ID: Cookbook: browseurl.jbs Time: 15:01:22 Date: 30/11/2017 Version:
|
|
|
- May Wilson
- 5 years ago
- Views:
Transcription
1 ID: Cookbook: browseurl.jbs Time: 15:01:22 Date: 30/11/2017 Version:
2 Table of Contents Table of Contents Analysis Report Overview General Information Detection Confidence Classification Analysis Advice Signature Overview Networking: Data Obfuscation: System Summary: Anti Debugging: Hooking and other Techniques for Hiding and Protection: Language, Device and Operating System Detection: Behavior Graph Simulations Behavior and APIs Antivirus Detection Initial Sample Dropped Files Domains Yara Overview Initial Sample PCAP (Network Traffic) Dropped Files Memory Dumps Unpacked PEs Joe Sandbox View / Context IPs Domains ASN Dropped Files Screenshot Startup Created / dropped Files Contacted Domains/Contacted IPs Contacted Domains Contacted IPs Static File Info No static file info Network Behavior Network Distribution TCP Packets UDP Packets DNS Queries DNS Answers HTTP Request Dependency Graph HTTP Packets HTTPS Packets Code Manipulations Copyright Joe Security LLC 2017 Page 2 of 91
3 Statistics Behavior System Behavior Analysis Process: iexplore.exe PID: 3056 Parent PID: 548 General File Activities Registry Activities Analysis Process: iexplore.exe PID: 3112 Parent PID: 3056 General File Activities Registry Activities Analysis Process: ssvagent.exe PID: 3168 Parent PID: 3112 General Registry Activities Disassembly Code Analysis Copyright Joe Security LLC 2017 Page 3 of 91
4 Analysis Report Overview General Information Joe Sandbox Version: Analysis ID: Start time: 15:01:22 Joe Sandbox Product: CloudBasic Start date: Overall analysis duration: Hypervisor based Inspection enabled: Report type: Cookbook file name: Sample URL: 0h 4m 28s light browseurl.jbs vidstat.taboola.com/vpaid/hjk.191.js Analysis system description: Windows 7 SP1 (with Office 2010 SP2, IE 11, FF 54, Chrome 60, Acrobat Reader DC 17, Flash 26, Java ) Number of analysed new started processes analysed: 4 Number of new started drivers analysed: 0 Number of existing processes analysed: 0 Number of existing drivers analysed: 0 Number of injected processes analysed: 0 Technologies Detection: Classification: HCA enabled EGA enabled HDC enabled CLEAN clean3.win@5/71@8/7 HCA Information: Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0 EGA Information: Successful, ratio: 100% HDC Information: Successful, ratio: 100% (good quality ratio 85.2%) Quality average: 64.5% Quality standard deviation: 36.1% Cookbook Comments: Warnings: Browsing: vidstat.taboola.com/vpaid/hjk.191.js Browsing link: Show All Exclude process from analysis (whitelisted): dllhost.exe Report size getting too big, too many NtAllocateVirtualMemory calls found. Report size getting too big, too many NtDeviceIoControlFile calls found. Report size getting too big, too many NtEnumerateKey calls found. Report size getting too big, too many NtOpenKeyEx calls found. Report size getting too big, too many NtProtectVirtualMemory calls found. Report size getting too big, too many NtQueryValueKey calls found. Detection Strategy Score Range Reporting Detection Threshold Report FP / FN Copyright Joe Security LLC 2017 Page 4 of 91
5 Confidence Strategy Score Range Further Analysis Required? Threshold true Confidence Classification Ransomware Miner Spreading malicious malicious malicious Evader Phishing suspicious suspicious suspicious clean clean clean Exploiter Banker Spyware Trojan / Bot Adware Analysis Advice Sample has a GUI, but Joe Sandbox has not found any clickable buttons, likely more UI automation may extend behavior Copyright Joe Security LLC 2017 Page 5 of 91
6 Uses HTTPS for network communication, use the 'Proxy HTTPS (port 443) to read its encrypted data' cookbook for further analysis Signature Overview Networking Data Obfuscation System Summary Anti Debugging Hooking and other Techniques for Hiding and Protection Language, Device and Operating System Detection Click to jump to signature section Networking: Downloads files Downloads files from webservers via HTTP Found strings which match to known social media urls Performs DNS lookups Urls found in memory or binary data Uses HTTPS Social media urls found in memory data Data Obfuscation: Contains functionality to dynamically determine API calls Uses code obfuscation techniques (call, push, ret) System Summary: Found graphical window changes (likely an installer) Uses new MSVCR Dlls Binary contains paths to debug symbols Classification label Contains functionality to instantiate COM classes Contains functionality to load and extract PE file embedded resources Creates files inside the user directory Creates temporary files Reads ini files Reads software policies Spawns processes Uses an in-process (OLE) Automation server Searches the installation path of Mozilla Firefox Anti Debugging: Contains functionality to register its own exception handler Copyright Joe Security LLC 2017 Page 6 of 91
7 Contains functionality to check if a debugger is running (IsDebuggerPresent) Contains functionality to dynamically determine API calls Hooking and other Techniques for Hiding and Protection: Disables application error messsages (SetErrorMode) Extensive use of GetProcAddress (often used to hide API calls) Language, Device and Operating System Detection: Contains functionality to query local / system time Contains functionality to query windows version Behavior Graph Behavior Graph ID: Sample: Startdate: 30/11/2017 Architecture: WINDOWS Score: 3 Legend: Process Signature Created File DNS/IP Info Is Dropped Is Windows Process Hide Legend started Number of created Registry Values iexplore.exe Number of created Files Visual Basic iexplore.exe started Delphi Java.Net C# or VB.NET C, C++ or other language Is malicious 71 Connected ips exeeded maximum capacity for this level. 11 connected ips have been hidden , 443 CLOUDFLARENET-CloudFlareIncUS vidstat.taboola.com , 80 CLOUDFLARENET-CloudFlareIncUS clients1.google.com , 80 GOOGLE-GoogleIncUS started United States United States United States ssvagent.exe 6 Simulations Behavior and APIs No simulations Copyright Joe Security LLC 2017 Page 7 of 91
8 Antivirus Detection Initial Sample No Antivirus matches Dropped Files No Antivirus matches Domains Detection Cloud Link clients1.google.com 0% virustotal Browse 0% virustotal Browse vidstat.taboola.com 0% virustotal Browse 0% virustotal Browse Yara Overview Initial Sample No yara matches PCAP (Network Traffic) No yara matches Dropped Files No yara matches Memory Dumps No yara matches Unpacked PEs No yara matches Joe Sandbox View / Context IPs No context Domains No context ASN No context Dropped Files No context Copyright Joe Security LLC 2017 Page 8 of 91
9 Screenshot Startup System is w7 iexplore.exe (PID: 3056 cmdline: 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding CA1F703CD665867E8132D2946FB55750) iexplore.exe (PID: 3112 cmdline: 'C:\Program Files\Internet Explorer\iexplore.exe' SCODEF:3056 CREDAT: /prefetch:2 CA1F703CD665867E8132D2946FB55750) ssvagent.exe (PID: 3168 cmdline: 'C:\PROGRA~1\Java\JRE18~1.0_1\bin\ssvagent.exe' -new 0953A FD1E655B75B63B9083B7) cleanup Created / dropped Files C:\Users\HERBBL~1\AppData\Local\Temp\Cab5727.tmp Microsoft Cabinet archive data, bytes, 1 file 7D75707BCEDE1005E6791BA62D373C38 E33DF37548FC6595DBA6BF1593A12E9058F1FEC E5BE196FD70B7BF91EAF319CC125DB98105C9DA7A1B0CBCFDA A3E45C10422FF6660AD753A1E4BE45D3225C0E1584E4785BCAD10A00850FD915BE9B3F5FC8C17133AA582C6 FB10DE757DCA445D390B BADE Copyright Joe Security LLC 2017 Page 9 of 91
