IOC Report
Document.doc.scr.exe

loading gif

Files

File Path
Type
Category
Malicious
Document.doc.scr.exe
PE32 executable (GUI) Intel 80386, for MS Windows
initial sample
malicious
C:\Users\user\AppData\Local\ConnectedDevicesPlatform\L.user\ActivitiesCache.db-shm.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Google\Chrome\User Data\GrShaderCache\data_1.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Google\Chrome\User Data\GrShaderCache\index.Qs2QSInbk
OpenPGP Public Key
dropped
malicious
C:\Users\user\AppData\Local\Google\Chrome\User Data\GraphiteDawnCache\data_1.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Google\Chrome\User Data\GraphiteDawnCache\index.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Google\Chrome\User Data\ShaderCache\index.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Google\Chrome\User Data\first_party_sets.db.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cache2\doomed\14645.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cache2\entries\62FC1E8DCE1991EEB55DE9EFADF47EA578A22AB5.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cache2\entries\C5FD1F724F49F95970FE8CD30C20519BF4582045.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cache2\entries\D0F48A0632B6C451791F4257697E861961F06A6F.Qs2QSInbk
COM executable for DOS
dropped
malicious
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cache2\entries\DED23BB33EA3C88FAD1C0A1CD53916E0D8C424D3.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cache2\entries\E557A7C6ADAC24EDE9B88CACC662B8A371C1931D.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cache2\entries\E707EC8A256322E87908664A49F800B7B48E0961.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalState\ThirdPartyNotice.html.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Wallet_8wekyb3d8bbwe\AC\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\MediaDb.v1.sqlite-shm.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\PhotosAppTracing_startedInBGMode.etl.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\Indexed DB\edb.log.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\Indexed DB\edbres00001.jrs.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\Indexed DB\edbres00002.jrs.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\Indexed DB\edbtmp.log.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\308046B0AF4A39CB.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\308046B0AF4A39CB;PrivateBrowsingAUMID.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Chrome.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\MSEdge.Qs2QSInbk
OpenPGP Public Key
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_AutoGenerated_{116229A7-9A3B-2078-DB5F-B5A20811242C}.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_AutoGenerated_{16988324-21C9-05B2-CA60-9B4EC72739D8}.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_AutoGenerated_{8AA47365-B2B3-1961-69EB-F866E376B12F}.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_AutoGenerated_{8ABD94FB-E7D6-84A6-A997-C918EDDE0AE5}.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_AutoGenerated_{923DD477-5846-686B-A659-0FCCD73851A8}.Qs2QSInbk
OpenPGP Public Key
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_AutoGenerated_{BB044BFD-25B7-2FAA-22A8-6371A93E0456}.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_AutoGenerated_{BD3F924E-55FB-A1BA-9DE6-B50F9F2460AC}.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_AutoGenerated_{C1C6F8AC-40A3-0F5C-146F-65A9DC70BBB4}.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_AutoGenerated_{C804BBA7-FA5F-CBF7-8B55-2096E5F972CB}.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_AutoGenerated_{DAA168DE-4306-C8BC-8C11-B596240BDDED}.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_AutoGenerated_{E7A33582-E908-3379-5368-5999454DCD83}.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_AutoGenerated_{E8B84CFB-B069-BC13-F88F-170904F645E5}.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_AutoGenerated_{F1118828-A0CC-5FEB-85C9-DBFFDF98434A}.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_InternetExplorer_Default.Qs2QSInbk
COM executable for DOS
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_Office_DATABASECOMPARE_EXE_15.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_Office_EXCEL_EXE_15.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_Office_MSACCESS_EXE_15.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_Office_MSPUB_EXE_15.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_Office_ONENOTE_EXE_15.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_Office_OUTLOOK_EXE_15.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_Office_OcPubMgr_exe_15.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_Office_POWERPNT_EXE_15.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_Office_SETLANG_EXE_15.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_Office_SPREADSHEETCOMPARE_EXE_15.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_Office_WINWORD_EXE_15.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_Office_lync_exe_15.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_Office_msoev_exe_15.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_SkyDrive_Desktop.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_WindowsAlarms_8wekyb3d8bbwe!App.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_WindowsCalculator_8wekyb3d8bbwe!App.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_WindowsSoundRecorder_8wekyb3d8bbwe!App.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_Windows_AdministrativeTools.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_Windows_Computer.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_Windows_ControlPanel.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_Windows_Explorer.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_Windows_MediaPlayer32.Qs2QSInbk
COM executable for DOS
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_Windows_Photos_8wekyb3d8bbwe!App.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_Windows_RemoteDesktop.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_Windows_Shell_RunDialog.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\https___java_com_.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\https___java_com_help.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_MdSched_exe.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_RecoveryDrive_exe.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_SnippingTool_exe.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_WFS_exe.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_WF_msc.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_WindowsPowerShell_v1_0_PowerShell_ISE_exe.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_WindowsPowerShell_v1_0_powershell_exe.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_charmap_exe.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_cleanmgr_exe.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_cmd_exe.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_comexp_msc.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_dfrgui_exe.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_iscsicpl_exe.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_magnify_exe.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_msconfig_exe.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_msinfo32_exe.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_mspaint_exe.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_narrator_exe.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_notepad_exe.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_odbcad32_exe.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_osk_exe.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_printmanagement_msc.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_psr_exe.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_quickassist_exe.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_services_msc.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{6D809377-6AF0-444B-8957-A3773F02200E}_7-Zip_7-zip_chm.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{6D809377-6AF0-444B-8957-A3773F02200E}_7-Zip_7zFM_exe.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{6D809377-6AF0-444B-8957-A3773F02200E}_Adobe_Acrobat DC_Acrobat_Acrobat_exe.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{6D809377-6AF0-444B-8957-A3773F02200E}_Common Files_Microsoft Shared_Ink_mip_exe.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{6D809377-6AF0-444B-8957-A3773F02200E}_Windows NT_Accessories_wordpad_exe.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}_AutoIt3_Au3Info_exe.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}_AutoIt3_Au3Info_x64_exe.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}_AutoIt3_Aut2Exe_Aut2exe_exe.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}_AutoIt3_Aut2Exe_Aut2exe_x64_exe.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}_AutoIt3_AutoIt v3 Website_url.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}_AutoIt3_AutoIt3_exe.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}_AutoIt3_AutoIt3_x64_exe.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}_AutoIt3_AutoItX_AutoItX_chm.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}_AutoIt3_AutoIt_chm.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}_AutoIt3_Examples.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}_AutoIt3_Extras.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}_AutoIt3_SciTE_SciTE_exe.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}_Java_jre-1_8_bin_javacpl_exe.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}_WindowsPowerShell_v1_0_PowerShell_ISE_exe.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}_WindowsPowerShell_v1_0_powershell_exe.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}_odbcad32_exe.Qs2QSInbk
mumps avl global and 21 byte data cells
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{F38BF404-1D43-42F2-9305-67DE0B28FC23}_regedit_exe.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{c23bcd39-6fcf-4e41-add1-0231129b23be}\0.0.filtertrie.intermediate.txt.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{c23bcd39-6fcf-4e41-add1-0231129b23be}\Apps.ft.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{de0f148a-c476-467a-b7a3-14b0bb463140}\0.0.filtertrie.intermediate.txt.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{de0f148a-c476-467a-b7a3-14b0bb463140}\Apps.ft.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{ea91a05a-d98f-4429-81a9-272df0335447}\0.0.filtertrie.intermediate.txt.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{ea91a05a-d98f-4429-81a9-272df0335447}\Apps.ft.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{4e763a36-90d3-4d6c-9949-dd01f7e5d23f}\appsglobals.txt.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{4e763a36-90d3-4d6c-9949-dd01f7e5d23f}\appssynonyms.txt.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{4e763a36-90d3-4d6c-9949-dd01f7e5d23f}\settingsconversions.txt.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{4e763a36-90d3-4d6c-9949-dd01f7e5d23f}\settingsglobals.txt.Qs2QSInbk
SysEx File -
dropped
malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{4e763a36-90d3-4d6c-9949-dd01f7e5d23f}\settingssynonyms.txt.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Temp\Diagnostics\EXCEL\App1696428505298658900_7B05BF2A-C74F-44F8-B674-AA3F9719008B.log.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Temp\Diagnostics\EXCEL\App1696428527628431800_6CD9E3BB-4D03-46BD-8615-75A902267162.log.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Temp\Diagnostics\EXCEL\App1696428537364279100_A2018481-B961-46B4-9328-34939DEAF293.log.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Temp\acrobat_sbx\acroNGLLog.txt.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Temp\edge_BITS_6440_1191663050\9e51170b-7adf-40ab-83b6-5f97b13bedcb.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Temp\edge_BITS_6440_1234978473\1187695d-8276-4e31-8de1-9e57768989bd.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Temp\edge_BITS_6440_1289371347\78549187-a875-4f1e-8dfa-9938ebc29c81.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Temp\edge_BITS_6440_1318414972\873489b1-33b2-480a-baa2-641b9e09edcd.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Local\Temp\edge_BITS_6440_1421574262\c50698d5-282c-4c8d-9fa6-c155f2d8d379.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Roaming\Adobe\Acrobat\DC\Security\ES_session_storei.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\ExperimentStoreData.json.Qs2QSInbk
OpenPGP Public Key
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\SiteSecurityServiceState.txt.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\bookmarkbackups\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\content-prefs.sqlite.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cookies.sqlite-shm.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cookies.sqlite.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\crashes\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\crashes\events\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\datareporting\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\datareporting\archived\2023-10\1696426835635.a669692a-f9c9-42c0-a803-7b87d3ff5834.new-profile.jsonlz4.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\datareporting\archived\2023-10\1696426835643.9a3c31ca-35e4-421e-91e1-5f7b9bd27492.event.jsonlz4.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\datareporting\archived\2023-10\1696426835647.a83301c6-790b-49f3-adc7-55a855f7fe79.main.jsonlz4.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\datareporting\archived\2023-10\1696426835649.b06d08be-79e8-4bfe-b6aa-988ea3d35cbd.first-shutdown.jsonlz4.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\datareporting\archived\2023-10\1696426840708.3c7034d6-bc52-43bb-9a23-5da34ee205e0.health.jsonlz4.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\datareporting\archived\2023-10\1696426840727.01c0ecdb-8e59-4210-95f1-0fd0406e84ad.event.jsonlz4.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\datareporting\archived\2023-10\1696426840727.86be03dd-6b03-42f5-89cd-4606f43d25ad.health.jsonlz4.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\datareporting\archived\2023-10\1696426840748.a8c1f564-c2e2-4ef8-a85f-52a56488f193.main.jsonlz4.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\datareporting\archived\2023-10\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\datareporting\archived\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\datareporting\glean\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\datareporting\glean\db\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\datareporting\glean\events\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\datareporting\glean\events\background-update.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\datareporting\glean\events\events.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\datareporting\glean\pending_pings\43bb9a55-74a2-452e-8233-6899a7f737b0.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\datareporting\glean\pending_pings\7755ad51-2370-4623-9d21-15c89f2143db.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\datareporting\glean\pending_pings\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\datareporting\glean\pending_pings\ae04dde8-69a1-49f8-95f1-d533ed587ff6.Qs2QSInbk
OpenPGP Secret Key
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\datareporting\glean\pending_pings\b8f053a5-de16-4a2c-8120-1ab4aadd63e8.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\datareporting\glean\tmp\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\datareporting\session-state.json.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\datareporting\state.json.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\extension-preferences.json.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\extensions.json.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\favicons.sqlite-shm.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\favicons.sqlite.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\handlers.json.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\key4.db.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\minidumps\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\permissions.sqlite.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\pkcs11.txt.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite-shm.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite.Qs2QSInbk
