top title background image
flash

iMedPub_LTD_4.one

Status: finished
Submission Time: 2023-03-17 09:19:13 +01:00
Malicious
Trojan
Exploiter
Evader
Emotet

Comments

Tags

  • one

Details

  • Analysis ID:
    828507
  • API (Web) ID:
    1195605
  • Analysis Started:
    2023-03-17 09:22:39 +01:00
  • Analysis Finished:
    2023-03-17 09:35:29 +01:00
  • MD5:
    862cfd3b3523532ba0faad1bcc568c4d
  • SHA1:
    faa8437483dab403f6079be49758407a9d59b964
  • SHA256:
    b7f06ac0c97b87147a07ea1471097d84445faff5d13aebc195abb3fbeaa4e526
  • Technologies:

Joe Sandbox

Engine Download Report Detection Info
malicious
Score: 100
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01

Third Party Analysis Engines

malicious
Score: 10/92
malicious
Score: 14/24
malicious

IPs

IP Country Detection
45.235.8.30
Brazil
213.239.212.5
Germany
5.135.159.50
France
Click to see the 46 hidden entries
186.194.240.217
Brazil
119.59.103.152
Thailand
159.89.202.34
United States
91.121.146.47
France
160.16.142.56
Japan
201.94.166.162
Brazil
91.207.28.33
Kyrgyzstan
103.75.201.2
Thailand
103.43.75.120
Japan
188.44.20.25
Macedonia
164.90.222.65
United States
153.126.146.25
Japan
72.15.201.15
United States
187.63.160.88
Brazil
82.223.21.224
Spain
173.212.193.249
Germany
95.217.221.146
Germany
149.56.131.28
Canada
182.162.143.56
Korea Republic of
1.234.2.232
Korea Republic of
129.232.188.93
South Africa
94.23.45.86
France
183.111.227.137
Korea Republic of
103.132.242.26
India
104.168.155.143
United States
79.137.35.198
France
115.68.227.76
Korea Republic of
163.44.196.120
Singapore
206.189.28.199
United States
203.26.41.131
Australia
107.170.39.149
United States
66.228.32.31
United States
197.242.150.244
South Africa
185.4.135.165
Greece
110.232.117.186
Australia
45.176.232.124
Colombia
169.57.156.166
United States
164.68.99.3
Germany
139.59.126.41
Singapore
167.172.253.162
United States
167.172.199.165
United States
202.129.205.3
Thailand
147.139.166.154
United States
153.92.5.27
Germany
159.65.88.10
United States
172.105.226.75
United States