10 C:\Users\HERBBL~1\AppData\Local\Temp\Cab585F.tmp Microsoft Cabinet archive data, bytes, 1 file 7D75707BCEDE1005E6791BA62D373C38 E33DF37548FC6595DBA6BF1593A12E9058F1FEC E5BE196FD70B7BF91EAF319CC125DB98105C9DA7A1B0CBCFDA A3E45C10422FF6660AD753A1E4BE45D3225C0E1584E4785BCAD10A00850FD915BE9B3F5FC8C17133AA582C6 FB10DE757DCA445D390B BADE C:\Users\HERBBL~1\AppData\Local\Temp\JavaDeployReg.log ASCII text, with CRLF line terminators 1394EF24A8E1EE6804CEC A9F8 8245C300A6FFD86C1C6E45CE2791BF1F6F2B638F B5BDC6B24EEEDDC447682C D932C9EBDAE37D112E9437EE37235DA8AEA A3208A2F673978BC2FDA344EB8AE61016B B7961C5C87185DBC4DB8021F1F597D81A349D0E53696B57E964865FB 07D874844A29FE293E35F5B08403D6 C:\Users\HERBBL~1\AppData\Local\Temp\Tar5728.tmp data 2921CDB BFB2FCBF0D3F86B11F 3C556A91995A3FFC55C8FCD71D687EF4560A1AB A4580B1B1601BC E6E299FD70008CFEAF0FE3AB DE6B3 DC7B3BD3A36D8B02C9D9E475B93E3A4FF3A4D5751A762B40AA5A0C8543D18B047B19DB31F18D1FF314275E3A16E2E6B3 437E3AC825A63AE895F13B82C7273E8B C:\Users\HERBBL~1\AppData\Local\Temp\Tar5860.tmp data 2921CDB BFB2FCBF0D3F86B11F 3C556A91995A3FFC55C8FCD71D687EF4560A1AB A4580B1B1601BC E6E299FD70008CFEAF0FE3AB DE6B3 DC7B3BD3A36D8B02C9D9E475B93E3A4FF3A4D5751A762B40AA5A0C8543D18B047B19DB31F18D1FF314275E3A16E2E6B3 437E3AC825A63AE895F13B82C7273E8B C:\Users\HERBBL~1\AppData\Local\Temp\~DF0E4606F84A1F9963.TMP FoxPro FPT, blocks size 258, next free block index C0B4DADD D319F57B602ACCD 3E2F5B3BB39682EB62BB B76DE54C09F 57B7AC2D3DEBA6F2ABCAA27DC62B5FD383327D149EEE29E69837E555DBF18D93 1AB278DB9BC8C2BB662E01D462C083A9CF9ED52AB0C37125BFE6AC717BB E752DAE44A3BF94A074EE2D8B6 2130DD486E435123E A89ABCBA C:\Users\HERBBL~1\AppData\Local\Temp\~DF4FBDC3FB31EA5F18.TMP data 23670B09EF332876ACD CCCFE A6C5828AA608425C71DF662A1BD39733B5AFCB4F BCACA A2FE2C8B4FBEACAE AF96F2401F76C18151C139AD146 F075D7DC9D94F7E4DDA17F83C8B5EAB45AD056DC79ADE39FFC4731A89B6DB78D3FA9D6DE9B24C6ABD247C17B714C54 F71C92EF1BFBDF53B27C6F973A91CCC7A0 C:\Users\HERBBL~1\AppData\Local\Temp\~DFAF775D7F2BB61F4C.TMP FoxPro FPT, blocks size 258, next free block index F489EE6D5E629B493F099BA4F0C259 49F40935D9C87CC667E402FA3438B491858E5A39 810C64A3F567C28A543CEA0562E375BFE906BF209C26256EB7AEA42543A1A711 6FAE EC4163CCC60F3B0E5B7AA AF345016DB88469ECEF15A6C066D88B00246F77AB830D75DD0CDA2 4CF7F185819E75D2B1D3E61B Copyright Joe Security LLC 2017 Page 10 of 91
11 C:\Users\HERBBL~1\AppData\Local\Temp\~DFAF775D7F2BB61F4C.TMP C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\23B523C9E7746F715D33C6527C18EB9D data 9A0131B0009B6BA96BA82EE46E20B41D 5F3AB71C088BB31C9C781EBBFFF3F798C495C2E4 6D8058F99C7361D0B6F BB57C0F69326DD32E9A6D0C49A9811B5 9ED86E3F545842F83CD198CCEE3599A4A8FC DCE92C579A92852A3063B1712C49B4C07EFFE10E06FA E 3ECEB62C89D156EF860FB56E710F827 C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\6BADA8974A10C4BD62CC921D13E43B18_BEB37ABADF B E0 4 data B556CDA9CB7DD3505EFF20407FE6AFAA 9FF906CBEB2C5BFD8CC9C18DFF827536E438C A2993EDF894DAA4D7206B8DAADDD1A4BF61EF5E5E65CEB0B0212BA8D81 6AD756739D92B8490E20D4916BA6FB9C E07DDDFD948873EAFF788AC5635A7D D1EEE6CE1077CD 1ACCE3F92F01D700F8775CDB5EEDB9E C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F Microsoft Cabinet archive data, bytes, 1 file 1084F35C75317FBFBEFF D6 DCC3B FF247406F1B18D0D97D0AC0FF70 9CF311AD6888F D0F10CCE8543F3D2B69EE4417BC499BFC281AB3E 612BD67C1D211B885CF90DB2D B522B7A784444D15DF9EC17C05C47AB B97F DF6F8F68D56CD18C 2A BFFF A7708F04 C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_169DEB87D3E09CE69CAEE87347BF2F3 4 data 139E7F72FDAF6C6C1756FC5D6BBC6577 E D3E33BEDC88BFCB38D FED45 74AAD FF76512B28F9B9AB155D4BC A1685B195E3C4DB2 414FB3F4E0730D7A82DA06D70B41FCD138B010E349A46DDF6E8AB4CBF7FC865C4F98AB2D64CB1CB43AB15D3CEB26F5 E702E25A3C6DC69075D170D6CBD6E335D0 C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_5C66EC7F0589EFE9D976DB021AF3DFC D data 81364E4E7EFD9CD DED 5815C55F1D89309F9DB74DEA6E08C2D89B541E79 A81A7F9C1E0B1C CF71ED6ADD A83F6F3C37BA79B88151B51646 FD3F04B4B52D0061ED4733A11A455858E1A27F305D906252B6E1DBAE66F197B7B0DEE10BE789C8D56494C9B0815CA8332 B16DAB68B8A0A80A4192A07826FE846 C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_95281A1413BBC068CB0A11CC3D0D117 6 data 2B83435A564A16D27DBDEF856AA3FF F3EF23088F246297C2CF64EE3DF0D D2DBF90EE5E2F9BF6E2B3D18D388518DE E20DBEFB359FD87 F81131BADFD9330C1DFEEAA E9509CAE0B9E4F9EBBE1E37629F152BF65C9392EB DDB2BE96D96AF A81D8F6BE0A01D993035E2D3FE3A7F5E4 C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\ EA C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56 data Copyright Joe Security LLC 2017 Page 11 of 91
12 C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\ EA C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D D C12FD0C6110 9D26B26C72E7BE FEFC C0C5F7 078C3D323B3B64D0AA265E14329D3D1948A3FA0FDB47E29F6F4B6EAC4E2C13D9 A6C83F5C73ACB7F33086EF3CEA511FA773468AA09B21B07CC7AD886BA84E847A91179A286060A6DD5DB4C AD 5EDAA1371EFA0A7650B6E85C9108E293 C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\EDC238BFF48A31D55A97E1E B_33E8F98A524575FDD27708D6D61F97E D data 823A6A91698A0115E5BA863AD2FD615E 4F5252D6E61EEFCA5B51793CA6D6BB1D9B2C9C93 C4DE2564B9FF04686FCA8704E5A1CCCC4ABE01386C0DCD54C44F87A33777CFB8 FA0A71CB7534B95A10C3BB524FE2C64C260ED172FC65EC1F2B703970A2CD97D56D991951CD1460D71D F78F7840 C8A122BBCDA59347F09A8CFB50C9A49 C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\23B523C9E7746F715D33C6527C18EB9D data EA291CBB05CF0A3BB893A01B652A6765 B7B5CE44EBCE776EFFD3D6E55C40B09C2BDBAEA9 069C56DC2C C60915FC9FD900A4555C99D09BFB74EBC16DD977EBA61B5 89AE4BB487A7E315D AF4791B62E8BA6D258F89A03534CFCB46492BA8EA1FEE7F7BD527DC7CF61003A53D765 FC567ED1B3273C9F48023F D7D C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157 data 38EA6975AC87FC C80F2EA9 1B49EB58F15E824F82AB3D3B4681D6F35C6557DB F2DA4E2D28BFB87D4F5147F2E8B0C7C1B651F6D7E7D391B86938C C9D5B33E2932C5E476F05E6B9DE C97E005A225E361C F82702E3D2DEAAD1ADE576E25BC A0D B3D428BBAA A4ADA4B C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\6BADA8974A10C4BD62CC921D13E43B18_BEB37ABADF B E04 data DF525B26A00ECE995333F98BD89F94C2 CFC16CCAF6F46168D1DD3BC79BD5A60C6D7D4BE7 129F1ED7913A C1B740B4B2A35D676E9B013301F5D5DD1661FA2CC20A9 51A C84BD22881CBDCCFD72F202F7B3224E23C8632DE960C1C4D2918A44C AA5A6DDD20C0FF53F 3F2D46E1177BE262DC7CD5F5CA3B167 C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F data F3E806C4E3D6CFB548260E0D45BCA CCE981C3F16B2F4E32A77CBF7D70289A1F3 BA8C E9FB295B085EB4CE45BEF2E8E5F57B9A5691C7D41FED3E913A67B 880BC40D7FC389519B2EFFF375061DB9BC454E774F655D3E321510FF2CECF9FA3A832CBED70EAEEDD113E169AC9E080 D6C75CAA AFED6A8B20347A6BF C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_169DEB87D3E09CE69CAEE87347BF2F 34 data A68DAF C793C8D2469FB0A F94FB1F4BAD5E57678CFF91E C96A89A FAF1A0845F BB04D07733D98D19E9A7F2AC1D06AD6E73ECE336C916F88 2CC32C4FF79EF5ECBCED562FC715DFD0AD7E359E5DDE3C8A25E8C240D8D3C1369DA5FC979A7FAF1D6F3056ED14F801 0BC82208CEB6879C6CF0A2807D69C7282E Copyright Joe Security LLC 2017 Page 12 of 91