OpenPGP Public Key
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\prefs.js.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\protections.sqlite.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\saved-telemetry-pings\3c7034d6-bc52-43bb-9a23-5da34ee205e0.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\saved-telemetry-pings\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\saved-telemetry-pings\a83301c6-790b-49f3-adc7-55a855f7fe79.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\search.json.mozlz4.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\security_state\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\sessionCheckpoints.json.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\sessionstore-backups\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\sessionstore-backups\previous.jsonlz4.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\sessionstore-backups\upgrade.jsonlz4-20230927232528.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\sessionstore.jsonlz4.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\shield-preference-experiments.json.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\storage.sqlite.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\storage\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\storage\ls-archive.sqlite.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\storage\permanent\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\storage\permanent\chrome\.metadata-v2.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\storage\permanent\chrome\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\storage\permanent\chrome\idb\1451318868ntouromlalnodry--epcr.files\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\storage\permanent\chrome\idb\1451318868ntouromlalnodry--epcr.sqlite-shm.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\storage\permanent\chrome\idb\1451318868ntouromlalnodry--epcr.sqlite.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\storage\permanent\chrome\idb\1657114595AmcateirvtiSty.files\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\storage\permanent\chrome\idb\1657114595AmcateirvtiSty.sqlite-shm.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\storage\permanent\chrome\idb\1657114595AmcateirvtiSty.sqlite.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\storage\permanent\chrome\idb\2823318777ntouromlalnodry--naod.files\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\storage\permanent\chrome\idb\2823318777ntouromlalnodry--naod.sqlite-shm.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\storage\permanent\chrome\idb\2823318777ntouromlalnodry--naod.sqlite.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\storage\permanent\chrome\idb\2918063365piupsah.files\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\storage\permanent\chrome\idb\2918063365piupsah.sqlite-shm.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\storage\permanent\chrome\idb\2918063365piupsah.sqlite.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\storage\permanent\chrome\idb\3561288849sdhlie.files\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\storage\permanent\chrome\idb\3561288849sdhlie.sqlite-shm.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\storage\permanent\chrome\idb\3561288849sdhlie.sqlite.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.files\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite-shm.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\storage\permanent\chrome\idb\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\storage\temporary\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\storage\to-be-removed\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\targeting.snapshot.json.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\times.json.Qs2QSInbk
Dyalog APL version -22.-33
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\webappsstore.sqlite-shm.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\webappsstore.sqlite.Qs2QSInbk
data
dropped
malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\xulstore.json.Qs2QSInbk
data
dropped
malicious
C:\Users\user\Desktop\AAAAAAAAAAAAAAAAAAAA (copy)
data
dropped
malicious
C:\Users\user\Desktop\BBBBBBBBBBBBBBBBBBBB (copy)
data
dropped
malicious
C:\Users\user\Desktop\CCCCCCCCCCCCCCCCCCCC (copy)
data
dropped
malicious
C:\Users\user\Desktop\DDDDDDDDDDDDDDDDDDDD (copy)
data
dropped
malicious
C:\Users\user\Desktop\Document.doc.scr.exe
data
modified
malicious
C:\Users\user\Desktop\EEEEEEEEEEEEEEEEEEEE (copy)
data
dropped
malicious
C:\Users\user\Desktop\FFFFFFFFFFFFFFFFFFFF (copy)
data
dropped
malicious
C:\Users\user\Desktop\GGGGGGGGGGGGGGGGGGGG (copy)
data
dropped
malicious
C:\Users\user\Desktop\HHHHHHHHHHHHHHHHHHHH (copy)
data
dropped
malicious
C:\Users\user\Desktop\IIIIIIIIIIIIIIIIIIII (copy)
data
dropped
malicious
C:\Users\user\Desktop\JJJJJJJJJJJJJJJJJJJJ (copy)
data
dropped
malicious
C:\Users\user\Desktop\KKKKKKKKKKKKKKKKKKKK (copy)
data
dropped
malicious
C:\Users\user\Desktop\LLLLLLLLLLLLLLLLLLLL (copy)
data
dropped
malicious
C:\Users\user\Desktop\MMMMMMMMMMMMMMMMMMMM (copy)
data
dropped
malicious
C:\Users\user\Desktop\NNNNNNNNNNNNNNNNNNNN (copy)
data
dropped
malicious
C:\Users\user\Desktop\OOOOOOOOOOOOOOOOOOOO (copy)
data
dropped
malicious
C:\Users\user\Desktop\PPPPPPPPPPPPPPPPPPPP (copy)
data
dropped
malicious
C:\Users\user\Desktop\QQQQQQQQQQQQQQQQQQQQ (copy)
data
dropped
malicious
C:\Users\user\Desktop\RRRRRRRRRRRRRRRRRRRR (copy)
data
dropped
malicious
C:\Users\user\Desktop\SSSSSSSSSSSSSSSSSSSS (copy)
data
dropped
malicious
C:\Users\user\Desktop\TTTTTTTTTTTTTTTTTTTT (copy)
data
dropped
malicious
C:\Users\user\Desktop\UUUUUUUUUUUUUUUUUUUU (copy)
data
dropped
malicious
C:\Users\user\Desktop\VVVVVVVVVVVVVVVVVVVV (copy)
data
dropped
malicious
C:\Users\user\Desktop\WWWWWWWWWWWWWWWWWWWW (copy)
data
dropped
malicious
C:\Users\user\Desktop\XXXXXXXXXXXXXXXXXXXX (copy)
data
dropped
malicious
C:\Users\user\Desktop\YYYYYYYYYYYYYYYYYYYY (copy)
data
dropped
malicious
C:\Users\user\Desktop\ZZZZZZZZZZZZZZZZZZZZ (copy)
data
dropped
malicious
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1000\AAAAAAAAAAA (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1000\BBBBBBBBBBB (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1000\CCCCCCCCCCC (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1000\DDDDDDDDDDD (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1000\EEEEEEEEEEE (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1000\FFFFFFFFFFF (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1000\GGGGGGGGGGG (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1000\HHHHHHHHHHH (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1000\IIIIIIIIIII (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1000\JJJJJJJJJJJ (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1000\KKKKKKKKKKK (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1000\LLLLLLLLLLL (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1000\MMMMMMMMMMM (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1000\NNNNNNNNNNN (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1000\OOOOOOOOOOO (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1000\PPPPPPPPPPP (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1000\QQQQQQQQQQQ (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1000\RRRRRRRRRRR (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1000\SSSSSSSSSSS (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1000\TTTTTTTTTTT (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1000\UUUUUUUUUUU (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1000\VVVVVVVVVVV (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1000\WWWWWWWWWWW (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1000\XXXXXXXXXXX (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1000\YYYYYYYYYYY (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1000\ZZZZZZZZZZZ (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1000\desktop.ini
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1001\AAAAAAAAAAA (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1001\BBBBBBBBBBB (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1001\CCCCCCCCCCC (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1001\DDDDDDDDDDD (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1001\EEEEEEEEEEE (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1001\FFFFFFFFFFF (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1001\GGGGGGGGGGG (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1001\HHHHHHHHHHH (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1001\IIIIIIIIIII (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1001\JJJJJJJJJJJ (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1001\KKKKKKKKKKK (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1001\LLLLLLLLLLL (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1001\MMMMMMMMMMM (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1001\NNNNNNNNNNN (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1001\OOOOOOOOOOO (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1001\PPPPPPPPPPP (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1001\QQQQQQQQQQQ (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1001\RRRRRRRRRRR (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1001\SSSSSSSSSSS (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1001\TTTTTTTTTTT (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1001\UUUUUUUUUUU (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1001\VVVVVVVVVVV (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1001\WWWWWWWWWWW (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1001\XXXXXXXXXXX (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1001\YYYYYYYYYYY (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1001\ZZZZZZZZZZZ (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1001\desktop.ini
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1002\AAAAAAAAAAA (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1002\BBBBBBBBBBB (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1002\CCCCCCCCCCC (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1002\DDDDDDDDDDD (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1002\EEEEEEEEEEE (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1002\FFFFFFFFFFF (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1002\GGGGGGGGGGG (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1002\HHHHHHHHHHH (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1002\IIIIIIIIIII (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1002\JJJJJJJJJJJ (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1002\KKKKKKKKKKK (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1002\LLLLLLLLLLL (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1002\MMMMMMMMMMM (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1002\NNNNNNNNNNN (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1002\OOOOOOOOOOO (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1002\PPPPPPPPPPP (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1002\QQQQQQQQQQQ (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1002\RRRRRRRRRRR (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1002\SSSSSSSSSSS (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1002\TTTTTTTTTTT (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1002\UUUUUUUUUUU (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1002\VVVVVVVVVVV (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1002\WWWWWWWWWWW (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1002\XXXXXXXXXXX (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1002\YYYYYYYYYYY (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1002\ZZZZZZZZZZZ (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1002\desktop.ini
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1003\AAAAAAAAAAA (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1003\BBBBBBBBBBB (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1003\CCCCCCCCCCC (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1003\DDDDDDDDDDD (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1003\EEEEEEEEEEE (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1003\FFFFFFFFFFF (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1003\GGGGGGGGGGG (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1003\HHHHHHHHHHH (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1003\IIIIIIIIIII (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1003\JJJJJJJJJJJ (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1003\KKKKKKKKKKK (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1003\LLLLLLLLLLL (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1003\MMMMMMMMMMM (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1003\NNNNNNNNNNN (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1003\OOOOOOOOOOO (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1003\PPPPPPPPPPP (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1003\QQQQQQQQQQQ (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1003\RRRRRRRRRRR (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1003\SSSSSSSSSSS (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1003\TTTTTTTTTTT (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1003\UUUUUUUUUUU (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1003\VVVVVVVVVVV (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1003\WWWWWWWWWWW (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1003\XXXXXXXXXXX (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1003\YYYYYYYYYYY (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1003\ZZZZZZZZZZZ (copy)
data
dropped
C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1003\desktop.ini
data
dropped
C:\$WinREAgent\Scratch\Qs2QSInbk.README.txt (copy)
ASCII text, with CRLF line terminators
dropped
C:\ProgramData\Qs2QSInbk.ico
MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
dropped
C:\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\.curlrc.Qs2QSInbk
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\CURRENT.Qs2QSInbk
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\05349744be1ad4ad_0.Qs2QSInbk
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\076dd576a8178299_0.Qs2QSInbk
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\0786087c3c360803_0.Qs2QSInbk
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\0998db3a32ab3f41_0.Qs2QSInbk
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\0a71ed411241f66a_0.Qs2QSInbk
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\0b05805acd0d1882_0.Qs2QSInbk
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\0f25049d69125b1e_0.Qs2QSInbk
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\230e5fe3e6f82b2c_0.Qs2QSInbk
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\2798067b152b83c7_0.Qs2QSInbk
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\27d6cd255a96bfd9_0.Qs2QSInbk
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\28daa88523128699_0.Qs2QSInbk
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\2a426f11fd8ebe18_0.Qs2QSInbk
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\2d207d5589cabc48_0.Qs2QSInbk
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\31f9e8ec74b3086f_0.Qs2QSInbk
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\431888171713135e_0.Qs2QSInbk
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\4a0e94571d979b3c_0.Qs2QSInbk
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\4ca3cb58378aaa3f_0.Qs2QSInbk
