Files
File Path
|
Type
|
Category
|
Malicious
|
|
---|---|---|---|---|
kDRn5EwG6a.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
initial sample
|
||
C:\Users\user\AppData\Local\Comms\UnistoreDB\store.jfm.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\ConnectedDevicesPlatform\L.user\ActivitiesCache.db-shm.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\GrShaderCache\data_1.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\GrShaderCache\index.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\GraphiteDawnCache\data_1.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\GraphiteDawnCache\index.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Local State.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\ShaderCache\index.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\first_party_sets.db.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cache2\doomed\11719.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cache2\entries\BDE5E55BCB4604200C70FB908FA76903C94590D3.ETx6kDWq1
|
MPEG ADTS, AAC, v4 LC, 48 kHz, stereo
|
dropped
|
||
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cache2\entries\D0F48A0632B6C451791F4257697E861961F06A6F.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cache2\entries\DED23BB33EA3C88FAD1C0A1CD53916E0D8C424D3.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cache2\entries\E707EC8A256322E87908664A49F800B7B48E0961.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalState\ThirdPartyNotice.html.ETx6kDWq1
|
OpenPGP Public Key
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.UI.Xaml.2.0_8wekyb3d8bbwe\AC\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\MediaDb.v1.sqlite-shm.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\PhotosAppTracing_startedInBGMode.etl.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\CacheStorage\CacheStorage.jfm.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\Indexed DB\edb.log.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\Indexed DB\edb00001.log.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\Indexed DB\edbres00001.jrs.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\Indexed DB\edbres00002.jrs.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\Indexed DB\edbtmp.log.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Chrome__crx_agimnkijcamfeangaknmldooml.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Chrome__crx_fhihpiojkboajapmgkhlnakfjf.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Chrome__crx_fmgjjmmmlfcabfkddbjimcfncm.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Chrome__crx_kefjledonknomlcbpllchaibag.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Chrome__crx_mpnpojknpmnjdcgaaiekajbnjb.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\MSEdge.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_AutoGenerated_{116229A7-9A3B-2078-DB5F-B5A20811242C}.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_AutoGenerated_{16988324-21C9-05B2-CA60-9B4EC72739D8}.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_AutoGenerated_{8AA47365-B2B3-1961-69EB-F866E376B12F}.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_AutoGenerated_{8ABD94FB-E7D6-84A6-A997-C918EDDE0AE5}.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_AutoGenerated_{923DD477-5846-686B-A659-0FCCD73851A8}.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_AutoGenerated_{BB044BFD-25B7-2FAA-22A8-6371A93E0456}.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_AutoGenerated_{BD3F924E-55FB-A1BA-9DE6-B50F9F2460AC}.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_AutoGenerated_{C1C6F8AC-40A3-0F5C-146F-65A9DC70BBB4}.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_AutoGenerated_{C804BBA7-FA5F-CBF7-8B55-2096E5F972CB}.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_AutoGenerated_{DAA168DE-4306-C8BC-8C11-B596240BDDED}.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_AutoGenerated_{E7A33582-E908-3379-5368-5999454DCD83}.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_AutoGenerated_{E8B84CFB-B069-BC13-F88F-170904F645E5}.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_AutoGenerated_{F1118828-A0CC-5FEB-85C9-DBFFDF98434A}.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_InternetExplorer_Default.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_Office_DATABASECOMPARE_EXE_15.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_Office_EXCEL_EXE_15.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_Office_MSACCESS_EXE_15.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_Office_MSOUC_EXE_15.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_Office_MSPUB_EXE_15.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_Office_ONENOTE_EXE_15.ETx6kDWq1
|
DOS executable (COM)
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_Office_OUTLOOK_EXE_15.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_Office_OcPubMgr_exe_15.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_Office_POWERPNT_EXE_15.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_Office_SETLANG_EXE_15.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_Office_SPREADSHEETCOMPARE_EXE_15.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_Office_WINWORD_EXE_15.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_Office_lync_exe_15.ETx6kDWq1
|
OpenPGP Secret Key
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_Office_msoev_exe_15.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_SkyDrive_Desktop.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_WindowsAlarms_8wekyb3d8bbwe!App.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_WindowsCalculator_8wekyb3d8bbwe!App.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_WindowsSoundRecorder_8wekyb3d8bbwe!App.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_WindowsStore_8wekyb3d8bbwe!App.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_Windows_AdministrativeTools.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_Windows_Computer.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_Windows_ControlPanel.ETx6kDWq1
|
DOS executable (COM)
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_Windows_Explorer.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_Windows_MediaPlayer32.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_Windows_Photos_8wekyb3d8bbwe!App.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_Windows_RemoteDesktop.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_Windows_Shell_RunDialog.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\https___java_com_.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\https___java_com_help.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_MdSched_exe.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_RecoveryDrive_exe.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_SnippingTool_exe.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_WFS_exe.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_WF_msc.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_WindowsPowerShell_v1_0_PowerShell_ISE_exe.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_WindowsPowerShell_v1_0_powershell_exe.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_charmap_exe.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_cleanmgr_exe.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_cmd_exe.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_comexp_msc.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_dfrgui_exe.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_iscsicpl_exe.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_magnify_exe.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_msconfig_exe.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_msinfo32_exe.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_mspaint_exe.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_narrator_exe.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_notepad_exe.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_odbcad32_exe.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_osk_exe.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_printmanagement_msc.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_psr_exe.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_quickassist_exe.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_services_msc.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{6D809377-6AF0-444B-8957-A3773F02200E}_7-Zip_7-zip_chm.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{6D809377-6AF0-444B-8957-A3773F02200E}_7-Zip_7zFM_exe.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{6D809377-6AF0-444B-8957-A3773F02200E}_Adobe_Acrobat
DC_Acrobat_Acrobat_exe.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{6D809377-6AF0-444B-8957-A3773F02200E}_Common
Files_Microsoft Shared_Ink_mip_exe.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{6D809377-6AF0-444B-8957-A3773F02200E}_Windows
NT_Accessories_wordpad_exe.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}_AutoIt3_Au3Info_exe.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}_AutoIt3_Au3Info_x64_exe.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}_AutoIt3_Aut2Exe_Aut2exe_exe.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}_AutoIt3_Aut2Exe_Aut2exe_x64_exe.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}_AutoIt3_AutoIt
v3 Website_url.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}_AutoIt3_AutoIt3_exe.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}_AutoIt3_AutoIt3_x64_exe.ETx6kDWq1
|
PGP Secret Sub-key -
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}_AutoIt3_AutoItX_AutoItX_chm.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}_AutoIt3_AutoIt_chm.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}_AutoIt3_Examples.ETx6kDWq1
|
OpenPGP Public Key
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}_AutoIt3_Extras.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}_AutoIt3_SciTE_SciTE_exe.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}_Java_jre-1_8_bin_javacpl_exe.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}_WindowsPowerShell_v1_0_PowerShell_ISE_exe.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}_WindowsPowerShell_v1_0_powershell_exe.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}_odbcad32_exe.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{F38BF404-1D43-42F2-9305-67DE0B28FC23}_regedit_exe.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\Diagnostics\EXCEL\App1696417101742322600_290EFEE9-C25A-4857-9F32-D7E6D51B7C09.log.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\acrobat_sbx\acroNGLLog.txt.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Adobe\Acrobat\DC\Security\CRLCache\915DEAC5D1E15E49646B8A94E04E470958C9BB89.crl.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Adobe\Acrobat\DC\Security\ES_session_storei.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\ExperimentStoreData.json.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\SiteSecurityServiceState.txt.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\Telemetry.FailedProfileLocks.txt.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\addonStartup.json.lz4.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\bookmarkbackups\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cert9.db.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\content-prefs.sqlite.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite-shm.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\crashes\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\crashes\events\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\datareporting\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\datareporting\archived\2023-10\1696333829702.cde8135c-88c3-4c34-8670-7ef017742548.new-profile.jsonlz4.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\datareporting\archived\2023-10\1696333829737.9f7a5e7a-2be0-4ff7-b132-b1f6e59a8e58.event.jsonlz4.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\datareporting\archived\2023-10\1696333829744.7278f154-e8f4-4235-84c5-c5c1c6af0084.main.jsonlz4.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\datareporting\archived\2023-10\1696333829746.67aa4432-87f8-463e-b422-f6679add9971.first-shutdown.jsonlz4.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\datareporting\archived\2023-10\1696333834580.6fc53411-ad83-4cf6-a5f6-905f0f3f52e8.health.jsonlz4.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\datareporting\archived\2023-10\1696333834606.011115ff-9301-40fc-805e-ba07b7fdfce4.event.jsonlz4.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\datareporting\archived\2023-10\1696333834608.65054280-9d54-477d-a3ea-afcb1f88e001.health.jsonlz4.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\datareporting\archived\2023-10\1696333834620.c7889da7-33f0-4599-8452-58d47c58437b.main.jsonlz4.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\datareporting\archived\2023-10\1696333857833.45e26519-596d-41a5-b290-e547b44111fd.health.jsonlz4.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\datareporting\archived\2023-10\1696333857860.81ddb4cc-1d49-45f2-961f-e24ea6db2be5.health.jsonlz4.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\datareporting\archived\2023-10\1696333857860.a73949a2-5a70-4025-8008-88156c16bb4a.event.jsonlz4.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\datareporting\archived\2023-10\1696333857869.95af30ae-acac-4802-b983-233d7fd3cf34.main.jsonlz4.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\datareporting\archived\2023-10\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\datareporting\archived\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\datareporting\glean\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\datareporting\glean\db\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\datareporting\glean\events\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\datareporting\glean\events\background-update.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\datareporting\glean\events\events.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\datareporting\glean\pending_pings\05d02ac8-b2f1-4670-8541-db8ec2bbf427.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\datareporting\glean\pending_pings\12f997af-c065-4562-b9f6-11000bb95c9b.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\datareporting\glean\pending_pings\1435a377-bbaf-4c9c-8706-0811a779fa3f.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\datareporting\glean\pending_pings\15f01145-7764-450b-9ad5-323693350a9c.ETx6kDWq1
|
MPEG-4 LOAS
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\datareporting\glean\pending_pings\1d5599c8-3f43-42cc-8163-9a43c60a06d1.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\datareporting\glean\pending_pings\277ffbb3-8e94-4f3f-acac-7a401d130160.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\datareporting\glean\pending_pings\3a40aaf9-3f8b-43a2-85e8-88e3ffc7666f.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\datareporting\glean\pending_pings\78267ebf-1fb3-4b11-82e9-903e54a2a54e.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\datareporting\glean\pending_pings\7d12ac42-15c3-4db9-abfe-259bc8d249ac.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\datareporting\glean\pending_pings\808127e8-e7ed-4078-b3f3-7f09061a011f.ETx6kDWq1
|
OpenPGP Secret Key Version 5; User ID
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\datareporting\glean\pending_pings\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\datareporting\glean\pending_pings\a5d6ec76-765c-4778-afd2-1e05a1554d8e.ETx6kDWq1
|
OpenPGP Secret Key
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\datareporting\glean\pending_pings\a7174184-f177-48c4-876a-8a51c2ed8fbc.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\datareporting\glean\tmp\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\datareporting\session-state.json.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\datareporting\state.json.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\extension-preferences.json.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\extensions.json.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\favicons.sqlite-shm.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\favicons.sqlite.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\handlers.json.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\key4.db.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\minidumps\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\permissions.sqlite.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\pkcs11.txt.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite-shm.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\prefs.js.ETx6kDWq1
|
DOS executable (COM)
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\protections.sqlite.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\saved-telemetry-pings\45e26519-596d-41a5-b290-e547b44111fd.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\saved-telemetry-pings\6fc53411-ad83-4cf6-a5f6-905f0f3f52e8.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\saved-telemetry-pings\7278f154-e8f4-4235-84c5-c5c1c6af0084.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\saved-telemetry-pings\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\search.json.mozlz4.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\security_state\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\sessionCheckpoints.json.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\sessionstore-backups\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\sessionstore-backups\previous.jsonlz4.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\sessionstore-backups\upgrade.jsonlz4-20230927232528.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\sessionstore.jsonlz4.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\shield-preference-experiments.json.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\storage.sqlite.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\storage\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\storage\ls-archive.sqlite.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\storage\permanent\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\storage\permanent\chrome\.metadata-v2.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\storage\permanent\chrome\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\storage\permanent\chrome\idb\1451318868ntouromlalnodry--epcr.files\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\storage\permanent\chrome\idb\1451318868ntouromlalnodry--epcr.sqlite-shm.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\storage\permanent\chrome\idb\1451318868ntouromlalnodry--epcr.sqlite.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\storage\permanent\chrome\idb\1657114595AmcateirvtiSty.files\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\storage\permanent\chrome\idb\1657114595AmcateirvtiSty.sqlite-shm.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\storage\permanent\chrome\idb\1657114595AmcateirvtiSty.sqlite.ETx6kDWq1
|
OpenPGP Secret Key
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\storage\permanent\chrome\idb\2823318777ntouromlalnodry--naod.files\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\storage\permanent\chrome\idb\2823318777ntouromlalnodry--naod.sqlite-shm.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\storage\permanent\chrome\idb\2823318777ntouromlalnodry--naod.sqlite.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\storage\permanent\chrome\idb\2918063365piupsah.files\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\storage\permanent\chrome\idb\2918063365piupsah.sqlite-shm.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\storage\permanent\chrome\idb\2918063365piupsah.sqlite.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\storage\permanent\chrome\idb\3561288849sdhlie.files\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\storage\permanent\chrome\idb\3561288849sdhlie.sqlite-shm.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\storage\permanent\chrome\idb\3561288849sdhlie.sqlite.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.files\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite-shm.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\storage\permanent\chrome\idb\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\storage\temporary\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\storage\to-be-removed\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\targeting.snapshot.json.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\times.json.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\webappsstore.sqlite-shm.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\webappsstore.sqlite.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\xulstore.json.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\Desktop\AAAAAAAAAAAAAA (copy)
|
data
|
dropped
|
||
C:\Users\user\Desktop\BBBBBBBBBBBBBB (copy)
|
data
|
dropped
|
||
C:\Users\user\Desktop\CCCCCCCCCCCCCC (copy)
|
data
|
dropped
|
||
C:\Users\user\Desktop\DDDDDDDDDDDDDD (copy)
|
data
|
dropped
|
||
C:\Users\user\Desktop\EEEEEEEEEEEEEE (copy)
|
data
|
dropped
|
||
C:\Users\user\Desktop\FFFFFFFFFFFFFF (copy)
|
data
|
dropped
|
||
C:\Users\user\Desktop\GGGGGGGGGGGGGG (copy)
|
data
|
dropped
|
||
C:\Users\user\Desktop\HHHHHHHHHHHHHH (copy)
|
data
|
dropped
|
||
C:\Users\user\Desktop\IIIIIIIIIIIIII (copy)
|
data
|
dropped
|
||
C:\Users\user\Desktop\JJJJJJJJJJJJJJ (copy)
|
data
|
dropped
|
||
C:\Users\user\Desktop\KKKKKKKKKKKKKK (copy)
|
data
|
dropped
|
||
C:\Users\user\Desktop\LLLLLLLLLLLLLL (copy)
|
data
|
dropped
|
||
C:\Users\user\Desktop\MMMMMMMMMMMMMM (copy)
|
data
|
dropped
|
||
C:\Users\user\Desktop\NNNNNNNNNNNNNN (copy)
|
data
|
dropped
|
||
C:\Users\user\Desktop\OOOOOOOOOOOOOO (copy)
|
data
|
dropped
|
||
C:\Users\user\Desktop\PPPPPPPPPPPPPP (copy)
|
data
|
dropped
|
||
C:\Users\user\Desktop\QQQQQQQQQQQQQQ (copy)
|
data
|
dropped
|
||
C:\Users\user\Desktop\RRRRRRRRRRRRRR (copy)
|
data
|
dropped
|
||
C:\Users\user\Desktop\SSSSSSSSSSSSSS (copy)
|
data
|
dropped
|
||
C:\Users\user\Desktop\TTTTTTTTTTTTTT (copy)
|
data
|
dropped
|
||
C:\Users\user\Desktop\UUUUUUUUUUUUUU (copy)
|
data
|
dropped
|
||
C:\Users\user\Desktop\VVVVVVVVVVVVVV (copy)
|
data
|
dropped
|
||
C:\Users\user\Desktop\WWWWWWWWWWWWWW (copy)
|
data
|
dropped
|
||
C:\Users\user\Desktop\XXXXXXXXXXXXXX (copy)
|
data
|
dropped
|
||
C:\Users\user\Desktop\YYYYYYYYYYYYYY (copy)
|
data
|
dropped
|
||
C:\Users\user\Desktop\ZZZZZZZZZZZZZZ (copy)
|
data
|
dropped
|
||
C:\Users\user\Desktop\kDRn5EwG6a.exe
|
data
|
modified
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1000\AAAAAAAAAAA (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1000\BBBBBBBBBBB (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1000\CCCCCCCCCCC (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1000\DDDDDDDDDDD (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1000\EEEEEEEEEEE (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1000\FFFFFFFFFFF (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1000\GGGGGGGGGGG (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1000\HHHHHHHHHHH (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1000\IIIIIIIIIII (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1000\JJJJJJJJJJJ (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1000\KKKKKKKKKKK (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1000\LLLLLLLLLLL (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1000\MMMMMMMMMMM (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1000\NNNNNNNNNNN (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1000\OOOOOOOOOOO (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1000\PPPPPPPPPPP (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1000\QQQQQQQQQQQ (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1000\RRRRRRRRRRR (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1000\SSSSSSSSSSS (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1000\TTTTTTTTTTT (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1000\UUUUUUUUUUU (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1000\VVVVVVVVVVV (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1000\WWWWWWWWWWW (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1000\XXXXXXXXXXX (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1000\YYYYYYYYYYY (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1000\ZZZZZZZZZZZ (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1000\desktop.ini
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1001\AAAAAAAAAAA (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1001\BBBBBBBBBBB (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1001\CCCCCCCCCCC (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1001\DDDDDDDDDDD (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1001\EEEEEEEEEEE (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1001\FFFFFFFFFFF (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1001\GGGGGGGGGGG (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1001\HHHHHHHHHHH (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1001\IIIIIIIIIII (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1001\JJJJJJJJJJJ (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1001\KKKKKKKKKKK (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1001\LLLLLLLLLLL (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1001\MMMMMMMMMMM (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1001\NNNNNNNNNNN (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1001\OOOOOOOOOOO (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1001\PPPPPPPPPPP (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1001\QQQQQQQQQQQ (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1001\RRRRRRRRRRR (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1001\SSSSSSSSSSS (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1001\TTTTTTTTTTT (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1001\UUUUUUUUUUU (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1001\VVVVVVVVVVV (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1001\WWWWWWWWWWW (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1001\XXXXXXXXXXX (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1001\YYYYYYYYYYY (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1001\ZZZZZZZZZZZ (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1001\desktop.ini
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1002\AAAAAAAAAAA (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1002\BBBBBBBBBBB (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1002\CCCCCCCCCCC (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1002\DDDDDDDDDDD (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1002\EEEEEEEEEEE (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1002\FFFFFFFFFFF (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1002\GGGGGGGGGGG (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1002\HHHHHHHHHHH (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1002\IIIIIIIIIII (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1002\JJJJJJJJJJJ (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1002\KKKKKKKKKKK (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1002\LLLLLLLLLLL (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1002\MMMMMMMMMMM (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1002\NNNNNNNNNNN (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1002\OOOOOOOOOOO (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1002\PPPPPPPPPPP (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1002\QQQQQQQQQQQ (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1002\RRRRRRRRRRR (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1002\SSSSSSSSSSS (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1002\TTTTTTTTTTT (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1002\UUUUUUUUUUU (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1002\VVVVVVVVVVV (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1002\WWWWWWWWWWW (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1002\XXXXXXXXXXX (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1002\YYYYYYYYYYY (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1002\ZZZZZZZZZZZ (copy)
