DOCSLIB.ORG

Automated Malware Analysis Report for X4xy5j1gwc.Exe

Total Page：16

File Type：pdf, Size：1020Kb

Download full-text PDF Read full-text
Automated Malware Analysis Report for X4xy5j1gwc.Exe ID: 453837 Sample Name: X4xY5J1GWc.exe Cookbook: default.jbs Time: 08:27:20 Date: 25/07/2021 Version: 33.0.0 White Diamond Table of Contents Table of Contents 2 Windows Analysis Report X4xY5J1GWc.exe 4 Overview 4 General Information 4 Detection 4 Signatures 4 Classification 4 Process Tree 4 Malware Configuration 4 Threatname: DanaBot 4 Yara Overview 4 Dropped Files 4 Sigma Overview 5 System Summary: 5 Jbx Signature Overview 5 AV Detection: 5 Compliance: 5 Networking: 5 E-Banking Fraud: 5 Spam, unwanted Advertisements and Ransom Demands: 5 System Summary: 5 Data Obfuscation: 5 Malware Analysis System Evasion: 5 HIPS / PFW / Operating System Protection Evasion: 6 Stealing of Sensitive Information: 6 Remote Access Functionality: 6 Mitre Att&ck Matrix 6 Behavior Graph 6 Screenshots 7 Thumbnails 7 Antivirus, Machine Learning and Genetic Malware Detection 8 Initial Sample 8 Dropped Files 8 Unpacked PE Files 8 Domains 8 URLs 8 Domains and IPs 9 Contacted Domains 9 Contacted URLs 9 URLs from Memory and Binaries 9 Contacted IPs 9 Public 9 Private 9 General Information 9 Simulations 10 Behavior and APIs 10 Joe Sandbox View / Context 10 IPs 10 Domains 10 ASN 10 JA3 Fingerprints 11 Dropped Files 11 Created / dropped Files 11 Static File Info 14 General 14 File Icon 14 Static PE Info 14 General 14 Entrypoint Preview 14 Data Directories 14 Sections 15 Resources 15 Imports 15 Version Infos 15 Possible Origin 15 Network Behavior 15 Network Port Distribution 15 TCP Packets 15 UDP Packets 15 DNS Queries 15 DNS Answers 15 Code Manipulations 15 Statistics 15 Behavior 16 Copyright Joe Security LLC 2021 Page 2 of 19 System Behavior 16 Analysis Process: X4xY5J1GWc.exe PID: 6644 Parent PID: 5920 16 General 16 File Activities 16 File Created 16 File Written 16 Analysis Process: rundll32.exe PID: 6712 Parent PID: 6644 16 General 16 File Activities 16 Analysis Process: rundll32.exe PID: 7140 Parent PID: 6712 16 General 17 File Activities 17 File Created 17 File Written 17 File Read 17 Registry Activities 17 Key Value Created 17 Key Value Modified 17 Analysis Process: powershell.exe PID: 6764 Parent PID: 7140 17 General 17 File Activities 17 File Created 17 File Deleted 17 File Written 17 File Read 17 Analysis Process: conhost.exe PID: 6568 Parent PID: 6764 17 General 18 Analysis Process: powershell.exe PID: 5484 Parent PID: 7140 18 General 18 File Activities 18 File Created 18 File Read 18 Analysis Process: conhost.exe PID: 5548 Parent PID: 5484 18 General 18 Disassembly 18 Code Analysis 19 Copyright Joe Security LLC 2021 Page 3 of 19 Windows Analysis Report X4xY5J1GWc.exe Overview General Information Detection Signatures Classification Sample X4xY5J1GWc.exe Name: DDeettteeccttteedd uunnppaacckkiiinngg (((cchhaannggeess PPEE ssee… Analysis ID: 453837 DDeettteeccttteedd uunnppaacckkiiinngg (((ocovhveaerrnrwwgrreriiittstee sPs Eiiittts ss oeo… MD5: ab4cf6181cfb102… FDFooeuutenncddt e mda aulllwwnapararreec kccionongnff fii(iggouuvrrreaartttwiiioornnites its o SHA1: Ransomware ac756cbff2887e8… Found malware configuration MFouuullltttniii dAA VmV SaSlcwcaaannrnene ecrrr o