffic light MVC example 2: registration HW8 info MVC The classic
dive site directory 2009 Dive Site Directory Ltd Page. 2
dive site directory dive site directory was set up to give divers easy access to diving information on dive sites all over the world, with information collated from contributions by the diving community.
Quick Start Guide. For Gold and Silver Editions
Quick Start Guide For Gold and Silver Editions Table of Content Introduction... 3 Prerequisites... 3 Installation and Setup... 4 Download and Install QQEvolution 2... 4 Create Users... 8 Create Agent/CSR/Producer...
Digi Connect ME 9210 Linux: serial port 2 for JTAG modules
Digi Connect ME 9210 Linux: serial port 2 for JTAG modules Document History Date Version Change Description 08/05/2009 Initial entry/outline Table of Contents Document History... 2 Table of Contents...
KEM Scientific, Inc. Instruments for Science from Scientists
KEM Scientific, Inc. Instruments for Science from Scientists J-KEM Scientific, Inc. 6970 Olive Blvd. St. Louis, MO 63130 (314) 863-5536 Fax (314) 863-6070 E-Mail: jkem911@jkem.com Precision Vacuum Controller,
Adobe Captivate Monday, February 08, 2016
Slide 1 - Slide 1 MT+ How to work with CSV How to work with CSV. The CSV file used for the import and export of mobilities, can be opened and edited in a variety of tools. In this demo you will see two
FireHawk M7 Interface Module Software Instructions OPERATION AND INSTRUCTIONS
FireHawk M7 Interface Module Software Instructions OPERATION AND INSTRUCTIONS WARNING THE WARRANTIES MADE BY MSA WITH RESPECT TO THE PRODUCT ARE VOIDED IF THE PRODUCT IS NOT USED AND MAINTAINED IN ACCORDANCE
Online League Management lta.tournamentsoftware.com. User Manual. Further support is available online at
Online League Management lta.tournamentsoftware.com User Manual Further support is available online at www.lta.org.uk/leagueplanner Contents Welcome... 3 Using this guide... 3 Further support?... 3 Publishing
Configuring Bidirectional Forwarding Detection for BGP
CHAPTER 7 Configuring Bidirectional Forwarding Detection for BGP This chapter describes how to configure Bidirectional Forwarding Detection (BFD) for BGP. This chapter includes the following sections:
Ranging and Communications Module Reconfiguration and Evaluation Tool (RCM RET) User Guide
Ranging and Communications Module Reconfiguration and Evaluation Tool (RCM RET) User Guide PulsON 400 RCM TIME DOMAIN Cummings Research Park 4955 Corporate Drive Suite 101 Huntsville, AL 35805 USA http://www.timedomain.com
Rules of Soccer Simulation League 2D
Rules of Soccer Simulation League 2D (RoboCup2016 Leipzig, Germany) This document contains the rules for the RoboCup2016 Soccer Simulation League 2D competition in Leipzig, Germany. 1. Soccer Simulator
Armfield Distillation Column Operation Guidelines
Armfield Distillation Column Operation Guidelines 11-2016 R.Cox Safety SAFETY GLASSES ARE REQUIRED WHEN OPERATING THE DISTILLATION COLUMN Wear gloves when mixing alcohol feedstock The column will become
Steltronic StelPad User Guide
StelPad User Guide Steltronic StelPad User Guide Contents Contents... 1 About StelPad and its Features... 3 StelPad System Elements... 3 StelPad Computer Integration with Focus... 4 Enable Custom Graphic
Instruction Manual. BZ7002 Calibration Software BE
Instruction Manual BZ7002 Calibration Software BE6034-12 Index _ Index Index... 2 Chapter 1 BZ7002 Calibration Software... 4 1. Introduction... 5 Chapter 2 Installation of the BZ7002... 6 2. Installation
Sales Create Outbound Delivery from Sales Order S01- Lean Baseline Package
SAP Lean Baseline Package Version: V1.500 Country: UK Language: EN Date: February 2006 Sales Create Outbound Delivery from Sales Order S01- Lean Baseline Package SAP AG Neurottstr. 16 69190 Walldorf Germany
SWIM MEET MANAGER 5.0 NEW FEATURES
SWIM MEET MANAGER 5.0 NEW FEATURES Updated January 24, 2014 1 ABOUT SWIMMING MEET MANAGER 5.0 MEET MANAGER 5.0 for ming (SWMM) is HY-TEK's 6th generation of Meet Management software. Provides the very
PGA Tour, Champions Tour & Web.com Tour LED Scoreboard Graphical Style Guide and Tournament Instructions. (Revised 4/1/2018) Section 1: Introduction
PGA Tour, Champions Tour & Web.com Tour LED Scoreboard Graphical Style Guide and Tournament Instructions (Revised 4/1/2018) Section 1: Introduction This document constitutes a style guide that tournaments
MPCS: Develop and Test As You Fly for MSL