|
data
|
dropped
|
||
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1002\desktop.ini
|
data
|
dropped
|
||
C:\$WinREAgent\Scratch\ETx6kDWq1.README.txt (copy)
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\ProgramData\ETx6kDWq1.ico
|
MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
|
dropped
|
||
C:\Users\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\.curlrc.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\CURRENT.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\05349744be1ad4ad_0.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\076dd576a8178299_0.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\0786087c3c360803_0.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\0998db3a32ab3f41_0.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\0a71ed411241f66a_0.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\0b05805acd0d1882_0.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\0f25049d69125b1e_0.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\wasm\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\wasm\index-dir\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\wasm\index-dir\the-real-index.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\wasm\index.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\CURRENT.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.ETx6kDWq1
|
DOS executable (COM, 0x8C-variant)
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\MANIFEST-000001.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LocalPrefs.json.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\MANIFEST-000001.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Cookies.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Reporting and NEL.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\CURRENT.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\MANIFEST-000001.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\VideoDecodeStats\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Visited Links.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\000003.log.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\CURRENT.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\LOG.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\LOG.old.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\MANIFEST-000001.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\metadata\000003.log.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\metadata\CURRENT.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\metadata\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\metadata\LOG.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\metadata\LOG.old.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\metadata\MANIFEST-000001.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cookie\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\Linguistics\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\LocalLow\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\ARM\Acrobat_23.006.20320\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\ARM\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\ARM\S\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\ARM\{291AA914-A987-4CE9-BD63-0C0A92D435E5}\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\CURRENT.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\05349744be1ad4ad_0.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\0786087c3c360803_0.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\0998db3a32ab3f41_0.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\0f25049d69125b1e_0.ETx6kDWq1
|
OpenPGP Public Key
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\230e5fe3e6f82b2c_0.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\2798067b152b83c7_0.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\2a426f11fd8ebe18_0.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\4a0e94571d979b3c_0.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\4ca3cb58378aaa3f_0.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\560e9c8bff5008d8_0.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\56c4cd218555ae2b_0.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\6fb6d030c4ebbc21_0.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\7120c35b509b0fae_0.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\71febec55d5c75cd_0.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\72d9f526d2e2e7c8_0.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\78bff3512887b83d_0.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\86b8040b7132b608_0.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\8c159cc5880890bc_0.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\8c84d92a9dbce3e0_0.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\8e417e79df3bf0e9_0.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\91cec06bb2836fa5_0.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\927a1596c37ebe5e_0.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\92c56fa2a6c4d5ba_0.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\946896ee27df7947_0.ETx6kDWq1
|
SGI image data, 3549-D, -10930 x 32640, -30786 channels, "8E\276\276\264\014$\231|4\261\304E6\262h\367@\001"!\363\206@g\321`{!\2655\373\356d\365\344V}\024Il_.\312h@\362p\236R\331\372\2523\025\330\320\367\247\373\321\375\363\303\022\222\332\021n~\307\250n\344[O)\220nh\205)'!K]\333\234-(\026\033\024l\200PQL\234$qOiz\032[K\257\\277ks\012\366\034J\200\370"
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\983b7a3da8f39a46_0.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\aba6710fde0876af_0.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\b6d5deb4812ac6e9_0.ETx6kDWq1
|
OpenPGP Public Key
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\bba29d2e6197e2f4_0.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\bf8eae3dcaf681ca_0.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\cf3e34002cde7e9c_0.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\d5dedf551f4d1592_0.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\f0cf6dfa8a1afa3d_0.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\f941376b2efdd6e6_0.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\f971b7eda7fa05c3_0.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\fd17b2d8331c91e8_0.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\febb41df4ea2b63a_0.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\wasm\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\wasm\index-dir\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\wasm\index-dir\the-real-index.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\wasm\index.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\LOG.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\CURRENT.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\MANIFEST-000001.ETx6kDWq1
|
OpenPGP Secret Key
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\LocalPrefs.json.ETx6kDWq1
|
OpenPGP Public Key
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\MANIFEST-000001.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Network\Cookies.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Network\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Network\Reporting and NEL.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\CURRENT.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\MANIFEST-000001.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Visited Links.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cookie\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\Color\ACECache11.lst.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\Color\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\Color\Profiles\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\CEF\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\CEF\User Data\Dictionaries\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\CEF\User Data\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Comms\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Comms\UnistoreDB\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Comms\UnistoreDB\USS.jcp.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Comms\UnistoreDB\USS.jtx.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Comms\UnistoreDB\USSres00001.jrs.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Comms\UnistoreDB\USSres00002.jrs.ETx6kDWq1
|
OpenPGP Public Key
|
dropped
|
||
C:\Users\user\AppData\Local\Comms\UnistoreDB\USStmp.jtx.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Comms\UnistoreDB\store.vol.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Comms\Unistore\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Comms\Unistore\data\AggregateCache.uca.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Comms\Unistore\data\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\ConnectedDevicesPlatform\CDPGlobalSettings.cdp.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\ConnectedDevicesPlatform\Connected Devices Platform certificates.sst.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\ConnectedDevicesPlatform\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\ConnectedDevicesPlatform\L.user.cdp.ETx6kDWq1
|
OpenPGP Secret Key
|
dropped
|
||
C:\Users\user\AppData\Local\ConnectedDevicesPlatform\L.user.cdpresource.ETx6kDWq1
|
(non-conforming)
|
dropped
|
||
C:\Users\user\AppData\Local\ConnectedDevicesPlatform\L.user\ActivitiesCache.db-wal.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\ConnectedDevicesPlatform\L.user\ActivitiesCache.db.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\ConnectedDevicesPlatform\L.user\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\AutofillStates\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\BrowserMetrics\BrowserMetrics-651D36B0-970.pma.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\BrowserMetrics\BrowserMetrics-651D45E8-1230.pma.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\BrowserMetrics\BrowserMetrics-651D45EC-1900.pma.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\BrowserMetrics\BrowserMetrics-651D45EE-1AB4.pma.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\BrowserMetrics\BrowserMetrics-651D45EF-16F4.pma.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\BrowserMetrics\BrowserMetrics-651D45F1-18C8.pma.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\BrowserMetrics\BrowserMetrics-651D45F3-1954.pma.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\BrowserMetrics\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\CertificateRevocation\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\CommerceHeuristics\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Crashpad\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Crashpad\attachments\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Crashpad\reports\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Crowd Deny\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\FileTypePolicies\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\FirstPartySetsPreloaded\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\GrShaderCache\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\GrShaderCache\data_0.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\GrShaderCache\data_2.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\GrShaderCache\data_3.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\GraphiteDawnCache\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\GraphiteDawnCache\data_0.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\GraphiteDawnCache\data_2.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\GraphiteDawnCache\data_3.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Browser.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Version.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\MEIPreload\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\MediaFoundationWidevineCdm\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\MediaFoundationWidevineCdm\x64\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\OnDeviceHeadSuggestModel\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\OptimizationGuidePredictionModels\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\OptimizationHints\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\OriginTrials\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\PKIMetadata\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\RecoveryImproved\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\SSLErrorAssistant\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Safe Browsing\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\SafetyTips\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\ShaderCache\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\ShaderCache\data_0.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\ShaderCache\data_2.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\ShaderCache\data_3.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Subresource Filter\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Subresource Filter\Unindexed Rules\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\ThirdPartyModuleList64\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\TrustTokenKeyCommitments\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Variations.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\WidevineCdm\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\ZxcvbnData\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\hyphen-data\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\pnacl\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Google\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\A5A229A3-2033-4556-881F-5F5B9AE807C4
|
XML 1.0 document, ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\OTele\onenote.exe.db
|
SQLite 3.x database, last written using SQLite version 3023002, writer version 2, read version 2, file counter 2, database
pages 1, cookie 0, schema 0, largest root page 1, unknown 0 encoding, version-valid-for 2
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\OTele\onenote.exe.db-journal
|
SQLite Rollback Journal
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\OTele\onenote.exe.db-shm
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\OTele\onenote.exe.db-wal
|
SQLite Write-Ahead Log, version 3007000
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000000.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000001.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000002.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000003.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000004.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000005.bin (copy)
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000006.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000007.bin (copy)
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:19:29], progressive, precision 8, 221x792, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000008.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000009.bin (copy)
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000A.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000B.bin (copy)
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000C.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000D.bin (copy)
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:18:09], progressive, precision 8, 164x641, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000E.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000F.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000G.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000H.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000I.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000J.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000K.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000L.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000M.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000N.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000O.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000P.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000Q.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000R.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000S.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000T.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000U.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000V.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000010.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000011.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000012.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000013.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000014.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000015.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000016.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000017.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000018.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000019.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001A.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001B.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001C.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001D.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001E.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001F.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001G.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001H.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001I.bin (copy)
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:06:24], progressive, precision 8, 38x792, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001J.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001K.bin (copy)
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001L.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001M.bin (copy)
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001N.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001O.bin (copy)
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001P.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001Q.bin (copy)
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001R.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001S.bin (copy)
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001T.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001U.bin (copy)
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001V.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000020.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000021.bin (copy)
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 814x105, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000022.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000023.bin (copy)
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 728x77, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000024.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000025.bin (copy)
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 69x630, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000026.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000027.bin (copy)
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 105x441,
components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000028.bin (copy)
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 76x97, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000029.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002A.bin (copy)
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 95x498, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002B.bin (copy)
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 700x114, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002C.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002D.bin (copy)
|
PNG image data, 813 x 99, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002E.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002F.bin (copy)
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 780x107,
components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002G.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002H.bin (copy)
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 613x144, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002I.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002J.bin (copy)
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 276x139,
components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002K.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002L.bin (copy)
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 814x45, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002M.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002N.bin (copy)
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 262x277,
components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002O.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002P.bin (copy)
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 70x626, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002Q.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002R.bin (copy)
|
PNG image data, 177 x 123, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002S.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002T.bin (copy)
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 17x608, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002U.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002V.bin (copy)
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 357x69, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000030.bin (copy)
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 14x341, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000031.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000032.bin (copy)
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:15:20], progressive, precision 8, 604x784, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000033.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000034.bin (copy)
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:13:06], progressive, precision 8, 570x779, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000035.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000036.bin (copy)
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000037.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000038.bin (copy)
|
PNG image data, 40 x 623, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000039.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003A.bin (copy)
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003B.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003C.bin (copy)
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:10:32], progressive, precision 8, 594x773, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003D.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003E.bin (copy)
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:12:29], progressive, precision 8, 598x766, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003F.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003G.bin (copy)
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:19:29], progressive, precision 8, 221x792, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003H.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003I.bin (copy)
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003J.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003K.bin (copy)
|
PNG image data, 60 x 336, 4-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003L.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003M.bin (copy)
|
PNG image data, 40 x 617, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003N.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003O.bin (copy)
|
PNG image data, 50 x 600, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003P.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003Q.bin (copy)
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003R.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003S.bin (copy)
|
PNG image data, 77 x 627, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003T.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003U.bin (copy)
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003V.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000040.bin (copy)
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000041.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000042.bin (copy)
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000043.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000044.bin (copy)
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:05:55], progressive, precision 8, 612x618, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000045.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000046.bin (copy)
|
PNG image data, 176 x 513, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000047.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000048.bin (copy)
|
PNG image data, 40 x 650, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000049.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004A.bin (copy)
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:27:10], progressive, precision 8, 102x792, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004B.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004C.bin (copy)
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:18:09], progressive, precision 8, 164x641, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004D.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004E.bin (copy)
|
PNG image data, 50 x 556, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004F.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004G.bin (copy)
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004H.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004I.bin (copy)
|
PNG image data, 171 x 552, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004J.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004K.bin (copy)
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:11:38], progressive, precision 8, 577x757, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004L.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004M.bin (copy)
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:26:15], progressive, precision 8, 216x792, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004N.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004O.bin (copy)
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:09:29], progressive, precision 8, 609x675, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004P.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004Q.bin (copy)
|
Windows Enhanced Metafile (EMF) image data version 0x10000
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004R.bin (copy)
|
PNG image data, 189 x 305, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004S.bin (copy)
|
Windows Enhanced Metafile (EMF) image data version 0x10000
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004T.bin (copy)