ddneeftittgeeucctrttiiaiootnino ffnfoorrr ddrrroopppp… Miner Spreading SHA256: f7c566ca7413a12… Muullltttiii AAVV SSccaannnneerrr ddeettteecctttiiioonn fffoorrr sdsuruobbpmp mmaallliiiccciiioouusss Muullltttiii AAVV SSccaannnneerrr ddeettteecctttiiioonn fffoorrr ssuubbm… malicious Tags: DanaBot exe Evader Phishing sssuusssppiiiccciiioouusss SMSyyusslttteie AmV pp Srrroocccaeenssnsse crc oodnnennteeccttttisos ntttoo f onnree stttwwuobormrr… suspicious cccllleeaann Infos: clean YSYayarsrraate ddmee tttpeerccottteceedds DDs aacnnoaanBBnoeottct stssttte etaoal llenerrer dtdwllllllor Exploiter Banker BYByayprpaa ssdsseeetses c PPteoodww eDerrraSSnhhaeeBllllllo eet xxseeteccuautltteiiioorn nd plploolll… Most interesting Screenshot: Spyware Trojan / Bot DanaBot CBC2y2p UUaRsRsLLesss // / P IIIPPosws feffooruSunnhdde liilin ne mxeaaclllwuwtaaiorrrene cpcoonln… Adware Score: 100 ECEn2na aUbblRlleeLss s aa / ppIPrrroosxx yfyo fuffoonrrr d ttth hinee miiinntatteelwrrrnnaeerttet e ecxxoppnlll… Range: 0 - 100 MEnaaaccbhhliiiennsee aLL eepaarorrrnnxiiyinn gfgo drd eethttteecc itttniiiootennr fnffooerrrt sseaaxmplpp… Whitelisted: false QMuauecerrhriiieiensse s sLeeennassriiitnttiiivivneeg n ndeeetttwtweoocrrtrkiko anad dfaoaprp ttsteearrr m iiinnp… Confidence: 100% SQSeeutttessr aiae spp rrrsooexxnyys ffifotoirvrr ettthh neee iiitnnwttteoerrrnkne eattt d eeaxxppptlleloorrrr eeinrrr SSiieiggtms aa dpdereotttexecyctt tefeoddr:: : t ShSueus sipnpitiiceciirioonuuesst SeSxccprrriilipopttrt eEEr… Process Tree TSTrririgiieemss a ttto od hehataerrrvcveteessdttt : a aSnnudds ssptttieecaiaolll u bbsrrro oSwwcssreieprrrt iiiEnn… CTCrooiennstttaa tiiionn ssh faffuurnvncecttstiiioto nananalldliiittt yys tttteooa ddl ybynnroaawmsiiicecaar llllillyny… System is w10x64 CCoonntttaaiiinnss fffuunncctttiiioonnaallliiitttyy tttoo qdquyuenerarryym CCicPPaUUlly … X4xY5J1GWc.exe (PID: 6644 cmdline: 'C:\Users\user\Desktop\X4xY5J1GWc.exe' MD5: AB4CF6181CFB102EC86C66D56AF2D229) CCoonntttaaiiinnss fffuunncctttiiioonnaallliiitttyy tttoo qquueerrryy llCloocPcaaUllle e… rundll32.exe (PID: 6712 cmdline: C:\Windows\system32\rundll32.exe C:\Users\user\Desktop\X4XY5J~1.TMP,S C:\Users\user\Desktop\X4XY5J~1.EXE MD5: D7CA562B0DB4F4DD0F03A89A1FDAD63D) CCoonntttaaiiinnss fffuunncctttiiioonnaallliiitttyy tttoo rrqreeuaaeddr y ttth hloeec PPaElEeBB rundll32.exe (PID: 7140 cmdline: C:\Windows\system32\RUNDLL32.EXE C:\Users\user\Desktop\X4XY5J~1.TMP,Z0sc MD5: D7CA562B0DB4F4DD0F03A89A1FDAD63D) powershell.exe (PID: 6764 cmdline: 'C:\Windows\System32\WindowsPowerShCCeoollnn\vttta1aii.inn0ss\p llflouonwngcge t rsisolllehneeaepllpli.stsey x( ((t>>eo='= r - e3E3a xmde iicintnhu)))eti oPnEpBolicy bypass -File 'C:\Users\user\AppData\Local\T emp\tmpD845.tmp.ps1' MD5: DBA3E6449E97D4E3DF64527EF7012A10) CCrroreenaattatteeinss s aa l oppnrrrogoc cseelsesses piiinns ss(u>us=sp p3ee nmnddiened)d moo… conhost.exe (PID: 6568 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496) powershell.exe (PID: 5484 cmdline: 'C:\Windows\System32\WindowsPowerShDCDeerelelttt\eaevc1tcettt.ee0sd d\ap p popoowrtttoeecnrnsetttiihsiaaselll lcicln.rrrey ysxppuetttos'o p- ffEfueuxnnecdccttetiiuiodotn nimonopolicy bypass -File 'C:\Users\user\AppData\Local\T emp\tmpA617.tmp.ps1' MD5: DBA3E6449E97D4E3DF64527EF7012A10) DDrrerootpepscs t PePdEE p fffiioillleetessntial