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\560e9c8bff5008d8_0.Qs2QSInbk
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\56c4cd218555ae2b_0.Qs2QSInbk
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\627265196527eec1_0.Qs2QSInbk
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\64766d63a539c3ca_0.Qs2QSInbk
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\6580eb6b2e190c0b_0.Qs2QSInbk
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\6a34b53951ee8d83_0.Qs2QSInbk
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\6e8773c5f8211d0f_0.Qs2QSInbk
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\6fb6d030c4ebbc21_0.Qs2QSInbk
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\7120c35b509b0fae_0.Qs2QSInbk
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\71febec55d5c75cd_0.Qs2QSInbk
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\72d9f526d2e2e7c8_0.Qs2QSInbk
SysEx File -
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\78bff3512887b83d_0.Qs2QSInbk
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\wasm\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\wasm\index-dir\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\wasm\index-dir\the-real-index.Qs2QSInbk
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\wasm\index.Qs2QSInbk
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.Qs2QSInbk
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old.Qs2QSInbk
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\CURRENT.Qs2QSInbk
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.Qs2QSInbk
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old.Qs2QSInbk
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\MANIFEST-000001.Qs2QSInbk
OpenPGP Secret Key
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LocalPrefs.json.Qs2QSInbk
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\MANIFEST-000001.Qs2QSInbk
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Cookies.Qs2QSInbk
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State.Qs2QSInbk
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Reporting and NEL.Qs2QSInbk
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log.Qs2QSInbk
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\CURRENT.Qs2QSInbk
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.Qs2QSInbk
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old.Qs2QSInbk
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\MANIFEST-000001.Qs2QSInbk
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\VideoDecodeStats\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Visited Links.Qs2QSInbk
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\000003.log.Qs2QSInbk
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\CURRENT.Qs2QSInbk
OpenPGP Public Key
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\LOG.Qs2QSInbk
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\MANIFEST-000001.Qs2QSInbk
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\metadata\000003.log.Qs2QSInbk
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\metadata\CURRENT.Qs2QSInbk
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\metadata\LOG.Qs2QSInbk
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\metadata\MANIFEST-000001.Qs2QSInbk
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\metadata\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cookie\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\LocalLow\Adobe\Linguistics\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\LocalLow\Adobe\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\LocalLow\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Adobe\ARM\Acrobat_23.006.20320\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Adobe\ARM\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Adobe\ARM\S\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Adobe\ARM\{291AA914-A987-4CE9-BD63-0C0A92D435E5}\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\CURRENT.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\05349744be1ad4ad_0.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\0786087c3c360803_0.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\0998db3a32ab3f41_0.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\0f25049d69125b1e_0.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\230e5fe3e6f82b2c_0.Qs2QSInbk
OpenPGP Public Key
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\2798067b152b83c7_0.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\2a426f11fd8ebe18_0.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\4a0e94571d979b3c_0.Qs2QSInbk
OpenPGP Secret Key
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\4ca3cb58378aaa3f_0.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\560e9c8bff5008d8_0.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\56c4cd218555ae2b_0.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\6fb6d030c4ebbc21_0.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\7120c35b509b0fae_0.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\71febec55d5c75cd_0.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\72d9f526d2e2e7c8_0.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\78bff3512887b83d_0.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\86b8040b7132b608_0.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\8c159cc5880890bc_0.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\8c84d92a9dbce3e0_0.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\8e417e79df3bf0e9_0.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\91cec06bb2836fa5_0.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\927a1596c37ebe5e_0.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\92c56fa2a6c4d5ba_0.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\946896ee27df7947_0.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\983b7a3da8f39a46_0.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\aba6710fde0876af_0.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\b6d5deb4812ac6e9_0.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\wasm\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\wasm\index-dir\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\wasm\index-dir\the-real-index.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\wasm\index.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\LOG.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\CURRENT.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\MANIFEST-000001.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\LocalPrefs.json.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\MANIFEST-000001.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Network\Cookies.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State.Qs2QSInbk
OpenPGP Secret Key
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Network\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Network\Reporting and NEL.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\CURRENT.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\MANIFEST-000001.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Visited Links.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cookie\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Adobe\Color\ACECache11.lst.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Adobe\Color\Profiles\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Adobe\Color\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Adobe\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\CEF\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\CEF\User Data\Dictionaries\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\CEF\User Data\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Comms\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Comms\UnistoreDB\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Comms\UnistoreDB\USS.jcp.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Comms\UnistoreDB\USS.jtx.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Comms\UnistoreDB\USSres00001.jrs.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Comms\UnistoreDB\USSres00002.jrs.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Comms\UnistoreDB\USStmp.jtx.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Comms\UnistoreDB\store.jfm.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Comms\UnistoreDB\store.vol.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Comms\Unistore\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Comms\Unistore\data\AggregateCache.uca.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Comms\Unistore\data\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\ConnectedDevicesPlatform\CDPGlobalSettings.cdp.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\ConnectedDevicesPlatform\Connected Devices Platform certificates.sst.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\ConnectedDevicesPlatform\L.user.cdp.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\ConnectedDevicesPlatform\L.user.cdpresource.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\ConnectedDevicesPlatform\L.user\ActivitiesCache.db-wal.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\ConnectedDevicesPlatform\L.user\ActivitiesCache.db.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\ConnectedDevicesPlatform\L.user\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\ConnectedDevicesPlatform\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\D3DSCache\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\D3DSCache\f4d41c5d09ae781\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.val.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\D3DSCache\f4d41c5d09ae781\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\AutofillStates\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\BrowserMetrics\BrowserMetrics-651D6B39-2380.pma.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\BrowserMetrics\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\CertificateRevocation\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Crashpad\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Crashpad\attachments\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Crashpad\reports\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Crowd Deny\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\FileTypePolicies\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\FirstPartySetsPreloaded\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\GrShaderCache\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\GrShaderCache\data_0.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\GrShaderCache\data_2.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\GrShaderCache\data_3.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\GraphiteDawnCache\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\GraphiteDawnCache\data_0.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\GraphiteDawnCache\data_2.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\GraphiteDawnCache\data_3.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Browser.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Version.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Local State.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\MEIPreload\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\MediaFoundationWidevineCdm\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\MediaFoundationWidevineCdm\x64\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\OnDeviceHeadSuggestModel\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\OptimizationHints\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\OriginTrials\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\PKIMetadata\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\RecoveryImproved\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\SSLErrorAssistant\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Safe Browsing\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\SafetyTips\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\ShaderCache\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\ShaderCache\data_0.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\ShaderCache\data_2.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\ShaderCache\data_3.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Subresource Filter\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Subresource Filter\Unindexed Rules\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\ThirdPartyModuleList64\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\TrustTokenKeyCommitments\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Variations.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\WidevineCdm\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\ZxcvbnData\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\hyphen-data\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\pnacl\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Google\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\2F9E5944-CBF8-4D18-9AC6-4E8E0BC3967D
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Office\OTele\onenote.exe.db
SQLite 3.x database, last written using SQLite version 3023002, writer version 2, read version 2, file counter 2, database pages 1, cookie 0, schema 0, largest root page 1, unknown 0 encoding, version-valid-for 2
dropped
C:\Users\user\AppData\Local\Microsoft\Office\OTele\onenote.exe.db-journal
SQLite Rollback Journal
dropped
C:\Users\user\AppData\Local\Microsoft\Office\OTele\onenote.exe.db-shm
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\OTele\onenote.exe.db-wal
SQLite Write-Ahead Log, version 3007000
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000000.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000001.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000002.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000003.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000004.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000005.bin (copy)
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000006.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000007.bin (copy)
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 7.0, datetime=2004:03:04 13:19:29], progressive, precision 8, 221x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000008.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000009.bin (copy)
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000A.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000B.bin (copy)
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000C.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000D.bin (copy)
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 7.0, datetime=2004:03:04 13:18:09], progressive, precision 8, 164x641, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000E.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000F.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000G.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000H.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000I.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000J.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000K.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000L.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000M.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000N.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000O.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000P.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000Q.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000R.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000S.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000T.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000U.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000V.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000010.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000011.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000012.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000013.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000014.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000015.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000016.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000017.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000018.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000019.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001A.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001B.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001C.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001D.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001E.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001F.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001G.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001H.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001I.bin (copy)