|
PNG image data, 189 x 305, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004U.bin (copy)
|
Windows Enhanced Metafile (EMF) image data version 0x10000
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004V.bin (copy)
|
PNG image data, 189 x 305, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000050.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000051.bin (copy)
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000052.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000053.bin (copy)
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000054.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000055.bin (copy)
|
PNG image data, 50 x 500, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000056.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000057.bin (copy)
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000058.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000059.bin (copy)
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:08:07], baseline, precision 8, 595x450, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000005A.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000005B.bin (copy)
|
Windows Enhanced Metafile (EMF) image data version 0x10000
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000005C.bin (copy)
|
PNG image data, 3005 x 184, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000005D.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000005E.bin (copy)
|
PNG image data, 39 x 600, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000005F.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000005G.bin (copy)
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000005H.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000005I.bin (copy)
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:44:07], progressive, precision 8, 611x163, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000005J.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000005K.bin (copy)
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000005L.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000005M.bin (copy)
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000005N.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000005O.bin (copy)
|
PNG image data, 39 x 579, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000005P.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000005Q.bin (copy)
|
PNG image data, 30 x 700, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000005R.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000005S.bin (copy)
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000005T.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000005U.bin (copy)
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000005V.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000060.bin (copy)
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:06:24], progressive, precision 8, 38x792, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000061.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000062.bin (copy)
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000063.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000064.bin (copy)
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000065.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000066.bin (copy)
|
PNG image data, 85 x 470, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000067.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000068.bin (copy)
|
PNG image data, 88 x 574, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000069.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000006A.bin (copy)
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000006B.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000006C.bin (copy)
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000006D.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000006E.bin (copy)
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000006F.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000006G.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000006H.bin (copy)
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:05:55], progressive, precision 8, 612x618, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000006I.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000006J.bin (copy)
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:08:07], baseline, precision 8, 595x450, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000006K.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000006L.bin (copy)
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000006M.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\header
|
Matlab v4 mat-file (little endian) 0, rows 975182774, columns 0
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000001.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000002.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000003.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000004.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000005.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000006.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000007.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:19:29], progressive, precision 8, 221x792, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000008.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000009.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000A.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000B.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000C.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000D.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:18:09], progressive, precision 8, 164x641, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000E.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000F.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000G.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000H.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000I.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000J.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000K.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000L.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000M.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000N.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000O.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000P.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000Q.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000R.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000S.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000T.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000U.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000V.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000010.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000011.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000012.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000013.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000014.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000015.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000016.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000017.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000018.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000019.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001A.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001B.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001C.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001D.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001E.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001F.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001G.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001H.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001I.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:06:24], progressive, precision 8, 38x792, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001J.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001K.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001L.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001M.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001N.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001O.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001P.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001Q.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001R.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001S.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001T.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001U.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001V.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000020.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000021.bin
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 814x105, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000022.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000023.bin
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 728x77, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000024.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000025.bin
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 69x630, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000026.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000027.bin
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 105x441,
components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000028.bin
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 76x97, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000029.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002A.bin
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 95x498, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002B.bin
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 700x114, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002C.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002D.bin
|
PNG image data, 813 x 99, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002E.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002F.bin
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 780x107,
components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002G.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002H.bin
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 613x144, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002I.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002J.bin
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 276x139,
components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002K.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002L.bin
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 814x45, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002M.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002N.bin
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 262x277,
components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002O.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002P.bin
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 70x626, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002Q.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002R.bin
|
PNG image data, 177 x 123, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002S.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002T.bin
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 17x608, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002U.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002V.bin
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 357x69, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000030.bin
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 14x341, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000031.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000032.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:15:20], progressive, precision 8, 604x784, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000033.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000034.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:13:06], progressive, precision 8, 570x779, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000035.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000036.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000037.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000038.bin
|
PNG image data, 40 x 623, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000039.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003A.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003B.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003C.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:10:32], progressive, precision 8, 594x773, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003D.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003E.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:12:29], progressive, precision 8, 598x766, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003F.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003G.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:19:29], progressive, precision 8, 221x792, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003H.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003I.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003J.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003K.bin
|
PNG image data, 60 x 336, 4-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003L.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003M.bin
|
PNG image data, 40 x 617, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003N.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003O.bin
|
PNG image data, 50 x 600, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003P.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003Q.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003R.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003S.bin
|
PNG image data, 77 x 627, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003T.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003U.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003V.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000040.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000041.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000042.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000043.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000044.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:05:55], progressive, precision 8, 612x618, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000045.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000046.bin
|
PNG image data, 176 x 513, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000047.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000048.bin
|
PNG image data, 40 x 650, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000049.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004A.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:27:10], progressive, precision 8, 102x792, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004B.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004C.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:18:09], progressive, precision 8, 164x641, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004D.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004E.bin
|
PNG image data, 50 x 556, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004F.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004G.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004H.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004I.bin
|
PNG image data, 171 x 552, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004J.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004K.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:11:38], progressive, precision 8, 577x757, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004L.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004M.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:26:15], progressive, precision 8, 216x792, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004N.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004O.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:09:29], progressive, precision 8, 609x675, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004P.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004Q.bin
|
Windows Enhanced Metafile (EMF) image data version 0x10000
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004R.bin
|
PNG image data, 189 x 305, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004S.bin
|
Windows Enhanced Metafile (EMF) image data version 0x10000
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004T.bin
|
PNG image data, 189 x 305, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004U.bin
|
Windows Enhanced Metafile (EMF) image data version 0x10000
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004V.bin
|
PNG image data, 189 x 305, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000050.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000051.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000052.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000053.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000054.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000055.bin
|
PNG image data, 50 x 500, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000056.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000057.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000058.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000059.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:08:07], baseline, precision 8, 595x450, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005A.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005B.bin
|
Windows Enhanced Metafile (EMF) image data version 0x10000
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005C.bin
|
PNG image data, 3005 x 184, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005D.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005E.bin
|
PNG image data, 39 x 600, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005F.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005G.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005H.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005I.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:44:07], progressive, precision 8, 611x163, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005J.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005K.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005L.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005M.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005N.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005O.bin
|
PNG image data, 39 x 579, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005P.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005Q.bin
|
PNG image data, 30 x 700, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005R.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005S.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005T.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005U.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005V.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000060.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:06:24], progressive, precision 8, 38x792, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000061.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000062.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000063.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000064.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000065.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000066.bin
|
PNG image data, 85 x 470, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000067.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000068.bin
|
PNG image data, 88 x 574, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000069.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000006A.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000006B.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000006C.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000006D.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000006E.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000006F.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000006G.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000006H.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:05:55], progressive, precision 8, 612x618, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000006I.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000006J.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:08:07], baseline, precision 8, 595x450, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000006K.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000006L.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
modified
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000006M.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\089d66ba04a8cec4bdc5267f42f39cf84278bb67.tbres
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\56a61aeb75d8f5be186c26607f4bb213abe7c5ec.tbres
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cache2\doomed\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cache2\entries\8AAC17E1FAE55EE2A26192601B20CC4472AF5CE5.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cache2\entries\9648808B6C63CD1AAD97A7B68F84F35C95682143.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cache2\entries\99B7BF8F4F0080766794EDBDC37140FABC009DF4.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cache2\entries\99D01D160AC7ADE6301F3559541FEF1A6F6155F0.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cache2\entries\A8743ACDA513FF27A72604EA39BAAE662138F0B9.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cache2\entries\A8F5B51786B52AA4D75E21BED0B23433A7965AD9.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cache2\entries\AA70DA0EA77AF599D16F76E79A98272BA138060D.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cache2\entries\B964525B23D45DFD792EB4662ED5DFC78F8C6246.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cache2\entries\BE4820D40B48E7D6E96297A9048EAE2279EC43A2.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cache2\entries\C26B0FEA6AFFB80A0EE137492C8CA100F87EE29D.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cache2\entries\C29C07F946FC89B4DE10A21D8C6975FCEF3E2E39.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cache2\entries\C2C43B688238A5FDA9ED4731822C4EA8F055F683.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cache2\entries\CB58BDD87AB882DAC5784A12AA5FB3DB8E4BDBE2.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cache2\entries\CDA62003B1B987A64F1FAC75D1484DBFF94F08FB.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cache2\entries\D23F7952044A1A6016B80DED46FC563716A295DF.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cache2\entries\D2EC61E8A6DC6F6B45A8D35DBEE8A2EFC553F32A.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cache2\entries\D6B0ADD0DAEA00708CBB4290B85CCA0E0FA79061.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cache2\entries\D7BEEC8C1D80E7AC7310130DB5854DFB79191F44.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cache2\entries\D8EF12DD3F5A0B350AEDF5A0EBB7935D12C12CE3.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cache2\entries\DF0CDE23AA0F44779E78EFEDFBAED16DB1B4DF40.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cache2\entries\E673CA89D86A2DE6C94ABF57948CBCA43E7B8EB2.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cache2\entries\EA1E3132006CB34CB9058E6891C35B731B9C4D9B.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cache2\entries\EDE675BC5BD66B9EEBD8A46A4C06CC47C388FD92.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cache2\entries\F8CBD54DDA10F4286A41EC6A537240712D6C2308.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cache2\entries\F8D5B76A1EF679D7E128B67E60239325BF22714D.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cache2\entries\FF63A96CB0EE05C4E8600CAFADA617EBA0BAB35D.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MSPaint_8wekyb3d8bbwe\AC\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MSPaint_8wekyb3d8bbwe\AC\Temp\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MSPaint_8wekyb3d8bbwe\AppData\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MSPaint_8wekyb3d8bbwe\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MSPaint_8wekyb3d8bbwe\LocalCache\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MSPaint_8wekyb3d8bbwe\LocalState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MSPaint_8wekyb3d8bbwe\RoamingState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MSPaint_8wekyb3d8bbwe\Settings\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MSPaint_8wekyb3d8bbwe\Settings\settings.dat.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MSPaint_8wekyb3d8bbwe\SystemAppData\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MSPaint_8wekyb3d8bbwe\TempState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\6501008900\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\6501008900\squaretile.png.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\7603651830\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\7603651830\squaretile.png.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\7603651830\tinytile.png.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\RoamingState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Settings\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Settings\settings.dat.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\SystemAppData\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\TempState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\AC\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\AC\Temp\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\AppData\CacheStorage\CacheStorage.edb.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\AppData\CacheStorage\CacheStorage.jfm.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\AppData\CacheStorage\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\AppData\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalCache\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalCache\Local\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalCache\Roaming\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\RoamingState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\Settings\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\Settings\settings.dat.ETx6kDWq1
|
SysEx File -
