ID: Cookbook: browseurl.jbs Time: 22:08:00 Date: 05/07/2018 Version:
|
|
|
- Gerald Hart
- 5 years ago
- Views:
Transcription
1 ID: Cookbook: browseurl.jbs Time: 22:08:00 Date: 05/07/2018 Version:
2 Table of Contents Table of Contents Analysis Report Overview General Information Detection Confidence Classification Analysis Advice Signature Overview Phishing: Networking: Persistence and Installation Behavior: System Summary: Hooking and other Techniques for Hiding and Protection: Behavior Graph Simulations Behavior and APIs Antivirus Detection Initial Sample Dropped Files Unpacked PE Files Domains URLs Yara Overview Initial Sample PCAP (Network Traffic) Dropped Files Memory Dumps Unpacked PEs Joe Sandbox View / Context IPs Domains ASN Dropped Files Screenshots Startup Created / dropped Files Contacted Domains/Contacted IPs Contacted Domains Contacted URLs Contacted IPs Public Static File Info No static file info Network Behavior Network Port Distribution TCP Packets UDP Packets DNS Queries DNS Answers HTTP Request Dependency Graph Copyright Joe Security LLC 2018 Page 2 of 445
3 HTTP Packets HTTPS Packets Code Manipulations Statistics Behavior System Behavior Analysis iexplore.exe PID: 3304 Parent PID: 548 General File Activities Registry Activities Analysis iexplore.exe PID: 3400 Parent PID: 3304 General File Activities Registry Activities Analysis ssvagent.exe PID: 3456 Parent PID: 3400 General Registry Activities Disassembly Copyright Joe Security LLC 2018 Page 3 of 445
4 Analysis Report Overview General Information Joe Sandbox Version: Analysis ID: Start time: 22:08:00 Joe Sandbox Product: CloudBasic Start date: Overall analysis duration: Hypervisor based Inspection enabled: Report type: Cookbook file name: Sample URL: 0h 4m 5s light browseurl.jbs Analysis system description: Windows 7 SP1 (with Office 2010 SP2, IE 11, FF 54, Chrome 60, Acrobat Reader DC 17, Flash 26, Java ) Number of analysed new started processes analysed: 5 Number of new started drivers analysed: 0 Number of existing processes analysed: 0 Number of existing drivers analysed: 0 Number of injected processes analysed: 0 Technologies Analysis stop reason: Detection: Classification: Cookbook Comments: Timeout SUS EGA enabled sus21.mine.win@5/349@22/17 Adjust boot time Correcting counters for adjusted boot time Browsing link: Browsing link: Browsing link: Browsing link: Browsing link: Browsing link: Browsing link: Browsing link: Browsing link: Browsing link: Browsing link: Warnings: Show All Exclude process from analysis (whitelisted): dllhost.exe Report size exceeded maximum capacity and may have missing behavior information. Report size exceeded maximum capacity and may have missing network information. Report size getting too big, too many NtCreateFile calls found. Report size getting too big, too many NtDeviceIoControlFile calls found. Report size getting too big, too many NtProtectVirtualMemory calls found. Report size getting too big, too many NtReadFile calls found. Report size getting too big, too many NtSetInformationFile calls found. Report size getting too big, too many NtWriteFile calls found. Copyright Joe Security LLC 2018 Page 4 of 445
5 Detection Strategy Score Range Reporting Detection Threshold Report FP / FN Confidence Strategy Score Range Further Analysis Required? Confidence Threshold true Classification Copyright Joe Security LLC 2018 Page 5 of 445
6 Ransomware Miner Spreading malicious malicious malicious Evader Phishing suspicious suspicious suspicious clean clean clean Exploiter Banker Spyware Trojan / Bot Adware Analysis Advice Sample has a GUI, but Joe Sandbox has not found any clickable buttons, likely more UI automation may extend behavior Uses HTTPS for network communication, use the 'Proxy HTTPS (port 443) to read its encrypted data' cookbook for further analysis Signature Overview Phishing Networking and Installation Behavior Persistence Summary System Hooking and other Techniques for Hiding and Protection Copyright Joe Security LLC 2018 Page 6 of 445
7 Click to jump to signature section Phishing: Found iframes META author tag missing META copyright tag missing Networking: Downloads files Downloads files from webservers via HTTP Found strings which match to known social media urls Performs DNS lookups Urls found in memory or binary data Uses HTTPS Persistence and Installation Behavior: Installs a Bitcoin mining software System Summary: Abnormal high CPU Usage Searches the installation path of Mozilla Firefox Classification label Creates files inside the user directory Creates temporary files Reads ini files Reads software policies Spawns processes Uses an in-process (OLE) Automation server Found graphical window changes (likely an installer) Uses new MSVCR Dlls Hooking and other Techniques for Hiding and Protection: Disables application error messsages (SetErrorMode) Behavior Graph Copyright Joe Security LLC 2018 Page 7 of 445
8 Behavior Graph ID: URL: Startdate: 05/07/2018 Architecture: WINDOWS Score: 21 started iexplore.exe Legend: Process Signature Created File DNS/IP Info Is Dropped Hide Legend Is Windows Process Number of created Registry Values cs9.wpc.v0cdn.net , 443, 49246, ANSBB-ASNNET-1-AdvancedNetworksServicesIncUS United States started Number of created Files Visual Basic Delphi Java iexplore.exe Net C# or VB.NET C, C++ or other language Is malicious a875.dscb.akamai.net echobh.com , 49236, 80 TELIANETTeliaCarrierSE , 443, 49163, LINODE-APLinodeLLCUS 42 other IPs or domains dropped European Union United States C:\...\OpenMinds_Logo_ x127[1].jpg, JPEG started Installs a Bitcoin mining software ssvagent.exe 6 Simulations Behavior and APIs Time Type Description 22:08:49 API Interceptor 4743x Sleep call for process: iexplore.exe modified 22:08:50 API Interceptor 1x Sleep call for process: ssvagent.exe modified Antivirus Detection Initial Sample Source Detection Scanner Label Link 0% virustotal Browse Dropped Files No Antivirus matches Unpacked PE Files No Antivirus matches Domains Source Detection Scanner Label Link apps.digsigtrust.com 0% virustotal Browse Copyright Joe Security LLC 2018 Page 8 of 445
9 Source Detection Scanner Label Link a771.dscq.akamai.net 0% virustotal Browse cdnjs.cloudflare.com 0% virustotal Browse scontent.xx.fbcdn.net 0% virustotal Browse pagead46.l.doubleclick.net 0% virustotal Browse a279.dscq.akamai.net 0% virustotal Browse cs9.wac.phicdn.net 0% virustotal Browse 1% virustotal Browse stats.l.doubleclick.net 0% virustotal Browse ads-bid.l.doubleclick.net 0% virustotal Browse a1621.g.akamai.net 0% virustotal Browse www-google-analytics.l.google.com 0% virustotal Browse cs9.wpc.v0cdn.net 1% virustotal Browse echobh.com 0% virustotal Browse www-googletagmanager.l.google.com 0% virustotal Browse googleadapis.l.google.com 0% virustotal Browse star-z-mini.c10r.facebook.com 0% virustotal Browse gstaticadssl.l.google.com 0% virustotal Browse a767.dspw65.akamai.net 0% virustotal Browse a875.dscb.akamai.net 0% virustotal Browse crl.comodoca.com.cdn.cloudflare.net 0% virustotal Browse trk.mx8.inboxgateway.com 0% virustotal Browse www3.l.google.com 0% virustotal Browse rvip1.ue.cachefly.net 0% virustotal Browse 0% virustotal Browse a1363.dscg.akamai.net 0% virustotal Browse pagead.l.doubleclick.net 0% virustotal Browse ocsp.comodoca4.com 0% virustotal Browse ocsp.int-x3.letsencrypt.org 0% virustotal Browse 0% virustotal Browse stats.g.doubleclick.net 0% virustotal Browse fonts.googleapis.com 0% virustotal Browse ocsp.pki.goog 0% virustotal Browse 0% virustotal Browse 0% virustotal Browse bid.g.doubleclick.net 0% virustotal Browse googleads.g.doubleclick.net 0% virustotal Browse connect.facebook.net 0% virustotal Browse crl.pki.goog 0% virustotal Browse fonts.gstatic.com 0% virustotal Browse URLs Source Detection Scanner Label Link JKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ%2BuksCCGFquezHariY lcnaqum%2bihv2cchsbqbt5ztjot39wzhi4cdqhjqtac%2fhigod%2baux0%3d 0% virustotal Browse 0% virustotal Browse 0% virustotal Browse 0% virustotal Browse Ys%2BreAQUdXGnGUgZvJ2d6kFH35TESHeZ03kCEFslzmkHxCZVZtM5DJmpVK0%3D JKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ%2BuksCCEsy3nLKooNp 1% virustotal Browse 0% virustotal Browse Yara Overview Initial Sample No yara matches PCAP (Network Traffic) No yara matches Copyright Joe Security LLC 2018 Page 9 of 445