13 C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_169DEB87D3E09CE69CAEE87347BF2F 34 C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_5C66EC7F0589EFE9D976DB021AF3DF CD data 0B6130D0E1FC66AE024E375A632A7FB3 2A9AE9CB9323C00C4C5B5C0A E E9D440EEA6514EB439A5F8B97E01F3D19C90CF36A6E0B8821DFB81344DF6C2C5 E399E997358ADD4231B6BF7409EA1D8FBD435D DC9554D23760C623B BF270F259B5AD3BE43F A4F34486D55B5F070A47184A77 C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_95281A1413BBC068CB0A11CC3D0D11 76 data D58CF3FCAC05251C E1E97C751FF3243F924FCBA4A0335C E B2D7CDC9230BA466E242B0CC82BDC3C60E71AB3529CE9E815EB64D00EE1E3C80 10A46D2A12D54750F61D1D3FF8E0179DF9DE3657E B26E34C78CFB39CD012A6EB012518D1970C534E7AF927A7A 1CE3C54A0345EEAB82CB56B82D97DF9 C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\ EA C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D 56 data A621717A5FD94E7DCC80CC12524B38B2 F555B1E9FAFB86629D9E2C4BBBCACC4F025D0C7F 1CD3BCF3084B43D0AC AB8B4E395A009923C51F7D36D22FA6B6 AEB69B837B66FFEB784FE86634A40380D2DA78CD49A74F95B0BD BA4058E946651B7E4671F2164E0E906E22 A5B4CACCF5C1EA3B3083F2B2E6303E9 C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\EDC238BFF48A31D55A97E1E B_33E8F98A524575FDD27708D6D61F97 ED data 0D15ABC81A4C6518C50C5EF7B2B4905E 5C3CBA956DE322A322DAE990AF53E2C0B3606CA8 F6DB5982CF61ED9F95EFD59BDBAA4FF9F E0D5DC79F00B72EDD8C86707 E923CAD0E43BABC3241D7B5DBF790D329F1B937A6150D032E64EAA3A7B FE5868FACD0DD3A6FD5A711B44E110 33F580BAD92317E68B1C68EA C8 C:\Users\user\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D f-A0FF-E1416B8B2E3A}.ico PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced 5B188904E3BC E7AC4A4A 96607BA DF3A A5E83BA8683D 507C647828E8B817E23D90C7BE73B3105C32B D0647B35046A32BE BF5DBC8CBAD84CA240A2DDAD2DE73BFC434193A4F A E8C92D99AA6B0C5698C702FD155663DF 28916F74561CAE1F8C73C0D9DD1A9FF7 C:\Users\user\AppData\Local\Microsoft\Internet Explorer\IECompatData\iecompatdata.xml XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators FD0571C58C9AA61FE90C1736A05DD A3986C91D32D113B6D0CECD189E AB 0A69A5007EAACA135D20024A97B9622B0B59422A6782F DC54DE6 C EA35E692EEFE6597E4F2889FD9B6A9F5EB2AFA9B8979A705E0C3C8E8E48BCCFF5A9D21C8D90EBA9A8F0 952AE E5DBCA8B5FAE6F07164CB Copyright Joe Security LLC 2017 Page 13 of 91
14 C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{EF6D3D21-D5D6-11E7-B7AC-B2C276BF9C88}.dat Microsoft Word Document 4888AB5C7E0BA B5820E4FAA1 BA3A C5F1A7FCAAE8F23DE0EA977B2CBEC 05458E2CC52D71FB90B E8BB031057A452891EB6440DF91DEB11BF F3F15A6477C079276A73BAA EB FA233C73E5D01E3D1FE AE A138A7564ED4B0B5 0702D171ADEDB4837EDB CA C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{EF6D3D23-D5D6-11E7-B7AC-B2C276BF9C88}.dat Microsoft Word Document CF61E5A841A0E42E6F5A9DE967C3D16E 4355C1AA65DD3DDF4ACDCE68B4F56FE883E8C5C9 C8FF DDE6A3D2B81FB2538DD680F41B E79AF6E5C95C94D384B 8F852F9BEDE DCA99EE3A3DE064A227D7C81598FB97D2648B1782AACC405FE0340E17654E9C5F44815F26180F 41097E D2AB1B2A175807CD1 C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{F93A5700-D5D6-11E7-B7AC-B2C276BF9C88}.dat Microsoft Word Document 72BEF9D523A32D56FCAC160ACB81866F A05C355F1998D3BD5BD9B12B0DCCB52201B025C3 0F22DAFA4B8CCF98F2D2055DBE0BE B104DBC256E2F57A8F3ECD6380D 5EB0FAC60CEA81ED8AF18C0DB169F4C510215A3AC953E335BADE28D13694EFCDAE15F3935E87C CFE2D3D B0308C149AB41D20DE54CB8BD063E C:\Users\user\AppData\Local\Microsoft\Internet Explorer\VersionManager\verA546.tmp XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators E19AB74E16EFE96F142EB4 66B9CE117BACE5088B09B4AB506C CD 2B25A9DD5C47DA010258E1BC93D512B8E484359AF1003FE1B85390E93519C60A E01570FA713BAB17D4941A1D46605D5C0FB89635C E286F608A256F40D260B662CDAF2ED064D52CC57400DAD9B DB4FE1677D18559FBBF7B64068D2C75 C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0316J1PS\cf.challenge[1].js ASCII text, with very long lines FA838DB C2EC8CE59880BA5 BA200C05101F9CE7AC8419E7D41AA0FC22B65FF6 B7FC2FB688CF1BB7C4DE30C20B2C E2F296624CB73F7C5D223E57BD08 773E F07CAE30BCC87DE156D3944A5F6E49F98B37898E0092F6BACA51DCC6FB3D08A97CCFDC286E1483CF10C9F 042E80D547F E64857FC7D59A8 C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0316J1PS\cf.challenge[2].js ASCII text, with very long lines FA838DB C2EC8CE59880BA5 BA200C05101F9CE7AC8419E7D41AA0FC22B65FF6 B7FC2FB688CF1BB7C4DE30C20B2C E2F296624CB73F7C5D223E57BD08 773E F07CAE30BCC87DE156D3944A5F6E49F98B37898E0092F6BACA51DCC6FB3D08A97CCFDC286E1483CF10C9F 042E80D547F E64857FC7D59A8 C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0316J1PS\cf.common[1].js ASCII text, with very long lines D3B51D13668A93D11F BB C3C38CB74FC3F84D6A0031C8E6E66A85A3DC1A 393C14162B5472E48358BA027EF7FC321D7761E6F4A86EA909B58AD C4 E794A50DC2C8F36D896CACD DDC003F13A3BC4C64FD4A2FA90D6D687A093D73BEDFBA85297EFB862ABA059 AAB840E96730A14DED9BAC42A39E4F434 Copyright Joe Security LLC 2017 Page 14 of 91
15 C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0316J1PS\cf.common[1].js C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0316J1PS\fallback[1].htm HTML document, ASCII text, with very long lines, with no line terminators D9DED461737CFD19C5DFD49A07D81E34 B8DF316DF70C30FAF6979E1493BC1A43F100A29C 47F3E68D2C1813F4A8CF67B83D588B9F11223BAF1CE173A49B67CF05AD1E21D0 A D204562CDB8615A83B14F4E3ECECFBE6512BC8AF301066BBE3AF1FF8DB D6C38F18B4F E C004B967A5A20903 C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0316J1PS\logo_48[1].png PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced EF C50CD3866E2BA6B793F010D C795667DCEA21F8D B7832 1B9EFB22C AAC2B2130A475FA23684DD69E DF83145B8A A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B A8C7337F17 E7234BFE776EEE5E3588DC D9 C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0316J1PS\opensans-300i[1].eot Embedded OpenType (EOT) FC2CB1A0BBF3294CD276FDC34538D0F2 D9D203EC267FB35BE9BBE5DD8CEBD0A96395E088 B5B38B2FC120908C86F73A14A6B18E98F230A4B4E4BE0566EDC5799BE289DF0B 3DA4D62B78FD28EC270A6F7B47DE05DB3B5BD F444CD903D3CF6F75D58505D2314A0D CC0B19FC0F6B3 C795BB7950D20FEBF3ECF9C7CEFDACE3 C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0316J1PS\opensans-600[1].eot Embedded OpenType (EOT) 2010FB390506D647FFD001661BB9167F 48B9BE020A63756F1CAA4BA55DDB650BC273CF8B E4731DF81FEB1AFCFED0F3D583BD0760B550AF9D7B6E499C65AD0D771FCF4E36 289F E1A9B429A88784D1B1A506579CD10CE1DEE90A832DFC3B101BA F0C972C8D9CEB1A181CCF59C44 BD DD45F473850B8741BFD C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0316J1PS\recaptcha en[1].js ASCII text, with very long lines B8E60595D100EC293AB84F31D93A3FE5 556A1D9B0C4A7B40FE6E94BBBC89A54EDEA63EEF 3C804E3AF1C916A726ADE152128FB6CADB0E83B0DB1EC26A95D88D97DEC56561 F87F3EB375A1754D9B59FBE62D75347CDF48F D6E01E49E95E59167D9F2E8DEF722AB4435D9F84C DC A7542DC081265D968856B9BB17B8B3 C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0316J1PS\zepto.min[1].js ASCII text, with very long lines EADC41A C2D126A06135BF D5E196076E6E373506B21C5D F76DB CDB3D0C8BDAA4FF0E4808DD9F53C33F0898FD934C3DF605368B82A92C88EC F7E36CD5F D888A76F5AD CCB A757321F2025F67400CF52E4D967AC790D49BE7B FCF46B314F50C95CAD5DA25BE00 C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0TZNT9WD\cf.errors[1].css ASCII text, with very long lines, with no line terminators 3D041BD798B1C6A68C1CB4F3A1FD6B8A 9BB4FFF018FB620FBF3097B F9C79F89F1 E2DBA22A9EE028E3AA09BAA7C36E14C86EFFBA AAD01019C06E757B375 Copyright Joe Security LLC 2017 Page 15 of 91