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\SystemAppData\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\SystemAppData\Helium\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\SystemAppData\Helium\User.dat.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\TempState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\AC\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\AC\Temp\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\AppData\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\LocalCache\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\LocalState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\RoamingState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\Settings\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\Settings\settings.dat.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\SystemAppData\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\TempState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftStickyNotes_8wekyb3d8bbwe\AC\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftStickyNotes_8wekyb3d8bbwe\AC\Temp\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftStickyNotes_8wekyb3d8bbwe\AppData\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftStickyNotes_8wekyb3d8bbwe\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftStickyNotes_8wekyb3d8bbwe\LocalCache\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftStickyNotes_8wekyb3d8bbwe\LocalState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftStickyNotes_8wekyb3d8bbwe\RoamingState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftStickyNotes_8wekyb3d8bbwe\Settings\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftStickyNotes_8wekyb3d8bbwe\Settings\settings.dat.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftStickyNotes_8wekyb3d8bbwe\SystemAppData\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftStickyNotes_8wekyb3d8bbwe\TempState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MixedReality.Portal_8wekyb3d8bbwe\AC\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MixedReality.Portal_8wekyb3d8bbwe\AC\Temp\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MixedReality.Portal_8wekyb3d8bbwe\AppData\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MixedReality.Portal_8wekyb3d8bbwe\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MixedReality.Portal_8wekyb3d8bbwe\LocalCache\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MixedReality.Portal_8wekyb3d8bbwe\LocalState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MixedReality.Portal_8wekyb3d8bbwe\RoamingState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MixedReality.Portal_8wekyb3d8bbwe\Settings\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MixedReality.Portal_8wekyb3d8bbwe\Settings\settings.dat.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MixedReality.Portal_8wekyb3d8bbwe\SystemAppData\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MixedReality.Portal_8wekyb3d8bbwe\TempState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.NET.Native.Framework.1.7_8wekyb3d8bbwe\AC\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.NET.Native.Framework.1.7_8wekyb3d8bbwe\AC\Temp\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.NET.Native.Framework.1.7_8wekyb3d8bbwe\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.NET.Native.Framework.2.2_8wekyb3d8bbwe\AC\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.NET.Native.Framework.2.2_8wekyb3d8bbwe\AC\Temp\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.NET.Native.Framework.2.2_8wekyb3d8bbwe\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.NET.Native.Runtime.1.7_8wekyb3d8bbwe\AC\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.NET.Native.Runtime.1.7_8wekyb3d8bbwe\AC\Temp\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.NET.Native.Runtime.1.7_8wekyb3d8bbwe\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.NET.Native.Runtime.2.2_8wekyb3d8bbwe\AC\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.NET.Native.Runtime.2.2_8wekyb3d8bbwe\AC\Temp\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.NET.Native.Runtime.2.2_8wekyb3d8bbwe\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Office.OneNote_8wekyb3d8bbwe\AC\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Office.OneNote_8wekyb3d8bbwe\AC\Temp\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Office.OneNote_8wekyb3d8bbwe\AppData\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Office.OneNote_8wekyb3d8bbwe\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Office.OneNote_8wekyb3d8bbwe\LocalCache\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Office.OneNote_8wekyb3d8bbwe\LocalState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Office.OneNote_8wekyb3d8bbwe\RoamingState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Office.OneNote_8wekyb3d8bbwe\Settings\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Office.OneNote_8wekyb3d8bbwe\Settings\settings.dat.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Office.OneNote_8wekyb3d8bbwe\SystemAppData\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Office.OneNote_8wekyb3d8bbwe\TempState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.People_8wekyb3d8bbwe\AC\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.People_8wekyb3d8bbwe\AC\Temp\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.People_8wekyb3d8bbwe\AppData\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.People_8wekyb3d8bbwe\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.People_8wekyb3d8bbwe\LocalCache\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.People_8wekyb3d8bbwe\LocalState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.People_8wekyb3d8bbwe\RoamingState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.People_8wekyb3d8bbwe\Settings\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.People_8wekyb3d8bbwe\Settings\settings.dat.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.People_8wekyb3d8bbwe\SystemAppData\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.People_8wekyb3d8bbwe\TempState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.ScreenSketch_8wekyb3d8bbwe\AC\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.ScreenSketch_8wekyb3d8bbwe\AC\Temp\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.ScreenSketch_8wekyb3d8bbwe\AppData\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.ScreenSketch_8wekyb3d8bbwe\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.ScreenSketch_8wekyb3d8bbwe\LocalCache\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.ScreenSketch_8wekyb3d8bbwe\LocalState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.ScreenSketch_8wekyb3d8bbwe\RoamingState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.ScreenSketch_8wekyb3d8bbwe\Settings\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.ScreenSketch_8wekyb3d8bbwe\Settings\settings.dat.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.ScreenSketch_8wekyb3d8bbwe\SystemAppData\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.ScreenSketch_8wekyb3d8bbwe\TempState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Services.Store.Engagement_8wekyb3d8bbwe\AC\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Services.Store.Engagement_8wekyb3d8bbwe\AC\Temp\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Services.Store.Engagement_8wekyb3d8bbwe\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.StorePurchaseApp_8wekyb3d8bbwe\AC\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.StorePurchaseApp_8wekyb3d8bbwe\AC\Temp\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.StorePurchaseApp_8wekyb3d8bbwe\AppData\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.StorePurchaseApp_8wekyb3d8bbwe\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.StorePurchaseApp_8wekyb3d8bbwe\LocalCache\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.StorePurchaseApp_8wekyb3d8bbwe\LocalState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.StorePurchaseApp_8wekyb3d8bbwe\RoamingState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.StorePurchaseApp_8wekyb3d8bbwe\Settings\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.StorePurchaseApp_8wekyb3d8bbwe\Settings\settings.dat.ETx6kDWq1
|
OpenPGP Secret Key
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.StorePurchaseApp_8wekyb3d8bbwe\SystemAppData\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.StorePurchaseApp_8wekyb3d8bbwe\TempState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.UI.Xaml.2.0_8wekyb3d8bbwe\AC\Temp\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.UI.Xaml.2.0_8wekyb3d8bbwe\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.VCLibs.140.00.UWPDesktop_8wekyb3d8bbwe\AC\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.VCLibs.140.00.UWPDesktop_8wekyb3d8bbwe\AC\Temp\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.VCLibs.140.00.UWPDesktop_8wekyb3d8bbwe\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\AC\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\AC\Temp\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.VP9VideoExtensions_8wekyb3d8bbwe\AC\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.VP9VideoExtensions_8wekyb3d8bbwe\AC\Temp\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.VP9VideoExtensions_8wekyb3d8bbwe\AppData\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy\AC\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy\AC\Temp\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy\AppData\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy\LocalCache\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy\LocalState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy\RoamingState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy\Settings\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy\Settings\settings.dat.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy\SystemAppData\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy\TempState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\AC\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\AC\Temp\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\AppData\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\LocalCache\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\LocalState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\RoamingState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\Settings\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\Settings\settings.dat.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\SystemAppData\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\TempState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy\AC\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy\AC\Temp\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy\AppData\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy\LocalCache\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy\LocalState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy\RoamingState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy\Settings\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy\Settings\settings.dat.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy\SystemAppData\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy\TempState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\AC\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\AC\Temp\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\AppData\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalCache\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\MediaDb.v1.sqlite-wal.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\MediaDb.v1.sqlite.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\RoamingState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\Settings\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\Settings\settings.dat.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\SystemAppData\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\TempState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy\AC\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy\AC\Temp\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy\AppData\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy\LocalCache\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy\LocalState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy\RoamingState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy\Settings\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy\Settings\settings.dat.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy\SystemAppData\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy\TempState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\Temp\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\TokenBroker\Cache\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\TokenBroker\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\CacheStorage\CacheStorage.edb.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\CacheStorage\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\Indexed DB\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\Indexed DB\IndexedDB.edb.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\Indexed DB\IndexedDB.jfm.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\Indexed DB\edb.chk.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalCache\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_549981C3F5F10_8wekyb3d8bbwe!App.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_BingWeather_8wekyb3d8bbwe!App.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_GetHelp_8wekyb3d8bbwe!App.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_Getstarted_8wekyb3d8bbwe!App.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_MSPaint_8wekyb3d8bbwe!Microsoft_MSPaint.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_Microsoft3DViewer_8wekyb3d8bbwe!Microsoft_Microsoft3DViewer.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_MicrosoftOfficeHub_8wekyb3d8bbwe!Microsoft_MicrosoftOfficeHub.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_MicrosoftSolitaireCollection_8wekyb3d8bbwe!App.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_MicrosoftStickyNotes_8wekyb3d8bbwe!App.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_MixedReality_Portal_8wekyb3d8bbwe!App.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_Office_OneNote_8wekyb3d8bbwe!microsoft_onenoteim.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_People_8wekyb3d8bbwe!x4c7a3b7dy2188y46d4ya362y19ac5a5805e5x.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_ScreenSketch_8wekyb3d8bbwe!App.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_SkypeApp_kzf8qxf38zg5c!App.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_WindowsCamera_8wekyb3d8bbwe!App.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_WindowsFeedbackHub_8wekyb3d8bbwe!App.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_WindowsMaps_8wekyb3d8bbwe!App.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_Windows_SecHealthUI_cw5n1h2txyewy!SecHealthUI.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_XboxApp_8wekyb3d8bbwe!Microsoft_XboxApp.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_XboxGamingOverlay_8wekyb3d8bbwe!App.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_YourPhone_8wekyb3d8bbwe!App.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_ZuneMusic_8wekyb3d8bbwe!Microsoft_ZuneMusic.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_ZuneVideo_8wekyb3d8bbwe!Microsoft_ZuneVideo.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\microsoft_windowscommunicationsapps_8wekyb3d8bbwe!microsoft_windowslive_calendar.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\microsoft_windowscommunicationsapps_8wekyb3d8bbwe!microsoft_windowslive_mail.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\windows_immersivecontrolpanel_cw5n1h2txyewy!microsoft_windows_immersivecontrolpanel.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\AC\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\AppData\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\LocalCache\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\LocalState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\RoamingState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\Settings\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\SystemAppData\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\TempState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Xbox.TCUI_8wekyb3d8bbwe\AC\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Xbox.TCUI_8wekyb3d8bbwe\AC\Temp\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Xbox.TCUI_8wekyb3d8bbwe\AppData\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Xbox.TCUI_8wekyb3d8bbwe\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Xbox.TCUI_8wekyb3d8bbwe\LocalCache\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Xbox.TCUI_8wekyb3d8bbwe\LocalState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Xbox.TCUI_8wekyb3d8bbwe\RoamingState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Xbox.TCUI_8wekyb3d8bbwe\Settings\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Xbox.TCUI_8wekyb3d8bbwe\Settings\settings.dat.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Xbox.TCUI_8wekyb3d8bbwe\SystemAppData\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Xbox.TCUI_8wekyb3d8bbwe\TempState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.XboxApp_8wekyb3d8bbwe\AC\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.XboxApp_8wekyb3d8bbwe\AC\Temp\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.XboxApp_8wekyb3d8bbwe\AppData\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.XboxApp_8wekyb3d8bbwe\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.XboxApp_8wekyb3d8bbwe\LocalCache\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.XboxApp_8wekyb3d8bbwe\LocalState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.XboxApp_8wekyb3d8bbwe\RoamingState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.XboxApp_8wekyb3d8bbwe\Settings\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.XboxApp_8wekyb3d8bbwe\Settings\settings.dat.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.XboxApp_8wekyb3d8bbwe\SystemAppData\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.XboxApp_8wekyb3d8bbwe\TempState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\AC\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\AC\Temp\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\AppData\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\LocalCache\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\LocalState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\RoamingState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\Settings\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\Settings\settings.dat.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\SystemAppData\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\TempState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.XboxGameOverlay_8wekyb3d8bbwe\AC\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.XboxGameOverlay_8wekyb3d8bbwe\AC\Temp\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.XboxGameOverlay_8wekyb3d8bbwe\AppData\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.XboxGameOverlay_8wekyb3d8bbwe\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.XboxGameOverlay_8wekyb3d8bbwe\LocalCache\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.XboxGameOverlay_8wekyb3d8bbwe\LocalState\DiagOutputDir\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.XboxGameOverlay_8wekyb3d8bbwe\LocalState\DiagOutputDir\LogFile_October_3_2023__13_9_20.txt.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.XboxGameOverlay_8wekyb3d8bbwe\LocalState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.XboxGameOverlay_8wekyb3d8bbwe\RoamingState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.XboxGameOverlay_8wekyb3d8bbwe\Settings\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.XboxGameOverlay_8wekyb3d8bbwe\Settings\settings.dat.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.XboxGameOverlay_8wekyb3d8bbwe\SystemAppData\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.XboxGameOverlay_8wekyb3d8bbwe\TempState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.XboxIdentityProvider_8wekyb3d8bbwe\AC\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.XboxIdentityProvider_8wekyb3d8bbwe\AC\Temp\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.XboxIdentityProvider_8wekyb3d8bbwe\AppData\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.XboxIdentityProvider_8wekyb3d8bbwe\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.XboxIdentityProvider_8wekyb3d8bbwe\LocalCache\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.XboxIdentityProvider_8wekyb3d8bbwe\LocalState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.XboxIdentityProvider_8wekyb3d8bbwe\RoamingState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.XboxIdentityProvider_8wekyb3d8bbwe\Settings\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.XboxIdentityProvider_8wekyb3d8bbwe\Settings\settings.dat.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.XboxIdentityProvider_8wekyb3d8bbwe\SystemAppData\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.XboxIdentityProvider_8wekyb3d8bbwe\TempState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.XboxSpeechToTextOverlay_8wekyb3d8bbwe\AC\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.XboxSpeechToTextOverlay_8wekyb3d8bbwe\AC\Temp\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.XboxSpeechToTextOverlay_8wekyb3d8bbwe\AppData\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.XboxSpeechToTextOverlay_8wekyb3d8bbwe\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.XboxSpeechToTextOverlay_8wekyb3d8bbwe\LocalCache\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.XboxSpeechToTextOverlay_8wekyb3d8bbwe\LocalState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.XboxSpeechToTextOverlay_8wekyb3d8bbwe\RoamingState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.XboxSpeechToTextOverlay_8wekyb3d8bbwe\Settings\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.XboxSpeechToTextOverlay_8wekyb3d8bbwe\Settings\settings.dat.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.XboxSpeechToTextOverlay_8wekyb3d8bbwe\SystemAppData\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.XboxSpeechToTextOverlay_8wekyb3d8bbwe\TempState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\AC\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\AC\Temp\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\AppData\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\LocalCache\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\LocalState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\RoamingState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\Settings\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\Settings\settings.dat.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\SystemAppData\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\TempState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\Temp\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AppData\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalCache\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\RoamingState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\Settings\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\Settings\settings.dat.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\SystemAppData\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\TempState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\AC\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\AC\Temp\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\AppData\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\LocalCache\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\LocalState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\RoamingState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\Settings\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\Settings\settings.dat.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\SystemAppData\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\TempState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AppData\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalCache\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\RoamingState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\Settings\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SystemAppData\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\MicrosoftWindows.UndockedDevKit_cw5n1h2txyewy\AC\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\MicrosoftWindows.UndockedDevKit_cw5n1h2txyewy\AC\Temp\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\MicrosoftWindows.UndockedDevKit_cw5n1h2txyewy\AppData\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\MicrosoftWindows.UndockedDevKit_cw5n1h2txyewy\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\MicrosoftWindows.UndockedDevKit_cw5n1h2txyewy\LocalCache\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\MicrosoftWindows.UndockedDevKit_cw5n1h2txyewy\LocalState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\MicrosoftWindows.UndockedDevKit_cw5n1h2txyewy\RoamingState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\MicrosoftWindows.UndockedDevKit_cw5n1h2txyewy\Settings\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\MicrosoftWindows.UndockedDevKit_cw5n1h2txyewy\Settings\settings.dat.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\MicrosoftWindows.UndockedDevKit_cw5n1h2txyewy\SystemAppData\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\MicrosoftWindows.UndockedDevKit_cw5n1h2txyewy\TempState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\NcsiUwpApp_8wekyb3d8bbwe\AC\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\NcsiUwpApp_8wekyb3d8bbwe\AC\Temp\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\NcsiUwpApp_8wekyb3d8bbwe\AppData\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\NcsiUwpApp_8wekyb3d8bbwe\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\NcsiUwpApp_8wekyb3d8bbwe\LocalCache\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\NcsiUwpApp_8wekyb3d8bbwe\LocalState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\NcsiUwpApp_8wekyb3d8bbwe\RoamingState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\NcsiUwpApp_8wekyb3d8bbwe\Settings\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\NcsiUwpApp_8wekyb3d8bbwe\Settings\settings.dat.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\NcsiUwpApp_8wekyb3d8bbwe\SystemAppData\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\NcsiUwpApp_8wekyb3d8bbwe\TempState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Windows.CBSPreview_cw5n1h2txyewy\AC\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Windows.CBSPreview_cw5n1h2txyewy\AC\Temp\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Windows.CBSPreview_cw5n1h2txyewy\AppData\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Windows.CBSPreview_cw5n1h2txyewy\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Windows.CBSPreview_cw5n1h2txyewy\LocalCache\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Windows.CBSPreview_cw5n1h2txyewy\LocalState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Windows.CBSPreview_cw5n1h2txyewy\RoamingState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Windows.CBSPreview_cw5n1h2txyewy\Settings\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Windows.CBSPreview_cw5n1h2txyewy\Settings\settings.dat.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Windows.CBSPreview_cw5n1h2txyewy\SystemAppData\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Windows.CBSPreview_cw5n1h2txyewy\TempState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Windows.PrintDialog_cw5n1h2txyewy\AC\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Windows.PrintDialog_cw5n1h2txyewy\AC\Temp\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Windows.PrintDialog_cw5n1h2txyewy\AppData\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Windows.PrintDialog_cw5n1h2txyewy\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Windows.PrintDialog_cw5n1h2txyewy\LocalCache\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Windows.PrintDialog_cw5n1h2txyewy\LocalState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Windows.PrintDialog_cw5n1h2txyewy\RoamingState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Windows.PrintDialog_cw5n1h2txyewy\Settings\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Windows.PrintDialog_cw5n1h2txyewy\Settings\settings.dat.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Windows.PrintDialog_cw5n1h2txyewy\SystemAppData\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Windows.PrintDialog_cw5n1h2txyewy\TempState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\windows.immersivecontrolpanel_cw5n1h2txyewy\AC\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\windows.immersivecontrolpanel_cw5n1h2txyewy\AppData\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\windows.immersivecontrolpanel_cw5n1h2txyewy\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\windows.immersivecontrolpanel_cw5n1h2txyewy\LocalCache\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\windows.immersivecontrolpanel_cw5n1h2txyewy\LocalState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\windows.immersivecontrolpanel_cw5n1h2txyewy\RoamingState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\windows.immersivecontrolpanel_cw5n1h2txyewy\Settings\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\windows.immersivecontrolpanel_cw5n1h2txyewy\Settings\settings.dat.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\windows.immersivecontrolpanel_cw5n1h2txyewy\SystemAppData\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\windows.immersivecontrolpanel_cw5n1h2txyewy\TempState\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\windows_ie_ac_001\AC\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\windows_ie_ac_001\AC\Temp\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\windows_ie_ac_001\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\PeerDistRepub\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\PlaceholderTileLogoFolder\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Publishers\8wekyb3d8bbwe\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Publishers\8wekyb3d8bbwe\Fonts\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Publishers\8wekyb3d8bbwe\Licenses\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Publishers\8wekyb3d8bbwe\Microsoft.WindowsAlarms\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Publishers\8wekyb3d8bbwe\SettingsContainer\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Publishers\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\SolidDocuments\Acrobat\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\SolidDocuments\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\Diagnostics\ONENOTE\App1711685613490035100_99A35D1E-3751-4358-BECB-ACD88709D0DF.log