10 Dropped Files No yara matches Memory Dumps No yara matches Unpacked PEs No yara matches Joe Sandbox View / Context IPs No context Domains No context ASN No context Dropped Files No context Screenshots Copyright Joe Security LLC 2018 Page 10 of 445
11 Startup System is w7 cleanup iexplore.exe (PID: 3304 cmdline: '' -Embedding CA1F703CD665867E8132D2946FB55750) iexplore.exe (PID: 3400 cmdline: '' SCODEF:3304 CREDAT: /prefetch:2 CA1F703CD665867E8132D2946FB55750) ssvagent.exe (PID: 3456 cmdline: 'C:\PROGRA~1\Java\JRE18~1.0_1\bin\ssvagent.exe' -new 0953A FD1E655B75B63B9083B7) Created / dropped Files C:\Users\HERBBL~1\AppData\Local\Temp\JavaDeployReg.log Size (bytes): 89 ASCII text, with CRLF line terminators Entropy (8bit): DF0DB46384A782816DB17A8CC94DA8 6804D E6D CF6C3A5BD 6CEB6B05009E840F0991F23C9E6EA56BA3550F9BD96FAC3E5DC9903AEAC7FFEE 342A1624C9300A03FF108ED7D52B13A0E38BEAA8B8BAD E91BFCBDE64FC29764B66F56170FEEDDE BC29AA34BFAD5285CCD2C940E9D85A76DA1 Copyright Joe Security LLC 2018 Page 11 of 445
12 C:\Users\HERBBL~1\AppData\Local\Temp\dat1C9B.tmp Size (bytes): 1640 Embedded OpenType (EOT) Entropy (8bit): FB8DEC221320B3CFED002BEC8F33E 614D118E2307A175D6D7CB64C21B0346F5D4F B306D0E3B6C72DCBBE1001C5043FAC25C08E74650B E D506301AD0209F E3BB78CC8D998011AA87E0AB53BE59385B63EEF9EE9B936418A5FAC77948DC33BD9 31F316686EFF21DEDB2DA BB7B6144AD C:\Users\HERBBL~1\AppData\Local\Temp\dat3E86.tmp Size (bytes): 1640 Embedded OpenType (EOT) Entropy (8bit): FB8DEC221320B3CFED002BEC8F33E 614D118E2307A175D6D7CB64C21B0346F5D4F B306D0E3B6C72DCBBE1001C5043FAC25C08E74650B E D506301AD0209F E3BB78CC8D998011AA87E0AB53BE59385B63EEF9EE9B936418A5FAC77948DC33BD9 31F316686EFF21DEDB2DA BB7B6144AD C:\Users\HERBBL~1\AppData\Local\Temp\dat4EFF.tmp Size (bytes): 1640 Embedded OpenType (EOT) Entropy (8bit): FB8DEC221320B3CFED002BEC8F33E 614D118E2307A175D6D7CB64C21B0346F5D4F B306D0E3B6C72DCBBE1001C5043FAC25C08E74650B E D506301AD0209F E3BB78CC8D998011AA87E0AB53BE59385B63EEF9EE9B936418A5FAC77948DC33BD9 31F316686EFF21DEDB2DA BB7B6144AD C:\Users\HERBBL~1\AppData\Local\Temp\dat6249.tmp Size (bytes): 1640 Embedded OpenType (EOT) Entropy (8bit): FB8DEC221320B3CFED002BEC8F33E 614D118E2307A175D6D7CB64C21B0346F5D4F B306D0E3B6C72DCBBE1001C5043FAC25C08E74650B E D506301AD0209F E3BB78CC8D998011AA87E0AB53BE59385B63EEF9EE9B936418A5FAC77948DC33BD93 1F316686EFF21DEDB2DA BB7B6144AD C:\Users\HERBBL~1\AppData\Local\Temp\dat6C3A.tmp Size (bytes): 1640 Embedded OpenType (EOT) Entropy (8bit): FB8DEC221320B3CFED002BEC8F33E 614D118E2307A175D6D7CB64C21B0346F5D4F B306D0E3B6C72DCBBE1001C5043FAC25C08E74650B E D506301AD0209F E3BB78CC8D998011AA87E0AB53BE59385B63EEF9EE9B936418A5FAC77948DC33BD9 31F316686EFF21DEDB2DA BB7B6144AD Copyright Joe Security LLC 2018 Page 12 of 445
13 C:\Users\HERBBL~1\AppData\Local\Temp\dat6C3A.tmp C:\Users\HERBBL~1\AppData\Local\Temp\dat7DD6.tmp Size (bytes): 1640 Embedded OpenType (EOT) Entropy (8bit): FB8DEC221320B3CFED002BEC8F33E 614D118E2307A175D6D7CB64C21B0346F5D4F B306D0E3B6C72DCBBE1001C5043FAC25C08E74650B E D506301AD0209F E3BB78CC8D998011AA87E0AB53BE59385B63EEF9EE9B936418A5FAC77948DC33BD9 31F316686EFF21DEDB2DA BB7B6144AD C:\Users\HERBBL~1\AppData\Local\Temp\dat8943.tmp Size (bytes): 1640 Embedded OpenType (EOT) Entropy (8bit): FB8DEC221320B3CFED002BEC8F33E 614D118E2307A175D6D7CB64C21B0346F5D4F B306D0E3B6C72DCBBE1001C5043FAC25C08E74650B E D506301AD0209F E3BB78CC8D998011AA87E0AB53BE59385B63EEF9EE9B936418A5FAC77948DC33BD93 1F316686EFF21DEDB2DA BB7B6144AD C:\Users\HERBBL~1\AppData\Local\Temp\dat93FC.tmp Size (bytes): 1640 Embedded OpenType (EOT) Entropy (8bit): FB8DEC221320B3CFED002BEC8F33E 614D118E2307A175D6D7CB64C21B0346F5D4F B306D0E3B6C72DCBBE1001C5043FAC25C08E74650B E D506301AD0209F E3BB78CC8D998011AA87E0AB53BE59385B63EEF9EE9B936418A5FAC77948DC33BD9 31F316686EFF21DEDB2DA BB7B6144AD C:\Users\HERBBL~1\AppData\Local\Temp\dat9DE2.tmp Size (bytes): 1640 Embedded OpenType (EOT) Entropy (8bit): FB8DEC221320B3CFED002BEC8F33E 614D118E2307A175D6D7CB64C21B0346F5D4F B306D0E3B6C72DCBBE1001C5043FAC25C08E74650B E D506301AD0209F E3BB78CC8D998011AA87E0AB53BE59385B63EEF9EE9B936418A5FAC77948DC33BD9 31F316686EFF21DEDB2DA BB7B6144AD C:\Users\HERBBL~1\AppData\Local\Temp\datA715.tmp Embedded OpenType (EOT) Size (bytes): 1640 Entropy (8bit): FB8DEC221320B3CFED002BEC8F33E Copyright Joe Security LLC 2018 Page 13 of 445
14 C:\Users\HERBBL~1\AppData\Local\Temp\datA715.tmp 614D118E2307A175D6D7CB64C21B0346F5D4F B306D0E3B6C72DCBBE1001C5043FAC25C08E74650B E D506301AD0209F E3BB78CC8D998011AA87E0AB53BE59385B63EEF9EE9B936418A5FAC77948DC33BD9 31F316686EFF21DEDB2DA BB7B6144AD C:\Users\HERBBL~1\AppData\Local\Temp\datB2C8.tmp Size (bytes): 1640 Embedded OpenType (EOT) Entropy (8bit): FB8DEC221320B3CFED002BEC8F33E 614D118E2307A175D6D7CB64C21B0346F5D4F B306D0E3B6C72DCBBE1001C5043FAC25C08E74650B E D506301AD0209F E3BB78CC8D998011AA87E0AB53BE59385B63EEF9EE9B936418A5FAC77948DC33BD9 31F316686EFF21DEDB2DA BB7B6144AD C:\Users\HERBBL~1\AppData\Local\Temp\datD2F1.tmp Size (bytes): 1640 Embedded OpenType (EOT) Entropy (8bit): FB8DEC221320B3CFED002BEC8F33E 614D118E2307A175D6D7CB64C21B0346F5D4F B306D0E3B6C72DCBBE1001C5043FAC25C08E74650B E D506301AD0209F E3BB78CC8D998011AA87E0AB53BE59385B63EEF9EE9B936418A5FAC77948DC33BD9 31F316686EFF21DEDB2DA BB7B6144AD C:\Users\HERBBL~1\AppData\Local\Temp\~DFE60760EAFEF9D2A0.TMP FoxPro FPT, blocks size 258, next free block index Size (bytes): Entropy (8bit): ED17F0CD615CC A571033D B2D4E0E FB357A524419E8A C191317D09891C8853C6865BE6B3619F78469CF EA3FE46C4AD2 DDAFBEFC11C7B41364D93ECAAFB5DAAD03E701B2C5A6D8FA0F4BC6B3DA7F4C C5D43051FC5CFB3FD 6FC653A25372FE4BE17D87F79AC62902AC3246FC6 C:\Users\HERBBL~1\AppData\Local\Temp\~DFE78AE3DD TMP FoxPro FPT, blocks size 258, next free block index Size (bytes): Entropy (8bit): D24D211A985430FB1DD30BBCF939 4B700A2C19886BF D1132FC1012FF D4988C9FC46A7A52F6AAACA484C65FD14CD8759E9B9C33040CC282F3CC3AAA D080C1D846D6469BFC9AE53DEE7FCE143DC2ADEF A D7394D0E586E540531D578A2ED FFD0F6446C99D3A5FAFC114C2EB61241A4584 C:\Users\HERBBL~1\AppData\Local\Temp\~DFF36A1D69C83507A4.TMP data Copyright Joe Security LLC 2018 Page 14 of 445
15 C:\Users\HERBBL~1\AppData\Local\Temp\~DFF36A1D69C83507A4.TMP Size (bytes): Entropy (8bit): A1908E41216D366CB2F603F89A5D3 FEBE67F8A37C52AB33B228B85732FCE0EA9286F B DFCC786206C8CF9B014084B2B847CE9C EBEAEB417 ECA09EF5D7659E4F C5091BBA4BB9DAEA7C0A6E0DF88ED8AFA4D D8679EB46FF1F71C3EB7F3EE ADC0B751B598159A35F76E22A B03AC8 C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\01B16CDBADE7DB774141D7E30D50EC69 data Size (bytes): 635 Entropy (8bit): B F77C56BBD72FA535E767DD B BEEDE E965D2CC51CDDDF7BF CDC9EBE83D41703C0E37E59EE D52AE07F43B5D1073AFA8E7867D5D89 DB78B516123C7C72097DC07F279B126C C849F6E7D11A01872EF50AFCD85A016463D7D21AC63811F4CE 33DD95DA1A5C CC957B95CC65BEBC C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\ F846F08BEFE0DD8112D932FEF data Size (bytes): 543 Entropy (8bit): A50051ED1FF70358FE6394FCFAA 7BD314E19AD681C6DDDB7DA72A15B EFA 4D4CF CE94303A1A4A6B3180E0FC51ADBD651111D730A916F5F68696FE 6C9C1814C29CF5588AFDF3AE3AFFED3816FF4A4787CFD3F6EA6E5FCCE999C6182F413227AEB6C3F01E63EC9B BDD587E2795D106A1982CE8F5B8D2D3CE C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\35DDEDF D1D277A171D8DF7B_F2DE72102A14736B534BA AAB62F0BD4B data Size (bytes): 471 Entropy (8bit): A6DC6F592E9EF05FDEBE1B96F4B479A E50EE7BCC7D48856E1C BE5B2B421BEDFF F4AD9F80CB616FD1611F344DA1722D71CD45383DEF052C24E5FAA419C8FE37AF 4D48FE7253F10FD342B7CF7E54A7BAFFF9C042D430C981BD3EDDD244D12F84E4D7D159EE2C0753B463E4B DFD97C44D26E924307F489925EE9B827CBC9 C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\57C8EDB95DF3F0AD4EE2DC2B8CFD4157 Size (bytes): Entropy (8bit): Microsoft Cabinet archive data, 6509 bytes, 1 file B95F90C3BEA1D0E7ECA664B8FA01A720 A2ED44DF03C6971C0A7C335ECEF8D996D6BC0652 D82B D19804D73473CE65D84C4F7D64E453041A9B30CF96C738AA0C 4DB9F495F3B3E39D89685FEDD1F0C715E3C3B0D FB3F51D2B454943E7AC34B1F871C435299B799FCAF3F8 13DAA3BB67C33B221D27C721CCF0F4D67C033 Copyright Joe Security LLC 2018 Page 15 of 445