Domains

Name IP Detection
penshorn.org
203.26.41.131

URLs

Name Detection
https://penshorn.org/admin/Ses8712iGR8du/tM
https://182.162.143.56/mmqwctzklyfzc/sythi/gsaatcnbjyw/dslbwuw/
https://149.56.131.28:8080/mmqwctzklyfzc/sythi/gsaatcnbjyw/dslbwuw/
Click to see the 97 hidden entries
https://penshorn.org:443/admin/Ses8712iGR8du/on
https://167.172.199.165:8080//dslbwuw/s
https://penshorn.org/admin/Ses
https://206.189.28.199:8080/mmqwctzklyfzc/sythi/gsaatcnbjyw/dslbwuw/
https://206.189.28.199:8080/mmqwctzklyfzc/sythi/gsaatcnbjyw/dslbwuw/0
https://messaging.office.com/
https://213.239.212.5:443/mmqwctzklyfzc/sythi/gsaatcnbjyw/dslbwuw/
https://devnull.onenote.com
https://graph.windows.net/
https://clients.config.office.net/c2r/v1.0/InteractiveInstallation
https://167.172.199.165:8080/
https://substrate.office.com/search/api/v1/SearchHistory
https://microsoftapc-my.sharepoint.com
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
https://storage.live.com/clientlogs/uploadlocation
https://outlook.office.com/
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
https://187.63.160.88:80/g
https://entitlement.diagnostics.office.com
https://clients.config.office.net/user/v1.0/android/policies
https://66.228.32.31:7080/mmqwctzklyfzc/sythi/gsaatcnbjyw/dslbwuw/
https://outlook.office365.com/api/v1.0/me/Activities
https://o365auditrealtimeingestion.manage.office.com
https://clients.config.office.net/user/v1.0/ios
https://wus2.contentsync.
https://api.diagnosticssdf.office.com/v2/file
https://api.diagnosticssdf.office.com
https://169.57.156.166:8080/mmqwctzklyfzc/sythi/gsaatcnbjyw/dslbwuw/~
https://cortana.ai/api
http://ozmeydan.com/cekici/9/xM
https://api.powerbi.com/v1.0/myorg/datasets
https://wus2.pagecontentsync.
https://103.43.75.120/
https://store.office.de/addinstemplate
https://187.63.160.88:80/mmqwctzklyfzc/sythi/gsaatcnbjyw/dslbwuw/
https://api.diagnostics.office.com
https://prod.mds.office.com/mds/api/v1.0/clientmodeldirectory
http://softwareulike.com/cW4
https://augloop.office.com
https://167.172.199.165:8080/mmqwctzklyfzc/sythi/gsaatcnbjyw/dslbwuw/
https://onedrive.live.com/embed?
https://staging.cortana.ai
https://visio.uservoice.com/forums/368202-visio-on-devices
https://messaging.action.office.com/setcampaignaction
https://api.cortana.ai
https://www.gomespontes.com.br/logs/pd/
https://213.239.212.5/mmqwctzklyfzc/sythi/gsaatcnbjyw/dslbwuw/
https://skyapi.live.net/Activity/
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
https://164.90.222.65/mmqwctzklyfzc/sythi/gsaatcnbjyw/dslbwuw/
https://my.microsoftpersonalcontent.com
http://ozmeydan.com/cekici/9/
https://officeci.azurewebsites.net/api/
https://tasks.office.com
https://res.getmicrosoftkey.com/api/redemptionevents
https://91.207.28.33:8080/
https://206.189.28.199:8080/
https://cr.office.com
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
https://api.microsoftstream.com/api/
https://103.43.75.120/mmqwctzklyfzc/sythi/gsaatcnbjyw/dslbwuw/
https://api.aadrm.com/
https://bbvoyage.com/useragreement/ElKHvb4QIQqSrh6Hqm/
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
https://lookup.onenote.com/lookup/geolocation/v1
https://rpsticket.partnerservices.getmicrosoftkey.com
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
https://cdn.entity.
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
https://82.223.21.224:8080/
https://autodiscover-s.outlook.com/
https://consent.config.office.com/consentcheckin/v1.0/consents
https://pushchannel.1drv.ms
https://shell.suite.office.com:1443
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
https://213.239.212.5/mmqwctzklyfzc/sythi/gsaatcnbjyw/dslbwuw/u
http://weather.service.msn.com/data.aspx
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
https://ncus.contentsync.
https://d.docs.live.net
https://10.207.28.33:8080/
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
https://learningtools.onenote.com/learningtoolsapi/v2.0/Getvoices
https://167.172.199.165:8080/mmqwctzklyfzc/sythi/gsaatcnbjyw/dslbwuw/c
https://graph.windows.net
https://167.172.199.165:8080/bwuw/
https://api.addins.store.officeppe.com/addinstemplate
https://web.microsoftstream.com/video/
https://api.powerbi.com/v1.0/myorg/groups
https://www.odwebp.svc.ms
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
http://wrappixels.com/wp-admin/GdIA2oOQEiO5G/0
https://messaging.engagement.office.com/
https://182.162.143.56/mmqwctzklyfzc/sythi/gsaatcnbjyw/dslbwuw/?
https://store.office.cn/addinstemplate