16 C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0TZNT9WD\cf.errors[1].css FB663C660A7E7D72C7441DA19A354B0792C9B0DB CF F9469A416EF12D EFA6DC2C016E DACE2B2E1FD9F D489 C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0TZNT9WD\fallback ltr[1].css ASCII text, with very long lines, with no line terminators D55AEC37335E7048BD7DD5422B522A44 7D753E97426B50E90E5F984E0F7B3FBA7E1AF9AF DDDE FD64F175277A5F53AFC7C3A2657E81DD334693A1D6EAEB82F6A0 0FD3ED3D5D825C271717A1F867A475A8C5DBC4046DE77A042632E1D2635C95F A50E5469D34DBA41E7A4AF6445 AB65153D5DFD9F8325F83B1B992F186 C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0TZNT9WD\iecompatviewlist[1].xml XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators FD0571C58C9AA61FE90C1736A05DD A3986C91D32D113B6D0CECD189E AB 0A69A5007EAACA135D20024A97B9622B0B59422A6782F DC54DE6 C EA35E692EEFE6597E4F2889FD9B6A9F5EB2AFA9B8979A705E0C3C8E8E48BCCFF5A9D21C8D90EBA9A8F0 952AE E5DBCA8B5FAE6F07164CB C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0TZNT9WD\opensans-300[1].eot Embedded OpenType (EOT) 566E3A1D44C9CDB C686A60A6 5338B957179F1FBC9DBE0A689CAE763BC5D3DB90 A95920FF81B2BC13A269AAC4E13D17DB7303BD442E847EEE2AAD411716B A6AA411571A53941F689448B7416A9CF9952AADFF7AEEEC867006E0E16C8B809F04655C6F6B99445A98090DA6C AC12B8B07C9C C7AF356BCC C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0TZNT9WD\opensans-400[1].eot Embedded OpenType (EOT) 77FF7C7F933F217EF E6DE6DE3 9588EB4245DF8E8E546BAA50F32994B8AA7C97AA 278ECA87489AC A DCC778C16DF EA3D3BFBBC B496EDA85CB87AB D9DA B5D60B4F012DBFB0DA68E CE1B7BC261E7C1904A6E43CBFF1ACF904 DE664E184BAE16E72C9E67A1D488811D C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0TZNT9WD\opensans-400[2].eot Embedded OpenType (EOT) 77FF7C7F933F217EF E6DE6DE3 9588EB4245DF8E8E546BAA50F32994B8AA7C97AA 278ECA87489AC A DCC778C16DF EA3D3BFBBC B496EDA85CB87AB D9DA B5D60B4F012DBFB0DA68E CE1B7BC261E7C1904A6E43CBFF1ACF904 DE664E184BAE16E72C9E67A1D488811D C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0TZNT9WD\opensans-600[1].eot Embedded OpenType (EOT) 2010FB390506D647FFD001661BB9167F 48B9BE020A63756F1CAA4BA55DDB650BC273CF8B E4731DF81FEB1AFCFED0F3D583BD0760B550AF9D7B6E499C65AD0D771FCF4E36 289F E1A9B429A88784D1B1A506579CD10CE1DEE90A832DFC3B101BA F0C972C8D9CEB1A181CCF59C44 BD DD45F473850B8741BFD C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0TZNT9WD\opensans-700[1].eot Apple Partition Map, map block count , start block , block count , processor s, real driver, chain driver Copyright Joe Security LLC 2017 Page 16 of 91
17 C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0TZNT9WD\opensans-700[1].eot FC5E0B7A766EAEE928BD7123E 9CEB74636A08FC693E0BD0F4DE37C6C31F95A0A9 368B82FDF6E99815F10EFA ED3EA283C4A5ABC4E A1AC0FE 14DB6AEC9EA0E61F1A68A727755E86D0B1C3BCB1AC7475CB790A5F4CF23FFB22A97C28FDDA06B48AA8049BD9C3C3DE 68F01C974EEC9974DC7C532DB0620E50A2 C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0TZNT9WD\payload[1].jpg JPEG image data, JFIF standard 1.02 CAAC45DD44D CD7F3636F3344 B C0FF DD2D41AB35CBB2DF C6CC19CF60419A0C62FBE680D6D59BCB96DAB41B34F5BBC6FA821 EF6C3EA697099F5AB352920B19BCA53174E8166EFF9FE5EF82C3677A21DD5F74C4C0891E1047EE5608E2A75EF9BD01A1 6B349DB7D3470ECCD2CB15C40610D9C5 C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\77PTX9DT\audio_black[1].png PNG image data, 24 x 24, 8-bit gray+alpha, non-interlaced 53C42C3E294B80386A2CF780E59909F0 E01738A9813C0E AF50B7F9677B16A6 AAF477AF3AF5315E79B44555B2FB6A1A5AECF3EB638032A55EA7B2795DDE1CD EC76B59F01736A16F3B019F3E3D20A0AE725EE1E DE31175B40CABCCD801176FECB178A27FAF9FE8D2 FEDBEF2DAB556A6A1DF4F43406FDA13 C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\77PTX9DT\cf.common[1].js ASCII text, with very long lines D3B51D13668A93D11F BB C3C38CB74FC3F84D6A0031C8E6E66A85A3DC1A 393C14162B5472E48358BA027EF7FC321D7761E6F4A86EA909B58AD C4 E794A50DC2C8F36D896CACD DDC003F13A3BC4C64FD4A2FA90D6D687A093D73BEDFBA85297EFB862ABA059 AAB840E96730A14DED9BAC42A39E4F434 C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\77PTX9DT\cf.errors[1].css ASCII text, with very long lines, with no line terminators 3D041BD798B1C6A68C1CB4F3A1FD6B8A 9BB4FFF018FB620FBF3097B F9C79F89F1 E2DBA22A9EE028E3AA09BAA7C36E14C86EFFBA AAD01019C06E757B375 FB663C660A7E7D72C7441DA19A354B0792C9B0DB CF F9469A416EF12D EFA6DC2C016E DACE2B2E1FD9F D489 C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\77PTX9DT\css[1].css ASCII text D98ACD A4FA0071CCB6 FB270115C69D4EC DE8F35A545483A2FF8 50CD88A0F551ACE7C6F3B2E009372FE71EF8E2A2EA639F5EAC0578C786BD6BAF BBD3F7392FF8C19041F0D586C9606DF72F652838AF1F2456CC4438B1428F86F4443DA03EE0925DA7393EE10A206E C555CFCDE536ABFB07B01264A621A C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\77PTX9DT\error_icons[1].png PNG image data, 178 x 929, 8-bit/color RGBA, non-interlaced 6547C5FB2D63FCB74CD C B66CC521341CD3A6C8851BB112D7FF5E3C46 09B4776A08D6DF046909A3A3F54A9B58C858D55C0ABBFEADE9BBDEABC025118F 1E4D69F72B10BDAFEA2B2DB1AF DC2FF A61AA640E9E9692C7CFAC5E91A0D038C9EC5E1ABC4 B6992A752C07BA0E407A2F4BB06023DF6 Copyright Joe Security LLC 2017 Page 17 of 91
18 C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\77PTX9DT\opensans-300i[1].eot Embedded OpenType (EOT) FC2CB1A0BBF3294CD276FDC34538D0F2 D9D203EC267FB35BE9BBE5DD8CEBD0A96395E088 B5B38B2FC120908C86F73A14A6B18E98F230A4B4E4BE0566EDC5799BE289DF0B 3DA4D62B78FD28EC270A6F7B47DE05DB3B5BD F444CD903D3CF6F75D58505D2314A0D CC0B19FC0F6B3 C795BB7950D20FEBF3ECF9C7CEFDACE3 C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\77PTX9DT\opensans-400i[1].eot Embedded OpenType (EOT) B65A44E1C6C2D42DAF9F20A8C08E067B 2B85686DAA9962A7758D4BB644F277853B397B53 2D80A84811DB8FC86DDCCAA07FD4E8DF22C33B578F674D21BC4EFBEAAAB7594B 824E0D2015E238CBD2E5AE35FE AF6E995E8B197F0A25554B3EC998AF63B75A7FEDA6558DF85C748BBC9CE3C1 FE72CDAD75AE779C67CC7BB7EE38384B C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\77PTX9DT\opensans-400i[2].eot Embedded OpenType (EOT) B65A44E1C6C2D42DAF9F20A8C08E067B 2B85686DAA9962A7758D4BB644F277853B397B53 2D80A84811DB8FC86DDCCAA07FD4E8DF22C33B578F674D21BC4EFBEAAAB7594B 824E0D2015E238CBD2E5AE35FE AF6E995E8B197F0A25554B3EC998AF63B75A7FEDA6558DF85C748BBC9CE3C1 FE72CDAD75AE779C67CC7BB7EE38384B C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\77PTX9DT\urlblockindex[1].bin data FA518E3DFAE8CA3A0E495460FD60C791 E4F30E D37267C0162FD4A C C4B4E5F883F9FD5A278E61C471B3EE B6D129499AA7 D21667F3FB081D39B579178E74E9BB1B6E9A97F C165729A58F1787DC0ADADD980CD026C7A601D416665A81AC13 A69E49A6A2FE2FDD AA645C07 C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\77PTX9DT\zepto.min[1].js ASCII text, with very long lines EADC41A C2D126A06135BF D5E196076E6E373506B21C5D F76DB CDB3D0C8BDAA4FF0E4808DD9F53C33F0898FD934C3DF605368B82A92C88EC F7E36CD5F D888A76F5AD CCB A757321F2025F67400CF52E4D967AC790D49BE7B FCF46B314F50C95CAD5DA25BE00 C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DEWWYACU\2UX7WLTfW3W8TclTUvlFyQ[1].woff Web Open Font Format, flavor 65536, length 19824, version 1.1 BAFB105BAEB22D965C70FE52BA6B49D CC9BBE BE756B3146C05844B254F 1570F866BF6EAE82041E A86AD2B8B275E01908AE156914DC693A4ED 85A91773B0283E3B2400C CC1B9E8AD8EA62435D705E98702A40BEDF26CB5B0900DD8FECC79F802B8C E787D DBC73DFF22A64 C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DEWWYACU\RxZJdnzeo3R5zSexge8UUT8E0i7KZn-EPnyo3H Zu7kw[1].woff Web Open Font Format, flavor 65536, length 20012, version 1.1 DE8B7431B74642E830AF4D4F4B513EC9 F549F1FE8A0B86EF3FBDCB8D508440AFF84C385C 3BFE46BB1CA35B205306C5EC664E99E4A816F48A417B6B42E77A1F43F0BC4E7A 57D3D4DE ED954B796C13BFA34AF22A46A2FEA310DF90E AE8ADAC62BCD2ABF7D7768E6BDCBB3DFC A D07ABFA483C1025AC Copyright Joe Security LLC 2017 Page 18 of 91