|
ASCII text, with very long lines (1299), with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\Diagnostics\ONENOTE\App1711685613490567000_99A35D1E-3751-4358-BECB-ACD88709D0DF.log
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\acrobat_sbx\Adobe\Acrobat\DC\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\acrobat_sbx\Adobe\Acrobat\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\acrobat_sbx\Adobe\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\acrobat_sbx\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2023-10-04 13-00-50-743.log.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2023-10-04 13-01-22-078.log.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6.log.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\acrocef_low\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\wctF86A.tmp.ETx6kDWq1
|
OpenPGP Public Key
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{00196C37-148E-41E4-B8A5-95A406865E5F}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{06F8739D-D50D-418B-973D-5BD0109B13F3}
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 780x107,
components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{088200D5-F8C9-4520-B785-FE759DA72EE8}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{08D5D36F-808E-4E83-9AE8-6F789569E2C6}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:05:55], progressive, precision 8, 612x618, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{08F3ED07-C4CA-4A01-A4CD-F8D274876E6A}
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 357x69, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{0DA52849-2718-499F-8E78-CADA2534CCCB}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{113B76F3-83E8-426B-BB03-8D0CD4613DB3}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{1535CDEE-0FDF-4F5D-8983-3A7002416C00}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{1723366F-B737-491C-9D43-27875CA61876}
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 17x608, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{173FB924-65F0-4845-A25D-F444A94C1BA9}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{1A82C484-0D2F-49A5-9BDD-96A82AABA70D}
|
PNG image data, 50 x 500, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{1DE48061-CFC6-43B6-A647-AC51F48097AC}
|
Windows Enhanced Metafile (EMF) image data version 0x10000
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{21EB56F1-41EF-49F8-B4FF-3028040DC623}
|
PNG image data, 813 x 99, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{2757D4A9-186C-4EFE-B02E-63DB794088C4}
|
PNG image data, 39 x 579, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{2F3159F8-F1CC-4C36-8EE9-F366F9996ED2}
|
PNG image data, 189 x 305, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{324BAD31-B9C3-4B8F-82B3-749401EC1E48}
|
PNG image data, 40 x 623, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{351FB896-F943-4968-86F2-BFF6E1480BF2}
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 814x45, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{35D6FA74-0069-4690-B838-AF82EC791655}
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 76x97, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{39BBCB38-861B-46E5-A351-EC77424DB523}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{3F2B5712-AF67-4797-B7DE-F168C15DFBC7}
|
PNG image data, 60 x 336, 4-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{451CE3A0-FE04-452D-9A89-A6E12A4F403F}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:15:20], progressive, precision 8, 604x784, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{46BC20F9-4FEC-4421-9871-3252C5E96305}
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 262x277,
components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{4B6CBD21-5462-48A9-A02D-47386407C0EF}
|
PNG image data, 88 x 574, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{4CBB353B-1276-4CAB-856C-F6C9D0CF1739}
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 814x105, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{4D976A28-8904-453F-8211-AB18741928ED}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{4F0CAE19-8BAA-49CE-80B9-13AFEA45B733}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:18:09], progressive, precision 8, 164x641, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{503250C2-031A-4C88-B2A5-55EB582F8B1C}
|
PNG image data, 176 x 513, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5105BF94-691C-4948-AABE-8AB2CECD2880}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5424ECA1-1543-4167-BCE1-CAA2099EF278}
|
PNG image data, 77 x 627, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{553F76E3-5635-4299-B965-35F99BD542AF}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:09:29], progressive, precision 8, 609x675, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{566F8522-C2F7-4E45-81E1-24AB9CF5EB14}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{569C6473-3F7B-42BD-BED2-200B0493DD20}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:08:07], baseline, precision 8, 595x450, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{56C728D7-A90D-4A0C-9A88-D52583B5A5D6}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:13:06], progressive, precision 8, 570x779, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5749F0C0-DCCD-44F0-9AB5-A519DAD7AD69}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{592915B5-6D2C-4543-8082-1CD0F1A3A3F0}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:12:29], progressive, precision 8, 598x766, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{598DE656-E0B7-4F06-B2AC-7CA15D2CFD75}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5B7A938C-A9D1-48F2-92CA-D04EBD77EF78}
|
PNG image data, 40 x 650, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5D26805B-4A94-4548-A583-8D853F8605B5}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5E0926CD-0754-4B93-B421-7A3C6713C90E}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{68BF5BDE-3D36-429D-9C71-8A0BE7DC8385}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:27:10], progressive, precision 8, 102x792, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{6AD2DE85-7F04-48A1-B54D-9097E6095C57}
|
PNG image data, 50 x 556, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{6C94C70D-8A9F-4B2A-B405-C8024545155D}
|
PNG image data, 189 x 305, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{6C951024-889E-465C-B8B9-8D382650C4FE}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{6E35A29E-284C-483C-AA7F-58520B48AF30}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{702B5982-E568-4CAD-A42B-07879FC2EBC0}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:44:07], progressive, precision 8, 611x163, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{72B8FAE7-A95C-493D-99F7-AA3D26F96507}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:18:09], progressive, precision 8, 164x641, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{7A0BF0D1-F5F1-4BF1-A626-EFC653AF2BB0}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{80B98EB8-B2D8-48F1-AF9F-07CA7B5D83CD}
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 276x139,
components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{810ED4DD-64D3-4422-A015-8E774A6453D3}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:19:29], progressive, precision 8, 221x792, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{826FFB33-8897-4966-A9FB-6DFDAFFC4DB9}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{836F9401-3705-47B4-BA6F-82388A86BEBD}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:06:24], progressive, precision 8, 38x792, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{83E48746-8DED-4408-AD0A-4217AC794CA7}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{8494C6CF-ADC9-4C46-BD75-DB06389A7167}
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 95x498, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{881A19C2-F329-4AE1-B4D1-AD53BD78D118}
|
PNG image data, 39 x 600, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{94EF5E5E-5C3B-45D0-9E1E-93D56733AC6A}
|
PNG image data, 177 x 123, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{964E6A55-97F1-4919-9CBC-443C44017EED}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{97423671-251B-43F0-9B31-3E1ADB43EA2D}
|
PNG image data, 171 x 552, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{9AB94840-E955-4D95-96F8-8DE0CFF90B9E}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{9BAB5C77-B517-4A04-84F2-957FB01DEA09}
|
PNG image data, 40 x 617, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{A018AD85-AC4F-43AF-82AC-D1AEECF71444}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{A165DC0F-E30D-46D5-BCA8-0F276C277C91}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{A1E10850-F2AA-4E6C-89CE-477E018AF069}
|
Windows Enhanced Metafile (EMF) image data version 0x10000
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{A3DAEF7F-792B-4186-A68E-8D28C0EBCF60}
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 14x341, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{A6EEE304-B90D-4B16-8C04-AB3AED8FF74B}
|
PNG image data, 50 x 600, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{A80A5913-364D-4891-85A4-A65909EA836E}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{AF2424F9-ABED-47E3-A203-42DCE5AFFB00}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{BC2BAA1E-B9F3-4734-B8B1-520C23A13160}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:11:38], progressive, precision 8, 577x757, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{BC3E3787-2DCF-477F-B822-F95EBAAFEDC1}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{C16D540A-B19A-4D3F-83FF-06263768E671}
|
PNG image data, 30 x 700, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{C42D6FF1-D92E-4D40-A5F5-128934B8094A}
|
PNG image data, 189 x 305, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{C796D861-E504-413E-951F-4B8253287E9A}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:10:32], progressive, precision 8, 594x773, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{C7CC0F6F-A4CE-489E-B25A-35ED26D94025}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{C92A86A7-BF75-46DB-8929-3BCB3CE8F8E8}
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 728x77, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{CB13E308-F049-435E-825B-8E7F6EB48397}
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 69x630, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{CB890C39-382E-4A3D-868E-3FE242C7BA69}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:08:07], baseline, precision 8, 595x450, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{CF105A7E-6C77-4785-85DE-4BCE101D560B}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{CFFE816A-B471-4245-ABC6-BD2DC5743B39}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{D00D90E7-AC7F-4C00-AF5C-2D7A5289163D}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:19:29], progressive, precision 8, 221x792, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{D3D506FC-7A21-464C-8F23-AF6528B319D8}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:26:15], progressive, precision 8, 216x792, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{D414EE35-4640-4583-B362-6CF443E4A0EB}
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 105x441,
components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{D5914F0F-FAFC-4D00-A886-4D0118BA8C75}
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 700x114, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{D7D1C7BB-946B-485F-93C4-E522E6856E7F}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{DF3B95AA-55BA-4CC6-A8CE-022E0E845229}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:06:24], progressive, precision 8, 38x792, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{DF450325-A54C-4FB0-9D79-CADB8466CA31}
|
Windows Enhanced Metafile (EMF) image data version 0x10000
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{E3EA6733-12B1-4A31-83D3-A2696C4BDEA6}
|
PNG image data, 3005 x 184, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{E80A0608-D8E9-46E0-831C-FDE0FEC096E7}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:05:55], progressive, precision 8, 612x618, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{ED2CCB8F-BEFB-4A33-B0ED-F65ED96D2D45}
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 70x626, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{F1065275-37E3-4C3B-AF8F-D86BC6F26828}
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 613x144, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{F334D6EA-47CD-4615-978F-E52B95916A88}
|
PNG image data, 85 x 470, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{F8F72B33-8D0F-4E78-B3F0-326F9BEF613C}
|
Windows Enhanced Metafile (EMF) image data version 0x10000
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{FB929E8F-271D-4F43-9B2C-5DACC0EC93D8}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Roaming\Adobe\Acrobat\DC\Collab\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Roaming\Adobe\Acrobat\DC\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Roaming\Adobe\Acrobat\DC\Forms\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Roaming\Adobe\Acrobat\DC\JSCache\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Roaming\Adobe\Acrobat\DC\JSCache\GlobData.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Adobe\Acrobat\DC\JSCache\GlobSettings.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Adobe\Acrobat\DC\Security\CRLCache\DF22CF8B8C3B46C10D3D5C407561EABEB57F8181.crl.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Adobe\Acrobat\DC\Security\CRLCache\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Roaming\Adobe\Acrobat\DC\Security\ES_session_store.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Adobe\Acrobat\DC\Security\ES_session_storek.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Adobe\Acrobat\DC\Security\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Roaming\Adobe\Acrobat\DC\Security\addressbook.acrodata.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Adobe\Acrobat\DC\TMDocs.sav.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Adobe\Acrobat\DC\TMGrpPrm.sav.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Adobe\Acrobat\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Roaming\Adobe\Acrobat\Preflight Acrobat Continuous\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Roaming\Adobe\CRLogs\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Roaming\Adobe\CRLogs\crashlogs\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Roaming\Adobe\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Roaming\Adobe\Flash Player\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Roaming\Adobe\Flash Player\NativeCache\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Roaming\Adobe\Headlights\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Roaming\Adobe\Linguistics\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Roaming\Adobe\LogTransport2CC\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Roaming\Adobe\LogTransport2\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Roaming\Adobe\RTTransfer\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Roaming\Adobe\Sonar\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Roaming\Adobe\Sonar\SonarCC\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\OneNote\16.0\Preferences.dat
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Extensions\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Crash Reports\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Crash Reports\InstallTime20230927232528.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Crash Reports\events\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Pending Pings\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Roaming\com.adobe.dunamis\56079431-ea46-4833-94f9-1ff5658cdb1c\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Roaming\com.adobe.dunamis\61f56613-c62c-4b17-84dd-62b60d5776aa\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Roaming\com.adobe.dunamis\6d9d9777-7ded-4768-8191-9a707d72b009\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Roaming\com.adobe.dunamis\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Roaming\com.adobe.dunamis\f2eb6c79-671d-4de2-b7be-3b2eea7abc47\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\Documents\AIXACVYBSB.docx.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\Documents\AIXACVYBSB.xlsx.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\Documents\DTBZGIOOSO.docx.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\Documents\DTBZGIOOSO.pdf.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\Documents\DVWHKMNFNN.png.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\Documents\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\Documents\HTAGVDFUIE.pdf.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\Documents\JSDNGYCOWY.jpg.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\Documents\KATAXZVCPS.jpg.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\Documents\KATAXZVCPS.xlsx.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\Documents\KZWFNRXYKI.png.ETx6kDWq1
|
OpenPGP Secret Key
|
dropped
|
||
C:\Users\user\Documents\NHPKIZUUSG.docx.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\Documents\NIKHQAIQAU.mp3.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\Documents\NWTVCDUMOB.jpg.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\Documents\NWTVCDUMOB.mp3.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\Documents\NWTVCDUMOB.pdf.ETx6kDWq1
|
DOS executable (COM, 0x8C-variant)
|
dropped
|
||
C:\Users\user\Documents\ONBQCLYSPU.png.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\Documents\RAYHIWGKDI.png.ETx6kDWq1
|
DOS executable (COM)
|
dropped
|
||
C:\Users\user\Documents\VLZDGUKUTZ.mp3.ETx6kDWq1
|
COM executable for DOS
|
dropped
|
||
C:\Users\user\Documents\VLZDGUKUTZ.pdf.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\Documents\VLZDGUKUTZ.xlsx.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\Documents\XZXHAVGRAG.docx.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\Documents\XZXHAVGRAG.jpg.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\Downloads\AIXACVYBSB.docx.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\Downloads\AIXACVYBSB.xlsx.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\Downloads\DTBZGIOOSO.docx.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\Downloads\DTBZGIOOSO.pdf.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\Downloads\DVWHKMNFNN.png.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\Downloads\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\Downloads\HTAGVDFUIE.pdf.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\Downloads\JSDNGYCOWY.jpg.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\Downloads\KATAXZVCPS.jpg.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\Downloads\KATAXZVCPS.xlsx.ETx6kDWq1
|
OpenPGP Public Key
|
dropped
|
||
C:\Users\user\Downloads\KZWFNRXYKI.png.ETx6kDWq1
|
PGP Secret Sub-key -
|
dropped
|
||
C:\Users\user\Downloads\NHPKIZUUSG.docx.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\Downloads\NIKHQAIQAU.mp3.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\Downloads\NWTVCDUMOB.jpg.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\Downloads\NWTVCDUMOB.mp3.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\Downloads\NWTVCDUMOB.pdf.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\Downloads\ONBQCLYSPU.png.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\Downloads\RAYHIWGKDI.png.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\Downloads\VLZDGUKUTZ.mp3.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\Downloads\VLZDGUKUTZ.pdf.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\Downloads\VLZDGUKUTZ.xlsx.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\Downloads\XZXHAVGRAG.docx.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\Downloads\XZXHAVGRAG.jpg.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\Downloads\XZXHAVGRAG.xlsx.ETx6kDWq1
|
zlib compressed data
|
dropped
|
||
C:\Users\user\Downloads\ZTGJILHXQB.mp3.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\Favorites\Amazon.url.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\Favorites\Bing.url.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\Favorites\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\Favorites\Facebook.url.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\Favorites\Google.url.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\Favorites\Links\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\Favorites\Live.url.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\Favorites\NYTimes.url.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\Favorites\Reddit.url.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\Favorites\Twitter.url.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\Favorites\Wikipedia.url.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\Favorites\Youtube.url.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\Links\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\Music\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\OneDrive\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\Pictures\Camera Roll\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\Pictures\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\Pictures\Saved Pictures\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\Recent\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\Saved Games\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\Searches\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\Searches\winrt--{S-1-5-21-2246122658-3693405117-2476756634-1002}-.searchconnector-ms.ETx6kDWq1
|
data
|
dropped
|
||
C:\Users\user\Videos\ETx6kDWq1.README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\_curlrc.ETx6kDWq1
|
data
|
dropped
|
||
C:\Windows\System32\spool\PRINTERS\00002.SPL
|
Microsoft OOXML
|
dropped
|
||
\Device\Null
|
ASCII text, with CRLF line terminators
|
dropped
|
There are 1655 hidden files, click here to show them.
Processes
Path
|
Cmdline
|
Malicious
|
|
---|---|---|---|
C:\Users\user\Desktop\kDRn5EwG6a.exe
|
"C:\Users\user\Desktop\kDRn5EwG6a.exe"
|
||
C:\ProgramData\8234.tmp
|
"C:\ProgramData\8234.tmp"
|
||
C:\Windows\SysWOW64\cmd.exe
|
"C:\Windows\System32\cmd.exe" /C DEL /F /Q C:\PROGRA~3\8234.tmp >> NUL
|
||
C:\Windows\splwow64.exe
|
C:\Windows\splwow64.exe 12288
|
||
C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTE.EXE
|
/insertdoc "C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\{8E059DBB-EA78-4B74-B8B9-67A43F643691}.xps" 133561592001010000
|
||
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
URLs
Name
|
IP
|
Malicious
|
|
---|---|---|---|
http://lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onionl
|
unknown
|
||
https://tox.chat/
|
unknown
|
||
http://lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion;q
|
unknown
|
||
http://lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion
|
unknown
|
||
http://lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onionur;j
|
unknown
|
||
http://lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onionic
|
unknown
|
||
http://lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion
|
unknown
|
||
http://lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onionicLr
|
unknown
|
||
http://lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onionHCjr&j
|
unknown
|
||
http://lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onioned
|
unknown
|
||
https://tox.c
|
unknown
|
||
http://lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onionc
|
unknown
|
||
http://lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onionalQq
|
unknown
|
||
http://lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onionin_r
|
unknown
|
||
http://lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onionFq
|
unknown
|
||
http://lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onional
|
unknown
|
||
http://lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion
|
unknown
|
||
http://lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion(q
|
unknown
|
||
https://support.mozilla.org/products/firefoxgro.allizom.troppus.zvXrErQ5GYDF
|
unknown
|
||
https://contile-images.services.mozilla.com/0TegrVVRalreHILhR2WvtD_CFzj13HCDcLqqpvXSOuY.10862.jpg
|
unknown
|
||
https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.
|
unknown
|
||
https://bridge.lga1.ap01.net/ctp?version=16.0.0&key=1696332238301000001.1&ci=1696332238417.12791&cta
|
unknown
|
||
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
|
unknown
|
||
https://support.mozilla.org/products/firefox
|
unknown
|
||
http://lockbitapt.uz
|
unknown
|
||
http://lockbitsupp.uz
|
unknown
|
||
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
|
unknown
|
||
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4QqmfZfYfQfafZbXfpbWfpbX7ReNxR3UIG8zInwYIFIVs9eYi
|
unknown
|
||
https://support.mozilla.org
|
unknown
|
||
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_7548d4575af019e4c148ccf1a78112802e66a0816a72fc94
|
unknown
|
There are 20 hidden URLs, click here to show them.