16 C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\57C8EDB95DF3F0AD4EE2DC2B8CFD4157 C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\644B B5E195ECB0E8F243A4 data Size (bytes): 896 Entropy (8bit): FAEBBB0D3063B6B3037D1CCB95B3E301 ECC65CB82D0E12C2AA91989C12AA6CC9C83A157F 9E94A4D38D64A06B142CA D1143B D3A8D0BB96B4594F7FAA57D 6AE25AD88DC376A39E8D5DDDEF806543DF73785A9490B75ED629CA0AA7579CDCF2F6265ED78EC2D41767CB673 EFB6D91D53D D D0F22EEB29 C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\64DCC9872C5635B1B7891B30665E0558_5552C20A FD38A8C0F9F data Size (bytes): 314 Entropy (8bit): DFA0E23F7E78177B8FDB5302C8C CBA7AD3D6945FDBF2C749F BE9F4E9051 4BAE1D5F7AAFBCF365A45B6D A87AA155854FA260811D10653D5E5C9CB 9EC710C92E0AE611C7090AC32C31366A57720E6BD36C641C340FA9E B682E9EECA788E1AE625B7AF8F01 406F4D0CAC72EB6F3C83BD764C8728F C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\6BADA8974A10C4BD62CC921D13E43B18_BEB37ABADF B E0 4 data Size (bytes): 471 Entropy (8bit): F0210FCA CC216A E2 D10B86C6F353C30D98B55BFCAADD40E7D493397C 397AD878DB2D20AFD65BA634252E B089E1C9526BD D1221F9 C5CA0CE0D36CB0716ECC6E37F96C261EF4E992C6C6B03D7EF703252D5494DE7AAFB222089C8BEC0A52ECD39D CF B994898E994C7D29C8C513BB690DA C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\739F2FF4259CDC6CBE7B90F1A95601EF data Size (bytes): Entropy (8bit): B383849ECB693A25D2A319F607FE4A4 409CF67D DD3322AF5AB F287 8ED806D5B899D3F033C75C71FCDC0F90C6E3310F0F045D796CEBB27AFC2B C9E8B215BF4F7E9B121CE8F8F3FBAFBB4355FC2C3E9FBEE0576A003715FF1345ADF27FD5BBA2BA5BF4E08 5F68C57CE8E762F5ABD06926ED2D6B5112A6300 C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F Microsoft Cabinet archive data, bytes, 1 file Size (bytes): Entropy (8bit): true 7728A4F5FFCA53E3165CCFB18C585D83 Copyright Joe Security LLC 2018 Page 16 of 445
17 C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F D23556AA EDE7AF9A4488CFD822718F33 B6F623669BCD3C3F0A4BA80ABA41A0AA2DE A98FE5505D82C6D4 5EA3736B B5B07525F6ECBD499C74031F C9A08D18F756B42A9A03F CDC784 3CF7E207EB52BD68DBA52B56ECC6D3FE344 C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\82CB34DD3343FE727DF8890D352E0D8F data Size (bytes): 4497 Entropy (8bit): B9AB2AEA3E1C155FD0DA5CE57082BD2 C2413FBF D40ECA4D548EAED4D3EB644A F88F05DBA035B61A74B7A96B557B8F5FB7A6368A9C8166A3F10FAC1C56E5B265 BF133FBFE010FA77F8BFD5545C6696BF CF23F11C16229EB0DB0394CCA448991B3A9F54D66131D65800C0 DF E0C DEEEE9B C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\85B3F147E3624A14E6A20DB4F6C2C5D9 data Size (bytes): 815 Entropy (8bit): BC66A157E3E9EE64D62B3D2597B8278A 82C3F11D62F2E3C5FA23E093C7ABEA7C84CFEDEE E70E62368F94E96BC2DB007C7F09233A2AD20C4B9D7C006550D060483D7913E4 272CF63EEDBAC3ACA64B2A7F41DD4CCB81EE6F096D35819E0B5B4DCA07D6CB33BD799F8DCEF29AFA6734D67 C1AB9B56D12609B4B441AD1F41B283836C C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8E201822AE136D E866F250D7 data Size (bytes): 527 Entropy (8bit): BBCD71ADF C6F1E2 EE88D413BA066BED243ED B3ADE6D1E228 BC03BD7F499171D040C1732E2AE3C2AF851E EF56FCEE1B93ABDC6F2 33BFE622FA7CE244A0422A13E08CA849EA722D44FC89BCF489A35C98CE27DC06180A28FC B85C19BF95 85B7A47A3D83C FE6FBC13FBD C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\A6E643304C5FBB7CBF4025F1978D6EED data Size (bytes): 355 Entropy (8bit): B465F879450B6A65F1AEB3C AB39510E2F0E662839D40B454EF1189 EA301E4F4D1A6A5E324C6A EBDD3C1864B3C5199D530C162C238F00C E27BBEE0136D9202B78F64DDD2F359011F673379C610EF2D87B14AB6E487B18E5F487074E3ABD5BC9020A4CAA8 36EC3D3439E99108D023833B2A CE439 C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\BEC6224B02D155A396218A2504F3EE0B data Copyright Joe Security LLC 2018 Page 17 of 445
18 C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\BEC6224B02D155A396218A2504F3EE0B Size (bytes): Entropy (8bit): B383849ECB693A25D2A319F607FE4A4 409CF67D DD3322AF5AB F287 8ED806D5B899D3F033C75C71FCDC0F90C6E3310F0F045D796CEBB27AFC2B C9E8B215BF4F7E9B121CE8F8F3FBAFBB4355FC2C3E9FBEE0576A003715FF1345ADF27FD5BBA2BA5BF4E08 5F68C57CE8E762F5ABD06926ED2D6B5112A6300 C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CFE86DBBE02D859DC92F1E17E0574EE8_FDB E72EDD3FB3D65568F82 1 data Size (bytes): 468 Entropy (8bit): D9D754520AE3340AA37CCA6115EEE05B A D99C762CB2EB4B37F776625EF1B33 7DC8284C51C9A38DC1BF03BD28857EA5336E8F5C564EDDBB1C9082EE43C F6A9EA2CE5ECD1FD7CB3D122A6F5F108550D71A9FF5F88F235BE F95C75F66CCF716AC2A EDBDBAFBD114EFF0AD3D98E3DA6A30C94 C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E0F5C59F9FA661F6F4C50B87FEF3A15A data Size (bytes): 1786 Entropy (8bit): AEB4E76C6F68EFD7A48092E9F0F A035C0BDCC3DC09C881E788F7FACA53C6B458 FE1B9A0EABF44FDBE4DDE97C3CC1209FAD2FBB2D2D7476FFBF64066BD9919A4F 50D98FB4C9875B1AED0AEC06A9C934DB5010B6C5F54539E323EC14FD487E1D92D01652E4614DDF308AB2F1EDE A9E9CB1E23030C971255CC106016C6E7BBAF48C C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E F7A0F97B5576C77A26CB_7CE95D8DCA26FE957E7BD7D76F353B0 8 data Size (bytes): 1398 Entropy (8bit): A2A60F11EAB2155A098F39EAA658EF0 A59C52EA3B7B64CC740DB10C BB6DBAC 89A34310AADC663A96BEFA842A87E9B0E8FE C3C047DCF6F879E17E74 1A5C9C7198E23BEC69E376F54D713EDAEBF61DEFEC98A685DB9E8E36C EBBFD150BD2A4FA0CEF9D 4FDAD661B4AF0464F97FA9B2FD738D8E1ABD802E C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\EDC238BFF48A31D55A97E1E B_C20E0DA2D0F89FE526E1490F4A2EE5A B data Size (bytes): 471 Entropy (8bit): BDAA119BADF941D385183E899317A63 8D8F1636E13C2FCBC182BE26CDEFCEDF22F BEF67E1AE1D1222AB3BCACC1E8129B2859EBD37F EFDBA16D68A1FE1 FE55DD8ED5896A44E9DDEFD387AA2EA0D2F36A1135C00BA97495DBA8DAD78CEFD7FBFBE84F256E076FFA1562 CB8A9DCAEE6FD8122D28BE34E58070DF2BA8AFF5 Copyright Joe Security LLC 2018 Page 18 of 445
19 C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\EDC238BFF48A31D55A97E1E B_C20E0DA2D0F89FE526E1490F4A2EE5A B C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F5F320A94D4D2B4465D8F17E2BB2D351_9A38F2B39682F2F92D8A2F9E074E856A data Size (bytes): 463 Entropy (8bit): CE97723E8E327EA5ABDE28BD843BE 2B6B3648E3F42A47E90C CF242DBF9764B FBF3AB77A0C0458BDBDAD270BA74FCE4B50CE0D1A99A6F855BB FF1D35 9AD9F121CA2C930B10BE1B04816A65AC6C81771AB763524D3820AA16AE C787D13F132A554584B3DDEA0 FECC770DF5701EA6DB8DB5F874CEB880942BD C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F5F320A94D4D2B4465D8F17E2BB2D351_D4DFD1F713A64C6DB92E1 22DADA3AC33 data Size (bytes): 463 Entropy (8bit): F244B86018A55BC D898E65 31CF9C4BCD462BD6CD6A953BC8C2B1D11C07C3F9 69C4986DCB274186A8E2C243711E17EEB66BC F6BC1BAEE92BCBFBD06 A94B D19400EFBCE4E81CBCF65E69B618CCDDF115AB6726EB24DF7D2B087E4F55F943C720F48E228DEF F67F8E577589A25BBBF9F782E0573F1 C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\01B16CDBADE7DB774141D7E30D50EC69 data Size (bytes): 364 Entropy (8bit): C7E6ABD7874FF021E33017BF66E7A54 F04E10BE69FD063DFB57BFBF498B75DECF121C37 4C56E649CEED552DE961A6FFAAA49151EC4338CBE52D1A292229A4F87003A7CB E57DF60E9B24E00A5BDC57E153D726A845C99033B2FF807CB9486B5F985D063A0AAD301C85BAFA8F7DDD21E9C 9F291D28A4707E11A8D6D76B39DD953264B3219 C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\ F846F08BEFE0DD8112D932FEF data Size (bytes): 234 Entropy (8bit): EAC83747CBE1704B040191A7A4F58D2F 2D5B328E65A3B4D0C ED65067F F93C5DC9F8E0AB61B1F3A4930E45A6E250C99A81E76BC D1749B8571 FDF1E5CFA8277E3EE4164D C0843EDD91A190894E2BDE318A24F6E4F034F74B4C32DAF58D0BF0038AFA 2B D DE6EA0B B C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\35DDEDF D1D277A171D8DF7B_F2DE72102A14736B534B AAAB62F0BD4B data Size (bytes): 876 Copyright Joe Security LLC 2018 Page 19 of 445
20 C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\35DDEDF D1D277A171D8DF7B_F2DE72102A14736B534B AAAB62F0BD4B Entropy (8bit): D18FE76BFBB9B3D29BEA00DCDCAD822E 313BC AFFF8AB083D4D410D3F010B264CB 9C FD47942A11E5EFCE8EA E3405DC552937E8EF C8D 1E898F0C0C32764CE9F153FD09295B44FC5D10190EADAFC39CA24C8DD161E0F4239C6D48D09E6F2B62D6E64FB 95C7CC6F7D178D1DF0334A61A118D5DE82A7E1 C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157 data Size (bytes): 1026 Entropy (8bit): CB11B85878E0D215E31007AD045F0E3F 1873AED86F9ACD9CC4C365946A1B16D8BEEA69B5 A581D693406AD73D2799C53752F7F012FD4F0BA37E58EDD8EFFEF114BCB6928D 9E39C305ADCECE7F8A06A B2AD BF20E195D0EC9CA5BDC6A584C6597D9F1FB C4C2662 9E06E49BEBBF02C17CC0F5B3F31E2641BA4D4F C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\644B B5E195ECB0E8F243A4 data Size (bytes): 204 Entropy (8bit): E52B3D829853DDF1FA E6B 4BDE73F562A050B9F7D35B1018EB28BDB5E66BE1 2FFF6F876A4178B9DA989DF6D240D69F8F3A E4FFDD992E302AEFB87 EB11581D CA38E02EF0C2978A CACD36683DEF D D7C5CE17CFD131DC5C7E4 3649CB22DA7CA12FBC2C5186D5F901F4A184C C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\64DCC9872C5635B1B7891B30665E0558_5552C20A FD38A8C0F9F data Size (bytes): 406 Entropy (8bit): F9DC49C3B FF14A68CCA948B 7B897F786BF49991B9E0C43B52DCE11D0DC4372A 80DFFC823F B C3C5182ADB84FA87840BD4189CC0D77104BC03F 8B465F07F0AF69E189C681B77C329F58D2F62D10AA8F002DCCDBE9F6D71CEFAF D07B5D0BC453AC198A8 FA4D58AFA4251CD0F3ED5E31EF4C3A6FF91FE6 C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\6BADA8974A10C4BD62CC921D13E43B18_BEB37ABADF B E04 data Size (bytes): 434 Entropy (8bit): A1FF789F47AE59A7D B80EC05C E0022D B2B7C793ED99A0EF968F52DCA BCF6225B29DA0FE3BF0D9F67678D3DB9B05D6A6C34B4FC3C0D96A4AC4E987F85 478E927B904BDB0E2D71706D D22020F3C2EB2C605297E0DB49B400ADAABE67EA306A3D3FA55CBC1D3 1B553CFCC6BEC821B550536A422DF34F61237F4 Copyright Joe Security LLC 2018 Page 20 of 445