crypto function conhost.exe (PID: 5548 cmdline: C:\Windows\system32\conhost.exe 0xfffDDffrfrfoof pp-sFs o PPrEcEe ffViille1es sMD5: EA777DEEA782E8B4D7C7C33BBF8A4496) cleanup EDEnrnoaapbbslllee Pss E dd eefiblbeuusgg pprrriiivviiillleeggeess EExnxttateebnnlsesiisivv eed euubssueeg oo pfff rGiveeilttetPPgrrreoosccAAddddrrreessss (((oo… FEFoxoutuennndds aiav ehh iiiuggshhe nn ouufm GbbeeetrrPr oorofff cWAiiidnnddrooewws s /// U(Uoss… Malware Configuration FFoouunndd papo ohttteiegnnhttti iianallul smstttrrrbiiinneggr oddfee Wccrrryiynppdtttiioioownn /// aUa…s IIFIPPo auadndddr rrpeeossstse snseteieaenln s iiintnr i cncogon ndnneeecccrttytiiiopontni o wwniii ttt/hh a oo… Threatname: DanaBot IIInPnttt eearrrdnndeerttte PPsrsrroo svveiiiddeeenrrr isnsee ceeonnn iinine ccootinonnne ewccttititiiohon no… IIIsns t llelooroonkkeiiintn gPg rfffoovrrr i sdsoeoffrfttt wwseaaerrreen iiinnss ctttaaolllnllleendde ocotnnio tttnhh… { MIsa aloyy o sskllleieneegpp f (o((eerv vsaaossfiitivwveea llrlooeoo ipnpss))t) a tttolole hhdiiin noddnee rtrrh … "C2 list": [ May sleep (evasive loops) to hinder "142.11.244.124:443" PMPEEa y fffii illsleel e cceoopnn tt(taaeiiivnnasss ssiveeecc tttliioioonnpsss ww) iitittothh h nnionondn--e-ssr… ], PPEE fffiiilllee ccoonntttaaiiinnss ssttetrrracatnnioggnees rr rewessitoohuu nrrrccoeenss-s "Embedded Hash": "6AD9FE4F9E491E785665E0D144F61DAB" } QPEuue efrirrliiiee ssc ottthhneeta vvinoosllluu smtreea niiinngfffoeor rrrmeasaotttiiiouonrnc (e((nnsaam… SQSaaumerppielllees eethxxee ccvuuotttliiiuoomnn esst ttoionppfoss r wmwhhaiiitllleieo npp rrr(oonccaeem… SSaampplllee ffefiiillxleee iicissu ddtiiioiffffffnee rrrseetnonttpt ttsthh awannh ioloerrri iigpgiirinnoaacllel … Yara Overview USUsasemessp 3l3e22 bfbiiliitett P PisEE d fffiiiflllefeessrent than original UUsseess M32iiicbcrrrioto sPsooEffft tt'f''ssil e EEsnnhhaanncceedd CCrrryypptttoogg… Dropped Files UUsseess cMcooidcdereo osobobfffutu'ss ccEaantttiihiooannn tttceeeccdhh nnCiiiqrqyuupeetsos g(((… Uses code obfuscation techniques ( Source Rule Description Author Strings C:\Users\user\Desktop\X4XY5J~1.EXE.tmp JoeSecurity_DanaBot_stea Yara detected Joe Security ler_dll_1 DanaBot stealer dll Copyright Joe Security LLC 2021 Page 4 of 19 Sigma Overview System Summary: Sigma detected: Suspicious Script Execution From Temp Folder Sigma detected: Non Interactive PowerShell Jbx Signature Overview Click to jump to signature section AV Detection: Found malware configuration Multi AV Scanner detection for dropped file Multi AV Scanner detection for submitted file Yara detected DanaBot stealer dll Machine Learning detection for sample Compliance: Detected unpacking (overwrites its own PE header) Networking: C2 URLs / IPs found in malware configuration E-Banking Fraud: Yara detected DanaBot stealer dll Sets a proxy for the internet explorer Spam, unwanted Advertisements and Ransom Demands: Enables a proxy for the internet explorer Sets a proxy for the internet explorer System Summary: Data Obfuscation: Detected unpacking (changes PE section rights) Detected unpacking (overwrites its own PE header) Malware Analysis System
Load more

Recommended publications
  • Softwindows™ 95 for UNIX Administrator's Guide (Version 5 of Softwindows