Registry
Path
|
Value
|
Malicious
|
|
---|---|---|---|
HKEY_CURRENT_USER\Control Panel\Desktop
|
WallPaper
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.ETx6kDWq1
|
NULL
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ETx6kDWq1\DefaultIcon
|
NULL
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
|
Owner
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
|
SessionHash
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
|
Sequence
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
|
RegFiles0000
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
|
RegFilesHash
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
|
Owner
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
|
SessionHash
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
|
Sequence
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
|
RegFiles0000
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
|
RegFilesHash
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
|
Owner
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
|
SessionHash
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
|
Sequence
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
|
RegFiles0000
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
|
RegFilesHash
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
|
Owner
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
|
SessionHash
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
|
Sequence
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
|
RegFiles0000
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
|
RegFilesHash
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
|
Owner
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
|
SessionHash
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
|
Sequence
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
|
RegFiles0000
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
|
RegFilesHash
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
|
Owner
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
|
SessionHash
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
|
Sequence
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
|
RegFiles0000
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
|
RegFilesHash
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer
|
GlobalAssocChangedCounter
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\AirSpaceChannel
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\AMSI/Debug
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\DirectShowFilterGraph
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\DirectShowPluginControl
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\EndpointMapper
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\ForwardedEvents
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\IHM_DebugChannel
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Intel-iaLPSS-GPIO/Analytic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Intel-iaLPSS2-GPIO2/Performance
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Intel-iaLPSS2-I2C/Debug
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\MedaFoundationVideoProc
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\MediaFoundationContentProtection
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-AppV-Client/Admin
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-AppV-Client/Admin
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-IEFRAME/Diagnostic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-OneCore-Setup/Analytic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-PerfTrack-IEFRAME/Diagnostic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-User Experience Virtualization-Agent
Driver/Operational
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-ApplicabilityEngine/Operational
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Application Server-Applications/Analytic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Application Server-Applications/Debug
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Application Server-Applications/Operational
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Application Server-Applications/Operational
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Application-Experience/Program-Compatibility-Assistant/Analytic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Application-Experience/Program-Compatibility-Troubleshooter
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Application-Experience/Program-Compatibility-Troubleshooter
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Application-Experience/Program-Telemetry
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AppLocker/Packaged app-Execution
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AppLocker/Packaged app-Execution
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AppModel-Runtime/Admin
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AppModel-Runtime/Admin
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AppModel-Runtime/Analytic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AppModel-Runtime/Debug
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AppModel-State/Diagnostic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AppReadiness/Admin
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AppReadiness/Admin
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AppXDeploymentServer/Restricted
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AppXDeploymentServer/Restricted
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AppxPackaging/Debug
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AppxPackaging/Operational
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AppxPackaging/Performance
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-ASN1/Operational
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AssignedAccess/Operational
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AssignedAccessBroker/Admin
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AssignedAccessBroker/Operational
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Audio/CaptureMonitor
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Audio/GlitchDetection
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-BackgroundTransfer-ContentPrefetcher/Operational
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Base-Filtering-Engine-Resource-Flows/Operational
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Battery/Diagnostic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Biometrics/Operational
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Biometrics/Operational
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-BitLocker-DrivePreparationTool/Admin
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-BitLocker-DrivePreparationTool/Admin
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-BitLocker-DrivePreparationTool/Operational
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-BitLocker-DrivePreparationTool/Operational
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-BitLocker/BitLocker Management
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-BitLocker/BitLocker Operational
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-BitLocker/Tracing
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Bits-Client/Analytic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-BranchCacheSMB/Analytic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-BTH-BTHPORT/HCI
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-BTH-BTHUSB/Diagnostic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-CAPI2/Operational
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-CloudStore/Operational
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-CodeIntegrity/Verbose
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-COM/RundownInstrumentation
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-ComDlg32/Analytic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Containers-BindFlt/Debug
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Containers-BindFlt/Operational
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-CoreWindow/Debug
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-CredUI/Diagnostic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Crypto-BCRYPT/Analytic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Crypto-DPAPI/BackUpKeySvc
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Crypto-DPAPI/BackUpKeySvc
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Crypto-DPAPI/Operational
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Crypto-DPAPI/Operational
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Crypto-RNG/Analytic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-DateTimeControlPanel/Analytic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-DesktopActivityModerator/Diagnostic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Operational
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Operational
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-DeviceUx/Informational
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Diagnosis-DPS/Operational
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Diagnosis-DPS/Operational
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Diagnosis-Perfhost/Analytic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Diagnosis-PLA/Operational
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Diagnosis-PLA/Operational
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Diagnosis-Scheduled/Operational
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Diagnosis-Scheduled/Operational
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Diagnosis-Scripted/Admin
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Diagnosis-Scripted/Admin
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Diagnosis-Scripted/Debug
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Diagnosis-Scripted/Operational
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Diagnosis-ScriptedDiagnosticsProvider/Operational
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Diagnosis-ScriptedDiagnosticsProvider/Operational
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Diagnostics-Performance/Operational
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Direct3D10_1/Analytic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-DirectComposition/Diagnostic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-DirectManipulation/Diagnostic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Documents/Performance
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-DriverFrameworks-UserMode/Operational
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-DSC/Admin
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-DSC/Admin
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-DucUpdateAgent/Operational
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-DucUpdateAgent/Operational
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-DUI/Diagnostic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-DUSER/Diagnostic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Dwm-API/Diagnostic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-DxgKrnl-Admin
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-DxgKrnl-Admin
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-DxgKrnl-Operational
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-EDP-Audit-TCB/Admin
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-FileHistory-Engine/BackupLog
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-FileHistory-EventListener/Analytic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-GroupPolicy/Operational
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-GroupPolicy/Operational
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Help/Operational
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Hyper-V-NETVSC/Diagnostic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-IndirectDisplays-ClassExtension-Events/Diagnostic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-International-RegionalOptionsControlPanel/Operational
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-International-RegionalOptionsControlPanel/Operational
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Kernel-File/Analytic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Kernel-Interrupt-Steering/Diagnostic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Kernel-IoTrace/Diagnostic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Kernel-LiveDump/Analytic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Kernel-LiveDump/Operational
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Kernel-LiveDump/Operational
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Kernel-WDI/Analytic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Kernel-XDV/Analytic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-KeyboardFilter/Admin
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-KeyboardFilter/Admin
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-KeyboardFilter/Operational
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-KeyboardFilter/Performance
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Known Folders API Service
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Known Folders API Service
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-L2NA/Diagnostic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-LanguagePackSetup/Analytic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-LanguagePackSetup/Debug
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-LanguagePackSetup/Operational
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-LanguagePackSetup/Operational
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-LimitsManagement/Diagnostic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-LinkLayerDiscoveryProtocol/Diagnostic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-LinkLayerDiscoveryProtocol/Operational
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-LiveId/Analytic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-LiveId/Operational
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-LiveId/Operational
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-LSA/Diagnostic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-LUA-ConsentUI/Diagnostic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Media-Streaming/DMC
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Media-Streaming/DMR
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Media-Streaming/MDE
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-MemoryDiagnostics-Results/Debug
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-MemoryDiagnostics-Results/Debug
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Minstore/Analytic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Mobile-Broadband-Experience-Parser-Task/Operational
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-mobsync/Diagnostic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-ModernDeployment-Diagnostics-Provider/Admin
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-ModernDeployment-Diagnostics-Provider/ManagementService
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-MPEG2-Video-Encoder-MFT_Analytic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Mprddm/Operational
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-MUI/Operational
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-MUI/Operational
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Narrator/Diagnostic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-NDIS-PacketCapture/Diagnostic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-NdisImPlatform/Operational
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-NdisImPlatform/Operational
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-NetworkLocationWizard/Operational
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-NetworkProvider/Operational
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Ntfs/Performance
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-OfflineFiles/Analytic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-OobeLdr/Analytic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-PackageStateRoaming/Operational
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-ParentalControls/Operational
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Partition/Analytic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Partition/Diagnostic
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-PerceptionSensorDataService/Operational
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-PerceptionSensorDataService/Operational
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-PersistentMemory-Nvdimm/Analytic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Program-Compatibility-Assistant/Analytic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Provisioning-Diagnostics-Provider/ManagementService
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Provisioning-Diagnostics-Provider/ManagementService
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-RemoteDesktopServices-RemoteFX-Synth3dvsc/Admin
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-RemoteDesktopServices-RemoteFX-Synth3dvsc/Admin
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-RemoteDesktopServices-RemoteFX-VM-Kernel-Mode-Transport/Debug
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-RemoteDesktopServices-RemoteFX-VM-User-Mode-Transport/Debug
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-RemoteDesktopServices-SessionServices/Operational
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-RemoteDesktopServices-SessionServices/Operational
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-RestartManager/Operational
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-RestartManager/Operational
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-RetailDemo/Admin
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-RetailDemo/Admin
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-RetailDemo/Operational
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-RetailDemo/Operational
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-RPC-Proxy/Debug
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-RPC/Debug
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-RPC/EEInfo
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-RRAS/Debug
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-RRAS/Operational
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Runtime-Graphics/Analytic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Runtime-Networking/Tracing
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Runtime-Windows-Media/WinRTAdaptiveMediaSource
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Runtime/CreateInstance
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-SearchUI/Operational
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Security-Adminless/Operational
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Security-UserConsentVerifier/Audit
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Security-Vault/Performance
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-SendTo/Diagnostic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-SettingSync/Debug
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Shell-DefaultPrograms/Diagnostic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-SMBClient/Analytic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-SmbClient/Audit
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-SMBServer/Audit
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-SMBServer/Audit
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-SMBServer/Connectivity
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-SMBServer/Connectivity
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-SMBServer/Diagnostic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-SMBServer/Operational
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-SMBServer/Performance
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-SruMon/Diagnostic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Storage-Disk/Admin
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Storage-Disk/Diagnose
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Storage-Storport/Admin
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Storage-Storport/Health
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Storage-Tiering-IoHeat/Heat
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-StorageManagement/Debug
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-StorageManagement/Operational
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-StorageManagement/Operational
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-StorageSettings/Diagnostic
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-StorageSettings/Diagnostic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-StorageSpaces-Driver/Diagnostic
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-StorageSpaces-Driver/Diagnostic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-StorageSpaces-Driver/Operational
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-StorageSpaces-Driver/Operational
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-StorageSpaces-ManagementAgent/WHC
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Store/Operational
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Store/Operational
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-StorPort/Operational
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Storsvc/Diagnostic
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Storsvc/Diagnostic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-TaskScheduler/Diagnostic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-TaskScheduler/Maintenance
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-TaskScheduler/Maintenance
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-TaskScheduler/Operational
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-TCPIP/Diagnostic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-TenantRestrictions/Operational
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-TenantRestrictions/Operational
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-TerminalServices-ClientUSBDevices/Admin
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-TerminalServices-ServerUSBDevices/Analytic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-UIAutomationCore/Debug
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-User Control Panel/Diagnostic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-User Control Panel/Operational
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-VHDMP-Operational
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-VIRTDISK-Analytic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Volume/Diagnostic
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-VolumeSnapshot-Driver/Analytic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-VolumeSnapshot-Driver/Operational
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-VolumeSnapshot-Driver/Operational
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-VPN-Client/Operational
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-VPN-Client/Operational
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Wcmsvc/Diagnostic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-WDAG-PolicyEvaluator-CSP/Operational
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-WDAG-PolicyEvaluator-GP/Operational
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-WDAG-PolicyEvaluator-GP/Operational
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-WebAuth/Operational
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-WebAuthN/Operational
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-WebAuthN/Operational
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-WebIO/Diagnostic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-WebPlatStorage-Server
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Websocket-Protocol-Component/Tracing
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-WFP/Analytic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-WFP/Operational
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-WFP/Operational
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Win32k/Contention
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Windeploy/Analytic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Windows Defender/Operational
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Windows Defender/Operational
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Windows Defender/WHC
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Windows Defender/WHC
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Windows Firewall With Advanced
Security/ConnectionSecurity
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Windows Firewall With Advanced
Security/ConnectionSecurityVerbose
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-WindowsBackup/ActionCenter
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-WindowsBackup/ActionCenter
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-WindowsColorSystem/Debug
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-WindowsUpdateClient/Operational
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-WinHttp/Diagnostic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-WinINet-Config/ProxyConfigChanged
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-WinINet-Config/ProxyConfigChanged
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-WinINet/WebSocket
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Wininit/Diagnostic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-WinNat/Oper
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-WinRM/Operational
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Wired-AutoConfig/Operational
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-WLAN-AutoConfig/Operational
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-WLAN-MediaManager/Diagnostic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Wordpad/Debug
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-WorkFolders/Analytic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-WorkFolders/Debug
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-WPD-ClassInstaller/Operational
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-WWAN-MM-Events/Diagnostic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-XAML/Default
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-XAudio2/Performance
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-WindowsPhone-Connectivity-WiFiConnSvc-Channel
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-WindowsPhone-Connectivity-WiFiConnSvc-Channel
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\muxencode
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Network Isolation Operational
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\NIS-Driver-WFP/Diagnostic
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\OpenSSH/Admin
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\OpenSSH/Debug
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\OSK_SoftKeyboard_Channel
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\SMSApi
|
Enabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\SMSApi
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\TabletPC_InputPanel_Channel/IHM
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\TimeBroker
|
ChannelAccess
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Windows Networking Vpn Plugin Platform/Operational
|
ChannelAccess
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\ClientTelemetry\Sampling
|
12
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\ONENOTE\7828
|
0
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\onenote\Resiliency\StartupItems
|
{8!