21 C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\6BADA8974A10C4BD62CC921D13E43B18_BEB37ABADF B E04 C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\739F2FF4259CDC6CBE7B90F1A95601EF data Size (bytes): 210 Entropy (8bit): C56F61D972C89EBBE6C9DF4EF C9E2F0A18DA1AFB8DD6D08FF69B1E85D24DCD 09A86BC82BACE897A19FB3C6B4F1F4C480EF9F5414C191F44AC9352DBF3DB8B6 2E6F2080D7D5D8F0DAEA FC7EEEEEE935174CF565AE32D16DDCE E7A3930E45345AC9D BF5E0D398A7EA04DBFB51513AC0B36 C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F data Size (bytes): 2934 Entropy (8bit): DC263ED6AB018C EFB243 C F70FF CE8D58B7D4A83C6C4 D598FAF0FCA7BDCD5C57F9BDADE1A255EA91523D20FE3E0345CA A BA8B02BFCDCB5643BB40C6A9842CF6A8313F272668AAB49BD7D75EA4EBE6DC6865BAB98E684DA6BCC42FBCD 2A161AEAEA03F C95EC7DA81B2DB2D2449C C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\82CB34DD3343FE727DF8890D352E0D8F data Size (bytes): 452 Entropy (8bit): ED0463FEC3056A9914E590CE4C2A520 41CAD5E83B93D9FD B441E04548BB263F 08E11EDD53A9AA9A14DEB A39546D9F448D643D5C0AFB5F29C CC4B7A1E277B50C509D8D5B E7D0E7F1F4FB6E58938ACDD7849A027A5EAD65A3DEC75C0F8D7C 27ADC84665F722FACAA25DCB95EB9F9BB361F1 C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\85B3F147E3624A14E6A20DB4F6C2C5D9 data Size (bytes): 184 Entropy (8bit): DD4872E87DBD618B84928A34DDC 94A4FF496575F7015E948FB521AC937A1EAB1FBB 24C738BADFDC30AE6997CF30D7799FDC490110AA6C6F54D2D319BF62F47B0AD A2F0D96F E8667E894A6A13ED409742C918E2AC03B3B630E34CBB585ADB5CBADFADA5F5 9F60C8481E4F4C847B6825F CA6DCF00 C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8E201822AE136D E866F250D7 data Size (bytes): 574 Entropy (8bit): F5BD35DADCBE519FF791CE1FD2B433A Copyright Joe Security LLC 2018 Page 21 of 445
22 C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8E201822AE136D E866F250D7 C364C6F9413A95781A B7B05C9 6B872B05415EA55F0385D64F35C5FA3E3D834AEB48E3F5767F FABEBA5 1B128F28AFFD7E01C8269FADFFBC ECD9A2CB87A395197A7FD D531BF13BF4DBBD0051F7F47D C6F7631FD9198DCE0F38225B6F917D7184 C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\A6E643304C5FBB7CBF4025F1978D6EED data Size (bytes): 236 Entropy (8bit): D1EAE968FDA2FD03447EC06F6CD30F47 FD2F501987C784531ECCBA41965D8D8261AD31DA 271C449A27CC1F7F305DE34C C3F8E3F9FCDF284575DD1D ED34 0A194EA02651C2A58A9D1CEFA629ACB4B3C444A510F80F163B0F0149A50BDC1084A6743FAB503794A7C01C01C1 7C904F8B AEE9C3E7F25491F50FB8 C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\BEC6224B02D155A396218A2504F3EE0B data Size (bytes): 234 Entropy (8bit): EE625BFE1FB82E0AA7906D14596A0 689C6C42DFF433BAFA50E5AA5190CBCEA5490DB3 254DC B B8B9BBFB4A848BC7FAB8ED25C542CB720FCE7B59E4F1 4AD27888D7F1D47E6E008F689500EFA48F462F8A608C49E1732DE0D3A61FBF5AE857302A1D18D11F828A0202D4B F6C159704F89F1F42C9BF8B1452B5882C0828 C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CFE86DBBE02D859DC92F1E17E0574EE8_FDB E72EDD3FB3D65568F8 21 data Size (bytes): 804 Entropy (8bit): B961CC37C2AE2DAA78E3E9E8E 8E147E F3596CFF71BDE86049D25EB94 3F88965F395067AAF88429D FB624890CAC5A3CF1CCA1393FD9C B8FAAF F55332EFA55E0477D13ED63CCAD2F131B925EC946CDEB4C25E1CFC49340B23A1568EB2C7 AD B725CD9CE4352CF433D4CF5A1D391 C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E0F5C59F9FA661F6F4C50B87FEF3A15A data Size (bytes): 424 Entropy (8bit): C99C46A81A14AAAA29D6D6D84DE 2FAB64E2F55ED6F711C3CEFD8D77D361661E5898 2F914AC45A0E D860A5EF8A9DCD9CF0897A97B21E ADB49BE0F E288C C818F9473B01A236B188467B645D5877B3A3E8D980C9223A259322BE91523BBB6E2E674359D7B23C BD33D1F6C320386BB8BFFF8EDC8A25B209FF C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E F7A0F97B5576C77A26CB_7CE95D8DCA26FE957E7BD7D76F353B 08 Copyright Joe Security LLC 2018 Page 22 of 445
23 C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E F7A0F97B5576C77A26CB_7CE95D8DCA26FE957E7BD7D76F353B 08 data Size (bytes): 514 Entropy (8bit): AF31DC369136CB B6D D70D38C5F0146DE00E149F5958D141E375 48AC0425F029B1B00F683DAD5ADF7A45E2EA69C71F888BAAD285DD3E C9A77CB25BC2A B0A3A3C42BDDDEB28B7A75A30D2CB6C9013AE0AF132BC0F7D20583A89358C7DECAF A6E480A67970FBF01BD5BA8E33A1633D434 C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\EDC238BFF48A31D55A97E1E B_C20E0DA2D0F89FE526E1490F4A2EE5 AB data Size (bytes): 852 Entropy (8bit): EAF68E30A6B58E1C941DB4BEE4C03 89E1C5AC CDAB249BA8556E5661DC7 64D87326BE9CCAB49F7E7BFA7E520341C0EAB692D1A88AB7CC1D A5AAA DA8FF195AC1E4FED0A0C8B0F6DB4A6A41B736E5F4528FA39E603B98931DEFED76EF3E182606C3AAFC82D2E51 A92B564BAD7A83F90FD6820DB064AEC8CFEBA146 C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F5F320A94D4D2B4465D8F17E2BB2D351_9A38F2B39682F2F92D8A2F9E074E85 6A data Size (bytes): 382 Entropy (8bit): DA3775B EF8A8B4A9BD DF0F89D0B466AF761604F6A4883D1C5A DB4EFE71E7C44F34E644BA078C500E214C9C63B32643A8785FA3E C9796AF8640AF FE7049C1D568E32BC9D2C4E81674D5371D04F0C0EF49ADE30DB3BC2DB6E AEA3B D71EAEED15DD6623E6EB4A C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F5F320A94D4D2B4465D8F17E2BB2D351_D4DFD1F713A64C6DB92E 122DADA3AC33 data Size (bytes): 382 Entropy (8bit): DBE374A EE564D231A34DDA1B 67FB5248E3BF71EE32FA181BF655AA7A7CBBCDDA A010E27DB53FFC5BBF0C43D3B0B54FCC1ED2AB57A79C714A1A E0 A04532BB694496BC3C2A349EA3B5DA238C3EBBE13749D97C25547C6488AC0FA600AD7C12E C5E5AFE0 65A51ADA22EE62A75658A5A8E2B9811C71EB6B C:\Users\user\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D f-A0FF-E1416B8B2E3A}.ico PNG image data, 16 x 16, 4-bit colormap, non-interlaced Size (bytes): 237 Entropy (8bit): FB559A E77D F6541 Copyright Joe Security LLC 2018 Page 23 of 445
24 C:\Users\user\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D f-A0FF-E1416B8B2E3A}.ico EA13848D33C2C7F4F4BAA39348AEB1DBFAD3DF31 6D8A01DC7647BC218D003B58FE04049E24A B7E0CEBAE76EDF85B8B914 0E CD123BE8A20B87D9A3AAF5CB05249DE7F8286FF99D3FA35FC7AF7A9D9797DD6EFB6D1E722147DCF B74437DE D0009D452FB96A8ECE236B C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{3A6A57F1-808F-11E8-B7AC-B2C276BF9C88}.dat Size (bytes): Microsoft Word Document Entropy (8bit): C72AFA0B5C3CA7490B4F0FE9ED7A6FD6 341F6D4C39FA13AA18D720DEB84C77F2CB09D035 E380FA9BA6D0D48522E B3F7BAB696ECB7B E59544B0E7 369AA57075BE9A955966D68ADBD77A366FBDB309157AE15649E5162DB FEFEE82626AC1819B4763D E13BFA669C1B54B6D DD8 C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{3A6A57F3-808F-11E8-B7AC-B2C276BF9C88}.dat Size (bytes): Microsoft Word Document Entropy (8bit): FA2B5E1FCCA2BB835E1B9ED2CF8D1BB2 628F055B733E0FCD5D6F2EBB1A23B EE9 67ED31C567F20A11CDDB790E2985C1B5FA5CAC1AEC2EB A280E12E EEA8EF1BE08E66E84F6B0983A5AA40CA2B268E42B682D5770CFD121D13ECFEAF4580F00BB4D8DF F8AA 50FC396F8BF6CBAC3AD669BFA84D4CD86D8E65B C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{442E F-11E8-B7AC-B2C276BF9C88}.dat Size (bytes): Microsoft Word Document Entropy (8bit): D00DA946A2937A7927DD3A342E7FEC 4CA3F8BAA3BDDBCB1F2758F514312C5EEE662ABB BA B1C2399A415A2FD380716AC FFF31DB25AA52EC6C3 17DCF909E5F7C1140E26185D7A014935C855BC3B587FA35EEB DFD0B17165AD9DB90E4F8C0D1C56469E8 549F1C4E7BF68DFCE373469DDABE4C C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\fb4mf11\imagestore.dat data Size (bytes): 1080 Entropy (8bit): ECF C7EFE9362BABD3DAF99E 9B7C72F82B83871D1AFC27C69EAA16C7440B4CE1 41B8BB4FEAD709F A711FD15C66D24A5E54B1F1997DC36B12955BC28CA 32E30C239651A1E690CFEAB729D0A5DCE7B4ECDFA0D86B01AC1742B61EB BAE4F26F760C03DBB3964F FC784E95A989E05A4E09C A C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0316J1PS\ [1].js ASCII text, with very long lines Copyright Joe Security LLC 2018 Page 24 of 445