Dropped files

Name File Type Hashes Detection
C:\Users\user\AppData\Local\Temp\click.wsf
ASCII text, with no line terminators
#
C:\Users\user\AppData\Local\Temp\radB1175.tmp.dll
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
#
C:\Windows\System32\RPJQOdVdSbhDZ\IMSnbfr.dll (copy)
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
#
Click to see the 314 hidden entries
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506
Microsoft Cabinet archive data, Windows 2000/XP setup, 62582 bytes, 1 file, at 0x2c +A "authroot.stl", number 1, 6 datablocks, 0x1 compression
#
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
data
#
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\825FCF33-FA95-48F7-9D0C-913B41374CD9
XML 1.0 document, ASCII text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\header
Matlab v4 mat-file (little endian) 8, numeric, rows 262223750, columns 0
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000005.bin
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000006.bin
PNG image data, 127 x 138, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000007.bin
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000008.bin
PNG image data, 749 x 126, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000009.bin
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000A.bin
PNG image data, 163 x 131, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000B.bin
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000C.bin
PNG image data, 123 x 103, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000D.bin
PNG image data, 59 x 61, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000E.bin
PNG image data, 563 x 211, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000F.bin
PNG image data, 742 x 104, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000G.bin
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000H.bin
PNG image data, 651 x 254, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000I.bin
PNG image data, 220 x 170, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000J.bin
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000K.bin
PNG image data, 167 x 131, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000M.bin
PNG image data, 230 x 68, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000N.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000O.bin
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000P.bin
PNG image data, 213 x 85, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000Q.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000R.bin
PNG image data, 171 x 50, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000S.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000T.bin
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000U.bin
PNG image data, 164 x 89, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000V.bin
PNG image data, 162 x 89, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000010.bin
PNG image data, 452 x 277, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000011.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000012.bin
PNG image data, 452 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000013.bin
PNG image data, 185 x 76, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000014.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000015.bin
PNG image data, 167 x 92, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000016.bin
PNG image data, 221 x 77, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000017.bin
PNG image data, 232 x 50, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000018.bin
PNG image data, 340 x 79, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000019.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001C.bin
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001D.bin
PNG image data, 127 x 138, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001E.bin
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001F.bin
PNG image data, 749 x 126, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001G.bin
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001H.bin
PNG image data, 163 x 131, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001I.bin
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001J.bin
PNG image data, 123 x 103, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001K.bin
PNG image data, 59 x 61, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001L.bin
PNG image data, 563 x 211, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001M.bin
PNG image data, 742 x 104, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001N.bin
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001O.bin
PNG image data, 651 x 254, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001P.bin
PNG image data, 220 x 170, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001Q.bin
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001R.bin
PNG image data, 167 x 131, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001T.bin
PNG image data, 230 x 68, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001U.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001V.bin
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000020.bin
PNG image data, 213 x 85, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000021.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000022.bin
PNG image data, 171 x 50, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000023.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000024.bin
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000025.bin
PNG image data, 164 x 89, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000026.bin
PNG image data, 162 x 89, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000027.bin
PNG image data, 452 x 277, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000028.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000029.bin
PNG image data, 452 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002A.bin