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Experiment\onenote
|
Language
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Experiment\onenote
|
EcsRequestPending
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Experiment\onenote
|
SubscriptionCustomerLicenseInfo
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{C9590FA7-2132-47FB-9A78-AF0BF19AF4E6}
|
NULL
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{C9590FA7-2132-47FB-9A78-AF0BF19AF4E6}\ProxyStubClsid32
|
NULL
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{C9590FA7-2132-47FB-9A78-AF0BF19AF4E6}\TypeLib
|
NULL
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{C9590FA7-2132-47FB-9A78-AF0BF19AF4E6}\TypeLib
|
Version
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{2DA16203-3F58-404F-839D-E4CDE7DD0DED}
|
NULL
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{2DA16203-3F58-404F-839D-E4CDE7DD0DED}\ProxyStubClsid32
|
NULL
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{2DA16203-3F58-404F-839D-E4CDE7DD0DED}\TypeLib
|
NULL
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{2DA16203-3F58-404F-839D-E4CDE7DD0DED}\TypeLib
|
Version
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{1D12BD3F-89B6-4077-AA2C-C9DC2BCA42F9}
|
NULL
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{1D12BD3F-89B6-4077-AA2C-C9DC2BCA42F9}\ProxyStubClsid32
|
NULL
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{1D12BD3F-89B6-4077-AA2C-C9DC2BCA42F9}\TypeLib
|
NULL
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{1D12BD3F-89B6-4077-AA2C-C9DC2BCA42F9}\TypeLib
|
Version
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{627EA7B4-95B5-4980-84C1-9D20DA4460B1}
|
NULL
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{627EA7B4-95B5-4980-84C1-9D20DA4460B1}\ProxyStubClsid32
|
NULL
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{627EA7B4-95B5-4980-84C1-9D20DA4460B1}\TypeLib
|
NULL
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{627EA7B4-95B5-4980-84C1-9D20DA4460B1}\TypeLib
|
Version
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{452AC71A-B655-4967-A208-A4CC39DD7949}\ProxyStubClsid32
|
NULL
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{452AC71A-B655-4967-A208-A4CC39DD7949}\TypeLib
|
NULL
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{452AC71A-B655-4967-A208-A4CC39DD7949}\TypeLib
|
Version
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{6D4B9C3E-CC05-493F-85E2-43D1006DF96A}\ProxyStubClsid32
|
NULL
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{8E8304B8-CBD1-44F8-B0E8-89C625B2002E}
|
NULL
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{8E8304B8-CBD1-44F8-B0E8-89C625B2002E}\TypeLib
|
NULL
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{8E8304B8-CBD1-44F8-B0E8-89C625B2002E}\TypeLib
|
Version
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{E2E1511D-502D-4BD0-8B3A-8A89A05CDCAE}
|
NULL
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{E2E1511D-502D-4BD0-8B3A-8A89A05CDCAE}\ProxyStubClsid32
|
NULL
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\onenote\general
|
ConsecutiveBootCrashes
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\onenote\general
|
ConsecutiveEarlyCrashes
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\onenote\general
|
EDPLastRevokeCheckTime
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\onenote\Options\Save
|
BackupFilenamePostfixStartSP1
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\onenote\Options\Save
|
BackupFilenamePostfixEndSP1
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\onenote\Options\Save
|
BackupFilenamePostfixEndRerepairSP1
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\onenote\general
|
DateLastAttemptedOpeningLocalNotebooksOnBoot
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\onenote\Options\Other
|
EnableMemoryTrayMenuItem
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\onenote\Page Sync Status
|
PageSyncStatusPersistentData
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\onenote\Page Sync Status
|
PageSyncStatusPersistentDataLastUpdateDate
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\onenote\general
|
LastCacheFclRepairSuccessTime
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Experiment\onenote
|
BuildNumber
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote
|
Expires
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
1
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
ChunkCount
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
1.1
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
1.2
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
1.3
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
1.4
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
1.5
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
1.6
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
1.7
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
1.8
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
1.9
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
1.10
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
1.11
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
1.12
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
1.13
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
1.14
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
1.15
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
1.16
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
1.17
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
1.18
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
1.19
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
1.20
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
1.21
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
VersionId
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote
|
ETag
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote
|
DeferredConfigs
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote
|
ConfigIds
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Roaming
|
RoamingLastSyncTimeOneNote
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Roaming
|
RoamingLastWriteTimeOneNote
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\IdentityCRL\ClockData
|
NULL
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\IdentityCRL\ClockData
|
ClockTimeSeconds
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\IdentityCRL\ClockData
|
TickCount
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\IdentityCRL\Immersive\production\Property
|
0018000FB27C2660
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\ClientTelemetry\Volatile
|
MsaDevice
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\000061091A0090400000000000F01FEC\Usage
|
NULL
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\000061091A0090400000000000F01FEC\Usage
|
OneNoteNonBootFilesIntl_1033
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\onenote\general
|
LastMyDocumentsPathUsed
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\onenote\general
|
LastAppliedNotebookColor
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\onenote\general
|
LastNotebookSyncTypeLogTime
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
|
en-CH
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
|
en-GB
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
|
en-CH
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
|
en-GB
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Internet
|
msoridShouldUseReauthRequestProxy
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common
|
SessionId
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\ONENOTE\7828
|
0
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\ONENOTE\7828
|
0
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\TypeLib\{F2A7EE29-8BF6-4a6d-83F1-098E366C709C}\1.0
|
NULL
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{C9590FA7-2132-47FB-9A78-AF0BF19AF4E6}
|
NULL
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{C9590FA7-2132-47FB-9A78-AF0BF19AF4E6}\ProxyStubClsid32
|
NULL
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{C9590FA7-2132-47FB-9A78-AF0BF19AF4E6}\TypeLib
|
NULL
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{2DA16203-3F58-404F-839D-E4CDE7DD0DED}
|
NULL
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{2DA16203-3F58-404F-839D-E4CDE7DD0DED}\ProxyStubClsid32
|
NULL
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{2DA16203-3F58-404F-839D-E4CDE7DD0DED}\TypeLib
|
NULL
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\TypeLib\{0EA692EE-BB50-4E3C-AEF0-356D91732725}\1.1
|
NULL
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{1D12BD3F-89B6-4077-AA2C-C9DC2BCA42F9}
|
NULL
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{1D12BD3F-89B6-4077-AA2C-C9DC2BCA42F9}\ProxyStubClsid32
|
NULL
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{1D12BD3F-89B6-4077-AA2C-C9DC2BCA42F9}\TypeLib
|
NULL
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{627EA7B4-95B5-4980-84C1-9D20DA4460B1}
|
NULL
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{627EA7B4-95B5-4980-84C1-9D20DA4460B1}\ProxyStubClsid32
|
NULL
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{627EA7B4-95B5-4980-84C1-9D20DA4460B1}\TypeLib
|
NULL
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{452AC71A-B655-4967-A208-A4CC39DD7949}
|
NULL
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{452AC71A-B655-4967-A208-A4CC39DD7949}\ProxyStubClsid32
|
NULL
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{452AC71A-B655-4967-A208-A4CC39DD7949}\TypeLib
|
NULL
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{6D4B9C3E-CC05-493F-85E2-43D1006DF96A}
|
NULL
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{6D4B9C3E-CC05-493F-85E2-43D1006DF96A}\ProxyStubClsid32
|
NULL
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{8E8304B8-CBD1-44F8-B0E8-89C625B2002E}
|
NULL
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{8E8304B8-CBD1-44F8-B0E8-89C625B2002E}\TypeLib
|
NULL
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Wow6432Node\Interface\{E2E1511D-502D-4BD0-8B3A-8A89A05CDCAE}\ProxyStubClsid32
|
NULL
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{E2E1511D-502D-4BD0-8B3A-8A89A05CDCAE}
|
NULL
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{E2E1511D-502D-4BD0-8B3A-8A89A05CDCAE}\ProxyStubClsid32
|
NULL
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=8192&uilcid=1033&build=16.0.16827&crev=3\0
|
FilePath
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=8192&uilcid=1033&build=16.0.16827&crev=3\0
|
StartDate
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=8192&uilcid=1033&build=16.0.16827&crev=3\0
|
EndDate
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs
|
LicenseCategoryInfo
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs
|
LicenseSKUInfo
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Roaming
|
RoamingConfigurableSettings
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Roaming
|
RoamingConfigurableSettings
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
ChunkCount
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
ChunkCount
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
ChunkCount
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
ChunkCount
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
ChunkCount
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
ChunkCount
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
ChunkCount
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
ChunkCount
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
ChunkCount
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
ChunkCount
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote
|
Expires
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\ONENOTE\7828
|
0
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Internet\WebServiceCache
|
LastClean
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\IdentityCRL\Immersive\production\Token\{2B379600-B42B-4FE9-A59C-A312FB934935}
|
DeviceTicket
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\IdentityCRL\Immersive\production\Token\{2B379600-B42B-4FE9-A59C-A312FB934935}
|
DeviceId
|
There are 478 hidden registries, click here to show them.
Memdumps
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
---|---|---|---|---|
AF1000
|
unkown
|
page execute read
|
||
150E000
|
heap
|
page read and write
|
||
AF1000
|
unkown
|
page execute read
|
||
2EFE000
|
stack
|
page read and write
|
||
155C000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
172C000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1549000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1571000
|
heap
|
page read and write
|
||
16B5000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1664000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
1583000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1579000
|
heap
|
page read and write
|
||
1582000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
3545000
|
heap
|
page read and write
|
||
155C000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1644000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
1660000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1579000
|
heap
|
page read and write
|
||
173E000
|
heap
|
page read and write
|
||
16B9000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
16F9000
|
heap
|
page read and write
|
||
1583000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
1602000
|
heap
|
page read and write
|
||
15A6000
|
heap
|
page read and write
|
||
1583000
|
heap
|
page read and write
|
||
3549000
|
heap
|
page read and write
|
||
3543000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1602000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
3541000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
3540000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
15E7000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
15A1000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
3549000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1424000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1664000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1424000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1583000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
3547000
|
heap
|
page read and write
|
||
1662000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1583000
|
heap
|
page read and write
|
||
1579000
|
heap
|
page read and write
|
||
171B000
|
heap
|
page read and write
|
||
1583000
|
heap
|
page read and write
|
||
40E0000
|
direct allocation
|
page read and write
|
||
3545000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
155F000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
157D000
|
heap
|
page read and write
|
||
1571000
|
heap
|
page read and write
|
||
1583000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
3541000
|
heap
|
page read and write
|
||
354A000
|
heap
|
page read and write
|
||
1612000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
165E000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
157D000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1662000
|
heap
|
page read and write
|
||
1571000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
16FB000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
169C000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
16B9000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1424000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
1664000
|
heap
|
page read and write
|
||
167D000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
1664000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
15A1000
|
heap
|
page read and write
|
||
15E7000
|
heap
|
page read and write
|
||
167A000
|
heap
|
page read and write
|
||
1424000
|
heap
|
page read and write
|
||
1602000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
1716000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1582000
|
heap
|
page read and write
|
||
166C000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1549000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
15C1000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1549000
|
heap
|
page read and write
|
||
16FB000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1716000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1424000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
1642000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1657000
|
heap
|
page read and write
|
||
3541000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
160A000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
157D000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1642000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1546000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
15E7000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
16B9000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
3540000
|
heap
|
page read and write
|
||
15F4000
|
heap
|
page read and write
|
||
404000
|
unkown
|
page readonly
|
||
32A1000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1549000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
3549000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
1668000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1622000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1583000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1424000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
1424000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1602000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1549000
|
heap
|
page read and write
|
||
15E7000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
1571000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
19B000
|
stack
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
15E7000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
157C000
|
heap
|
page read and write
|
||
410000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
157D000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
155F000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
16F9000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
16C3000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
15E7000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
1579000
|
heap
|
page read and write
|
||
1571000
|
heap
|
page read and write
|
||
15F6000
|
heap
|
page read and write
|
||
16F9000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
7FDC0000
|
direct allocation
|
page execute and read and write
|
||
15E8000
|
heap
|
page read and write
|
||
354F000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1622000
|
heap
|
page read and write
|
||
1602000
|
heap
|
page read and write
|
||
1628000
|
heap
|
page read and write
|
||
171B000
|
heap
|
page read and write
|
||
1538000
|
heap
|
page read and write
|
||
1602000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
161A000
|
heap
|
page read and write
|
||
1583000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
167C000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1664000
|
heap
|
page read and write
|
||
1571000
|
heap
|
page read and write
|
||
15C1000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1573000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1664000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
1595000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
3541000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
1622000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
15E7000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
16C3000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1549000
|
heap
|
page read and write
|
||
1571000
|
heap
|
page read and write
|
||
15F2000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
15C7000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
33EE000
|
stack
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1583000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
3545000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
15E7000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1582000
|
heap
|
page read and write
|
||
1579000
|
heap
|
page read and write
|
||
1579000
|
heap
|
page read and write
|
||
1660000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1549000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1538000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1549000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
1662000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
354D000
|
heap
|
page read and write
|
||
1627000
|
heap
|
page read and write
|
||
1583000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1571000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
157D000
|
heap
|
page read and write
|
||
155F000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
15C8000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1547000
|
heap
|
page read and write
|
||
1652000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1583000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1693000
|
heap
|
page read and write
|
||
354F000
|
heap
|
page read and write
|
||
15E7000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
1586000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
7FE20000
|
direct allocation
|
page execute and read and write
|
||
167B000
|
heap
|
page read and write
|
||
1583000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1664000
|
heap
|
page read and write
|
||
1677000
|
heap
|
page read and write
|
||
155F000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
1664000
|
heap
|
page read and write
|
||
166D000
|
heap
|
page read and write
|
||
1664000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1644000
|
heap
|
page read and write
|
||
354F000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
1627000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1582000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
FCB000
|
stack
|
page read and write
|
||
1571000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1595000
|
heap
|
page read and write
|
||
1652000
|
heap
|
page read and write
|
||
1644000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1677000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
3545000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
16F9000
|
heap
|
page read and write
|
||
354D000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
16BD000
|
heap
|
page read and write
|
||
1652000
|
heap
|
page read and write
|
||
16B9000
|
heap
|
page read and write
|
||
1642000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
164D000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1583000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
15C9000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1667000
|
heap
|
page read and write
|
||
354E000
|
heap
|
page read and write
|
||
410E000
|
stack
|
page read and write
|
||
1664000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
157D000
|
heap
|
page read and write
|
||
1664000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1571000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
1579000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1662000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1578000
|
heap
|
page read and write
|
||
167D000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
155F000
|
heap
|
page read and write
|
||
15E7000
|
heap
|
page read and write
|
||
1584000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
15E7000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1571000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
434F000
|
stack
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
1667000
|
heap
|
page read and write
|
||
16B9000
|
heap
|
page read and write
|
||
354E000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
15E7000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
1571000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1583000
|
heap
|
page read and write
|
||
1673000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
354D000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
155C000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
15E7000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
1632000
|
heap
|
page read and write
|
||
15C1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
B0B000
|
unkown
|
page write copy
|
||
32E3000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
3546000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1573000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
15E7000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
1583000
|
heap
|
page read and write
|
||
B0A000
|
unkown
|
page readonly
|
||
32A1000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
1602000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1579000
|
heap
|
page read and write
|
||
1549000
|
heap
|
page read and write
|
||
15F9000
|
heap
|
page read and write
|
||
1677000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
1579000
|
heap
|
page read and write
|
||
157C000
|
heap
|
page read and write
|
||
1659000
|
heap
|
page read and write
|
||
163D000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
3549000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
3541000
|
heap
|
page read and write
|
||
1665000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
354A000
|
heap
|
page read and write
|
||
1549000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1736000
|
heap
|
page read and write
|
||
166F000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
167D000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1500000
|
heap
|
page read and write
|
||
1602000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
160B000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1424000
|
heap
|
page read and write
|
||
1664000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1574000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
3548000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
354E000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
3546000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
6DE000
|
heap
|
page read and write
|
||
153C000
|
heap
|
page read and write
|
||
1571000
|
heap
|
page read and write
|
||
1602000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
3546000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
166E000
|
heap
|
page read and write
|
||
1583000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
3541000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
1549000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1424000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
1659000
|
heap
|
page read and write
|
||
1424000
|
heap
|
page read and write
|
||
16B9000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
3548000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
164A000
|
heap
|
page read and write
|
||
1678000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1698000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
172C000
|
heap
|
page read and write
|
||
1665000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
354F000
|
heap
|
page read and write
|
||
1579000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1632000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
16F9000
|
heap
|
page read and write
|
||
15E7000
|
heap
|
page read and write
|
||
15E7000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1624000
|
heap
|
page read and write
|
||
1758000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1673000
|
heap
|
page read and write
|
||
1584000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1579000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
15E7000
|
heap
|
page read and write
|
||
1571000
|
heap
|
page read and write
|
||
1579000
|
heap
|
page read and write
|
||
354C000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
1576000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
173C000
|
heap
|
page read and write
|
||
354E000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
354C000
|
heap
|
page read and write
|
||
23C0000
|
heap
|
page read and write
|
||
15A6000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
1571000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
1584000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
3546000
|
heap
|
page read and write
|
||
15C1000
|
heap
|
page read and write
|
||
157D000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
14B0000
|
heap
|
page execute and read and write
|
||
32A1000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
167D000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
B14000
|
unkown
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1664000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
1632000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
156D000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
167D000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
3547000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
1530000
|
heap
|
page read and write
|
||
1424000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
157D000
|
heap
|
page read and write
|
||
354F000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
157A000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
161A000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
1639000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1716000
|
heap
|
page read and write
|
||
1424000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1586000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
146E000
|
stack
|
page read and write
|
||
B17000
|
unkown
|
page readonly
|
||
157D000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
154E000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
1582000
|
heap
|
page read and write
|
||
1547000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
400000
|
unkown
|
page readonly
|
||
1664000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1583000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1736000
|
heap
|
page read and write
|
||
157D000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
35EE000
|
stack
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1665000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
15F3000
|
heap
|
page read and write
|
||
405000
|
unkown
|
page read and write
|
||
167C000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
1594000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1549000
|
heap
|
page read and write
|
||
1540000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1583000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
167D000
|
heap
|
page read and write
|
||
16BF000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
16F9000
|
heap
|
page read and write
|
||
354B000
|
heap
|
page read and write
|
||
152E000
|
heap
|
page read and write
|
||
1736000
|
heap
|
page read and write
|
||
354D000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
1592000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
1549000
|
heap
|
page read and write
|
||
166C000
|
heap
|
page read and write
|
||
1546000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
167A000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
167D000
|
heap
|
page read and write
|
||
1583000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1622000
|
heap
|
page read and write
|
||
167C000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
155F000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
15F2000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1602000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
155F000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
16F5000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1571000
|
heap
|
page read and write
|
||