25 C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0316J1PS\ [1].js Size (bytes): Entropy (8bit): A5F9284D1F8FA C6DE0B5C 14D2FFDE46B4E6B92207B5E9C5794DCA9F40A958 7DDBA8C183456AED4C473D94DED2B05882EDC C053A45CE450B8 0B96B9DF00D628A A4551C442916E37E7BC13FF49B7F50ABE002C8160F BAC95746BF3A29D0 17AC7B104D149D0A8E37B5BB1C8284BE994D C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0316J1PS\1Ptsg8LJRfWJmhDAuUs4TYFs[1].woff Web Open Font Format, flavor 65536, length 21832, version 1.1 Size (bytes): Entropy (8bit): C9B39FCA6FDD0E3AB010F693AE88D8E CF9990C0EEAD0E3D06034CDB679B4C0DBBD6B569 BC3B9971A9FF06BC4D79A588FD01E47619EFDCFCE71CAFE0D8FBF272CB58DCA5 192CB6CA142F632A20847F4F60CF3A719E11B1579C4C7C3C54AB4948FDCC00A1DD9D FDD95EC EF5D4830A0AB12C69BDBFFC64CB6178A05BA C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0316J1PS\2014-EHR-Ambulatory-300x127[1].jpg JPEG image data, JFIF standard 1.01 Size (bytes): 9442 Entropy (8bit): F20617F5AFA5A A180C BFF57CEBC63E2F8290AFA2456F D7B5 206E9FBB6E8E06FA0B599E949D4E6FFEA D7FC71504DB1A0790D326B0 95D5D72C8FCE9B8FCB35D2832AEBC2C899DD14974C7CDE1339ADFE9C0EFBBD9C20409DEA873D43A1CF59BFE4 B F664A70BD23DF2B B27B6B3 C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0316J1PS\Clinical_VHR_Shadow1280[1].jpg JPEG image data, JFIF standard 1.01 Size (bytes): Entropy (8bit): F2F75A40356F8D48EFF1F47A22A0F75 D840D D08C1FFCC1F8E29C7C428ECBC21 E38A509ECE9B3DB0EDA EB67A211F7EA9F7656E79E867A A6922BE DFECF45E4EBF7255A32FE13C4005B9FC510CD9D4AC8595E843116D8C15C541E00425F48 8DBC180D A19F6E A79B C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0316J1PS\Cloud_PlugIn[1].png Size (bytes): Entropy (8bit): PNG image data, 1164 x 1024, 8-bit/color RGBA, non-interlaced 88B8CBC247E06451EFD3B522DF748E17 96DD C529D9F054C7592B15DABC74797 DF3E65C9B74D3E2F3CD14AEB66E9D97BE33D98A5CDD0DC8550F5B6F5ADE3F229 12DBAC9BBD506962AD6143A2A46CDB1A7AA14F9F86C E5861AD316077C2616D0300C21A2A33BD EE18F6DF D689D9875A5B8DA0115C Copyright Joe Security LLC 2018 Page 25 of 445
26 C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0316J1PS\Dashboard-screenshot_6.1.18[1].png Size (bytes): Entropy (8bit): PNG image data, 1280 x 557, 8-bit/color RGBA, non-interlaced DA342B779B0E2F2C6FA639ED094BE98E BC630B5AA29A408F227D0586B405CCB99BB5FEF5 5C77A3AB0A287C8F35D7FB684A95133C58F34BB877AA6360F44D0445F238E7A2 06B7FAF2C2698B023ACC875099FDEECF064C33A1A9F61B4AAED22A78D079D655292FEDF9C5455B3B27CBDEBA8 9BEB4B3799CED222DB53C4A B29DF17 C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0316J1PS\Fiscal-VantagePoint[1].jpg JPEG image data, JFIF standard 1.01 Size (bytes): Entropy (8bit): F87BAE6FAB42416F33FAF0E63B F20E7F64DD2613A04B4D53B1BE AF3 63A384126CB29083B5DF FA62B2F1E8A7F8F2DA0E2682D641D14905E11 DD91E6F2D59F04E0F7FB818C5B9D5EF80EE6AC157B399C013F058A8FD251E3C863CE232F BBA5A837A C9940A23228F16A44B52D08F993187D C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0316J1PS\FiscalVantagePoint_Shadow1280[1].jpg JPEG image data, JFIF standard 1.01 Size (bytes): Entropy (8bit): D492D16DE2912ABA4373CA5DA3C38F71 7CF1A D7DA92A8573D7FBD7D66D1C B384315AE81C101EB5DE94F6E2800DE4C08FF91C7BF469C8B A D27F848EDD8AA1B8C1C49308D4DA134FD20C66F4C70E5A03387E3FE3D277B90E11AD9A0956B0F E30CC F41AFD0E590023E9D4D3432BD1427F37CBD8B8 C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0316J1PS\MOBASSmartPhone[1].png Size (bytes): Entropy (8bit): PNG image data, 627 x 1024, 8-bit/color RGBA, non-interlaced D9B56A31045C3CE2A5794D4 091AABE093632DE90AE1C53DA3F53B98CF A4C8016E721EE0E8B50EF A7AF2EE8FAC83554A59E2FC43CD10E 5E77BBC20B6A3388C41E68528C218ECBD1DA38712DC53ED6AE B7325F0086D281ADB2E47E84E7FBFF C103008C67778A1922EF29F100AD47C4767BCA0 C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0316J1PS\NC-Health-Information-Exchange-Authority-300x127 [1].jpg JPEG image data, JFIF standard 1.01 Size (bytes): 5853 Entropy (8bit): D2E91D98644E2FF5BCA FA9EA 672E9C45A616F47C31F953E5D6E537B080AB DED28DFAE9979EE3C044BB9BFD867949B D8173A3D07CA555294E4CB Copyright Joe Security LLC 2018 Page 26 of 445
27 C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0316J1PS\NC-Health-Information-Exchange-Authority-300x127 [1].jpg 9ADD3B7E6CC750AB9ACCD059F154DB0C112E6DA3885D37D09A0294B66AD708F8486D321478CA743D057A2BE1B 1388A46F033724AB30BF38F5A9C28B C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0316J1PS\OpenMinds_Logo_ x127[1].jpg JPEG image data, JFIF standard 1.01 Size (bytes): 3786 Entropy (8bit): B33AA3701F7563E154C8D9F346D4C 7427D3017B3F2FC93D872D26F50E6086DBB6281B 81F026049A3EE3938BC9746E98BE3D231C1DB801BEA8A6D FE59F69 AF425C39D8D32A5A7FB07E B8EC6D01B05D3B9C4B0C8638F42B2515B EF4849FBA4EEF77464 AF A2916C76FA7AB5A15361E94FDE true C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0316J1PS\S6u9w4BMUTPHh6UVSwiPHw[1].woff Web Open Font Format, flavor 65536, length 27848, version 1.1 Size (bytes): Entropy (8bit): E32FDC800C78B527A3E53FE2BE6 E12403CFE60F852A8FBBE05D84D58D33C6C2A6B9 60C05EE47E E487D11B92EEC54A7F5336F84CECC8B5825C87BB E6686CE4D235372BFCC1C886D428E76D9F21242EC358BBBC065630EFE0D559784A71B87EB56C29449F9D C9EB1F7B32846E6243BC9B741C1D1F691A C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0316J1PS\analytics[1].js Size (bytes): Entropy (8bit): HTML document, ASCII text, with very long lines 64615ACD5DA6E5ACBD0A54B34174AEFE 8DB13CF86FA09D44B60D8E3E480DA B00E 3FAB1C883847E4B5A02F3749A9F4D9EAB15CD D3B2904A1A4C8755FBA3 E FC0A3B8380E9F8DAF79BB521DAA5EA545E9DDB01DE8FD38F70E30C224FD8018C349EC8F32AA9CEC7 470F204378A70DB59EF3EB E C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0316J1PS\animate[1].css Size (bytes): ASCII text, with very long lines Entropy (8bit): FE1AF3E84F6B63E14A17676AC032AF54 B625743D6F1BB4F CD5C069B409B5B B73308C52B1DEE217C163E A2E9BE420A54D938BDDAE2156 F7A2498A57E429AB58DAA447E648DF8D0E58F6930CDF157C81EB9E94318F6C7D440965BBB2C8CA86CE79EBBD0 3B99379D3334CD099F1830A21C7EB0A954D86C4 C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0316J1PS\benchmarksnc.org_-300x127[1].jpg JPEG image data, JFIF standard 1.01 Size (bytes): 2339 Copyright Joe Security LLC 2018 Page 27 of 445
28 C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0316J1PS\benchmarksnc.org_-300x127[1].jpg Entropy (8bit): A61824FE1E4D8F DA2E D39EB0A1D32DDA AD7ACFAD75EB47 4CFFFCB06550C7F5086AABF1B49BEF58D85EC72F10ED39998AF0EFC20587F4F7 35ACC876B9FB80FE09317CE36E355AB0CD585C47329DB696924D1C96AA33A18C10E97A52082C CA8BDDB C582EA5E6E8F77E93137FCACCFA C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0316J1PS\css[1].css Size (bytes): 721 ASCII text Entropy (8bit): B7952A36C96A29947CECD812BBF 4ACB32527BFB6776E13305E C2F413F 0FC5FADB25F42A88ADC4EBDBB189CDE280F5A551E8BEE3AD7FFA31EF FBA526DF6FB B2CDB87A00C44DC674B4BEC133D3B106BF8C29BE43D40D786E D2B5039 B14B3E258C5BBF19D2698DC538E9DA3C83707E C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0316J1PS\ctnonprofitalliance.org_-300x127[1].jpg JPEG image data, JFIF standard 1.01 Size (bytes): 9113 Entropy (8bit): DF9A2AB57B2BF1520C2F03E88468D CBA1B25E97F77C80D29C130EB6F3F31ECE7F 9AE AA768FE3F061BBDCC406D31E30262FD C405F8D4 80E06033F4184E07308C1F679A46D7E38EEC97C030BEF6671B375E822BE459B404C76B430615AA7B23F98B0BB6D 4CC2D1FD16FB5C0FBCDD389B9FF4AF36D7375 C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0316J1PS\ep-elements[1].css ASCII text Size (bytes): Entropy (8bit): C929B23791B851FA B9 44A6CC BD2D0A42AC D FC C061F76E A3C40300C8A93C26320EE4A5FC98BFA631EEF1BFC8EAD9 0B54BCE8A7D5F B97857F8860E115C7D6B4D00FEE BC7EF69552F1E0F9B9BEFF0DA644752F D5405F4FB2725EFCC172AC4F6404D860BB7E6 C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0316J1PS\ep-scripts[1].js Size (bytes): 6666 ASCII text, with CRLF line terminators Entropy (8bit): EA02CB B632B D649 1A170B35CD301319BC35CB7125EDBED014115C6C E368B4339C336920FFDEFA3E9CBF1168AF89F784F7101CD1572C0A0DFC650FBE 8B003B8C3B640CB214D3BD3D8F3F5FF90779D227F286A7945F7E0730D33CA349D2E08DAA3BDED9CB407A97D9E D21A12D9174E53B9E5CD8532B8DBBA0AFB1F146 Copyright Joe Security LLC 2018 Page 28 of 445