19 C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DEWWYACU\RxZJdnzeo3R5zSexge8UUT8E0i7KZn-EPnyo3H Zu7kw[1].woff C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DEWWYACU\api[1].js ASCII text, with very long lines, with no line terminators 83652E34F2BEEE6A778474F F AC265741BD8EB2D433F05F5BB3BC41E54B5D93B3 D1D0174DD2D8E44DEE9406F4C5CCDF60A BE04F3097A90E11CA90 CC5F427A787995E45F598D79B4FE271F40D62970E48A5A57D5C5430C0A6EA0B832D328EB3B2515D867852DC0B068EC F6FB74D4230F AB C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DEWWYACU\browser-bar[1].png PNG image data, 960 x 53, 8-bit colormap, non-interlaced A4D9835A33A2D99DB7D08D43A70D41E5 4D50D22B3565C90600AFC4DD4D5DFD6071F9FC15 ACA6112FDE67478C404094E1424AE792A75E700193C63A85AA9215D1A173EB3A B4736F9ABB5C1C8B94C461ED1CDC3C2EFA42ED74AC89B3BF07018A33103D8AF4008B F6E64C0196F881308FF41 A6931F60229A5897D28A494EB6C1BF1 C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DEWWYACU\browser-bar[2].png PNG image data, 960 x 53, 8-bit colormap, non-interlaced A4D9835A33A2D99DB7D08D43A70D41E5 4D50D22B3565C90600AFC4DD4D5DFD6071F9FC15 ACA6112FDE67478C404094E1424AE792A75E700193C63A85AA9215D1A173EB3A B4736F9ABB5C1C8B94C461ED1CDC3C2EFA42ED74AC89B3BF07018A33103D8AF4008B F6E64C0196F881308FF41 A6931F60229A5897D28A494EB6C1BF1 C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DEWWYACU\error_icons[1].png PNG image data, 178 x 929, 8-bit/color RGBA, non-interlaced 6547C5FB2D63FCB74CD C B66CC521341CD3A6C8851BB112D7FF5E3C46 09B4776A08D6DF046909A3A3F54A9B58C858D55C0ABBFEADE9BBDEABC025118F 1E4D69F72B10BDAFEA2B2DB1AF DC2FF A61AA640E9E9692C7CFAC5E91A0D038C9EC5E1ABC4 B6992A752C07BA0E407A2F4BB06023DF6 C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DEWWYACU\favicon[1].ico PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced 5B188904E3BC E7AC4A4A 96607BA DF3A A5E83BA8683D 507C647828E8B817E23D90C7BE73B3105C32B D0647B35046A32BE BF5DBC8CBAD84CA240A2DDAD2DE73BFC434193A4F A E8C92D99AA6B0C5698C702FD155663DF 28916F74561CAE1F8C73C0D9DD1A9FF7 C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DEWWYACU\opensans-300[1].eot Embedded OpenType (EOT) 566E3A1D44C9CDB C686A60A6 5338B957179F1FBC9DBE0A689CAE763BC5D3DB90 A95920FF81B2BC13A269AAC4E13D17DB7303BD442E847EEE2AAD411716B A6AA411571A53941F689448B7416A9CF9952AADFF7AEEEC867006E0E16C8B809F04655C6F6B99445A98090DA6C AC12B8B07C9C C7AF356BCC C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DEWWYACU\opensans-700[1].eot Apple Partition Map, map block count , start block , block count , processor s, real driver, chain driver FC5E0B7A766EAEE928BD7123E Copyright Joe Security LLC 2017 Page 19 of 91
20 C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DEWWYACU\opensans-700[1].eot 9CEB74636A08FC693E0BD0F4DE37C6C31F95A0A9 368B82FDF6E99815F10EFA ED3EA283C4A5ABC4E A1AC0FE 14DB6AEC9EA0E61F1A68A727755E86D0B1C3BCB1AC7475CB790A5F4CF23FFB22A97C28FDDA06B48AA8049BD9C3C3DE 68F01C974EEC9974DC7C532DB0620E50A2 C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DEWWYACU\refresh_black[1].png PNG image data, 24 x 24, 8-bit gray+alpha, non-interlaced 08EC13234CF14FF95349ADBD2D91DA84 FE9CB0968A8E94A8B7A880F EE966B0B2 50CFDB493F5548D95CEB748592CCA444B5087A4D564CC6F08AC869343F4A15AA BC767AD302755B2DC5F376A47A8965B7F B37A343A46FE56796E88090FEC5C17910AFABE67ACBEF10C357CF1D48 51B0A5E36A0F418C E8AF448 C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\F6RJI5F2.txt ASCII text 7E0577FD1A0600F C91AAFEE 3A7E07BD5FD97B FEEC9F293F41E2AED5A 9FD048A6FC37871E7A066BCEF1245CDD7C208F4924ABD6901E0AF249E71B245D E4DD6440EC C89EA2E20FD638F5D067A7170B581D10913BA46833A9D21F815B46071DB9A0794E0D8D2CF111DFDC C6B681B944DCF62C645811AB61C0692 C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\S3TPZGWK.txt ASCII text 8F1CACB5B EBF8422EA28208C0 89EF50CC2756EEAE83295AEE859B18610CAE9C5F AC0C E4297A31F515DE6A61F2702CB9AD F5299D0731C4E7 5D0B939A4EAF2F074600C787A93D45A654284D3005AA525489FA6E610843BBDD5C70D39A BE457DA9CBBF1D029A 85C31443A710292AF6504AD1C011AD5 Contacted Domains/Contacted IPs Contacted Domains Name IP Active Malicious Antivirus Detection clients1.google.com true 0%, virustotal, Browse true 0%, virustotal, Browse vidstat.taboola.com true 0%, virustotal, Browse true 0%, virustotal, Browse true fonts.googleapis.com true fonts.gstatic.com true Contacted IPs Copyright Joe Security LLC 2017 Page 20 of 91
21 No. of IPs < 25% 25% < No. of IPs < 50% 50% < No. of IPs < 75% 75% < No. of IPs IP Country Flag ASN ASN Name Malicious United States CLOUDFLARENET- CloudFlareIncUS United States CLOUDFLARENET- CloudFlareIncUS United States GOOGLE-GoogleIncUS United States GOOGLE-GoogleIncUS United States GOOGLE-GoogleIncUS United States GOOGLE-GoogleIncUS United States GOOGLE-GoogleIncUS Static File Info No static file info Network Behavior Network Distribution Total Packets: (HTTPS) 80 (HTTP) 53 (DNS) Copyright Joe Security LLC 2017 Page 21 of 91
22 TCP Packets IP IP Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Copyright Joe Security LLC 2017 Page 22 of 91
23 IP IP Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Copyright Joe Security LLC 2017 Page 23 of 91
24 IP IP Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Nov 30, :02: Copyright Joe Security LLC 2017 Page 24 of 91
ID: Cookbook: browseurl.jbs Time: 16:09:48 Date: 05/02/2018 Version:
ID: 45097 Cookbook: browseurl.jbs Time: 16:09:48 Date: 05/02/2018 Version: 20.0.0 Table of Contents Analysis Report Overview General Information Detection Confidence Classification Analysis Advice Signature
ID: Cookbook: browseurl.jbs Time: 03:47:54 Date: 05/05/2018 Version:
ID: 58045 Cookbook: browseurl.jbs Time: 03:47:54 Date: 05/05/2018 Version: 22.0.0 Table of Contents Analysis Report Overview General Information Detection Confidence Classification Analysis Advice Signature
ID: Cookbook: browseurl.jbs Time: 23:25:27 Date: 29/08/2018 Version:
ID: 74712 Cookbook: browseurl.jbs Time: 23:25:27 Date: 29/08/2018 Version: 23.0.0 Table of Contents Table of Contents Analysis Report https://protectus.mimecast.com/s/jhjecoyjw5spr4a9skzh0f Overview General
ID: Cookbook: browseurl.jbs Time: 22:02:15 Date: 20/08/2018 Version:
ID: 73271 Cookbook: browseurl.jbs Time: 22:02:15 Date: 20/08/2018 Version: 23.0.0 Table of Contents Analysis Report Overview General Information Detection Confidence Classification Analysis Advice Signature
ID: Cookbook: browseurl.jbs Time: 17:28:58 Date: 31/08/2018 Version:
ID: 74933 Cookbook: browseurl.jbs Time: 17:28:58 Date: 31/08/2018 Version: 23.0.0 Table of Contents Table of Contents 2 Analysis Report http://community.bvp.com/links? lid=uhj1pgvvabulmrxn7vqmvw&token=k1dx7i_dls8_shdjgf97kg&url=https%3a%2f%2flinks6.mixmaxusercontent.com%
ID: Cookbook: browseurl.jbs Time: 16:29:51 Date: 17/11/2018 Version: Fire Opal
ID: 91265 Cookbook: browseurl.jbs Time: 16:29:51 Date: 17/11/2018 Version: 24.0.0 Fire Opal Table of Contents Table of Contents Analysis Report https://mulhervaidosa.info/za-labour/ Overview General Information
ID: Cookbook: browseurl.jbs Time: 01:36:57 Date: 12/11/2018 Version: Fire Opal
ID: 89635 Cookbook: browseurl.jbs Time: 01:36:57 Date: 12/11/2018 Version: 24.0.0 Fire Opal Table of Contents Table of Contents 2 Analysis Report https://click.mail.onedrive.com/? qs=4340ab88585a9d7b70ae09cba6b643e833dcc84b2567b03df56308f1adbebeeabe1befb8b40a9e95787880f2324a031c4d83
ID: Cookbook: browseurl.jbs Time: 17:13:23 Date: 27/08/2018 Version:
ID: 74314 Cookbook: browseurl.jbs Time: 17:13:23 Date: 27/08/2018 Version: 23.0.0 Table of Contents Analysis Report Overview General Information Detection Confidence Classification Analysis Advice Signature
ID: Cookbook: browseurl.jbs Time: 13:58:58 Date: 09/05/2018 Version:
ID: 58705 Cookbook: browseurl.jbs Time: 13:58:58 Date: 09/05/2018 Version: 22.0.0 Table of Contents Table of Contents Analysis Report Overview General Information Detection Confidence Classification Analysis
ID: Sample Name: OVERDUE_INVOICES qrypted.jar Cookbook: defaultwindowsfilecookbook.jbs Time: 11:58:04 Date: 14/05/2018 Version: 22.0.