    SoftWindows™ 95 for UNIX Administrator’s Guide (Version 5 of SoftWindows 95) Document Number 007-3221-006 CONTRIBUTORS Edited by Karin Borda and Douglas B. O’Morain Production by Carlos Miqueo © 1998, Silicon Graphics, Inc.— All Rights Reserved The contents of this document may not be copied or duplicated in any form, in whole or in part, without the prior written permission of Silicon Graphics, Inc. RESTRICTED RIGHTS LEGEND Use, duplication, or disclosure of the technical data contained in this document by the Government is subject to restrictions as set forth in subdivision (c) (1) (ii) of the Rights in Technical Data and Computer Software clause at DFARS 52.227-7013 and/or in similar or successor clauses in the FAR, or in the DOD or NASA FAR Supplement. Unpublished rights reserved under the Copyright Laws of the United States. Contractor/manufacturer is Silicon Graphics, Inc., 2011 N. Shoreline Blvd., Mountain View, CA 94043-1389. TurboStart and SoftNode are registered trademarks of Insignia Solutions. SoftWindows is a trademark used under license. Silicon Graphics, the Silicon Graphics logo and IRIX are registered trademarks, and Indy, O2, and IRIS InSight are trademarks of Silicon Graphics, Inc. R5000 and R10000 are registered trademarks of MIPS Technologies, Inc. Apple and Macintosh are registered trademarks of Apple Computer, Inc. DEC is a trademark of Digital Equipment Corporation. WinPost is a trademark of Eastern Mountain Software. FLEXlm is a trademark of Globetrotter Software Inc. IBM is a registered trademark and IBM PC and IBM PC/AT are trademarks of International Business Machines Corp. Intel and Pentium are registered trademarks of Intel Corporation.
    [Show full text]
  • Hard Configurator - Manual Version 4.1.1.1 (July 2019)
    Hard_Configurator - Manual Version 4.1.1.1 (July 2019) Copyright: Andrzej Pluta, @Andy Ful Developer Web Page: https://github.com/AndyFul/Hard_Configurator/ @askalan website about Hard_Configurator: https://hard-configurator.com/ Malwaretips forum thread: https://malwaretips.com/threads/hard_configurator-windows-hardening-con- figurator.66416/ Distribution This software may be freely distributed as long as no modification is made to it. Disclaimer of Warranty THIS SOFTWARE IS DISTRIBUTED "AS IS". NO WARRANTY OF ANY KIND IS EXPRESSED OR IMPLIED. YOU USE IT AT YOUR OWN RISK. THE AUTHOR WILL NOT BE LIABLE FOR DATA LOSS, DAMAGES, LOSS OF PROFITS OR ANY OTHER KIND OF LOSS WHILE USING THIS SOFTWARE. TABLE OF CONTENTS INTRODUCTION ...................................................................... 3 INSTALLATION / DEINSTALLATION ................................... 6 SOFTWARE RESTRICTION POLICIES (SRP) ..................... 8 HOW SRP CAN CONTROL FILE EXECUTION/OPENING.. 10 WHITELISTING BY HASH ................................................... 15 WHITELISTING BY PATH .................................................... 16 WHITELIST PROFILES .......................................................... 17 DESIGNATED FILE TYPES .................................................... 19 DEFAULT SECURITY LEVELS ............................................ 20 ENFORCEMENT ...................................................................... 21 BLOCKING SPONSORS ......................................................... 23 PROTECTING ‘WINDOWS’ FOLDER ................................