PNG image data, 185 x 76, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002B.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002C.bin
PNG image data, 167 x 92, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002D.bin
PNG image data, 221 x 77, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002E.bin
PNG image data, 232 x 50, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002F.bin
PNG image data, 340 x 79, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002G.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002H.bin
PNG image data, 220 x 170, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002I.bin
PNG image data, 651 x 254, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002J.bin
PNG image data, 59 x 61, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002K.bin
PNG image data, 127 x 138, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002L.bin
PNG image data, 742 x 104, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002M.bin
PNG image data, 563 x 211, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002N.bin
PNG image data, 123 x 103, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002O.bin
PNG image data, 163 x 131, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002P.bin
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002Q.bin
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002R.bin
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002S.bin
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002T.bin
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002U.bin
PNG image data, 167 x 131, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002V.bin
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000030.bin
PNG image data, 749 x 126, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000031.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000032.bin
PNG image data, 185 x 76, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000033.bin
PNG image data, 452 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000034.bin
PNG image data, 213 x 85, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000035.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000036.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000037.bin
PNG image data, 164 x 89, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000038.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000039.bin
PNG image data, 340 x 79, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003A.bin
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003B.bin
PNG image data, 167 x 92, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003C.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003D.bin
PNG image data, 230 x 68, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003E.bin
PNG image data, 171 x 50, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003F.bin
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003G.bin
PNG image data, 221 x 77, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003H.bin
PNG image data, 452 x 277, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003I.bin
PNG image data, 232 x 50, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003J.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003K.bin
PNG image data, 162 x 89, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003Q.bin
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003R.bin
PNG image data, 123 x 103, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003S.bin
PNG image data, 563 x 211, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003T.bin
PNG image data, 742 x 104, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003U.bin
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003V.bin
PNG image data, 749 x 126, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000040.bin
PNG image data, 220 x 170, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000041.bin
PNG image data, 59 x 61, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000042.bin
PNG image data, 163 x 131, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000043.bin
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000044.bin
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000045.bin
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000046.bin
PNG image data, 127 x 138, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000047.bin
PNG image data, 651 x 254, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000048.bin
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000049.bin
PNG image data, 167 x 131, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004B.bin
PNG image data, 162 x 89, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004C.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004D.bin
PNG image data, 171 x 50, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004E.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004F.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004G.bin
PNG image data, 452 x 277, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004H.bin
PNG image data, 452 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004I.bin
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004J.bin
PNG image data, 340 x 79, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004K.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004L.bin
PNG image data, 185 x 76, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004M.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004N.bin
PNG image data, 213 x 85, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004O.bin
PNG image data, 164 x 89, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004P.bin
PNG image data, 167 x 92, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004Q.bin
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004R.bin
PNG image data, 230 x 68, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004S.bin
PNG image data, 221 x 77, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004T.bin
PNG image data, 232 x 50, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004U.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\OneNote Archive\Getting Started.one