29 C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0316J1PS\fccmh.org_-300x127[1].jpg JPEG image data, JFIF standard 1.01 Size (bytes): 5942 Entropy (8bit): AA C7C37263B080EA413CD0E7 25AA968C4DDB7D9347FAA4CE997D0D365CA86E2D AB76D76EE03B48EE12C384DA9E81692C5E89C2AC A3FCA6 EA1A5D5DC94C96B22E1C223A864F85E9448C8B79E BD8398EB706899BECBE611ED0823E855BFC1CA 7697DF884909A6CADD892EA0EBCA7D8B09013D C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0316J1PS\filtery.min[1].js Size (bytes): 1359 Entropy (8bit): ASCII text, with very long lines, with no line terminators D20CB67D8135ABC8873E6E058EF15F7B 5A4862DBF274805AA39F755891E371E7161C781E BBC060F2FE B D1E8FA2F BE9B3F553058B6E60AF7D B135FF5C228F1A4B85CFE8BDCD647EBC900637CFE1659EA9061AAF03EB425D9C1EE4F5223B68330E8CCC60A07 FCC2610EDE1FE501215D0D91C0D88CB6A5EC62E C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0316J1PS\frontend.min[1].js Size (bytes): Entropy (8bit): ASCII text, with very long lines, with no line terminators 0825F113DCD CA80A6DE FEC B4EA9DE2862DEAF6765F2A34AA D0F2DF1CCFCE3DF1B656B D8634C CCA4B5E82EAD2E2C EA055574E3C649B09B5E90686DBA18615FF81364EA259086F5EBA44EE5051EBE2BB53B4984D729D5852A6F01 795D0D1BDD98F08FD3EE4B49D95FDCF63A839 C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0316J1PS\icomoon[1].css Size (bytes): 7663 ASCII text, with very long lines Entropy (8bit): E1AE090C5E4ED7BFC7672F29BBFDC7EC 0C4F4D ED17BEDDFA69D2DD7713BF4FC3 81B98FA0B24E7C23656E645B5056ABC980B25716D6E03599F4EB1C6F40BAB39E B7B3F921B607A8A2BA0B8A84DFE704A842A6BDB FEAE4DF79CF738FB8FF205014DD8519A5763C43B11 866D51DC38EB05FA8FC4712E5688D723B3021D C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0316J1PS\jquery-migrate.min[1].js Size (bytes): ASCII text, with very long lines Entropy (8bit): EEC5320FBE BF9651C AFF6D CDF04994D834F7EC169B 48EB8B500AE6A38617B5738D2B3FAEC481922A E31D2755C034A45CD5D B74A2F03C64E883B9A34DE DFB4AA230A7A6AFCA8150A16E3D84E FF264C26368D C C34FE219F71F951D364FA5C68C039B76776CD Copyright Joe Security LLC 2018 Page 29 of 445
ID: Cookbook: browseurl.jbs Time: 03:38:04 Date: 30/04/2018 Version:
ID: 57282 Cookbook: browseurl.jbs Time: 03:38:04 Date: 30/04/2018 Version: 22.0.0 Table of Contents Analysis Report Overview General Information Detection Confidence Classification Analysis Advice Signature
ID: Cookbook: browseurl.jbs Time: 15:40:31 Date: 11/04/2018 Version:
ID: 54174 Cookbook: browseurl.jbs Time: 15:40:31 Date: 11/04/2018 Version: 22.0.0 Table of Contents Table of Contents Analysis Report Overview General Information Detection Confidence Classification Analysis
ID: Cookbook: browseurl.jbs Time: 19:33:28 Date: 25/04/2018 Version:
ID: 56640 Cookbook: browseurl.jbs Time: 19:33:28 Date: 25/04/2018 Version: 22.0.0 Table of Contents Analysis Report Overview General Information Detection Confidence Classification Analysis Advice Signature
ID: Cookbook: browseurl.jbs Time: 17:57:53 Date: 27/04/2018 Version:
ID: 57046 Cookbook: browseurl.jbs Time: 17:57:53 Date: 27/04/2018 Version: 22.0.0 Table of Contents Table of Contents Analysis Report Overview General Information Detection Confidence Classification Analysis
ID: Cookbook: browseurl.jbs Time: 10:30:00 Date: 09/01/2018 Version:
ID: 42036 Cookbook: browseurl.jbs Time: 10:30:00 Date: 09/01/2018 Version: 20.0.0 Table of Contents Analysis Report Overview General Information Detection Confidence Classification Analysis Advice Signature
ID: Cookbook: browseurl.jbs Time: 01:14:26 Date: 03/05/2018 Version:
ID: 57739 Cookbook: browseurl.jbs Time: 01:14:26 Date: 03/05/2018 Version: 22.0.0 Table of Contents Table of Contents Analysis Report Overview General Information Detection Confidence Classification Analysis
ID: Cookbook: browseurl.jbs Time: 01:54:38 Date: 10/05/2018 Version:
ID: 58820 Cookbook: browseurl.jbs Time: 01:54:38 Date: 10/05/2018 Version: 22.0.0 Table of Contents Table of Contents Analysis Report Overview General Information Detection Confidence Classification Analysis
ID: Cookbook: browseurl.jbs Time: 21:16:31 Date: 24/04/2018 Version:
ID: 56483 Cookbook: browseurl.jbs Time: 21:16:31 Date: 24/04/2018 Version: 22.0.0 Table of Contents Table of Contents Analysis Report Overview General Information Detection Confidence Classification Analysis
ID: Cookbook: browseurl.jbs Time: 20:25:07 Date: 07/05/2018 Version:
ID: 58298 Cookbook: browseurl.jbs Time: 20:25:07 Date: 07/05/2018 Version: 22.0.0 Table of Contents Analysis Report Overview General Information Detection Confidence Classification Analysis Advice Signature
ID: Cookbook: browseurl.jbs Time: 18:33:33 Date: 06/04/2018 Version:
ID: 53568 Cookbook: browseurl.jbs Time: 18:33:33 Date: 06/04/2018 Version: 22.0.0 Table of Contents Analysis Report Overview General Information Detection Confidence Classification Analysis Advice Signature
ID: Cookbook: browseurl.jbs Time: 21:49:21 Date: 20/04/2018 Version:
ID: 55777 Cookbook: browseurl.jbs Time: 21:49:21 Date: 20/04/2018 Version: 22.0.0 Table of Contents Table of Contents Analysis Report Overview General Information Detection Confidence Classification Analysis
ID: Sample Name: html Cookbook: defaultwindowshtmlcookbook.jbs Time: 15:11:10 Date: 11/04/2018 Version: 22.0.
ID: 54166 Sample Name: 14527716735276.html Cookbook: defaultwindowshtmlcookbook.jbs Time: 15:11:10 Date: 11/04/2018 Version: 22.0.0 Table of Contents Analysis Report Overview General Information Detection
ID: Cookbook: browseurl.jbs Time: 16:38:13 Date: 14/04/2018 Version:
ID: 54814 Cookbook: browseurl.jbs Time: 16:38:13 Date: 14/04/2018 Version: 22.0.0 Table of Contents Table of Contents Analysis Report Overview General Information Detection Confidence Classification Analysis
ID: Sample Name: sentenza berwind.pdf Cookbook: defaultwindowspdfcookbook.jbs Time: 21:41:19 Date: 11/04/2018 Version: 22.0.
ID: 54234 Sample Name: sentenza berwind.pdf Cookbook: defaultwindowspdfcookbook.jbs Time: 21:41:19 Date: 11/04/2018 Version: 22.0.0 Table of Contents Analysis Report Overview General Information Detection
ID: Sample Name: Harry Potter and the Sorcerer's Stone.pdf Cookbook: defaultwindowspdfcookbook.jbs Time: 06:34:30 Date: 24/04/2018 Version:
ID: 56310 Sample Name: Harry Potter and the Sorcerer's Stone.pdf Cookbook: defaultwindowspdfcookbook.jbs Time: 06:34:30 Date: 24/04/2018 Version: 22.0.0 Table of Contents Analysis Report Overview General
ID: Cookbook: urldownload.jbs Time: 15:58:06 Date: 04/06/2018 Version:
ID: 62516 Cookbook: urldownload.jbs Time: 15:58:06 Date: 04/06/2018 Version: 22.0.0 Table of Contents Analysis Report Overview General Information Detection Confidence Classification Analysis Advice Signature
ID: Cookbook: browseurl.jbs Time: 09:15:48 Date: 09/01/2018 Version:
ID: 42027 Cookbook: browseurl.jbs Time: 0:15:48 Date: 0/01/2018 Version: 20.0.0 Table of Contents Analysis Report Overview General Information Detection Confidence Classification Analysis Advice Signature
ID: Sample Name: message_zdm.html Cookbook: default.jbs Time: 17:40:56 Date: 04/05/2018 Version:
ID: 58003 Sample Name: message_zdm.html Cookbook: default.jbs Time: 17:40:56 Date: 04/05/2018 Version: 22.0.0 Table of Contents Table of Contents Analysis Report Overview General Information Detection
ID: Sample Name: Zipongo Value for Investment_ Theresa & Year 1 ROI vs. treatment costs.pdf Cookbook: defaultwindowspdfcookbook.
ID: 56479 Sample Name: Zipongo Value for Investment_ Theresa & Year 1 ROI vs. treatment costs.pdf Cookbook: defaultwindowspdfcookbook.jbs Time: 20:35:00 Date: 24/04/2018 Version: 22.0.0 Table of Contents
FAQs GOLF CANADA KIOSK
FAQs GOLF CANADA KIOSK WHY THE GOLF CANADA KIOSK? The kiosk web address is generally used at the course because of its basic features and user-friendly interface. There is no password required for entry,
XC2 Client/Server Installation & Configuration
XC2 Client/Server Installation & Configuration File downloads Server Installation Backup Configuration Services Client Installation Backup Recovery Troubleshooting Aug 12 2014 XC2 Software, LLC Page 1
Cisco SIP Proxy Server (CSPS) Compliance Information
APPENDIX A Cisco SIP Proxy Server (CSPS) Compliance Information This appendix describes how the CSPS complies with the IETF definition of SIP (Internet Draft draft-ietf-sip-rfc2543bis-04.txt, based on
Integrate Riverbed SteelHead. EventTracker v8.x and above
EventTracker v8.x and above Publication Date: March 27, 2018 Abstract This guide provides instructions to configure a Riverbed SteelHead to send its syslog to EventTracker Enterprise Scope The configurations
Oxygen Meter User Manual
Oxygen Meter User Manual Monday, July 23, 2007 1. Outline...2 2. Program...3 2.1. Environment for program execution...3 2.2. Installation...3 2.3. Un installation...3 2.4. USB driver installation...3 2.5.