1584000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
1597000
|
heap
|
page read and write
|
||
1622000
|
heap
|
page read and write
|
||
1669000
|
heap
|
page read and write
|
||
1653000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1668000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
166E000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
15E7000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1579000
|
heap
|
page read and write
|
||
15F9000
|
heap
|
page read and write
|
||
171B000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1652000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
1652000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
16B9000
|
heap
|
page read and write
|
||
16F9000
|
heap
|
page read and write
|
||
3545000
|
heap
|
page read and write
|
||
15E7000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
155F000
|
heap
|
page read and write
|
||
354C000
|
heap
|
page read and write
|
||
1424000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
3547000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1563000
|
heap
|
page read and write
|
||
1736000
|
heap
|
page read and write
|
||
1579000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
154E000
|
heap
|
page read and write
|
||
1537000
|
heap
|
page read and write
|
||
1571000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1424000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1644000
|
heap
|
page read and write
|
||
15E7000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1424000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
3544000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
15C1000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1664000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
1639000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1595000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1542000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
167D000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1644000
|
heap
|
page read and write
|
||
1424000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
1552000
|
heap
|
page read and write
|
||
1671000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
155F000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
AF0000
|
unkown
|
page readonly
|
||
256E000
|
stack
|
page read and write
|
||
169C000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1582000
|
heap
|
page read and write
|
||
1583000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
15E7000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
2C7E000
|
stack
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
15E7000
|
heap
|
page read and write
|
||
1671000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1549000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
16EB000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1645000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1644000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
3546000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
15E7000
|
heap
|
page read and write
|
||
400000
|
unkown
|
page readonly
|
||
32A1000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
16B9000
|
heap
|
page read and write
|
||
1659000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1533000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1424000
|
heap
|
page read and write
|
||
16EB000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
15E7000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
33F0000
|
heap
|
page read and write
|
||
16F9000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1660000
|
heap
|
page read and write
|
||
15F2000
|
heap
|
page read and write
|
||
7FE30000
|
direct allocation
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
155F000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1644000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1602000
|
heap
|
page read and write
|
||
16F9000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1652000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
2460000
|
heap
|
page execute and read and write
|
||
15EA000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1549000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
1602000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
354F000
|
heap
|
page read and write
|
||
1549000
|
heap
|
page read and write
|
||
155C000
|
heap
|
page read and write
|
||
1424000
|
heap
|
page read and write
|
||
354B000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
167D000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
154C000
|
heap
|
page read and write
|
||
155E000
|
heap
|
page read and write
|
||
1583000
|
heap
|
page read and write
|
||
15E7000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1645000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
3543000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
164B000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
1665000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
1642000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
313C000
|
stack
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
3540000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
3548000
|
heap
|
page read and write
|
||
2EBF000
|
stack
|
page read and write
|
||
1660000
|
heap
|
page read and write
|
||
1400000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1632000
|
heap
|
page read and write
|
||
1698000
|
heap
|
page read and write
|
||
3549000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1571000
|
heap
|
page read and write
|
||
1579000
|
heap
|
page read and write
|
||
15E7000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
354A000
|
heap
|
page read and write
|
||
16F9000
|
heap
|
page read and write
|
||
1602000
|
heap
|
page read and write
|
||
1653000
|
heap
|
page read and write
|
||
401000
|
unkown
|
page execute and read and write
|
||
167B000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
3545000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
1596000
|
heap
|
page read and write
|
||
585000
|
heap
|
page read and write
|
||
2370000
|
direct allocation
|
page read and write
|
||
1632000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
166D000
|
heap
|
page read and write
|
||
1583000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
15E7000
|
heap
|
page read and write
|
||
40DD000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1579000
|
heap
|
page read and write
|
||
303C000
|
stack
|
page read and write
|
||
1579000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
1531000
|
heap
|
page read and write
|
||
1693000
|
heap
|
page read and write
|
||
354C000
|
heap
|
page read and write
|
||
3425000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
15E7000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
16F9000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
406000
|
unkown
|
page readonly
|
||
15E8000
|
heap
|
page read and write
|
||
161F000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
1664000
|
heap
|
page read and write
|
||
1571000
|
heap
|
page read and write
|
||
15E7000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1698000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
25AE000
|
stack
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
3547000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
1698000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
160A000
|
heap
|
page read and write
|
||
16BF000
|
heap
|
page read and write
|
||
389F000
|
stack
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
B16000
|
unkown
|
page write copy
|
||
167B000
|
heap
|
page read and write
|
||
1582000
|
heap
|
page read and write
|
||
1424000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1571000
|
heap
|
page read and write
|
||
3540000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
173C000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1533000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
1642000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
1659000
|
heap
|
page read and write
|
||
15E7000
|
heap
|
page read and write
|
||
3545000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
1617000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1602000
|
heap
|
page read and write
|
||
1602000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
155E000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
1622000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
B0A000
|
unkown
|
page readonly
|
||
690000
|
heap
|
page read and write
|
||
3548000
|
heap
|
page read and write
|
||
1424000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
161D000
|
heap
|
page read and write
|
||
2C3F000
|
stack
|
page read and write
|
||
1644000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
1579000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1579000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
19FD000
|
stack
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
B16000
|
unkown
|
page write copy
|
||
1657000
|
heap
|
page read and write
|
||
2380000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1424000
|
heap
|
page read and write
|
||
2AFF000
|
stack
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1642000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1579000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
3544000
|
heap
|
page read and write
|
||
3433000
|
heap
|
page execute and read and write
|
||
1672000
|
heap
|
page read and write
|
||
53E000
|
stack
|
page read and write
|
||
404000
|
unkown
|
page readonly
|
||
1674000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
3548000
|
heap
|
page read and write
|
||
1424000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
3544000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
171B000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
3543000
|
heap
|
page read and write
|
||
353F000
|
stack
|
page read and write
|
||
3547000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
15E7000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
354E000
|
heap
|
page read and write
|
||
1549000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1677000
|
heap
|
page read and write
|
||
3544000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
1664000
|
heap
|
page read and write
|
||
3541000
|
heap
|
page read and write
|
||
1584000
|
heap
|
page read and write
|
||
161A000
|
heap
|
page read and write
|
||
1652000
|
heap
|
page read and write
|
||
15F2000
|
heap
|
page read and write
|
||
2FFF000
|
stack
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1546000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
424E000
|
stack
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
3543000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
167D000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
15E7000
|
heap
|
page read and write
|
||
1592000
|
heap
|
page read and write
|
||
16B9000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
155F000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
1579000
|
heap
|
page read and write
|
||
16C3000
|
heap
|
page read and write
|
||
1571000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1571000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
1602000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
2390000
|
heap
|
page read and write
|
||
16F9000
|
heap
|
page read and write
|
||
1583000
|
heap
|
page read and write
|
||
1584000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
1571000
|
heap
|
page read and write
|
||
163A000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1716000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1664000
|
heap
|
page read and write
|
||
3549000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
15C1000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1573000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1AFE000
|
stack
|
page read and write
|
||
167C000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
16B9000
|
heap
|
page read and write
|
||
1602000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
156E000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
167D000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
16F9000
|
heap
|
page read and write
|
||
1584000
|
heap
|
page read and write
|
||
1571000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
354D000
|
heap
|
page read and write
|
||
1664000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1546000
|
heap
|
page read and write
|
||
1579000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
1571000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
2DBE000
|
stack
|
page read and write
|
||
1751000
|
heap
|
page read and write
|
||
1751000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1579000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
173E000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1571000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1549000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
1571000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1632000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1573000
|
heap
|
page read and write
|
||
1642000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
157D000
|
heap
|
page read and write
|
||
155B000
|
heap
|
page read and write
|
||
1571000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1583000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1667000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1672000
|
heap
|
page read and write
|
||
354C000
|
heap
|
page read and write
|
||
1424000
|
heap
|
page read and write
|
||
354F000
|
heap
|
page read and write
|
||
155C000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
16B9000
|
heap
|
page read and write
|
||
173E000
|
heap
|
page read and write
|
||
1583000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
1583000
|
heap
|
page read and write
|
||
3549000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1612000
|
heap
|
page read and write
|
||
420F000
|
stack
|
page read and write
|
||
1579000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1546000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
354F000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
154F000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1583000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
164A000
|
heap
|
page read and write
|
||
3546000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
15C8000
|
heap
|
page read and write
|
||
3547000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
16B9000
|
heap
|
page read and write
|
||
171B000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
167C000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
16C7000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
160A000
|
heap
|
page read and write
|
||
1549000
|
heap
|
page read and write
|
||
354A000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1629000
|
heap
|
page read and write
|
||
1571000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1549000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
2D7F000
|
stack
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
4F0000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
6C4000
|
heap
|
page read and write
|
||
161A000
|
heap
|
page read and write
|
||
1652000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
1583000
|
heap
|
page read and write
|
||
1664000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
1546000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
169C000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1652000
|
heap
|
page read and write
|
||
AF0000
|
unkown
|
page readonly
|
||
167B000
|
heap
|
page read and write
|
||
1424000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1614000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1424000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1662000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1698000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
16E3000
|
heap
|
page read and write
|
||
3546000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
3548000
|
heap
|
page read and write
|
||
1693000
|
heap
|
page read and write
|
||
157D000
|
heap
|
page read and write
|
||
15E7000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
1632000
|
heap
|
page read and write
|
||
1639000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
3680000
|
heap
|
page read and write
|
||
15E7000
|
heap
|
page read and write
|
||
16CF000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
3547000
|
heap
|
page read and write
|
||
15DF000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
1424000
|
heap
|
page read and write
|
||
163D000
|
heap
|
page read and write
|
||
1571000
|
heap
|
page read and write
|
||
155F000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
15C6000
|
heap
|
page read and write
|
||
1549000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
15E7000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
1664000
|
heap
|
page read and write
|
||
1751000
|
heap
|
page read and write
|
||
1583000
|
heap
|
page read and write
|
||
1668000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
3546000
|
heap
|
page read and write
|
||
1424000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
1579000
|
heap
|
page read and write
|
||
1420000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
3420000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
152F000
|
heap
|
page read and write
|
||
1424000
|
heap
|
page read and write
|
||
1583000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
155C000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1571000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1583000
|
heap
|
page read and write
|
||
406000
|
unkown
|
page readonly
|
||
167B000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1424000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
16DB000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1546000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
167C000
|
heap
|
page read and write
|
||
1622000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
3543000
|
heap
|
page read and write
|
||
1585000
|
heap
|
page read and write
|
||
155F000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
166A000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1583000
|
heap
|
page read and write
|
||
1664000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1602000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1668000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1582000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1579000
|
heap
|
page read and write
|
||
1424000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1644000
|
heap
|
page read and write
|
||
15A6000
|
heap
|
page read and write
|
||
1579000
|
heap
|
page read and write
|
||
1549000
|
heap
|
page read and write
|
||
16F9000
|
heap
|
page read and write
|
||
1632000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
354E000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
3547000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
9B000
|
stack
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
1549000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
25B0000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
3543000
|
heap
|
page read and write
|
||
16FB000
|
heap
|
page read and write
|
||
68F000
|
stack
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
3545000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
3690000
|
direct allocation
|
page read and write
|
||
1579000
|
heap
|
page read and write
|
||
1602000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1644000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
12FC000
|
stack
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
15C1000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1572000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
1602000
|
heap
|
page read and write
|
||
1583000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
166E000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
1583000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1571000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
163D000
|
heap
|
page read and write
|
||
1579000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
354C000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1549000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
7FE40000
|
direct allocation
|
page execute and read and write
|
||
3544000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
29FE000
|
stack
|
page read and write
|
||
1571000
|
heap
|
page read and write
|
||
3544000
|
heap
|
page read and write
|
||
169C000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
167A000
|
heap
|
page read and write
|
||
1582000
|
heap
|
page read and write
|
||
16F9000
|
heap
|
page read and write
|
||
16DB000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
354A000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1596000
|
heap
|
page read and write
|
||
173C000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
2463000
|
heap
|
page execute and read and write
|
||
1602000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1652000
|
heap
|
page read and write
|
||
166D000
|
heap
|
page read and write
|
||
3540000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
3549000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
16F9000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
1320000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
1627000
|
heap
|
page read and write
|
||
1579000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
167A000
|
heap
|
page read and write
|
||
15C7000
|
heap
|
page read and write
|
||
226E000
|
stack
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
3549000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
1622000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
15E7000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
15C1000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
16BC000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
3548000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
354B000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1574000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
1571000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
3548000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
15E7000
|
heap
|
page read and write
|
||
1424000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
3540000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
3549000
|
heap
|
page read and write
|
||
1602000
|
heap
|
page read and write
|
||
1552000
|
heap
|
page read and write
|
||
3549000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
580000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
354D000
|
heap
|
page read and write
|
||
401000
|
unkown
|
page execute read
|
||
15E8000
|
heap
|
page read and write
|
||
1584000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
1698000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1677000
|
heap
|
page read and write
|
||
157D000
|
heap
|
page read and write
|
||
3548000
|
heap
|
page read and write
|
||
155E000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1736000
|
heap
|
page read and write
|
||
15C1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
167A000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
1549000
|
heap
|
page read and write
|
||
1670000
|
heap
|
page read and write
|
||
15E7000
|
heap
|
page read and write
|
||
1579000
|
heap
|
page read and write
|
||
1644000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
166A000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1716000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
15E7000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1573000
|
heap
|
page read and write
|
||
1579000
|
heap
|
page read and write
|
||
1537000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
15E7000
|
heap
|
page read and write
|
||
354E000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
16B5000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1571000
|
heap
|
page read and write
|
||
166E000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
1664000
|
heap
|
page read and write
|
||
1660000
|
heap
|
page read and write
|
||
16F9000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
1614000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
1664000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
1582000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
16F9000
|
heap
|
page read and write
|
||
1582000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1583000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
165E000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
150A000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
169C000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
1602000
|
heap
|
page read and write
|
||
1582000
|
heap
|
page read and write
|
||
160A000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
3546000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
15E7000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1716000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
16FA000
|
heap
|
page read and write
|
||
165E000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
161A000
|
heap
|
page read and write
|
||
1622000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
173E000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1424000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
15BB000
|
heap
|
page read and write
|
||
153C000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
1549000
|
heap
|
page read and write
|
||
1627000
|
heap
|
page read and write
|
||
15E7000
|
heap
|
page read and write
|
||
1602000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1571000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1602000
|
heap
|
page read and write
|
||
B0B000
|
unkown
|
page write copy
|
||
32E3000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
16FB000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
16DB000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1579000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1549000
|
heap
|
page read and write
|
||
155C000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
3547000
|
heap
|
page read and write
|
||
69A000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
1424000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1583000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1549000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
1698000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
15B6000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
3548000
|
heap
|
page read and write
|
||
1614000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
3430000
|
heap
|
page execute and read and write
|
||
167B000
|
heap
|
page read and write
|
||
15E7000
|
heap
|
page read and write
|
||
1571000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1424000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1424000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
236F000
|
stack
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
1602000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
3CE0000
|
direct allocation
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
16F9000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
14AE000
|
stack
|
page read and write
|
||
3540000
|
heap
|
page read and write
|
||
1571000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
15E7000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
1579000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
3549000
|
heap
|
page read and write
|
||
155C000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1586000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
155C000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
3546000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
32A0000
|
heap
|
page read and write
|
||
1583000
|
heap
|
page read and write
|
||
69E000
|
heap
|
page read and write
|
||
B17000
|
unkown
|
page readonly
|
||
162A000
|
heap
|
page read and write
|
||
16B5000
|
heap
|
page read and write
|
||
1644000
|
heap
|
page read and write
|
||
1549000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
1587000
|
heap
|
page read and write
|
||
1652000
|
heap
|
page read and write
|
||
1549000
|
heap
|
page read and write
|
||
1579000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1602000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
2B3E000
|
stack
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
155C000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
1571000
|
heap
|
page read and write
|
||
1662000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
167D000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1595000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
3542000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
166C000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
354E000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1665000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1537000
|
heap
|
page read and write
|
||
14F0000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
354C000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
155F000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
1664000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
16D9000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
550000
|
heap
|
page execute and read and write
|
||
32A1000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
16B9000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
16B9000
|
heap
|
page read and write
|
||
1579000
|
heap
|
page read and write
|
||
1424000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
354B000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
7FE10000
|
direct allocation
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
15EA000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1672000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
3545000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
167D000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
16B9000
|
heap
|
page read and write
|
||
354E000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
16FA000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
155B000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1579000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
1583000
|
heap
|
page read and write
|
||
1571000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
1645000
|
heap
|
page read and write
|
||
1674000
|
heap
|
page read and write
|
||
15A6000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
16B9000
|
heap
|
page read and write
|
||
1672000
|
heap
|
page read and write
|
||
354F000
|
heap
|
page read and write
|
||
405000
|
unkown
|
page write copy
|
||
32A1000
|
heap
|
page read and write
|
||
157D000
|
heap
|
page read and write
|
||
16DB000
|
heap
|
page read and write
|
||
1601000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
3543000
|
heap
|
page read and write
|
||
16BF000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1549000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1571000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
1667000
|
heap
|
page read and write
|
||
32E3000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
1622000
|
heap
|
page read and write
|
||
15E8000
|
heap
|
page read and write
|
||
167B000
|
heap
|
page read and write
|
||
16C7000
|
heap
|
page read and write
|
There are 2357 hidden memdumps, click here to show them.