data
#
C:\Users\user\AppData\Local\Temp\OneNote Archive\Open Notebook.onetoc2
data
#
C:\Users\user\AppData\Local\Temp\OneNote15WatsonLog.etl
data
#
C:\Users\user\AppData\Local\Temp\{002E70FD-1235-4A9E-B8A8-C6BF01538544}.bin
PNG image data, 742 x 104, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{0229BB90-BB48-44A9-B16E-296D0771A7F6}.bin
PNG image data, 220 x 170, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{02A775DA-AB80-4F59-A2CC-90196342D726}
PNG image data, 340 x 79, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{0391BA2D-AA21-4374-82F1-263FB294F358}
PNG image data, 164 x 89, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{050465E2-71AF-499C-AFE4-E01600EEE0A9}
PNG image data, 340 x 79, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{051460EC-7619-474D-AFC4-D8775D9393F0}
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{05C95929-2E26-43C1-AE7E-E5ABF4F4B376}.bin
PNG image data, 167 x 131, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{060F3829-7211-4B9C-8364-164C7EF99AB6}
PNG image data, 213 x 85, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{0A5ADFFE-3EFF-4C23-B9C4-739F4D3A9682}.bin
PNG image data, 123 x 103, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{0EA89F43-FA8C-4B0E-9E7B-C4613C34F209}.bin
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{14DB26A0-D5FB-4C03-A0E4-1BB045968C25}
PNG image data, 742 x 104, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{170A7946-740C-4DFA-A1D2-B12B79D4E219}.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{19E1DC2F-8081-42B3-A29C-507AD2871824}.bin
PNG image data, 452 x 277, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{1AC84258-A8F0-4C1A-9A9C-14967BF4EFEC}
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{1C496C8C-4854-45C3-B170-25555EB0BED1}.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{1C829327-87DF-484A-9B85-CD6B5B7ACDE1}
PNG image data, 171 x 50, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{1D316F00-2F42-47B2-BF10-E69ECF7E7790}
PNG image data, 742 x 104, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{1D4314AF-6FAE-420C-A535-194C2B0D8B32}
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{1D51B1B8-FD23-4A28-AD57-45D91B56B853}.bin
PNG image data, 563 x 211, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{207D1AB5-BC93-46C0-A9FC-2B01A0158771}
PNG image data, 232 x 50, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{218F2275-2ED5-4700-ACCF-73A2D68D3AF9}
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{2226A948-609C-4E5C-852B-762D6F4CD36E}
PNG image data, 167 x 92, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{24CD4F0C-4B32-4740-8CA6-2FAA5994DAE8}
PNG image data, 185 x 76, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{2775E8BC-F005-4111-A856-9CC23A72DEE9}.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{28D05514-0B9F-4BF8-ABCF-7E11DE7D2D90}.bin
PNG image data, 221 x 77, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{296382FD-8B1D-49BF-ADD9-25F98756DA61}.bin
PNG image data, 230 x 68, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{29E636F3-342A-4D68-A4EC-8FDF253F3CD5}.bin
PNG image data, 651 x 254, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{2AF9FF9E-A4E2-4EB0-9AD1-162C150879BF}.bin
PNG image data, 220 x 170, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{2BBA2F01-2C8E-49F2-BA8C-F3802DB10D49}.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{2BC04888-94BE-4C31-9C3F-E73129D94D16}
PNG image data, 221 x 77, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{30A6DFE2-6AF1-4B16-B161-3439CCCA09C5}
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{315543D7-E807-4DE8-9016-00D2BF1F2E17}.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{31A61181-DF5E-4A9E-94AE-F50770EB3E03}.bin
PNG image data, 230 x 68, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{3206217C-8A5A-416B-8F9B-8AEB16233E3F}
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{33BF4C9C-13F4-474A-BA78-6850C0D0E4A7}
PNG image data, 232 x 50, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{35B6CE98-A3E2-45D1-9FF9-22D9E13DA0D5}
PNG image data, 59 x 61, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{37C5A43C-27AF-437C-BB45-95CAC2A58312}.bin
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{3C128856-01B5-4DC4-BAF2-BC15EE4CD16C}
PNG image data, 123 x 103, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{3C3959DE-D01D-49ED-9E1E-87AAA9485B5E}
PNG image data, 563 x 211, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{3D560280-0E63-4626-887D-75353C85E997}
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{4073B913-19E7-437A-8813-4B51B3B1F839}
PNG image data, 171 x 50, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{43DA3B05-4C1A-4C6B-81FC-EE9F8D8EE14A}.bin
PNG image data, 162 x 89, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{45451847-B466-47FE-81C1-D3EEB6D9BA6E}
PNG image data, 749 x 126, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{465B73E1-E8E0-44AC-8DA4-95361BB61CF3}.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{465C168D-B24D-4E28-A957-BB84EDF97EC0}.bin
PNG image data, 452 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{4993431A-1A4C-4DCE-9A49-CB87BAC1E2D3}.bin
PNG image data, 167 x 92, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{4CC4DCFE-456D-4FC3-BBB3-80CF562CB4F2}
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{4E9ECF5D-F75C-44B1-A07A-3DDCE39943FE}
PNG image data, 563 x 211, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{4EF43F3F-44E4-4DCE-B92C-E6A6080CCD39}.bin
PNG image data, 563 x 211, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{551F8B94-D74A-4A39-AE9E-F7412F9FF27F}.bin
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{5532A2D2-D82D-4FDF-A653-8352FAF84B93}
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{557B22FD-F2E6-4FE5-B8A2-73855E73527A}
PNG image data, 162 x 89, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{56DF2B4E-6EC2-40B4-BDA1-CFACD1CCE0E4}.bin