ACI_Release_Notes.txt VERSION Fixed Tank info for ELITE in Dive section 2. Fixed USB port initializing for old DC VERSION
VERSION 2.4.0 1. Fixed Tank info for ELITE in Dive section 2. Fixed USB port initializing for old DC VERSION 2.3.9 1. Fixed Dive Computer configuration section error 2. Fixed message for download/upload
SQL LiteSpeed 3.0 Installation Guide
SQL LiteSpeed 3.0 Installation Guide Revised January 27, 2004 Written by: Jeremy Kadlec Edgewood Solutions www.edgewoodsolutions.com 888.788.2444 2 Introduction This guide outlines the SQL LiteSpeed 3.0
REMOTE CLIENT MANAGER HELP VERSION 1.0.2
VERSION 1.0.2 MERCHANT SALES: 800-637-8268 New Merchant Accounts PARTNER PROGRAMS: 800-637-8268 New and existing partnerships CUSTOMER CARE: 800-338-6614 Existing merchant account support Statements and
THE STATCREW SYSTEM For Basketball - What's New Page 1
THE STATCREW SYSTEM For Basketball - What's New 2000-2011 - Page 1 What's New For 2011: Version 4.13.0 (available June 2011) Access to all updates from June 2011 through May 2012 (i.e., versions 4.13.1-4.13.xx)
The MQ Console and REST API
The MQ Console and REST API Matt Leming lemingma@uk.ibm.com Agenda Existing capabilities What s new? The mqweb server The MQ REST API The MQ Console 1 Existing capabilities Administering software MQ Queue
DESKTOP SKILLS COURSEWARE
Introducing Mac OS X Yosemite Course... ds_maco_a01_dt_enus Working with Mac OS X Yosemite Course... ds_maco_a02_dt_enus Installing Mac OS X Yosemite Course... ds_macp_a01_dt_enus Managing and Configuring
PRODUCT MANUAL. Diver-Mobile for Android
PRODUCT MANUAL Diver-Mobile for Android Contact details: Van Essen Instruments B.V. Van Essen Instruments - Canada Delftechpark 20 630 Riverbend Drive, Suite 100 2628 XH Delft Kitchener, ON, The Netherlands
PGA Tour, Champions Tour & Web.com Tour LED Scoreboard Graphical Style Guide and Tournament Instructions. (Revised 4/1/2018) Section 1: Introduction
PGA Tour, Champions Tour & Web.com Tour LED Scoreboard Graphical Style Guide and Tournament Instructions (Revised 4/1/2018) Section 1: Introduction This document constitutes a style guide that tournaments
Totalflow Web Interface (TWI) software Help notes v1.0 Oct. 3, 2014
Technical reference Totalflow products Totalflow Web Interface (TWI) software Help notes v1.0 Oct. 3, 2014 File name: Totalflow products 2105166MNAA.docx Document name: Document status: Totalflow products
Diver Training Options
MAIN INTERNET ON-SITE TAILORED PACKAGES INTER-COMPANY Diver Training Options DBI offers a menu of tailored courses Designed for users as well as IT Professionals to learn how to master the functionality
Table of Content IMPORTANT NOTE: Before using this guide, please make sure you have already set up your settings in
Quick Start Guide Table of Content Introduction... 3 Prerequisites... 3 How to Open QQEvolution 2... 4 How to do Carrier Downloads... 5 Locating a Client in QQEvolution 2... 7 Adding a New Client... 8
Section 8: Model-View-Controller
Section 8: Model-View-Controller Slides by Alex Mariakakis with material from Krysta Yousoufian and Kellen Donohue Agenda MVC MVC example 1: traffic light MVC example 2: registration HW8 info MVC The classic
We release Mascot Server 2.6 at the end of last year. There have been a number of changes and improvements in the search engine and reports.
1 We release Mascot Server 2.6 at the end of last year. There have been a number of changes and improvements in the search engine and reports. I ll also be covering some enhancements and changes in Mascot
Section 8: Model-View-Controller. Slides adapted from Alex Mariakakis, with material from Krysta Yousoufian and Kellen Donohue
Section 8: Model-View-Controller Slides adapted from Alex Mariakakis, with material from Krysta Yousoufian and Kellen Donohue Agenda MVC MVC example 1: traffic light MVC example 2: registration HW8 info
[CROSS COUNTRY SCORING]
![[CROSS COUNTRY SCORING]](/thumbs/89/99405973.jpg "[CROSS COUNTRY SCORING]")
2018 The Race Director Guide [CROSS COUNTRY SCORING] This document describes the setup and scoring processes employed when scoring a cross country race with Race Director. Contents Intro... 3 Division
Microsoft Windows Software Manual for FITstep Stream Version 4
Thank you for purchasing this product from Gopher. If you are not satisfied with any Gopher purchase for any reason at any time, contact us and we will replace the product, credit your account, or refund
Fencing Fox SmartApp Documentation. 25 avril 2018
Fencing Fox Fencing Competition Software SmartApp User Guide Copyright AFC Europe 2014-2018 1 1 TABLE OF CONTENTS 2 General overview... 3 2.1 Installation... 3 2.2 Local network setting... 3 2.3 Starting
Instrument pucks. Copyright MBARI Michael Risi SIAM design review November 17, 2003
Instrument pucks Michael Risi SIAM design review November 17, 2003 Instrument pucks Pucks and Plug-and-Work The MBARI puck prototype Puck software interface Pucks in practice (A Puck s Tale) Embedding
AGW SYSTEMS. Blue Clock W38X
AGW SYSTEMS Blue Clock W38X Contents table BLUECLOCKS...3 THE EVOLUTION...4 WHAT S NEW!...5 HARDWARE...6 SOFTWARE...7 MULTI COMPANY...8 INSTANTLY...9 EVEN MORE!...10 WHAT S INSIDE HOW DOES IT WORK...11...12
FireHawk M7 Interface Module Software Instructions OPERATION AND INSTRUCTIONS
FireHawk M7 Interface Module Software Instructions OPERATION AND INSTRUCTIONS WARNING THE WARRANTIES MADE BY MSA WITH RESPECT TO THE PRODUCT ARE VOIDED IF THE PRODUCT IS NOT USED AND MAINTAINED IN ACCORDANCE
Quintic Automatic Putting Report
Quintic Automatic Putting Report Tutorial www.quintic.com Introduction The Quintic Automatic Putting Report is designed to work as an add on to our premier Quintic Biomechanics analysis software. Auto
86 5A 62 DF 67 3A 7B A F A 65 F6 95 F4. win7-sp1-x64-app02-1 win7-sp1-x64-app02-1 KVM :32: :51:37
9B 76 FE 5B 89 51 68 06 67 62 A5 4A 06 67 7C 7B 57 5F 00 59 CB F6 95 F4 7E D3 67 5F F6 95 F4 63 01 7E ED F6 95 F4 06 67 5F 15 64 CE 72 48 67 2C FILE 2017-01-31 15:32:29 2017-01-31 15:51:38 1149 79 D2 1.4-Maldun
BVIS Beach Volleyball Information System
BVIS Beach Volleyball Information System Developments in computer science over the past few years, together with technological innovation, has in turn stimulated the development of tailored software solutions
Steltronic StelPad User Guide
StelPad User Guide Steltronic StelPad User Guide Contents Contents... 1 About StelPad and its Features... 3 StelPad System Elements... 3 StelPad Computer Integration with Focus... 4 Enable Custom Graphic
Using MATLAB with CANoe
Version 2.0 2017-03-09 Application Note AN-IND-1-007 Author Restrictions Abstract Vector Informatik GmbH Public Document This application note describes the usage of MATLAB /Simulink combined with CANoe.
Software Manual for FITstep Pro Version 2
Thank you for purchasing this product from Gopher. If you are not satisfied with any Gopher purchase for any reason at any time, contact us and we will replace the product, credit your account, or refund
Inspection User Manual
2016 TABLE OF CONTENTS Inspection User Manual This application allows you to easily inspect equipment located in Onix Work. Onix AS Version 1.0.15.0 03.06.2016 0 P a g e TABLE OF CONTENTS TABLE OF CONTENTS
Inspection User Manual This application allows you to easily inspect equipment located in Onix Work.
2016 TABLE OF CONTENTS Inspection User Manual This application allows you to easily inspect equipment located in Onix Work. Onix AS Version 1.0.15.0 03.06.2016 0 P a g e TABLE OF CONTENTS TABLE OF CONTENTS
Skillsoft Course Catalog. Desktop Collection
Skillsoft Course Catalog Desktop Collection Adobe Reader X Course... at_adre_a01_dt_enus Adobe Air 3 for Flash CS5.5 Developers Course... at_airr_a01_it_enus Adobe InDesign CS5: Fundamentals Course...
Using the Lego NXT with Labview.
Using the Lego NXT with Labview http://www.legoengineering.com/component/content/article/105 The Lego NXT 32-bit ARM microcontroller - an Atmel AT91SAM7S256. Flash memory/file system (256 kb), RAM (64
Meter Data Distribution User Manual
0.1 Meter Data Distribution User Manual February 2016 Public Copyright 2015 Independent Electricity System Operator. All rights reserved. Public Page 2 of 24 Table of Contents Contents 1. Overview... 4
Flow Vision I MX Gas Blending Station
Flow Vision I MX Gas Blending Station Alicat Scientific, Inc. 7641 N Business Park Drive Tucson, Arizona 85743 USA alicat.com 1 Notice: Alicat Scientific, Inc. reserves the right to make any changes and
Digi Connect ME 9210 Linux: serial port 2 for JTAG modules
Digi Connect ME 9210 Linux: serial port 2 for JTAG modules Document History Date Version Change Description 08/05/2009 Initial entry/outline Table of Contents Document History... 2 Table of Contents...
NETDIVER TUTORIAL. Revision Doc-NDT Dimensional Insight
NETDIVER TUTORIAL Revision Doc-NDT-121411-02 2011 Dimensional Insight NetDiver 6.3 Tutorial, Manual Revision Doc-NDT-021411-02. Dimensional Insight, Inc. disclaims the implied warranties of merchantability
The Race Director. IPICO Integration Direct Connect [IPICO INTEGRATION]
![The Race Director. IPICO Integration Direct Connect [IPICO INTEGRATION]](/thumbs/72/67145921.jpg "The Race Director. IPICO Integration Direct Connect [IPICO INTEGRATION]")
2017 The Race Director IPICO Integration Direct Connect [IPICO INTEGRATION] This document explains how to manage the results data between your IPCIO readers and Race Director using a direct connection
DDR Dive Data Recorder Manual - Rel /12
DDR Dive Data Recorder Manual - Rel. 1.1 2/12 TABLE OF CONTENTS 1. WHAT IS THE DDR? 4 2. TECHNICAL CHARACTERISTICS 5 3. DOWNLOADING DATA TO A PC 6 4. DDR MANAGER 7 5. CONFIGURE DEVICE BUTTON 9 6. READ
Tips to Prevent Form 2802, Lost to Follow-up. Casey Beardslee, Supervisor Donor Contact Team Minneapolis, MN
Tips to Prevent Form 2802, Lost to Follow-up Casey Beardslee, Supervisor Donor Contact Team Minneapolis, MN Agenda 45 min. Introduction Tricks/hints for locating patient contact information Outreach options
Tips to Prevent Form 2802, Lost to Follow-up
Agenda 45 min. Tips to Prevent Form 2802, Lost to Follow-up Casey Beardslee, Supervisor Donor Contact Team Minneapolis, MN Introduction Tricks/hints for locating patient contact information Outreach options
Quick Start Guide. For Gold and Silver Editions
Quick Start Guide For Gold and Silver Editions Table of Content Introduction... 3 Prerequisites... 3 Installation and Setup... 4 Download and Install QQEvolution 2... 4 Create Users... 8 Create Agent/CSR/Producer...