    [Show full text]
  • United States Patent (19) 11 Patent Number: 5,987,611 Freund (45) Date of Patent: Nov
    USOO5987611A United States Patent (19) 11 Patent Number: 5,987,611 Freund (45) Date of Patent: Nov. 16, 1999 54 SYSTEM AND METHODOLOGY FOR Postel, J., “RFC 821-Simple Mail Transfer Protocol.” MANAGING INTERNET ACCESS ON A PER Information Science Institute, University of Southern Cali APPLICATION BASIS FOR CLIENT fornia, Aug. 1982, pp. 1-68. COMPUTERS CONNECTED TO THE INTERNET (List continued on next page.) 75 Inventor: Gregor Freund, San Francisco, Calif. Primary Examiner Robert W. BeauSoliel, Jr. Assistant Examiner Stephen C. Elmore 73 Assignee: Zone Labs, Inc., San Francisco, Calif. Attorney, Agent, or Firm John A. Smart 21 Appl. No.: 08/851,777 57 ABSTRACT 22 Filed: May 6, 1997 A computing environment with methods for monitoring access to an open network, Such as a WAN or the Internet, Related U.S. Application Data is described. The System includes one or more clients, each 60 Provisional application No. 60/033,975, Dec. 31, 1996. operating applications or processes (e.g., Netscape Naviga torTM or Microsoft Internet ExplorerTM browser software) (51) Int. Cl." ...................................................... G06F 13/00 requiring Internet (or other open network) access (e.g., an 52 U.S. Cl. .............................................................. 713/201 Internet connection to one or more Web servers). Client 58 Field of Search ............................... 395/18701, 186; based monitoring and filtering of access is provided in 364/222.5, 286.4, 286.5; 711/163; 707/9, conjunction with a centralized enforcement Supervisor. The 10, 203; 713/200, 201 Supervisor maintains access rules for the client-based filter ing and verifies the existence and proper operation of the 56) References Cited client-based filter application.
    [Show full text]
  • The Sunpc 4.2 User's Guide
    SunPC™ 4.2 User’s Guide A Sun Microsystems, Inc. Business 901 San Antonio Road Palo Alto, CA 94303 USA 415 960-1300 fax 415 969-9131 Part No.: 805-2933-10 Revision A, November 1997 Copyright 1997 Sun Microsystems, Inc., 901 San Antonio Road, Palo Alto, California 94303-4900 U.S.A. All rights reserved. This product or document is protected by copyright and distributed under licenses restricting its use, copying, distribution, and decompilation. No part of this product or document may be reproduced in any form by any means without prior written authorization of Sun and its licensors, if any. Third-party software, including font technology, is copyrighted and licensed from Sun suppliers. OpenDOS is a trademark of Cadera, Inc. Parts of the product may be derived from Berkeley BSD systems, licensed from the University of California. UNIX is a registered trademark in the U.S. and other countries, exclusively licensed through X/Open Company, Ltd. Sun, Sun Microsystems, the Sun logo, AnswerBook, SunDocs, Solaris, OpenWindows, PC-NFS, PC-NFSpro, SunLink, and SunPC are trademarks, registered trademarks, or service marks of Sun Microsystems, Inc. in the U.S. and other countries. All SPARC trademarks are used under license and are trademarks or registered trademarks of SPARC International, Inc. in the U.S. and other countries. Products bearing SPARC trademarks are based upon an architecture developed by Sun Microsystems, Inc. The OPEN LOOK and Sun™ Graphical User Interface was developed by Sun Microsystems, Inc. for its users and licensees. Sun acknowledges the pioneering efforts of Xerox in researching and developing the concept of visual or graphical user interfaces for the computer industry.