PNG image data, 213 x 85, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{57B04693-C995-42E0-A4B4-D1A26EE9ED22}.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{5AFF18A6-51B6-4D35-AF5C-D80017AC0EB2}.bin
PNG image data, 452 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{5C6E1693-44B6-48FF-BCE8-86DB3DFDCF15}.bin
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{5E5843A9-20F2-4BD1-A856-20B1E5C06AE1}
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{607E7879-48C6-45DB-8126-DB89BAFC6645}.bin
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{6124E01C-FDC8-40B5-A803-835132665B63}
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{61479C0C-3F1E-4657-9D61-01A1720F7338}
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{642FAD41-621F-4E2E-80B0-951D21BD0640}
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{647C768E-D5AA-4D5D-83D7-22D6D7B1BBB5}.bin
PNG image data, 340 x 79, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{6504E7A7-AB23-4CBC-B866-08F2A90BA04E}
PNG image data, 185 x 76, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{682EAA4A-70AD-4018-8737-47E550DFD92A}
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{6AC848C9-EF12-416D-BBAC-E56119A5A62E}
PNG image data, 162 x 89, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{6AE96609-BB88-4027-8C33-41AB699CF1A5}.bin
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{6EC195F9-A06C-465E-B20A-5C778A17C8E7}
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{6F64F926-709C-4B7D-8114-DD6C0EE85596}.bin
PNG image data, 221 x 77, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{71ACEC24-AB81-4450-8B99-2BF0A6CB73B2}.bin
PNG image data, 185 x 76, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{71FE1122-3B96-477F-830F-FECA15B70F0B}.bin
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{73AAB057-67A0-4476-B5A7-F37EC212B392}.bin
PNG image data, 59 x 61, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{75A555DD-8F64-4949-B68D-E49D27A400C7}
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{7819B3DB-D90C-42BE-AFB8-D14B5535DA2C}.bin
PNG image data, 340 x 79, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{78AB79FB-6398-4CE9-9709-8E71DCECE7EB}
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{7BC6DA9C-0BD4-47AA-B7E3-DAA4C495E927}
PNG image data, 123 x 103, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{7CE875A7-9CF4-4974-B046-0B474F91192F}.bin
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{7E7AE6E9-80F4-49E7-AAC5-3F5F5CA264D2}.bin
PNG image data, 563 x 211, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{7F57E092-3219-4EB4-ACCC-CDFCBDB553A1}
PNG image data, 164 x 89, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{8355D5E9-4B0C-4A45-B53B-44AC801FA26A}.bin
PNG image data, 232 x 50, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{8457B773-2F6C-4B65-80DD-FF7E68053DA8}.bin
PNG image data, 59 x 61, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{847CD394-9D2D-437A-B0DE-77AC71F734C2}.bin
PNG image data, 167 x 131, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{85165EF1-14BB-4FB0-82DA-FF603FE9B40F}
PNG image data, 452 x 277, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{86E70C57-94FE-4C37-8D38-3DBE1DE6787D}.bin
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{87F81A21-2C50-4111-A2DB-4D3C01AAFE65}
PNG image data, 452 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{8CA81E94-4D4B-4F01-BBB8-11686ADAC038}
PNG image data, 167 x 131, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{8EC83416-0E74-4814-8128-A7ABA7AE828A}.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{9139A683-50FC-4F67-8293-F11549E1151E}.bin
PNG image data, 651 x 254, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{93852227-1E6A-4BDA-BBE4-212246292B3B}
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{94F17795-F64C-4682-9781-BC46856DE37A}
PNG image data, 59 x 61, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{9809EB93-64A1-43D4-BF76-58E384FD6A7A}
PNG image data, 163 x 131, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{982BE77D-4298-4C44-9678-C495ED15F1BE}
PNG image data, 230 x 68, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{98F9A413-3408-43C9-A871-77FE90888FE3}
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{99B375F5-E1C6-4032-AA36-01518DDBA8DA}
PNG image data, 749 x 126, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{9A4D9A0D-BDE8-43F9-8DA8-6621AC2D1CA8}.bin
PNG image data, 167 x 92, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{9B21CB47-EC30-4B35-969E-627F71D2E804}.bin
PNG image data, 167 x 131, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{9B22889E-95CA-4999-A522-4EB516891E6B}.bin
PNG image data, 163 x 131, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{9C42923B-E0A3-4E58-AB3E-4C094BB27F5D}
PNG image data, 221 x 77, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{9C4457FA-A54C-4BBB-ADC3-20E2B9F60085}
PNG image data, 651 x 254, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{9D9C9009-E55C-4584-AA72-8B37BBEC0D27}
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{9DDD7668-CBF7-43CC-B12C-2EEB6EC3D60C}.bin
PNG image data, 171 x 50, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{9EC58BB4-8E74-43C1-AED7-412F59B701B7}.bin
PNG image data, 123 x 103, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{9FCD5619-490E-414D-BC91-E69548B5658A}.bin
PNG image data, 163 x 131, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{A10A4BF6-9936-47BD-90B4-E4E765AD3366}
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{A169869F-122D-4888-A0E5-5A4CED3AA2D4}.bin
PNG image data, 651 x 254, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{A2F7E2F7-C058-4E6C-B085-4153F102EAF5}.bin
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{A4D46FB1-7445-4953-B1DD-16FFD95693BF}
PNG image data, 220 x 170, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{A88FAF0C-2EAA-45FB-A3F0-99B7B3E237C1}
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{A9CCE46D-7007-4716-933F-6273BA8C2434}.bin
PNG image data, 232 x 50, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{AAAF8635-3EC2-4455-B0CB-87DADA0F0E84}