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 7.0, datetime=2004:03:04 13:06:24], progressive, precision 8, 38x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001J.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001K.bin (copy)
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001L.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001M.bin (copy)
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001N.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001O.bin (copy)
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001P.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001Q.bin (copy)
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001R.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001S.bin (copy)
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001T.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001U.bin (copy)
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001V.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000020.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000021.bin (copy)
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 814x105, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000022.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000023.bin (copy)
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 728x77, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000024.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000025.bin (copy)
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 69x630, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000026.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000027.bin (copy)
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 105x441, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000028.bin (copy)
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 76x97, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000029.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002A.bin (copy)
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 95x498, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002B.bin (copy)
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 700x114, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002C.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002D.bin (copy)
PNG image data, 813 x 99, 8-bit/color RGBA, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002E.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002F.bin (copy)
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 780x107, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002G.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002H.bin (copy)
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 613x144, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002I.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002J.bin (copy)
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 276x139, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002K.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002L.bin (copy)
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 814x45, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002M.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002N.bin (copy)
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 262x277, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002O.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002P.bin (copy)
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 70x626, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002Q.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002R.bin (copy)
PNG image data, 177 x 123, 8-bit/color RGBA, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002S.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002T.bin (copy)
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 17x608, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002U.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002V.bin (copy)
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 357x69, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000030.bin (copy)
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 14x341, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000031.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000032.bin (copy)
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2004:03:12 11:15:20], progressive, precision 8, 604x784, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000033.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000034.bin (copy)
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2004:03:12 11:13:06], progressive, precision 8, 570x779, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000035.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000036.bin (copy)
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000037.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000038.bin (copy)
PNG image data, 40 x 623, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000039.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003A.bin (copy)
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003B.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003C.bin (copy)
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2004:03:12 11:10:32], progressive, precision 8, 594x773, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003D.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003E.bin (copy)
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2004:03:12 11:12:29], progressive, precision 8, 598x766, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003F.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003G.bin (copy)
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 7.0, datetime=2004:03:04 13:19:29], progressive, precision 8, 221x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003H.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003I.bin (copy)
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003J.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003K.bin (copy)
PNG image data, 60 x 336, 4-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003L.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003M.bin (copy)
PNG image data, 40 x 617, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003N.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003O.bin (copy)
PNG image data, 50 x 600, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003P.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003Q.bin (copy)
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003R.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003S.bin (copy)
PNG image data, 77 x 627, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003T.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003U.bin (copy)
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003V.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000040.bin (copy)
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000041.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000042.bin (copy)
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000043.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000044.bin (copy)
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2004:03:12 11:05:55], progressive, precision 8, 612x618, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000045.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000046.bin (copy)
PNG image data, 176 x 513, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000047.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000048.bin (copy)
PNG image data, 40 x 650, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000049.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004A.bin (copy)
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 7.0, datetime=2004:03:04 13:27:10], progressive, precision 8, 102x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004B.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004C.bin (copy)
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 7.0, datetime=2004:03:04 13:18:09], progressive, precision 8, 164x641, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004D.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004E.bin (copy)
PNG image data, 50 x 556, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004F.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004G.bin (copy)
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004H.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004I.bin (copy)
PNG image data, 171 x 552, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004J.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004K.bin (copy)
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2004:03:12 11:11:38], progressive, precision 8, 577x757, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004L.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004M.bin (copy)
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 7.0, datetime=2004:03:04 13:26:15], progressive, precision 8, 216x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004N.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004O.bin (copy)
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2004:03:12 11:09:29], progressive, precision 8, 609x675, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004P.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004Q.bin (copy)
Windows Enhanced Metafile (EMF) image data version 0x10000
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004R.bin (copy)
PNG image data, 189 x 305, 8-bit/color RGBA, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004S.bin (copy)
Windows Enhanced Metafile (EMF) image data version 0x10000
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004T.bin (copy)
PNG image data, 189 x 305, 8-bit/color RGBA, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004U.bin (copy)
Windows Enhanced Metafile (EMF) image data version 0x10000
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004V.bin (copy)
PNG image data, 189 x 305, 8-bit/color RGBA, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000050.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000051.bin (copy)
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000052.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000053.bin (copy)
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000054.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000055.bin (copy)
PNG image data, 50 x 500, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000056.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000057.bin (copy)
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000058.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000059.bin (copy)
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2004:03:12 11:08:07], baseline, precision 8, 595x450, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000005A.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000005B.bin (copy)
Windows Enhanced Metafile (EMF) image data version 0x10000
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000005C.bin (copy)
PNG image data, 3005 x 184, 8-bit/color RGBA, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000005D.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000005E.bin (copy)
PNG image data, 39 x 600, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000005F.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000005G.bin (copy)
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000005H.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000005I.bin (copy)
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 7.0, datetime=2004:03:04 13:44:07], progressive, precision 8, 611x163, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000005J.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000005K.bin (copy)
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000005L.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000005M.bin (copy)
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000005N.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000005O.bin (copy)
PNG image data, 39 x 579, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000005P.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000005Q.bin (copy)
PNG image data, 30 x 700, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000005R.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000005S.bin (copy)
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000005T.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000005U.bin (copy)
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000005V.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000060.bin (copy)
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 7.0, datetime=2004:03:04 13:06:24], progressive, precision 8, 38x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000061.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000062.bin (copy)
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000063.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000064.bin (copy)
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000065.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000066.bin (copy)
PNG image data, 85 x 470, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000067.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000068.bin (copy)
PNG image data, 88 x 574, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000069.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000006A.bin (copy)
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000006B.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000006C.bin (copy)
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000006D.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000006E.bin (copy)
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000006F.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000006G.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000006H.bin (copy)
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2004:03:12 11:05:55], progressive, precision 8, 612x618, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000006I.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000006J.bin (copy)
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2004:03:12 11:08:07], baseline, precision 8, 595x450, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000006K.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000006L.bin (copy)
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000006M.bin (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\header
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000001.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000002.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000003.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000004.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000005.bin
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000006.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000007.bin
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 7.0, datetime=2004:03:04 13:19:29], progressive, precision 8, 221x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000008.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000009.bin