    [Show full text]
  • Metadefender Core V4.17.3
    MetaDefender Core v4.17.3 © 2020 OPSWAT, Inc. All rights reserved. OPSWAT®, MetadefenderTM and the OPSWAT logo are trademarks of OPSWAT, Inc. All other trademarks, trade names, service marks, service names, and images mentioned and/or used herein belong to their respective owners. Table of Contents About This Guide 13 Key Features of MetaDefender Core 14 1. Quick Start with MetaDefender Core 15 1.1. Installation 15 Operating system invariant initial steps 15 Basic setup 16 1.1.1. Configuration wizard 16 1.2. License Activation 21 1.3. Process Files with MetaDefender Core 21 2. Installing or Upgrading MetaDefender Core 22 2.1. Recommended System Configuration 22 Microsoft Windows Deployments 22 Unix Based Deployments 24 Data Retention 26 Custom Engines 27 Browser Requirements for the Metadefender Core Management Console 27 2.2. Installing MetaDefender 27 Installation 27 Installation notes 27 2.2.1. Installing Metadefender Core using command line 28 2.2.2. Installing Metadefender Core using the Install Wizard 31 2.3. Upgrading MetaDefender Core 31 Upgrading from MetaDefender Core 3.x 31 Upgrading from MetaDefender Core 4.x 31 2.4. MetaDefender Core Licensing 32 2.4.1. Activating Metadefender Licenses 32 2.4.2. Checking Your Metadefender Core License 37 2.5. Performance and Load Estimation 38 What to know before reading the results: Some factors that affect performance 38 How test results are calculated 39 Test Reports 39 Performance Report - Multi-Scanning On Linux 39 Performance Report - Multi-Scanning On Windows 43 2.6. Special installation options 46 Use RAMDISK for the tempdirectory 46 3.
    [Show full text]
  • CI6BM Series Full-Size Slot 1 440BX All-In-One CPU Card Version 1.0D
    CI6BM Series Full-Size Slot 1 440BX All-in-one CPU Card Version 1.0D Industrial CPU Card PC-Based Computer Boards for Industrial Automation User’s Manual Copyright Notice This publication is protected by copyright and all rights are reserved. No part of it may be reproduced or transmitted by any means or in any form, without prior consent of the original manufacturer. The information in this document has been carefully checked and is believed to be accurate. However, the original manufacturer assumes no responsibility for any inaccuracies that may appear in this manual. In no event will the original manufacturer be liable for direct, indirect, special, exemplary, incidental, incidental or consequential damages resulting from any defect or omission in this manual, even if advised of possibility of such damages. The material contained herein is for informational purposes only. Acknowledgments Award is a registered trademark of Award Software International, Inc. Cyber 9520/9525 is a trademark of Trident Technologies Inc. IBM, PS/2 are trademarks of International Business Machines Corporation. Intel and Pentium are registered trademarks of Intel Corporation. Microsoft Windows is a registered trademark of Microsoft Corporation. VIA is a registered trademark of VIA Technologies Inc. All other product names or trademarks are properties of their respective owners. ii CI6BM User’s Manual Contents CI6BM Series Comparison Table Model CI6BM CI6BMX CI6BMV Processor Intel Pentium II Intel Pentium II Intel Pentium II Processor Socket Slot 1 Slot 1 Slot 1 Chipset Intel 440BX Intel 440BX Intel 440BX BIOS Award Award Award L2 cache CPU Integrated CPU Integrated CPU Integrated Max.