MPCS: Develop and Test As You Fly for MSL GSAW 2008 Michael Tankenson & Lloyd DeForrest Wednesday April 2, 2008 Copyright 2008 California Institute of Technology. Government sponsorship acknowledged. Mission
Tournament Manager: Running a VEX IQ Event - Beginner
Tournament Manager: Running a VEX IQ Event - Beginner Indiana IQ Event Partner Workshop Agenda 1. Main Window a. Once i. The Main Window has a standard menu bar. ii. A series of tabbed pages filling the
ICD-10-CM IN VERSION 10
ICD-10-CM IN VERSION 10 June 2014 eclinicalworks, 2014. All rights reserved Introduction Effective Date CONTENTS INTRODUCTION 3 Effective Date 3 Global Effective Date 3 Individual Insurance Effective Date
ITF SCORER ONLINE TRAINING SETUP
ITF SCORER ONLINE TRAINING SETUP Guidelines for Officials Version 1.2 INTRODUCTION The ITF s Live Scoring System uses handheld wireless electronic devices (smartphone handsets), operated by Chair Umpires,
Fencing Fox SmartApp Documentation. 25 avril 2018
Fencing Fox Fencing Competition Software SmartApp User Guide Copyright AFC Europe 2014-2018 1 1 TABLE OF CONTENTS 2 General overview... 3 2.1 Installation... 3 2.2 Local network setting... 3 2.3 Starting
NanoSight NS300. NanoSight NS300. Operation instructions. Laser Spectroscopy Labs, UCI
NanoSight NS300 Operation instructions Injection/flushing brief overview: 1. Do not exceed flow of 1 ml per 20 seconds. 2. Inject two 1 ml syringes with nano-pure or DI water. 3. If the water does not
Spacecraft Simulation Tool. Debbie Clancy JHU/APL
FSW Workshop 2011 Using Flight Software in a Spacecraft Simulation Tool Debbie Clancy JHU/APL debbie.clancy@jhuapl.edu 443-778-7721 Agenda Overview of RBSP and FAST Technical Challenges Dropping FSW into
Decompression of run-time compressed PE-files
Decompression of run-time compressed PE-files MIROSLAV VNUK, PAVOL NÁVRAT Slovak University of Technology Faculty of Informatics and Information Technologies Ilkovičova 3, 842 6 Bratislava, Slovakia Abstract.
World Leading Traffic Analysis
World Leading Traffic Analysis Over the past 25 years, has worked closely with road authorities and traffic managers around the world to deliver leading traffic monitoring equipment. With products now
LiteSpeed for SQL Server 6.5. Integration with TSM
LiteSpeed for SQL Server 6.5 Integration with TSM 2011 Quest Software, Inc. ALL RIGHTS RESERVED. This guide contains proprietary information protected by copyright. The software described in this guide
iregatta User Manual
iregatta User Manual iregatta User Manual This manual may not always be up to date with the latest version of iregatta available in Apples App Store, as minor additions or bug fixes may be published without
Team Manager's Manual
Introduction: Team Managers Duties: Overview Team Manager's Manual Team Manager's Tasks Get your ScoreBook ID and Password from your League Administrator. Enter Your "Team Administration" Page Setting
Guide to Pedestrian & Bicycling Maps. How to create route maps and arrival/dismissal maps for your school
Guide to Pedestrian & Bicycling Maps How to create route maps and arrival/dismissal maps for your school Table of Contents 1. Introduction...1 Why is mapping important for SRTS?...1 Guide purpose and organization...1
2 November WSI Hubcast VERSION 3.5 RELEASE NOTES
2 November 2016 WSI Hubcast VERSION 3.5 RELEASE NOTES THE WEATHER COMPANY WSI Hubcast 2 2 WSI HUBCAST 3.5 RELEASE NOTES This document describes the major changes introduced with version 3.5 of the WSI
N4 Hazards (Hazardous Cargo) Training Document
N4 Hazards (Hazardous Cargo) Training Document Prepared By: Gene Ferguson, Leslie Edmondson 1 Table of Content A. Typographical Conventions B. Additional Training C. Hazards form 1. Define 2. Add 3. Update
v2.3 USER MANUAL
v2.3 USER MANUAL www.foresightsports.com Table of Contents 03 04 05 09 12 17 20 21 Activation Getting Started Play Compete Improve Settings Update Manager Glossary 04 11 05 12 03 Activation FSX Activation
ArcLink Additional API support for Wayback Machines
ArcLink Additional API support for Wayback Machines Ahmed AlSum PhD Candidate Old Dominion University What is ArcLink? Introduction ArcLink is a complete system to Extract, Preserve, and Access to Temporal
Mapping a course for Pocket Caddy
Contents: 1. Mapping overview 2. Mapping your course o 2.1. Locating the course o 2.2. Mapping the holes o 2.3. Opening the template file and naming the course o 2.4. Mapping the greens o 2.5. Mapping