Australian Ice Hockey League Limited Privacy Policy
Australian Ice Hockey League Limited Privacy Policy 1. AIHL Australian Ice Hockey League Ltd (ACN 114 658 123) of GPO Box 329, Melbourne VIC 3001 (AIHL) is the administrator of the Australian Ice Hockey
March 6, 2013 Tony Giarrusso, Rama Sivakumar Center for GIS, Georgia Institute of Technology
March 6, 2013 Tony Giarrusso, Rama Sivakumar Center for GIS, Georgia Institute of Technology 33 46 35.74 N, 83 23 48.33 W Location: Georgia Institute of Technology, College of Architecture Established:1996
Excel 2013 Pivot Table Calculated Field Greyed Out
Excel 2013 Pivot Table Calculated Field Greyed Out Use Excel pivot table calculated item to create unique items in a pivot table field. (00:47 minute mark) Group By Date: Excel PivotTable: 1) Drag Date
Instant Trapper. User Guide
User Guide Contents 1. Copyright Notice... 3 2. Introduction...5 3. Getting Started with Instant Trapper...6 4. The Instant Trapper Plug-in... 9 5. Setting Instant Trapper Parameters...10 6. Trapping...
APP NOTES Onsight Connect Cisco Integration. July 2016
APP NOTES Onsight Connect Cisco Integration July 2016 Table of Contents 1. Direct Onsight Device to Cisco Endpoint Calling... 4 2. Onsight Device to Onsight Device (including Cisco Endpoint) Calling...
Software for electronic scorekeeping of volleyball matches, developed and distributed by:
Software for electronic scorekeeping of volleyball matches, developed and distributed by: Developed for the rules of USports 2017-18 As adopted by Ontario University Athletics for Men s & Women s Volleyball
Multi Class Event Results Calculator User Guide Updated Nov Resource
Multi Class Event Results Calculator User Guide Updated Nov 2011 The Multi Class Point Score has been developed as part of Swimming Australia Ltd. s commitment to creating opportunities for people with
Decompression of run-time compressed PE-files
Decompression of run-time compressed PE-files MIROSLAV VNUK, PAVOL NÁVRAT Slovak University of Technology Faculty of Informatics and Information Technologies Ilkovičova 3, 842 6 Bratislava, Slovakia Abstract.
Rules of Soccer Simulation League 2D
Rules of Soccer Simulation League 2D (RoboCup2016 Leipzig, Germany) This document contains the rules for the RoboCup2016 Soccer Simulation League 2D competition in Leipzig, Germany. 1. Soccer Simulator
by Robert Gifford and Jorge Aranda University of Victoria, British Columbia, Canada
Manual for FISH 4.0 by Robert Gifford and Jorge Aranda University of Victoria, British Columbia, Canada Brief Introduction FISH 4.0 is a microworld exercise designed by University of Victoria professor
ICD-10-CM IN VERSION 10
ICD-10-CM IN VERSION 10 June 2014 eclinicalworks, 2014. All rights reserved Introduction Effective Date CONTENTS INTRODUCTION 3 Effective Date 3 Global Effective Date 3 Individual Insurance Effective Date
2 November WSI Hubcast VERSION 3.5 RELEASE NOTES
2 November 2016 WSI Hubcast VERSION 3.5 RELEASE NOTES THE WEATHER COMPANY WSI Hubcast 2 2 WSI HUBCAST 3.5 RELEASE NOTES This document describes the major changes introduced with version 3.5 of the WSI
User Help. Fabasoft Scrum
User Help Fabasoft Scrum Copyright Fabasoft R&D GmbH, Linz, Austria, 2018. All rights reserved. All hardware and software names used are registered trade names and/or registered trademarks of the respective
ITF SCORER ONLINE TRAINING SETUP
ITF SCORER ONLINE TRAINING SETUP Guidelines for Officials Version 1.2 INTRODUCTION The ITF s Live Scoring System uses handheld wireless electronic devices (smartphone handsets), operated by Chair Umpires,
A physicist, an engineer and a programmer were in a car driving over a steep alpine pass when the brakes failed. The car was getting faster and
A physicist, an engineer and a programmer were in a car driving over a steep alpine pass when the brakes failed. The car was getting faster and faster, they were struggling to get round the corners and
Blackwave Dive Table Creator User Guide
Blackwave Dive Table Creator User Guide Copyright 2002-2009 Blackwave. All rights reserved. These materials (including without limitation all articles, text, images, logos, compilation, and design) are
[CROSS COUNTRY SCORING]
![[CROSS COUNTRY SCORING]](/thumbs/84/89721527.jpg "[CROSS COUNTRY SCORING]")
2015 The Race Director Guide [CROSS COUNTRY SCORING] This document describes the setup and scoring processes employed when scoring a cross country race with Race Director. Contents Intro... 3 Division
Tennis...32 Stay above...34 Decimal...36 Bundesliga simulator...38 Shooter management...41 Installation...43 Registration...45 Where do I get the
Content ShotAnalyzer with Scatt and the Häring target system... 3 ShotAnalyzer with Scatt and the Meyton target system... 5 ShotAnalyzer with Scatt and the Disag target system... 7 ShotAnalyzer with Scatt
- 2 - Companion Web Site. Back Cover. Synopsis
Companion Web Site A Programmer's Introduction to C# by Eric Gunnerson ISBN: 1893115860 Apress 2000, 358 pages This book takes the C programmer through the all the details from basic to advanced-- of the
KEM Scientific, Inc. Instruments for Science from Scientists
KEM Scientific, Inc. Instruments for Science from Scientists J-KEM Scientific, Inc. 6970 Olive Blvd. St. Louis, MO 63130 (314) 863-5536 Fax (314) 863-6070 E-Mail: jkem911@jkem.com Precision Vacuum Controller,
World Leading Traffic Analysis
World Leading Traffic Analysis Over the past 25 years, has worked closely with road authorities and traffic managers around the world to deliver leading traffic monitoring equipment. With products now
PC Configuration software for Discovery MkVI v 1.03 User guide
PC Configuration software for Discovery MkVI v 1.03 User guide This user guide describes the different features included in PC Config software, version 1.03, and how they are used. When referring to this
SmartMan Code User Manual Section 5.0 Results
SmartMan Code User Manual Section 5.0 Results For SmartMan Code, Megacode and Megacode Low Volume Table of Contents SmartMan Code User Manual Section 5.0 Results... 1 SMARTMAN CODE MEGACODE MEGACODE LOW
DST Host User Manual
For DST Host version 7.0 onwards, published October 2017 Cefas Technology Limited CONTENTS About this Manual... 2 Conventions used in this Manual... 2 Getting Started... 3 Installing the Host Software...
Mac Software Manual for FITstep Pro Version 2
Thank you for purchasing this product from Gopher. If you are not satisfied with any Gopher purchase for any reason at any time, contact us and we will replace the product, credit your account, or refund
CSE 154: Web Programming Spring 2017 Homework Assignment 5: Pokedex. Overview. Due Date: Tuesday, May 9th
CSE 154: Web Programming Spring 2017 Homework Assignment 5: Pokedex Due Date: Tuesday, May 9th This assignment is about using AJAX to fetch data in JSON format and process it using DOM manipulation. Overview
Mapping a course for Pocket Caddy
Contents: 1. Mapping overview 2. Mapping your course o 2.1. Locating the course o 2.2. Mapping the holes o 2.3. Opening the template file and naming the course o 2.4. Mapping the greens o 2.5. Mapping
Sales Quotation For: Tyler Software & Related Services. City of Cape Girardeau Page 1 of 9
Quoted By: David Regnery Date: 08/30/2012 Quote Expiration: 10/31/2012 Quote Name: City of Cape Girardeau Quote Number: 38370 Sales Quotation For: Mr. John Richbourg City of Cape Girardeau 401 Independence
Version 3.1.0: New Features/Improvements: Improved Bluetooth connection on Windows 10
Version 3.1.0: Improved Bluetooth connection on Windows 10 ***Important notice for Mac Users: Upgrading from Shearwater Desktop 3.0.8 to 3.1.0 will not cause issues. Upgrading from any 2.X.X to any 3.X.X
Wanamaker Corporation. Golf Coaches Guide Season
Wanamaker Corporation Golf Coaches Guide 2015 Season Contents Benefits to Coaches for using iwanamaker... 3 Single source for all high school golf... 3 Use iwanamaker for all your practices... 3 Hole by
Fencing Time Version 4.3
Fencing Time Version 4.3 Upgrading your Fencing Time Server October 2017 Copyright 2017 by Fencing Time, LLC. All rights reserved. Overview Periodically, a new version of Fencing Time is released. In most
Digi Connect ME 9210 Linux: 2 nd serial over FIM
Digi Connect ME 9210 Linux: 2 nd serial over FIM Document History Date Version Change Description 09/04/2009 Initial entry/outline Table of Contents Document History... 2 Table of Contents... 2 1 Problem
LiteSpeed for SQL Server 6.5. Integration with TSM
LiteSpeed for SQL Server 6.5 Integration with TSM 2011 Quest Software, Inc. ALL RIGHTS RESERVED. This guide contains proprietary information protected by copyright. The software described in this guide
CT PET-2018 Part - B Phd COMPUTER APPLICATION Sample Question Paper
CT PET-2018 Part - B Phd COMPUTER APPLICATION Sample Question Paper Note: All Questions are compulsory. Each question carry one mark. 1. Error detection at the data link layer is achieved by? [A] Bit stuffing
Microsoft System Center Data
U ft i V F_R S! TA TSBIB L! OTHEK MAMMOVER J Microsoft System Center Data Protection Manager 2012 SP1 Learn how to deploy, monitor, and administer System Center Data Protection Manager 2012 SP1 Steve Buchanan
SteelHead SaaS User s Guide
SteelHead SaaS User s Guide RiOS Version 9.6 March 2017 2017 Riverbed Technology, Inc. All rights reserved. Riverbed and any Riverbed product or service name or logo used herein are trademarks of Riverbed.
ONSIGHT FIREWALL CONFIGURATION GUIDE
ONSIGHT FIREWALL CONFIGURATION GUIDE Librestream Onsight Firewall Configuration Guide Doc #: 400295-03, rev A January 2019 Information in this document is subject to change without notice. Reproduction