    [Show full text]
  • Capture-To-Go
    Capture-To-Go Capture-to-Go and TV-to-Go Video Capture / TV PC-Card Installation and User’s Guide for Windows 95 & Windows 98 Copyright @ Margi Systems, Inc. 1995-1997. All rights reserved Special Configurations NO SPECIAL CONFIGURATION IS REQUIRED FOR MOST SYSTEMS. ALL SYSTEMS MUST BE ZOOMED VIDEO (ZV) ENABLED. • For ThinkPad systems running Windows 95 (OSR2) with SystemSoft CardWorks: - Card and Socket Services will not recognize the MARGI Capture-to-Go as a Plug-and- Play PCMCIA card. Require to run "NOSYSOFT.EXE" utility (available on MARGI's web site - http://www.margi.com ). • Special Configuration on specific platform: - ThinkPad 570 - The ZV port mute must be unchecked in the Volume Control Properties. - ThinkPad 600E - Ensure latest display (Neomagic 256AV) driver is updated. - ThinkPad 770 (E, X, Z) - Currently not supported due to incompatible TRIDENT display drivers. • Platforms without ZV enabled: - ThinkPad 240. - ThinkPad 560 & 560E. - ThinkPad 760 Series. SPECIAL NOTE: Follow the directions carefully in the following pages for the difference between : (1) Windows 95-OSR2 [4.0095B or 4.00.95C] / Windows 98 [4.10.1998 or SE - 4.10.2222A] (2) Windows 95-OSR2 [ 4.00.95B or 4.00.95C ] with SystemSoft CardWorks. (3) Windows 95-OSR1 [ 4.00.95 or 4.00.95A ] with SystemSoft CardWorks. Skipping any step may result in improper operation: Hard ware a nd Softwa re Installation: Windows 95 - OSR2 / Windows 98 Windows 95 - OSR2 [ 4.00.95B or 4.00.95C ] / Windows 98 [ 4.10.1998 or Second Edition - 4.10.2222A ] : Card and socket services provider (SUPPORTS Plug-and-Play): ◊ Run PC Card Property from the Control Panel to detect new card (see Figure below).
    [Show full text]
  • ASUS V7100 Series Twinview GPU Graphics Card User's Manual
    R V7100 Series TwinView™ GPU Graphics Card USER’S MANUAL Hardware & Video Drivers AGP-V7100 / Pure / 32M AGP-V7100 / Pure / 16M AGP-V7100 / T / 32M AGP-V7100 / T / 16M AGP-V7100 / DVI / 32M AGP-V7100 / DVI / 16M AGP-V7100/ 2V1D / 32M AGP-V7100/ Deluxe Combo / 32M USER’S NOTICE No part of this manual, including the products and software described in it, may be repro- duced, transmitted, transcribed, stored in a retrieval system, or translated into any language in any form or by any means, except documentation kept by the purchaser for backup pur- poses, without the express written permission of ASUSTeK COMPUTER INC. (“ASUS”). ASUS PROVIDES THIS MANUAL “AS IS” WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE IMPLIED WARRANTIES OR CONDITIONS OF MERCHANTABILITY OR FITNESS FOR A PAR- TICULAR PURPOSE. IN NO EVENT SHALL ASUS, ITS DIRECTORS, OFFICERS, EMPLOYEES OR AGENTS BE LIABLE FOR ANY INDIRECT, SPECIAL, INCIDEN- TAL, OR CONSEQUENTIAL DAMAGES (INCLUDING DAMAGES FOR LOSS OF PROFITS, LOSS OF BUSINESS, LOSS OF USE OR DATA, INTERRUPTION OF BUSI- NESS AND THE LIKE), EVEN IF ASUS HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES ARISING FROM ANY DEFECT OR ERROR IN THIS MANUAL OR PRODUCT. Product warranty or service will not be extended if: (1) the product is repaired, modified or altered, unless such repair, modification of alteration is authorized in writing by ASUS; or (2) the serial number of the product is defaced or missing. Products and corporate names appearing in this manual may or may not be registered trade- marks or copyrights of their respective companies, and are used only for identification or explanation and to the owners’ benefit, without intent to infringe.