ID: 59483 Sample Name: OVERDUE_INVOICES20180511.qrypted.jar Cookbook: defaultwindowsfilecookbook.jbs Time: 11:58:04 Date: 14/05/2018 Version: 22.0.0 Table of Contents Table of Contents Analysis Report
ID: Cookbook: browseurl.jbs Time: 21:43:32 Date: 28/11/2018 Version: Fire Opal
ID: 94091 Cookbook: browseurl.jbs Time: 21:43:32 Date: 28/11/2018 Version: 24.0.0 Fire Opal Table of Contents Table of Contents Analysis Report https://tvaction.info/chuyen-muc/bratislava-slovakiachristmas-market.html
ID: Sample Name: CCS Projects.pdf Cookbook: defaultwindowspdfcookbook.jbs Time: 19:48:41 Date: 14/06/2018 Version:
ID: 64084 Sample Name: CCS Projects.pdf Cookbook: defaultwindowspdfcookbook.jbs Time: 19:48:41 Date: 14/06/2018 Version: 22.0.0 Table of Contents Analysis Report Overview General Information Detection
ID: Sample Name: xnyjv5cbuw Cookbook: default.jbs Time: 07:26:31 Date: 02/07/2018 Version:
ID: 66387 Sample Name: xnyjv5cbuw Cookbook: default.jbs Time: 07:26:31 Date: 02/07/2018 Version: 23.0.0 Table of Contents Table of Contents Analysis Report Overview General Information Detection Confidence
ID: Cookbook: browseurl.jbs Time: 02:09:04 Date: 29/06/2018 Version:
ID: 66102 Cookbook: browseurl.jbs Time: 02:09:04 Date: 29/06/2018 Version: 23.0.0 Table of Contents Table of Contents Analysis Report Overview Information Detection Classification Analysis Advice Signature
PaperCut MF - General Elatec TWN Reader Tasks
PaperCut MF - General Elatec TWN Reader Tasks This document aims to support PaperCut MF customers and resellers when configuring and troubleshooting Elatec TWN readers. As of writing, this document is
MADEinUSA OPERATOR S MANUAL. RS232 Interface Rev. A
MADEinUSA OPERATOR S MANUAL RS232 Interface 92-3006 Rev. A www.iradion.com Iradion Laser, Inc. 51 Industrial Dr. N. Smithfield, RI 02896 (410) 762-5100 Table of Contents 1. Overview... 2 2. Equipment Required...
Blue Bamboo P25 Device Manager Guide
Blue Bamboo P25 Device Manager Guide Version of Device Manager: 1.1.28 Document version: 2.3 Document date: 2011-09-20 Products: P25 / P25-M / P25i / P25i-M BLUE BAMBOO Headquarters Blue Bamboo Transaction
UCP-Config Program Version: 3.28 HG A
Program Description HG 76342-A UCP-Config Program Version: 3.28 HG 76342-A English, Revision 01 Dev. by: C.M. Date: 28.01.2014 Author(s): RAD Götting KG, Celler Str. 5, D-31275 Lehrte - Röddensen (Germany),
Live Agent for Administrators
Live Agent for Administrators Salesforce, Spring 17 @salesforcedocs Last updated: April 3, 2017 Copyright 2000 2017 salesforce.com, inc. All rights reserved. Salesforce is a registered trademark of salesforce.com,
Appendix C: User manual for performing image analysis in experiment of monitoring E-coli growth. ImageJ user manual
Appendix C: User manual for performing image analysis in experiment of monitoring E-coli growth ImageJ user manual A. Recommended Browser for ImageJ Browser Version Internet Explorer 5+ Google Chrome 3
PaperCut PaperCut Payment Gateway Module - CASHNet emarket Checkout - Quick Start Guide
PaperCut PaperCut Payment Gateway Module - CASHNet emarket Checkout - Quick Start Guide This guide is designed to supplement the Payment Gateway Module documentation and provides a guide to installing,
Quick Start Instructions EMV-INspektor V2
Connecting the : The illustration below shows the connection diagram for the. Step 1: Before connecting the to the voltage supply, first establish the connection of the to the measuring clamp adapters.
"Terminal RG-1000" Customer Programming Software. User Guide. August 2016 R4.3
"Terminal RG-1000" Customer Programming Software User Guide August 2016 R4.3 Table of Contents Table of Contents Introduction 2 3 1.1 Software installation 3 1.2 Connecting the RG-1000 GATEWAYs to the
COALESCE V2 CENTRAL COALESCE CENTRAL USER GUIDE WC-COA 24/7 TECHNICAL SUPPORT AT OR VISIT BLACKBOX.COM. Display Name.
COALESCE CENTRAL USER GUIDE WC-COA COALESCE V2 CENTRAL 24/7 AT OR VISIT BLACKBOX.COM BY Import Displays Discover CSV File Manual Your Coalesce Instances Appearance and Usage Display Name Network Security
PaperCut PaperCut Payment Gateway Module Authorize.Net Quick Start Guide
PaperCut PaperCut Payment Gateway Module Authorize.Net Quick Start Guide This guide is designed to supplement the Payment Gateway Module documentation and provides a guide to installing, setting up, and
PaperCut PaperCut Payment Gateway Module - Payment Gateway Module - NuVision Quick Start Guide
PaperCut PaperCut Payment Gateway Module - Payment Gateway Module - NuVision Quick Start Guide This guide is designed to supplement the Payment Gateway Module documentation and provides a guide to installing,
Live Agent for Administrators
Live Agent for Administrators Salesforce, Summer 16 @salesforcedocs Last updated: July 28, 2016 Copyright 2000 2016 salesforce.com, inc. All rights reserved. Salesforce is a registered trademark of salesforce.com,
Scalable geospatial 3D client applications in X3D - Interactive, online and in real-time
Scalable geospatial 3D client applications in X3D - Interactive, online and in real-time Dipl.Inform.Univ Peter Schickel CEO Bitmanagement Software Vice President Web3D Consortium, Mountain View, USA OGC/Web3D
Customer Programming Software RG-1000e (CPS RG-1000e) User Guide. October 2017 R2.0
Customer Programming Software RG-1000e (CPS RG-1000e) User Guide October 2017 R2.0 Table of Contents Table of Contents Foreword 2 Revision history 3 Introduction 4 5 1.1 Software installation 5 1.2 Connecting
0FlashPix Interoperability Test Suite User s Manual
0FlashPix Interoperability Test Suite User s Manual Version 1.0 Version 1.0 1996 Eastman Kodak Company 1996 Eastman Kodak Company All rights reserved. No parts of this document may be reproduced, in whatever
Data Quality Monitoring of the CMS Pixel Detector
Data Quality Monitoring of the CMS Pixel Detector 1 * Purdue University Department of Physics, 525 Northwestern Ave, West Lafayette, IN 47906 USA E-mail: petra.merkel@cern.ch We present the CMS Pixel Data
Wireless systems. how radio works radio spectrum allocation examples. tradeoffs. non-technical issues
Wireless systems how radio works radio spectrum allocation examples cell phones 802.11 (WiFi) Bluetooth GPS RFID: prox, E-ZPass, store tags, passports,...... tradeoffs spectrum, power, range, size, weight,
Ansible Tower Quick Setup Guide
Ansible Tower Quick Setup Guide Release Ansible Tower 3.1.3 Red Hat, Inc. Feb 27, 2018 CONTENTS 1 Quick Start 2 2 Login as a Superuser 3 3 Import a License 5 4 Examine the Tower Dashboard 7 5 The Settings
Field Device Manager Express
Honeywell Process Solutions Field Device Manager Express Software Installation User's Guide EP-FDM-02430X R430 June 2012 Release 430 Honeywell Notices and Trademarks Copyright 2010 by Honeywell International
Live Agent for Administrators
Salesforce, Spring 18 @salesforcedocs Last updated: January 11, 2018 Copyright 2000 2018 salesforce.com, inc. All rights reserved. Salesforce is a registered trademark of salesforce.com, inc., as are other
LC-10 Chipless TagReader v 2.0 August 2006
LC-10 Chipless TagReader v 2.0 August 2006 The LC-10 is a portable instrument that connects to the USB port of any computer. The LC-10 operates in the frequency range of 1-50 MHz, and is designed to detect
Ansible Tower Quick Setup Guide
Ansible Tower Quick Setup Guide Release Ansible Tower 3.2.2 Red Hat, Inc. Mar 08, 2018 CONTENTS 1 Quick Start 2 2 Login as a Superuser 3 3 Import a License 5 4 Examine the Tower Dashboard 7 5 The Settings
PaperCut PaperCut Payment Gateway Module - Realex Realauth Redirect Quick Start Guide
PaperCut PaperCut Payment Gateway Module - Realex Realauth Redirect Quick Start Guide This guide is designed to supplement the Payment Gateway Module documentation and provides a guide to installing, setting
Underwater GPS User Manual
Underwater GPS Document number W-DN-17002-3 Project Classification - Rev Prepared by Checked by Approved by Short description 1 2017-08-03 T. Trøite O. Skisland T. Trøite Initial 2 2017-08-04 T. Trøite
ORCA-50 Handheld Data Terminal UHF Demo Manual V1.0
ORCA-50 UHF Demo Manual V1.0 ORCA-50 Handheld Data Terminal UHF Demo Manual V1.0 Eximia Srl. www.eximia.it - www.rfidstore.it mario.difloriano@eximia.it 1 Eximia Srl www.eximia.it - www.rfidstore.it Catelogue
VR-Plugin. for Autodesk Maya.