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000A.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000B.bin
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000C.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000D.bin
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 7.0, datetime=2004:03:04 13:18:09], progressive, precision 8, 164x641, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000E.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000F.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000G.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000H.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000I.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000J.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000K.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000L.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000M.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000N.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000O.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000P.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000Q.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000R.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000S.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000T.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000U.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000V.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000010.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000011.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000012.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000013.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000014.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000015.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000016.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000017.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000018.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000019.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001A.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001B.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001C.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001D.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001E.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001F.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001G.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001H.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001I.bin
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 7.0, datetime=2004:03:04 13:06:24], progressive, precision 8, 38x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001J.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001K.bin
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001L.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001M.bin
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001N.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001O.bin
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001P.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001Q.bin
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001R.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001S.bin
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001T.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001U.bin
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001V.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000020.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000021.bin
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 814x105, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000022.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000023.bin
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 728x77, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000024.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000025.bin
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 69x630, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000026.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000027.bin
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 105x441, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000028.bin
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 76x97, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000029.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002A.bin
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 95x498, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002B.bin
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 700x114, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002C.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002D.bin
PNG image data, 813 x 99, 8-bit/color RGBA, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002E.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002F.bin
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 780x107, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002G.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002H.bin
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 613x144, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002I.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002J.bin
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 276x139, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002K.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002L.bin
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 814x45, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002M.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002N.bin
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 262x277, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002O.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002P.bin
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 70x626, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002Q.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002R.bin
PNG image data, 177 x 123, 8-bit/color RGBA, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002S.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002T.bin
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 17x608, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002U.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002V.bin
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 357x69, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000030.bin
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 14x341, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000031.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000032.bin
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2004:03:12 11:15:20], progressive, precision 8, 604x784, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000033.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000034.bin
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2004:03:12 11:13:06], progressive, precision 8, 570x779, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000035.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000036.bin
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000037.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000038.bin
PNG image data, 40 x 623, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000039.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003A.bin
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003B.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003C.bin
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2004:03:12 11:10:32], progressive, precision 8, 594x773, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003D.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003E.bin
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2004:03:12 11:12:29], progressive, precision 8, 598x766, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003F.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003G.bin
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 7.0, datetime=2004:03:04 13:19:29], progressive, precision 8, 221x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003H.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003I.bin
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003J.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003K.bin
PNG image data, 60 x 336, 4-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003L.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003M.bin
PNG image data, 40 x 617, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003N.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003O.bin
PNG image data, 50 x 600, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003P.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003Q.bin
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003R.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003S.bin
PNG image data, 77 x 627, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003T.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003U.bin
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003V.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000040.bin
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000041.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000042.bin
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000043.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000044.bin
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2004:03:12 11:05:55], progressive, precision 8, 612x618, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000045.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000046.bin
PNG image data, 176 x 513, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000047.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000048.bin
PNG image data, 40 x 650, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000049.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004A.bin
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 7.0, datetime=2004:03:04 13:27:10], progressive, precision 8, 102x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004B.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004C.bin
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 7.0, datetime=2004:03:04 13:18:09], progressive, precision 8, 164x641, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004D.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004E.bin
PNG image data, 50 x 556, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004F.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004G.bin
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004H.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004I.bin
PNG image data, 171 x 552, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004J.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004K.bin
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2004:03:12 11:11:38], progressive, precision 8, 577x757, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004L.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004M.bin
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 7.0, datetime=2004:03:04 13:26:15], progressive, precision 8, 216x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004N.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004O.bin
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2004:03:12 11:09:29], progressive, precision 8, 609x675, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004P.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004Q.bin
Windows Enhanced Metafile (EMF) image data version 0x10000
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004R.bin
PNG image data, 189 x 305, 8-bit/color RGBA, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004S.bin
Windows Enhanced Metafile (EMF) image data version 0x10000
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004T.bin
PNG image data, 189 x 305, 8-bit/color RGBA, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004U.bin
Windows Enhanced Metafile (EMF) image data version 0x10000
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004V.bin
PNG image data, 189 x 305, 8-bit/color RGBA, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000050.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000051.bin
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000052.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000053.bin
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000054.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000055.bin
PNG image data, 50 x 500, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000056.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000057.bin
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000058.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000059.bin
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2004:03:12 11:08:07], baseline, precision 8, 595x450, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005A.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005B.bin
Windows Enhanced Metafile (EMF) image data version 0x10000
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005C.bin
PNG image data, 3005 x 184, 8-bit/color RGBA, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005D.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005E.bin
PNG image data, 39 x 600, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005F.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005G.bin
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005H.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005I.bin
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 7.0, datetime=2004:03:04 13:44:07], progressive, precision 8, 611x163, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005J.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005K.bin
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005L.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005M.bin
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005N.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005O.bin
PNG image data, 39 x 579, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005P.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005Q.bin
PNG image data, 30 x 700, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005R.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005S.bin
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005T.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005U.bin
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005V.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000060.bin
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 7.0, datetime=2004:03:04 13:06:24], progressive, precision 8, 38x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000061.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000062.bin
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000063.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000064.bin
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000065.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000066.bin
PNG image data, 85 x 470, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000067.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000068.bin
PNG image data, 88 x 574, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000069.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000006A.bin
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000006B.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000006C.bin
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000006D.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000006E.bin
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000006F.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000006G.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000006H.bin
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2004:03:12 11:05:55], progressive, precision 8, 612x618, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000006I.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000006J.bin