    [Show full text]
  • Microsoft Windows "Chicago"
    Microsoft Windows ‘‘Chicago’’ Reviewer’s Guide Beta-1 The information discussed in this guide is based on features and functionality present either in the Beta-1 release of Chicago, or planned for a future release. The discussion of Chicago herein, does not represent a commitment on the part of Microsoft for providing or shipping the features and functionality discussed in the final retail product offerings of Chicago. This document is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS OR IMPLIED, IN THIS DOCUMENT. Table of Contents INTRODUCTION ....................................................1 Welcome ..................................................................................1 Chicago Mission......................................................................1 Where We’ve Been.................................................................................................1 Where We Are Today.............................................................................................1 Where We’re Headed .............................................................................................2 How We Get There.................................................................................................3 A Quick Preview of Chicago’s Top Features ........................4 Even Easier.............................................................................................................4 Faster and More Powerful ......................................................................................5
    [Show full text]
  • Email Attachment Policy: 2 Revision: 2 Date: 1 March 2018
    Document Name : Email Attachment Policy: 2 Revision: 2 Date: 1 March 2018 Due to the dangerous nature of certain extensions, some attachments will be removed from Email to Network & Computing Consultants and to some of our clients. List of attachments that could be blocked: The List may vary from client to client File extension File type .ade Microsoft Access project extension .adp Microsoft Access project .bas Microsoft Visual Basic class module .bat Batch file .chm Compiled HTML Help file .cmd Microsoft Windows NT Command Script .com Microsoft MS-DOS program .cpl Control Panel extension .crt Security certificate .dll Dynamic Link Library .exe Program .hlp Help file .hta HTML program .inf Setup Information .ini Initialization File .ins Internet Naming Service .isp Internet Communication settings .js JScript file .jse Jscript Encoded Script file .lnk Shortcut .mda Microsoft Access add-in program .mdb Microsoft Access program .mde Microsoft Access MDE database .mdz Microsoft Access wizard program .msc Microsoft Common Console Document .msi Microsoft Windows Installer package .msp Windows Installer patch .mst Visual Test source files .ocx Object Linking and Embedding control .pcd Photo CD image or Microsoft Visual Test compiled script .pif Shortcut to MS-DOS program .reg Registration entries .scr Screen saver .sct Windows Script Component .shs Shell Scrap Object .sys System file .url Internet shortcut .vb VBScript file .vbe VBScript Encoded Script file .vbs VBScript file .vxd Virtual Device Driver .wsc Windows Script Component .wsf Windows Script file .wsh Windows Script Host Settings file .
    [Show full text]
  • Driver Manual CIF Device Driver Windows V1.Xxx
    Driver Manual CIF Device Driver Windows V1.xxx ... V3.2xx Hilscher Gesellschaft für Systemautomation mbH www.hilscher.com DOC030501DRV14EN | Revision 14 | English | 2013-02 | Released | Public Introduction 2/121 Table of Contents 1 Introduction.............................................................................................................................................4 1.1 About this Document......................................................................................................................4 1.2 List of Revisions .............................................................................................................................4 1.3 Operating Systems.........................................................................................................................5 1.4 Data Transfer .................................................................................................................................5 1.5 Terms for this Manual ....................................................................................................................5 1.6 Legal Notes ....................................................................................................................................6 1.6.1 Copyright ........................................................................................................................................... 6 1.6.2 Important Notes................................................................................................................................
    [Show full text]
  • Windriver™ USB User's Manual
    WinDriver™ USB User's Manual Version 11.2.0 Jungo Ltd. WinDriver™ USB User's Manual: Version 11.2.0 Copyright © Jungo Ltd. 2005–2013 All Rights Reserved. Information in this document is subject to change without notice. The software described in this document is furnished under a license agreement. The software may be used, copied or distributed only in accordance with that agreement. No part of this publication may be reproduced, stored in a retrieval system, or transmitted in any form or any means, electronically or mechanically, including photocopying and recording for any purpose without the written permission of Jungo Ltd. Brand and product names mentioned in this document are trademarks of their respective owners and are used here only for identification purposes. © Jungo Ltd. 2005–2013 ii Table of Contents 1. WinDriver Overview .................................................................................................................. 1 1.1. Introduction to WinDriver .............................................................................................. 1 1.2. Background ..................................................................................................................... 2 1.2.1. The Challenge ...................................................................................................... 2 1.2.2. The WinDriver Solution ...................................................................................... 2 1.3. Conclusion ......................................................................................................................
    [Show full text]