VR-Plugin for Autodesk Maya 1 1 1. Licensing process Licensing... 3 2 2. Quick start Quick start... 4 3 3. Rendering Rendering... 10 4 4. Optimize performance Optimize performance... 11 5 5. Troubleshooting
Validation of comprehensive energy management system based on cloud-sourced information
Research Report 2018 Deliverable D 4.4 management system based on cloud-sourced DOCUMENT INFORMATION Authors Responsible person D4.4 management system Pavel Nedoma, Zdenek Herda, Zdenek Franc /ŠKODA AUTO
DakStats Web-Sync. Operation Manual. DD Rev 4 12 December 2012
DakStats Web-Sync Operation Manual DD1670479 Rev 4 12 December 2012 201 Daktronics Drive PO Box 5128 Brookings, SD 57006-5128 Tel: 1-800-DAKTRONICS (1-800-325-8766) Fax: 605-697-4746 www.daktronics.com
Introduction to Computer Science - PLTW #9340
Introduction to Computer Science - PLTW #9340 Description Designed to be the first computer science course for students who have never programmed before, Introduction to Computer Science (ICS) is an optional
1 Overview Introduction Acronyms & abbreviations...2
Revision A, January 2018 Antenna Sharing Configuration using CommScope RET Controller Systems Table of Contents 1 Overview...2 1.1 Introduction...2 1.2 Acronyms & abbreviations...2 2 Antenna Sharing Configuration
Introductory Module Object Oriented Programming. Assignment Dr M. Spann
Introductory Module 04 41480 Object Oriented Programming Assignment 2009 Dr M. Spann 1 1. Aims and Objectives The aim of this programming exercise is to design a system enabling a simple card game, gin
6 System architecture
6 System architecture is an application for interactively controlling the animation of VRML avatars. It uses the pen interaction technique described in Chapter 3 - Interaction technique. It is used in
PaperCut PaperCut Payment Gateway Module - Heartland Quick Start Guide
PaperCut PaperCut Payment Gateway Module - Heartland Quick Start Guide This guide is designed to supplement the Payment Gateway Module documentation and provides a guide to installing, setting up and testing
SPEED STEP SKETCH. SPEED STEP IT solutions for fashion companies GmbH Raiffeisenstrasse 5f Rodgau, Germany
IT solutions for fashion companies SPEED STEP SKETCH SPEED STEP IT solutions for fashion companies GmbH Raiffeisenstrasse 5f 63110 Rodgau, Germany Phone: +49 (0) 6106 28 29 0 Fax: +49 (0) 6106 28 29 90
Denver Defenders Client: The Giving Child nonprofit Heart & Hand nonprofit
Denver Defenders Client: The Giving Child nonprofit Heart & Hand nonprofit Team Members: Corey Tokunaga-Reichert, Jack Nelson, Kevin Day, Milton Tzimourakas, Nathaniel Jacobi Introduction Client Description:
Business Getting Started Guide - Windows
Business Getting Started Guide - Windows Revision date: 6/30/2017 Notice While every effort has been taken to ensure the accuracy and usefulness of this guide, we cannot be held responsible for the occasional
User Guide / Rules (v1.6)
BLACKJACK MULTI HAND User Guide / Rules (v1.6) 1. OVERVIEW You play our Blackjack game against a dealer. The dealer has eight decks of cards, all mixed together. The purpose of Blackjack is to have a hand
Submittals Quick Reference Guide
This topic provides a reference for the Project Center Submittals activity center. Purpose The Submittals activity center in Newforma Contract Management enables you to effectively log submittals and track
Downloaded from: justpaste.it/1u2h
Downloaded from: justpaste.it/1u2h 00:59:33 T:1188 NOTICE: ----------------------------------------------------------------------- 00:59:33 T:1188 NOTICE: Starting XBMC (12.0-RC3 Git:20130120-55e1e26),
Philips Holter 2010 Plus / 1810 Series INSTALLATION AND CONFIGURATION GUIDE
Philips Holter 2010 Plus / 1810 Series INSTALLATION AND CONFIGURATION GUIDE Notices About this Edition Edition 2 March 2008 Publication number 453564061391 Edition History Edition 1 January 2008 Edition
DocuSign Connector. Setup and User Guide. 127 Church Street, New Haven, CT O: (203) E:
DocuSign Connector Setup and User Guide 127 Church Street, New Haven, CT 06510 O: (203) 789-0889 E: education@square-9.com Square 9 Softworks Inc. 127 Church Street New Haven, CT 06510 www.square-9.com
AirScope Spectrum Analyzer User s Manual
AirScope Spectrum Analyzer Manual Revision 1.0 October 2017 ESTeem Industrial Wireless Solutions Author: Date: Name: Eric P. Marske Title: Product Manager Approved by: Date: Name: Michael Eller Title:
AUTOMATION ACROSS THE ENTERPRISE
AUTOMATION ACROSS THE ENTERPRISE WHAT WILL YOU LEARN? What is Ansible Tower How Ansible Tower Works Installing Ansible Tower Key Features WHAT IS ANSIBLE TOWER? Ansible Tower is a UI and RESTful API allowing
INSTRUCTION MANUAL IP REMOTE CONTROL SOFTWARE RS-BA1
INSTRUCTION MANUAL IP REMOTE CONTROL SOFTWARE RS-BA FOREWORD Thank you for purchasing the RS-BA. The RS-BA is designed to remotely control an Icom radio through a network. This instruction manual contains
XLR PRO Radio Frequency (RF) Modem. Getting Started Guide
XLR PRO Radio Frequency (RF) Modem Getting Started Guide XLR PRO Radio Frequency (RF) Modem Getting Started Guide 90002203 Revision Date Description A September 2014 Initial release. B March 2014 Updated
Outlook Add-In Installation Guide. Version 2015
Outlook Add-In Installation Guide Version 2015 Contents Types of Installer... 3 Outlook Add-in Architecture... 3 Key Facts... 3 Upgrading Previous Versions of the Outlook Add-in... 3 Manual installation
Getting Started Guide
MaxEye Digital Audio and Video Signal Generation ISDB-T Signal Generation Toolkit Version 2.0.0 Getting Started Guide Contents 1 Introduction... 3 2 Installed File Location... 3 2.1 Soft Front Panel...
Changes made for Version 2. 0 (not released)
Changes made for Version 2. 0 (not released) 13.03.14 Version 1.0 of the terrain map is published as download. All NDBs, VORs and TACAN stations are included. The map is complemented by a PDF list of all
PORTABLE OSCILLOSCOPE WITH WIRELESS CONNECTIVITY BY KHEW FAN SIN
PORTABLE OSCILLOSCOPE WITH WIRELESS CONNECTIVITY BY KHEW FAN SIN A REPORT SUBMITTED TO Universiti Tunku Abdul Rahman in partial fulfilment of the requirements for the degree of BACHELOR OF COMPUTER ENGINEERING
It s Logical! Technical Newsletter. Logic, the basics you need to know
Technical Newsletter V O L U M E I, I S S U E 2 It s Logical! The first newsletter issue received such a great feedback that it was decided to expand the distribution to an international level. It is great
In this tutorial you will use Photo Story 3, a free software program from Microsoft, to create digital stories using text, graphics and music.
In this tutorial you will use Photo Story 3, a free software program from Microsoft, to create digital stories using text, graphics and music. What you will learn: o System Requirements and Recommendations
Product Overview. Dream Report. OCEAN DATA SYSTEMS The Art of Industrial Intelligence. User Friendly & Programming Free Reporting.