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2004:03:12 11:08:07], baseline, precision 8, 595x450, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000006K.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000006L.bin
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
modified
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000006M.bin
data
dropped
C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\089d66ba04a8cec4bdc5267f42f39cf84278bb67.tbres
data
dropped
C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\56a61aeb75d8f5be186c26607f4bb213abe7c5ec.tbres
data
dropped
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cache2\doomed\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cache2\entries\57C8A4E3838399ECB5C8C3BC6B859C299C03D2B5.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cache2\entries\58A756A796A86993036E1F0F79183245EE2ABF58.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cache2\entries\58FA4C93D2C2293EB9F0554BA83740A06674316F.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cache2\entries\63F48F4F7F1BC3195F5AB831F9794F3DBA2D30E1.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cache2\entries\66B74AA167026A3DCC4BA7064E8D6E229DE9D806.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cache2\entries\6762E24BB9F66A6430B9C774503510453B4EBA21.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cache2\entries\6D89348819C8881868053197CA0754F36784BF5F.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cache2\entries\7666A3EDAF6C19112C07FE163F54EBE8D31E06DB.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cache2\entries\7DB3359FF1AE28D679D8DE03A74F2C06BC18D50B.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cache2\entries\81E0734DA2174DCC6815D9A95206EB9685F33C16.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cache2\entries\82193CB0C25C7BFB3DE8F667AB3D775215D4317F.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cache2\entries\8268E43CE5BE59DD6D41F8609FF728790BDAA5EE.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cache2\entries\8544DCE3233090647C30BD115D236FC7943E450F.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cache2\entries\868EB57FE78E39F0D2A3137C83574715A6BFE252.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cache2\entries\89C9B59023C6004C5FCA8E641B2BD533BAA7F06E.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cache2\entries\8DCFB1B835965528392E2DFD5B0DE10B8BC522E9.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cache2\entries\9648808B6C63CD1AAD97A7B68F84F35C95682143.Qs2QSInbk
Dyalog APL version -52.-90
dropped
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cache2\entries\99B7BF8F4F0080766794EDBDC37140FABC009DF4.Qs2QSInbk
OpenPGP Public Key
dropped
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cache2\entries\99D01D160AC7ADE6301F3559541FEF1A6F6155F0.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cache2\entries\A8743ACDA513FF27A72604EA39BAAE662138F0B9.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cache2\entries\A8F5B51786B52AA4D75E21BED0B23433A7965AD9.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cache2\entries\AA70DA0EA77AF599D16F76E79A98272BA138060D.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cache2\entries\B688081263A59655451FB4979A60BA5EBF1DAB8D.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cache2\entries\BB3146D411DD0BA6A6C30A8DD3791529058DD549.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cache2\entries\BE4820D40B48E7D6E96297A9048EAE2279EC43A2.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cache2\entries\CDA62003B1B987A64F1FAC75D1484DBFF94F08FB.Qs2QSInbk
OpenPGP Secret Key
dropped
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cache2\entries\D23F7952044A1A6016B80DED46FC563716A295DF.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cache2\entries\D2EC61E8A6DC6F6B45A8D35DBEE8A2EFC553F32A.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cache2\entries\D53FFABBCD34BAB1B8392BFC14FF7AAF9ED8C220.Qs2QSInbk
SysEx File -
dropped
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cache2\entries\D6B0ADD0DAEA00708CBB4290B85CCA0E0FA79061.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cache2\entries\D6F6B44E073736BF2B86AA4BA39CFF727305C0FA.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cache2\entries\D7BEEC8C1D80E7AC7310130DB5854DFB79191F44.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cache2\entries\D8EF12DD3F5A0B350AEDF5A0EBB7935D12C12CE3.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cache2\entries\DF0CDE23AA0F44779E78EFEDFBAED16DB1B4DF40.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cache2\entries\E1F00A1F83D7AF444023D3806F8834DFF40A8E32.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cache2\entries\EA1E3132006CB34CB9058E6891C35B731B9C4D9B.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cache2\entries\EDE675BC5BD66B9EEBD8A46A4C06CC47C388FD92.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cache2\entries\F8CBD54DDA10F4286A41EC6A537240712D6C2308.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cache2\entries\F8D5B76A1EF679D7E128B67E60239325BF22714D.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cache2\entries\FD7F0971C49B05DB70F2C587B10FA81DE9E34937.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cache2\entries\FF63A96CB0EE05C4E8600CAFADA617EBA0BAB35D.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MSPaint_8wekyb3d8bbwe\AC\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MSPaint_8wekyb3d8bbwe\AC\Temp\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MSPaint_8wekyb3d8bbwe\AppData\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MSPaint_8wekyb3d8bbwe\LocalCache\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MSPaint_8wekyb3d8bbwe\LocalState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MSPaint_8wekyb3d8bbwe\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MSPaint_8wekyb3d8bbwe\RoamingState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MSPaint_8wekyb3d8bbwe\Settings\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MSPaint_8wekyb3d8bbwe\Settings\settings.dat.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MSPaint_8wekyb3d8bbwe\SystemAppData\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MSPaint_8wekyb3d8bbwe\TempState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\RoamingState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\Settings\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\Settings\settings.dat.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\SystemAppData\Helium\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\SystemAppData\Helium\User.dat.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\SystemAppData\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\TempState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\AC\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\AC\Temp\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\AppData\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\LocalCache\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\LocalState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\RoamingState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\Settings\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\Settings\settings.dat.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\SystemAppData\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\TempState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftStickyNotes_8wekyb3d8bbwe\AC\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftStickyNotes_8wekyb3d8bbwe\AC\Temp\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftStickyNotes_8wekyb3d8bbwe\AppData\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftStickyNotes_8wekyb3d8bbwe\LocalCache\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftStickyNotes_8wekyb3d8bbwe\LocalState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftStickyNotes_8wekyb3d8bbwe\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftStickyNotes_8wekyb3d8bbwe\RoamingState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftStickyNotes_8wekyb3d8bbwe\Settings\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftStickyNotes_8wekyb3d8bbwe\Settings\settings.dat.Qs2QSInbk
OpenPGP Public Key
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftStickyNotes_8wekyb3d8bbwe\SystemAppData\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftStickyNotes_8wekyb3d8bbwe\TempState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MixedReality.Portal_8wekyb3d8bbwe\AC\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MixedReality.Portal_8wekyb3d8bbwe\AC\Temp\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MixedReality.Portal_8wekyb3d8bbwe\AppData\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MixedReality.Portal_8wekyb3d8bbwe\LocalCache\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MixedReality.Portal_8wekyb3d8bbwe\LocalState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MixedReality.Portal_8wekyb3d8bbwe\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MixedReality.Portal_8wekyb3d8bbwe\RoamingState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MixedReality.Portal_8wekyb3d8bbwe\Settings\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MixedReality.Portal_8wekyb3d8bbwe\Settings\settings.dat.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MixedReality.Portal_8wekyb3d8bbwe\SystemAppData\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MixedReality.Portal_8wekyb3d8bbwe\TempState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.NET.Native.Framework.1.7_8wekyb3d8bbwe\AC\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.NET.Native.Framework.1.7_8wekyb3d8bbwe\AC\Temp\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.NET.Native.Framework.1.7_8wekyb3d8bbwe\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.NET.Native.Framework.2.2_8wekyb3d8bbwe\AC\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.NET.Native.Framework.2.2_8wekyb3d8bbwe\AC\Temp\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.NET.Native.Framework.2.2_8wekyb3d8bbwe\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.NET.Native.Runtime.1.7_8wekyb3d8bbwe\AC\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.NET.Native.Runtime.1.7_8wekyb3d8bbwe\AC\Temp\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.NET.Native.Runtime.1.7_8wekyb3d8bbwe\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.NET.Native.Runtime.2.2_8wekyb3d8bbwe\AC\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.NET.Native.Runtime.2.2_8wekyb3d8bbwe\AC\Temp\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.NET.Native.Runtime.2.2_8wekyb3d8bbwe\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Office.OneNote_8wekyb3d8bbwe\AC\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Office.OneNote_8wekyb3d8bbwe\AC\Temp\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Office.OneNote_8wekyb3d8bbwe\AppData\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Office.OneNote_8wekyb3d8bbwe\LocalCache\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Office.OneNote_8wekyb3d8bbwe\LocalState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Office.OneNote_8wekyb3d8bbwe\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Office.OneNote_8wekyb3d8bbwe\RoamingState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Office.OneNote_8wekyb3d8bbwe\Settings\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Office.OneNote_8wekyb3d8bbwe\Settings\settings.dat.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Office.OneNote_8wekyb3d8bbwe\SystemAppData\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Office.OneNote_8wekyb3d8bbwe\TempState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.People_8wekyb3d8bbwe\AC\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.People_8wekyb3d8bbwe\AC\Temp\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.People_8wekyb3d8bbwe\AppData\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.People_8wekyb3d8bbwe\LocalCache\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.People_8wekyb3d8bbwe\LocalState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.People_8wekyb3d8bbwe\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.People_8wekyb3d8bbwe\RoamingState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.People_8wekyb3d8bbwe\Settings\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.People_8wekyb3d8bbwe\Settings\settings.dat.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.People_8wekyb3d8bbwe\SystemAppData\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.People_8wekyb3d8bbwe\TempState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.ScreenSketch_8wekyb3d8bbwe\AC\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.ScreenSketch_8wekyb3d8bbwe\AC\Temp\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.ScreenSketch_8wekyb3d8bbwe\AppData\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.ScreenSketch_8wekyb3d8bbwe\LocalCache\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.ScreenSketch_8wekyb3d8bbwe\LocalState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.ScreenSketch_8wekyb3d8bbwe\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.ScreenSketch_8wekyb3d8bbwe\RoamingState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.ScreenSketch_8wekyb3d8bbwe\Settings\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.ScreenSketch_8wekyb3d8bbwe\Settings\settings.dat.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.ScreenSketch_8wekyb3d8bbwe\SystemAppData\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.ScreenSketch_8wekyb3d8bbwe\TempState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Services.Store.Engagement_8wekyb3d8bbwe\AC\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Services.Store.Engagement_8wekyb3d8bbwe\AC\Temp\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Services.Store.Engagement_8wekyb3d8bbwe\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.StorePurchaseApp_8wekyb3d8bbwe\AC\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.StorePurchaseApp_8wekyb3d8bbwe\AC\Temp\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.StorePurchaseApp_8wekyb3d8bbwe\AppData\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.StorePurchaseApp_8wekyb3d8bbwe\LocalCache\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.StorePurchaseApp_8wekyb3d8bbwe\LocalState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.StorePurchaseApp_8wekyb3d8bbwe\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.StorePurchaseApp_8wekyb3d8bbwe\RoamingState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.StorePurchaseApp_8wekyb3d8bbwe\Settings\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.StorePurchaseApp_8wekyb3d8bbwe\Settings\settings.dat.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.StorePurchaseApp_8wekyb3d8bbwe\SystemAppData\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.StorePurchaseApp_8wekyb3d8bbwe\TempState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.UI.Xaml.2.0_8wekyb3d8bbwe\AC\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.UI.Xaml.2.0_8wekyb3d8bbwe\AC\Temp\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.UI.Xaml.2.0_8wekyb3d8bbwe\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.VCLibs.140.00.UWPDesktop_8wekyb3d8bbwe\AC\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.VCLibs.140.00.UWPDesktop_8wekyb3d8bbwe\AC\Temp\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.VCLibs.140.00.UWPDesktop_8wekyb3d8bbwe\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\AC\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\AC\Temp\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.VP9VideoExtensions_8wekyb3d8bbwe\AC\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.VP9VideoExtensions_8wekyb3d8bbwe\AC\Temp\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.VP9VideoExtensions_8wekyb3d8bbwe\AppData\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.VP9VideoExtensions_8wekyb3d8bbwe\LocalCache\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.VP9VideoExtensions_8wekyb3d8bbwe\LocalState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.VP9VideoExtensions_8wekyb3d8bbwe\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.VP9VideoExtensions_8wekyb3d8bbwe\RoamingState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.VP9VideoExtensions_8wekyb3d8bbwe\Settings\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.VP9VideoExtensions_8wekyb3d8bbwe\Settings\settings.dat.