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{AB105881-DADF-4E0F-91DA-CE56F9CD411A}
PNG image data, 452 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{AC57D711-0264-487F-9448-DAA97844A7EE}
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{AE0AD945-2071-43E1-A922-7AB861845E05}
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{AE97BECA-87EE-473D-902A-8EB8FDB87D8D}.bin
PNG image data, 749 x 126, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{B1B74F7D-571D-46E9-B43C-A8D8E36E9564}.bin
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{B1E3AE1E-9707-4E8D-8AE9-0D9DDF620800}
PNG image data, 167 x 131, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{B32853FD-C27C-4348-926E-6F2AF22A1905}.bin
PNG image data, 749 x 126, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{B3A488BD-9783-430A-856A-E687CC0F1894}
PNG image data, 127 x 138, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{B42F7425-57EC-4B95-A8D3-19E0984C2926}.bin
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{B7A995DC-97E2-4F27-B005-D2B2C96128FA}.bin
PNG image data, 59 x 61, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{B7E823F0-DF98-4234-BC84-4ACBA08FFDF6}.bin
PNG image data, 171 x 50, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{B95C72F1-DDA9-4B01-962E-388014DB3E6F}.bin
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{BA4E9CB2-0508-44DD-A393-F61FCBACA9BB}.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{BB65D474-089E-4970-8F25-07265948BD33}
PNG image data, 651 x 254, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{BE05A531-18EB-4F27-9E1F-16021CFA5962}
PNG image data, 220 x 170, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{BEE19542-CBE3-44E4-9593-B04FB737C808}.bin
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{BEF37374-114D-4FA2-B485-D2AC5D98B41A}.bin
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{C11C768D-A1DA-4AFD-9AA9-C9785119250E}.bin
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{C14617AB-5434-4415-8D9D-F06CE6BF1519}.bin
PNG image data, 213 x 85, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{C43A8CFF-A746-4A5C-90C8-BF1416EA93EC}.bin
PNG image data, 163 x 131, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{C6D17E67-3827-417F-9F82-C95B34F35674}.bin
PNG image data, 749 x 126, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{CDB44C2F-29B6-45CE-AEA7-BD727049B4DA}
PNG image data, 230 x 68, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{CFDD510F-AC77-4844-8510-26667C0F1B31}.bin
PNG image data, 742 x 104, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{D146D55A-6D61-4911-B431-7321B8CF4651}.bin
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{D670BAF0-F2C1-4EBB-85FE-E6F20831F14D}.bin
PNG image data, 127 x 138, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{D6A5E0C5-0A6E-4492-8401-79D69C6C1ABD}.bin
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{D7EB8821-E7E4-4887-84CD-0ED9260AE465}.bin
PNG image data, 123 x 103, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{DB2C2F5E-A4B5-456E-9193-4939A23D5B73}.bin
PNG image data, 164 x 89, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{DB6A26D6-A0D9-4839-A852-C32CAEF68D14}.bin
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{DBD5AF56-01B4-4851-81D0-BCA623D9F72E}.bin
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{DBE80CD6-EED4-4A4F-8C87-E54945CB772F}
PNG image data, 167 x 92, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{DD8F3A59-D4F8-42B8-8FAB-7ADCEF20F9CB}.bin
PNG image data, 220 x 170, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{DFCD3D38-FA5F-4120-806B-CDD90697A716}.bin
PNG image data, 164 x 89, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{E19D281E-C888-4121-916B-3791EA26BE5D}.bin
PNG image data, 742 x 104, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{E35A8014-0DA1-4660-BCFD-E2DC309A8078}.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{E41E8A9E-0676-468E-A9F8-D7D50313D79E}
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{E4A2F1F6-4CCF-49EC-A7AE-EB1341EFB775}
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{E4D4D793-CA9D-42C0-B9CB-70F75141D110}.bin
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{E6097FDA-FDC3-49F4-85B3-EED575EBC9CB}
PNG image data, 127 x 138, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{E8B3F311-DB79-40FC-BD0A-807AA84D2DFA}.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{E8FEFDC6-DAEF-4F26-A0AD-F8F9C5F6B959}.bin
PNG image data, 452 x 277, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{EA4816F8-773A-4C1C-B911-44B8622380D5}
PNG image data, 213 x 85, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{ECE96D75-278F-4D3E-BCAC-DF9E4619CF4D}.bin
PNG image data, 127 x 138, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{EF7D3DED-BFBC-4A3F-A761-03F824D94F67}
PNG image data, 163 x 131, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{F1D88171-A0BB-4A93-93C9-737542F67D6E}.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{F44A893A-BFE2-4720-AD24-9A09717ED95F}.bin
PNG image data, 127 x 138, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{F56F84CA-2C76-41CD-8192-8471A7E2BFF9}.bin
PNG image data, 185 x 76, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{F7B43362-9092-4F26-ACA9-1770C5F42163}.bin
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{F88731CF-EF60-4B94-9340-6A60A7BAA8ED}.bin
PNG image data, 162 x 89, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{FB231253-DC6B-4F19-8C55-1F2DDA3D2C7B}
PNG image data, 452 x 277, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Temp\{FCB30741-EDC9-4DE7-AD55-389C23C0AB15}
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\36a44befa49650d0.customDestinations-ms (copy)
data
#
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\XYAJLSH8PLEKE5H7IOSS.temp
data
#
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Send to OneNote.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Description string, Has Relative path, Has command line arguments, Archive, ctime=Tue Jun 30 15:57:16 2015, mtime=Fri Mar 17 15:24:17 2023, atime=Tue Jun 30 15:57:16 2015, l (…)
#