Dream Report OCEAN DATA SYSTEMS The Art of Industrial Intelligence User Friendly & Programming Free Reporting. Dream Report for DGH Modules Dream Report Product Overview Applications Compliance Performance
Stiction Compensation
University of Alberta Computer Process Control Group Stiction Compensation CPC Group, University of Alberta Table of Contents Introduction 1 System Requirements 1 Quick Start 1 Detailed Instructions 3
Version SmartPTT Enterprise. Web Client User Guide
Version 9.3.1 July 2018 Contents Contents 1 Introduction 3 2 SmartPTT Web Client Interface 4 3 Logging in and Changing User 6 4 7 4.1 Making and Receiving Voice Calls 8 4.2 Sending Messages 11 4.3 Finding
2009 Michigan Educational Technology Standards - Grades 6-8
GLCE Language 1 BASIC OPERATIONS AND CONCEPTS 1. Creativity and Innovation Students demonstrate creative thinking, construct knowledge, and develop innovative products and processes using technology. Students
Distributed Systems 2nd Homework
Distributed Systems 2nd Homework Artjom.Lind@ut.ee November 11, 2015 The deadline for submitting is the 25th of November 2015. You can work in teams of 2. Do not forget to submit the names of your team
IOT Question Bank. Unit 1. Chapter 1
IOT Question Bank Unit 1 Chapter 1 THE INTERNET OF THINGS: AN OVERVIEW 1) What are the flavours of the Internet of Things? 2) Write an equation of the Internet of Things. And explain the purpose of IOT.
Version: 2.0 Date: 5/31/ :07:00 AM
Weavefuture Coin Op Internet Café Kiosk System 2.0 Version: 2.0 Date: 5/31/2007 12:07:00 AM Table of Contents 1 WEAVEFUTURE COIN OP INTERNET CAFÉ KIOSK SYSTEM COMPOSITION... 3 2 WEAVEFUTURE COIN ACCEPTOR
OCEAN DATA SYSTEMS The Art of Industrial Intelligence. User Friendly & Programming Free Reporting. Product Overview. Dream Report
Dream Report OCEAN DATA SYSTEMS The Art of Industrial Intelligence User Friendly & Programming Free Reporting. Dream Report Product Overview Applications Compliance Performance Quality Corporate Dashboards
10 Steps To a Faster PC
10 Steps To a Faster PC A Beginners Guide to Speeding Up a Slow Computer Laura Bungarz This book is for sale at http://leanpub.com/10stepstoafasterpc This version was published on 2016-05-18 ISBN 978-0-9938533-0-2
PaperCut MF - Fuji Xerox ApeosPort V+ Embedded Manual
PaperCut MF - Fuji Xerox ApeosPort V+ Embedded Manual Contents 1 Version history... 5 2 Overview... 6 2.1 Consistency... 6 2.2 Integration... 6 2.3 Rate of development... 6 2.4 Vendor Neutral... 6 2.5
GPRS-A. Universal monitoring module. Firmware version 1.00 gprs-a_en 04/18
GPRS-A Universal monitoring module Firmware version 1.00 gprs-a_en 04/18 SATEL sp. z o.o. ul. Budowlanych 66 80-298 Gdańsk POLAND tel. +48 58 320 94 00 www.satel.eu WARNINGS The module should be installed
Advances and Perspectives in Health Information Standards
Advances and Perspectives in Health Information Standards HL7 Brazil June 14, 2018 W. Ed Hammond. Ph.D., FACMI, FAIMBE, FIMIA, FHL7, FIAHSI Director, Duke Center for Health Informatics Director, Applied
Infoblox and Ansible Integration
DEPLOYMENT GUIDE Infoblox and Ansible Integration Ansible 2.5 April 2018 2018 Infoblox Inc. All rights reserved. Ansible Deployment Guide April 2018 Page 1 of 12 Contents Overview... 3 Introduction...
BusWorks 900EN Series Modbus TCP/IP 10/100M Industrial Ethernet I/O Modules
BusWorks 900EN Series Modbus TCP/IP 10/100M Industrial Ethernet I/O Modules Six Differential Current Inputs Six Differential Voltage Inputs USER S MANUAL ACROMAG INCORPORATED Tel: (248) 295-0880 30765
Presentation Title: Polarion Customization at Vorwerk (presented by GARANTIS IT Solutions)
Presentation Title: Polarion Customization at Vorwerk (presented by GARANTIS IT Solutions) Presenter Name: Konstantin Klioutchinski Room name: Room I (Foyer 1) Presentation date: 18th October 2016 Company
USER MANUAL VOLANS PUBLIC DISPLAY FOR JOHN WAYNE AIRPORT
VOLANS PUBLIC DISPLAY FOR JOHN WAYNE AIRPORT BridgeNet International Contents 1 Welcome... 2 1.1 Accessibility... 2 1.2 Navigation... 2 1.3 Interface Discovery... 4 2 Menu Bar... 5 2.1 Show Flights...
Tech Topic Sign Data Overlay for Google Earth
Tech Topic Sign Data Overlay for Google Earth The Delaware T 2 Center s RoadVista 922 retroreflectometer stores a great deal of information for each inventoried sign. It saves the date and time the information
A Teacher s guide to the computers 4 kids minecraft education edition lessons
` A Teacher s guide to the computers 4 kids minecraft education edition lessons 2 Contents What is Minecraft Education Edition?... 3 How to install Minecraft Education Edition... 3 How to log into Minecraft
Fault analysis framework. Ana Gainaru, Franck Cappello, Bill Kramer
Fault analysis framework Ana Gainaru, Franck Cappello, Bill Kramer Third Workshop of the INRIA Illinois Joint Laboratory on Petascale Computing, Bordeaux June 22 24 2010 Contents Introduction Framework
OCEAN DATA SYSTEMS The Art of Industrial Intelligence. User Friendly & Programming Free Reporting. Product Overview. Dream Report
Dream Report Product Overview Dream Report OCEAN DATA SYSTEMS The Art of Industrial Intelligence User Friendly & Programming Free Reporting. Applications Compliance Performance Quality Corporate Dashboards
Capstone Jeopardy. Chapter 3 Ghosts in the Machine. Internet Appendix. Chapter 2 Naked in the Sunlight. Chapter 1 Digital Explosion
Capstone Jeopardy Internet Appendix Chapter 1 Digital Explosion Chapter 2 Naked in the Sunlight Chapter 3 Ghosts in the Machine Chapter 4 Needles in the Haystack 10 10 10 10 10 20 20 20 20 20 30 30 30
Scanning: pictures and text
Scanning: pictures and text 2010 If you would like this document in an alternative format please ask staff for help. On request we can provide documents with a different size and style of font on a variety
PaperCut Toshiba MDS V3 Embedded Manual
PaperCut Toshiba MDS V3 Embedded Manual Contents 1 Version history... 5 2 Overview... 6 2.1 Consistency... 6 2.2 Integration... 6 2.3 Rate of development... 6 2.4 Vendor Neutral... 6 2.5 Security... 7
N64 emulator unblocked
N64 emulator unblocked N64 emulator unblocked And what about the ads? While some retro online gaming sites will pester you with advertisements and browser popups before and during your gaming session,
WSM WIRELESS SYSTEMS MANAGER SENNHEISER WSM. Instruction manual
WSM WIRELESS SYSTEMS MANAGER SENNHEISER WSM Instruction manual Contents Contents Important information regarding this instruction manual... 3 For your safety... 3 Capabilities of the WSM... 4 System requirements...
R&S RTO-K92 emmc Compliance Test Test Procedures
R&S RTO-K92 emmc Compliance Test Test Procedures (=Q3Þ2) Test Procedures 1333.0380.02 03 This manual describes the emmc compliance test procedures with the following options: R&S RTO-K92 (1329.6958.02)/(1333.0444.02)
DEVELOPING A CLOUD-BASED ONLINE GEOSPATIAL INFORMATION SHARING AND GEOPROCESSING PLATFORM TO FACILITATE COLLABORATIVE EDUCATION AND RESEARCH
DEVELOPING A CLOUD-BASED ONLINE GEOSPATIAL INFORMATION SHARING AND GEOPROCESSING PLATFORM TO FACILITATE COLLABORATIVE EDUCATION AND RESEARCH Z. L. Yang a, *, J. Cao a, K. Hu a, Z. P. Gui b, H. Y. Wu a,
CL4790 USER GUIDE VERSION 3.0. Americas: Europe: Hong Kong:
CL4790 USER GUIDE VERSION 3.0 Americas: +1-800-492-2320 FCC Notice WARNING: This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) This device may
TRBOnet Mobile. User Guide. for Android. Version 2.0. Internet. US Office Neocom Software Jog Road, Suite 202 Delray Beach, FL 33446, USA
TRBOnet Mobile for Android User Guide Version 2.0 World HQ Neocom Software 8th Line 29, Vasilyevsky Island St. Petersburg, 199004, Russia US Office Neocom Software 15200 Jog Road, Suite 202 Delray Beach,
This guide provides information on installing, signing, and sending documents for signature with
Quick Start Guide DocuSign for Dynamics 365 CRM 5.2 Published: June 15, 2017 Overview This guide provides information on installing, signing, and sending documents for signature with DocuSign for Dynamics
IO-Link an integral part in the next industrial revolution known as Industry 4.0
IO-Link an integral part in the next industrial revolution known as Industry 4.0 IO-Link an integral part in the next industrial revolution known as Industry 4.0 The manufacturing industry is on the verge
The Snipping Tool is automatically installed in Windows 7 and Windows 8.
Introduction The Snipping Tool is a program that is part of Windows Vista, Windows 7, and Window 8. Snipping Tool allows you to take selections of your windows or desktop and save them as snips, or screen
Aimetis Outdoor Object Tracker. 2.0 User Guide
Aimetis Outdoor Object Tracker 0 User Guide Contents Contents Introduction...3 Installation... 4 Requirements... 4 Install Outdoor Object Tracker...4 Open Outdoor Object Tracker... 4 Add a license... 5...
Modular Metering System ModbusTCP Communications Manual
Modular Metering System Manual Revision 7 Published October 2016 Northern Design Metering Solutions Modular Metering System ModbusTCP 1 Description The multicube modular electricity metering system simultaneously