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.VP9VideoExtensions_8wekyb3d8bbwe\SystemAppData\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.VP9VideoExtensions_8wekyb3d8bbwe\TempState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Wallet_8wekyb3d8bbwe\AC\Temp\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Wallet_8wekyb3d8bbwe\AppData\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Wallet_8wekyb3d8bbwe\LocalCache\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Wallet_8wekyb3d8bbwe\LocalState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Wallet_8wekyb3d8bbwe\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Wallet_8wekyb3d8bbwe\RoamingState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Wallet_8wekyb3d8bbwe\Settings\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Wallet_8wekyb3d8bbwe\Settings\settings.dat.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Wallet_8wekyb3d8bbwe\SystemAppData\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Wallet_8wekyb3d8bbwe\TempState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.WebMediaExtensions_8wekyb3d8bbwe\AC\Temp\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy\AC\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy\AppData\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy\LocalCache\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy\LocalState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy\RoamingState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy\Settings\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy\Settings\settings.dat.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy\SystemAppData\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy\TempState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\AC\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\AC\Temp\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\AppData\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalCache\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\MediaDb.v1.sqlite-wal.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\MediaDb.v1.sqlite.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\RoamingState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\Settings\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\Settings\settings.dat.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\SystemAppData\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\TempState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy\AC\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy\AC\Temp\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy\AppData\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy\LocalCache\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy\LocalState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy\RoamingState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy\Settings\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy\Settings\settings.dat.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy\SystemAppData\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy\TempState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\Temp\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\TokenBroker\Cache\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\TokenBroker\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\CacheStorage\CacheStorage.edb.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\CacheStorage\CacheStorage.jfm.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\CacheStorage\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\Indexed DB\IndexedDB.edb.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\Indexed DB\IndexedDB.jfm.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\Indexed DB\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\Indexed DB\edb.chk.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalCache\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_549981C3F5F10_8wekyb3d8bbwe!App.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_BingWeather_8wekyb3d8bbwe!App.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_GetHelp_8wekyb3d8bbwe!App.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_Getstarted_8wekyb3d8bbwe!App.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_MSPaint_8wekyb3d8bbwe!Microsoft_MSPaint.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_Microsoft3DViewer_8wekyb3d8bbwe!Microsoft_Microsoft3DViewer.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_MicrosoftOfficeHub_8wekyb3d8bbwe!Microsoft_MicrosoftOfficeHub.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_MicrosoftSolitaireCollection_8wekyb3d8bbwe!App.Qs2QSInbk
OpenPGP Public Key
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_MicrosoftStickyNotes_8wekyb3d8bbwe!App.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_MixedReality_Portal_8wekyb3d8bbwe!App.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_Office_OneNote_8wekyb3d8bbwe!microsoft_onenoteim.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_People_8wekyb3d8bbwe!x4c7a3b7dy2188y46d4ya362y19ac5a5805e5x.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_ScreenSketch_8wekyb3d8bbwe!App.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_SkypeApp_kzf8qxf38zg5c!App.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_WindowsCamera_8wekyb3d8bbwe!App.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_WindowsFeedbackHub_8wekyb3d8bbwe!App.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_WindowsMaps_8wekyb3d8bbwe!App.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_WindowsStore_8wekyb3d8bbwe!App.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_Windows_SecHealthUI_cw5n1h2txyewy!SecHealthUI.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_XboxApp_8wekyb3d8bbwe!Microsoft_XboxApp.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_XboxGamingOverlay_8wekyb3d8bbwe!App.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_YourPhone_8wekyb3d8bbwe!App.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_ZuneMusic_8wekyb3d8bbwe!Microsoft_ZuneMusic.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_ZuneVideo_8wekyb3d8bbwe!Microsoft_ZuneVideo.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\microsoft_windowscommunicationsapps_8wekyb3d8bbwe!microsoft_windowslive_calendar.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\microsoft_windowscommunicationsapps_8wekyb3d8bbwe!microsoft_windowslive_mail.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\windows_immersivecontrolpanel_cw5n1h2txyewy!microsoft_windows_immersivecontrolpanel.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{c23bcd39-6fcf-4e41-add1-0231129b23be}\0.1.filtertrie.intermediate.txt.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{c23bcd39-6fcf-4e41-add1-0231129b23be}\0.2.filtertrie.intermediate.txt.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{c23bcd39-6fcf-4e41-add1-0231129b23be}\Apps.index.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{c23bcd39-6fcf-4e41-add1-0231129b23be}\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{de0f148a-c476-467a-b7a3-14b0bb463140}\0.1.filtertrie.intermediate.txt.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{de0f148a-c476-467a-b7a3-14b0bb463140}\0.2.filtertrie.intermediate.txt.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{de0f148a-c476-467a-b7a3-14b0bb463140}\Apps.index.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{de0f148a-c476-467a-b7a3-14b0bb463140}\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{ea91a05a-d98f-4429-81a9-272df0335447}\0.1.filtertrie.intermediate.txt.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{ea91a05a-d98f-4429-81a9-272df0335447}\0.2.filtertrie.intermediate.txt.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{ea91a05a-d98f-4429-81a9-272df0335447}\Apps.index.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{ea91a05a-d98f-4429-81a9-272df0335447}\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{4e763a36-90d3-4d6c-9949-dd01f7e5d23f}\appsconversions.txt.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{4e763a36-90d3-4d6c-9949-dd01f7e5d23f}\settings.csg.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{4e763a36-90d3-4d6c-9949-dd01f7e5d23f}\settings.schema.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Xbox.TCUI_8wekyb3d8bbwe\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Xbox.TCUI_8wekyb3d8bbwe\TempState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.XboxApp_8wekyb3d8bbwe\AC\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.XboxApp_8wekyb3d8bbwe\AC\Temp\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.XboxApp_8wekyb3d8bbwe\AppData\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.XboxApp_8wekyb3d8bbwe\LocalCache\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.XboxApp_8wekyb3d8bbwe\LocalState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.XboxApp_8wekyb3d8bbwe\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.XboxApp_8wekyb3d8bbwe\RoamingState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.XboxApp_8wekyb3d8bbwe\Settings\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.XboxApp_8wekyb3d8bbwe\Settings\settings.dat.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.XboxApp_8wekyb3d8bbwe\SystemAppData\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.XboxApp_8wekyb3d8bbwe\TempState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\AC\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\AC\Temp\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\AppData\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\LocalCache\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\LocalState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\RoamingState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\Settings\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\Settings\settings.dat.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\SystemAppData\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\TempState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.XboxGameOverlay_8wekyb3d8bbwe\AC\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.XboxGameOverlay_8wekyb3d8bbwe\AC\Temp\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.XboxGameOverlay_8wekyb3d8bbwe\AppData\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.XboxGameOverlay_8wekyb3d8bbwe\LocalCache\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.XboxGameOverlay_8wekyb3d8bbwe\LocalState\DiagOutputDir\LogFile_October_4_2023__16_5_0.txt.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.XboxGameOverlay_8wekyb3d8bbwe\LocalState\DiagOutputDir\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.XboxGameOverlay_8wekyb3d8bbwe\LocalState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.XboxGameOverlay_8wekyb3d8bbwe\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.XboxGameOverlay_8wekyb3d8bbwe\RoamingState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.XboxGameOverlay_8wekyb3d8bbwe\Settings\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.XboxGameOverlay_8wekyb3d8bbwe\Settings\settings.dat.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.XboxGameOverlay_8wekyb3d8bbwe\SystemAppData\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.XboxGameOverlay_8wekyb3d8bbwe\TempState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.XboxIdentityProvider_8wekyb3d8bbwe\AC\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.XboxIdentityProvider_8wekyb3d8bbwe\AC\Temp\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.XboxIdentityProvider_8wekyb3d8bbwe\AppData\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.XboxIdentityProvider_8wekyb3d8bbwe\LocalCache\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.XboxIdentityProvider_8wekyb3d8bbwe\LocalState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.XboxIdentityProvider_8wekyb3d8bbwe\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.XboxIdentityProvider_8wekyb3d8bbwe\RoamingState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.XboxIdentityProvider_8wekyb3d8bbwe\Settings\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.XboxIdentityProvider_8wekyb3d8bbwe\Settings\settings.dat.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.XboxIdentityProvider_8wekyb3d8bbwe\SystemAppData\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.XboxIdentityProvider_8wekyb3d8bbwe\TempState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.XboxSpeechToTextOverlay_8wekyb3d8bbwe\AC\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.XboxSpeechToTextOverlay_8wekyb3d8bbwe\AC\Temp\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.XboxSpeechToTextOverlay_8wekyb3d8bbwe\AppData\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.XboxSpeechToTextOverlay_8wekyb3d8bbwe\LocalCache\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.XboxSpeechToTextOverlay_8wekyb3d8bbwe\LocalState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.XboxSpeechToTextOverlay_8wekyb3d8bbwe\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.XboxSpeechToTextOverlay_8wekyb3d8bbwe\RoamingState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.XboxSpeechToTextOverlay_8wekyb3d8bbwe\Settings\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.XboxSpeechToTextOverlay_8wekyb3d8bbwe\Settings\settings.dat.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.XboxSpeechToTextOverlay_8wekyb3d8bbwe\SystemAppData\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.XboxSpeechToTextOverlay_8wekyb3d8bbwe\TempState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\AC\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\AC\Temp\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\AppData\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\LocalCache\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\LocalState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\RoamingState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\Settings\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\Settings\settings.dat.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\SystemAppData\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\TempState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\Temp\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AppData\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalCache\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\RoamingState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\Settings\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\Settings\settings.dat.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\SystemAppData\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\TempState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\AC\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\AC\Temp\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\AppData\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\LocalCache\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\LocalState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\RoamingState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\Settings\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\Settings\settings.dat.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\SystemAppData\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\TempState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AppData\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalCache\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\RoamingState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\Settings\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SystemAppData\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\MicrosoftWindows.UndockedDevKit_cw5n1h2txyewy\AC\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\MicrosoftWindows.UndockedDevKit_cw5n1h2txyewy\AC\Temp\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\MicrosoftWindows.UndockedDevKit_cw5n1h2txyewy\AppData\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\MicrosoftWindows.UndockedDevKit_cw5n1h2txyewy\LocalCache\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\MicrosoftWindows.UndockedDevKit_cw5n1h2txyewy\LocalState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\MicrosoftWindows.UndockedDevKit_cw5n1h2txyewy\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\MicrosoftWindows.UndockedDevKit_cw5n1h2txyewy\RoamingState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\MicrosoftWindows.UndockedDevKit_cw5n1h2txyewy\Settings\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\MicrosoftWindows.UndockedDevKit_cw5n1h2txyewy\Settings\settings.dat.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\MicrosoftWindows.UndockedDevKit_cw5n1h2txyewy\SystemAppData\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\MicrosoftWindows.UndockedDevKit_cw5n1h2txyewy\TempState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\NcsiUwpApp_8wekyb3d8bbwe\AC\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\NcsiUwpApp_8wekyb3d8bbwe\AC\Temp\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\NcsiUwpApp_8wekyb3d8bbwe\AppData\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\NcsiUwpApp_8wekyb3d8bbwe\LocalCache\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\NcsiUwpApp_8wekyb3d8bbwe\LocalState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\NcsiUwpApp_8wekyb3d8bbwe\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\NcsiUwpApp_8wekyb3d8bbwe\RoamingState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\NcsiUwpApp_8wekyb3d8bbwe\Settings\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\NcsiUwpApp_8wekyb3d8bbwe\Settings\settings.dat.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\NcsiUwpApp_8wekyb3d8bbwe\SystemAppData\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\NcsiUwpApp_8wekyb3d8bbwe\TempState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Windows.CBSPreview_cw5n1h2txyewy\AC\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Windows.CBSPreview_cw5n1h2txyewy\AC\Temp\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Windows.CBSPreview_cw5n1h2txyewy\AppData\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Windows.CBSPreview_cw5n1h2txyewy\LocalCache\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Windows.CBSPreview_cw5n1h2txyewy\LocalState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Windows.CBSPreview_cw5n1h2txyewy\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Windows.CBSPreview_cw5n1h2txyewy\RoamingState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Windows.CBSPreview_cw5n1h2txyewy\Settings\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Windows.CBSPreview_cw5n1h2txyewy\Settings\settings.dat.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Windows.CBSPreview_cw5n1h2txyewy\SystemAppData\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Windows.CBSPreview_cw5n1h2txyewy\TempState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Windows.PrintDialog_cw5n1h2txyewy\AC\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Windows.PrintDialog_cw5n1h2txyewy\AC\Temp\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Windows.PrintDialog_cw5n1h2txyewy\AppData\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Windows.PrintDialog_cw5n1h2txyewy\LocalCache\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Windows.PrintDialog_cw5n1h2txyewy\LocalState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Windows.PrintDialog_cw5n1h2txyewy\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Windows.PrintDialog_cw5n1h2txyewy\RoamingState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Windows.PrintDialog_cw5n1h2txyewy\Settings\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Windows.PrintDialog_cw5n1h2txyewy\Settings\settings.dat.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\Windows.PrintDialog_cw5n1h2txyewy\SystemAppData\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Windows.PrintDialog_cw5n1h2txyewy\TempState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\windows.immersivecontrolpanel_cw5n1h2txyewy\AC\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\windows.immersivecontrolpanel_cw5n1h2txyewy\AppData\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\windows.immersivecontrolpanel_cw5n1h2txyewy\LocalCache\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\windows.immersivecontrolpanel_cw5n1h2txyewy\LocalState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\windows.immersivecontrolpanel_cw5n1h2txyewy\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\windows.immersivecontrolpanel_cw5n1h2txyewy\RoamingState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\windows.immersivecontrolpanel_cw5n1h2txyewy\Settings\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\windows.immersivecontrolpanel_cw5n1h2txyewy\Settings\settings.dat.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Packages\windows.immersivecontrolpanel_cw5n1h2txyewy\SystemAppData\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\windows.immersivecontrolpanel_cw5n1h2txyewy\TempState\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\windows_ie_ac_001\AC\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\windows_ie_ac_001\AC\Temp\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\windows_ie_ac_001\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\PeerDistRepub\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\PlaceholderTileLogoFolder\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Publishers\8wekyb3d8bbwe\Fonts\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Publishers\8wekyb3d8bbwe\Licenses\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Publishers\8wekyb3d8bbwe\Microsoft.WindowsAlarms\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Publishers\8wekyb3d8bbwe\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Publishers\8wekyb3d8bbwe\SettingsContainer\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Publishers\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\SolidDocuments\Acrobat\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\SolidDocuments\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\Diagnostics\EXCEL\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\Diagnostics\ONENOTE\App1714014880372801600_29CC7398-2A01-4DC6-A22E-768619CAA88A.log
data
dropped
C:\Users\user\AppData\Local\Temp\Diagnostics\ONENOTE\App1714014880373611700_29CC7398-2A01-4DC6-A22E-768619CAA88A.log
data
dropped
C:\Users\user\AppData\Local\Temp\Diagnostics\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\acrobat_sbx\Adobe\Acrobat\DC\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\acrobat_sbx\Adobe\Acrobat\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\acrobat_sbx\Adobe\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2023-10-04 16-15-42-624.log.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2023-10-04 16-15-55-956.log.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6.log.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\acrobat_sbx\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\acrocef_low\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\acrord32_super_sbx\Adobe\Acrobat\DC\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\acrord32_super_sbx\Adobe\Acrobat\DC\SearchEmbdIndex\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\acrord32_super_sbx\Adobe\Acrobat\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\acrord32_super_sbx\Adobe\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\acrord32_super_sbx\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\edge_BITS_6440_1090636871\4643befd-79b8-4e0c-a2fb-c0e3ee78dcd5.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Local\Temp\edge_BITS_6440_1090636871\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\edge_BITS_6440_1191663050\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\edge_BITS_6440_1234978473\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\edge_BITS_6440_1289371347\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\{02E2C256-8AED-4AAC-845B-0288825F1C82}
Windows Enhanced Metafile (EMF) image data version 0x10000
dropped
C:\Users\user\AppData\Local\Temp\{06653D66-4B5C-4BC9-B86A-F5B2A58004FA}
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 7.0, datetime=2004:03:04 13:06:24], progressive, precision 8, 38x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{08F9D190-B0AA-4B81-8F6D-8C77ECE75969}
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 357x69, components 3
dropped
C:\Users\user\AppData\Local\Temp\{0A9F528F-1177-46EB-AD95-BC4631008600}
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2004:03:12 11:08:07], baseline, precision 8, 595x450, components 3
dropped
C:\Users\user\AppData\Local\Temp\{0AA648F7-C10F-49B2-9644-FC1DB9531CF1}
PNG image data, 3005 x 184, 8-bit/color RGBA, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{117B8B02-596F-4C71-BE24-3BF5633A522E}
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 7.0, datetime=2004:03:04 13:27:10], progressive, precision 8, 102x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{16C77C5B-F884-4611-B9A6-1151B4CFB241}
PNG image data, 77 x 627, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{18EAED0C-B4FA-4126-83AD-0475C064CFD6}
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2004:03:12 11:13:06], progressive, precision 8, 570x779, components 3
dropped
C:\Users\user\AppData\Local\Temp\{25774D58-61F1-4931-9B52-01EF45A88A89}
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{26769539-1419-4CBB-B039-47B957645A07}
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 276x139, components 3
dropped
C:\Users\user\AppData\Local\Temp\{2AE6F32B-5E4C-4135-BD2A-DD11BD3CE823}
PNG image data, 40 x 650, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{2EBB40E9-049E-410D-AA35-4914D8DD2C73}
PNG image data, 39 x 579, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{3996E78B-25BA-436D-870E-26349567DFF4}
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 814x105, components 3
dropped
C:\Users\user\AppData\Local\Temp\{4280B95C-FC6B-4C61-B0A0-67D08579F84E}
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{44953353-51CA-4EE8-8357-D52B49BB2ED9}
PNG image data, 39 x 600, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{46542FC3-46DE-4CF1-A9AB-6A00B2434271}
PNG image data, 50 x 556, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{46580EF1-C88E-4252-82A3-7A937908C0F6}
PNG image data, 171 x 552, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{46935E1F-EC77-4CED-BC04-8EDCEDD3D029}
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{4F486F72-C97F-4E6E-BAA1-94F57CDE5509}
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{4F4FF238-39AE-4F31-85BA-1FE1A7E8C51F}
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{4F7FE22F-03D9-4C30-8B98-E9A30F02988D}
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{5379DE72-D646-4108-97BB-B2AB587756A1}
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 780x107, components 3
dropped
C:\Users\user\AppData\Local\Temp\{564F952C-C007-4BAA-A330-9DC46F1CCA63}
PNG image data, 50 x 600, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{5728869F-B59A-45B6-B5C3-6C5695EAD81F}
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 69x630, components 3
dropped
C:\Users\user\AppData\Local\Temp\{57A3C9D0-E841-4D82-A8D7-D1FD8FF11DE7}
PNG image data, 189 x 305, 8-bit/color RGBA, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{5FE9BB95-53A3-4B1A-B622-9309C6E541D8}
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{63C04131-759A-4418-B4E3-88D22D9C1D9F}
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{65BD8625-13E4-42B3-8E1F-B14F6E810730}
PNG image data, 189 x 305, 8-bit/color RGBA, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{680D9847-19AB-49BD-B6F1-0609D2753A04}
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 7.0, datetime=2004:03:04 13:18:09], progressive, precision 8, 164x641, components 3
dropped
C:\Users\user\AppData\Local\Temp\{684613C4-C251-435C-B7EA-1D82C90B5586}
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{6A47752D-C4D4-4398-9CDE-2227A6CE81DC}
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{6A5D2B28-5A74-4F5B-BA49-D300311BB979}
PNG image data, 40 x 623, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{6B75D582-BC42-45A6-AC1A-78FF4F932FAE}
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{74E64E73-CEC1-4D98-B53B-4B8A4809522F}
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 7.0, datetime=2004:03:04 13:18:09], progressive, precision 8, 164x641, components 3
dropped
C:\Users\user\AppData\Local\Temp\{75380E90-A4A6-4084-A1CA-DC458DDE88B2}
PNG image data, 177 x 123, 8-bit/color RGBA, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{757A3CE1-1BA8-4A02-9218-E85F9FD9D0BA}
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 7.0, datetime=2004:03:04 13:06:24], progressive, precision 8, 38x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{7753578A-908E-4D4F-8236-C5FB0E873D7C}
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2004:03:12 11:08:07], baseline, precision 8, 595x450, components 3
dropped
C:\Users\user\AppData\Local\Temp\{778F7A25-4789-4022-86F7-827005B22C88}
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{7A40460E-7E5A-4A9E-94FC-9A92E0C056F9}
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{7E0602CD-05FA-4FAD-A229-D9083CAE228A}
PNG image data, 176 x 513, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{80CBFA37-AD01-4D7E-8CDF-220E9D423225}
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 7.0, datetime=2004:03:04 13:26:15], progressive, precision 8, 216x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{86B0B3B5-6C41-4A5A-9C15-68954A46EED7}
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 14x341, components 3
dropped
C:\Users\user\AppData\Local\Temp\{88479124-3D39-4B5D-B94D-BFCD6E11A929}
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 262x277, components 3
dropped
C:\Users\user\AppData\Local\Temp\{8A80D225-525C-4339-A441-39CD0FDEC3DB}
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2004:03:12 11:15:20], progressive, precision 8, 604x784, components 3
dropped
C:\Users\user\AppData\Local\Temp\{8DB671C7-8498-476E-80DE-33BF632A30DF}
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 613x144, components 3
dropped
C:\Users\user\AppData\Local\Temp\{915A6D42-4780-4CFE-A5F3-94069F1C035B}
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{926BFFA2-9840-4BED-A800-310E384A2148}
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 7.0, datetime=2004:03:04 13:44:07], progressive, precision 8, 611x163, components 3
dropped
C:\Users\user\AppData\Local\Temp\{98BBD68C-D732-46C4-83FF-EFAEA10B8E71}
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2004:03:12 11:09:29], progressive, precision 8, 609x675, components 3
dropped
C:\Users\user\AppData\Local\Temp\{98DC5D13-0D8B-4505-AC30-7164EF12736D}
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 814x45, components 3
dropped
C:\Users\user\AppData\Local\Temp\{9B14F45D-6E1B-441E-B2A4-34C90D9B7C9A}
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2004:03:12 11:10:32], progressive, precision 8, 594x773, components 3
dropped
C:\Users\user\AppData\Local\Temp\{9B8686E9-39DD-48D5-94D9-BDE03D1CCB39}
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{9C5B3B4C-0BA3-4001-8001-F7C6605DADA3}
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{9DF8F3B1-6198-4BAF-96A1-3A9A92432C19}
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{A2AA1648-1D8F-453D-99C7-DD50AE8450DD}
PNG image data, 50 x 500, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{A36EE817-7E92-4219-A078-6A137982D5AB}
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{A4DBADB1-AB7D-40A8-BA7F-0E12B44396D1}
Windows Enhanced Metafile (EMF) image data version 0x10000
dropped
C:\Users\user\AppData\Local\Temp\{A5810AF3-C75B-43C6-87C7-6AD5D29857C9}
PNG image data, 40 x 617, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{A777C443-0FFB-4F64-B165-9B886508C130}
PNG image data, 813 x 99, 8-bit/color RGBA, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{A8E8B91D-9047-40FD-A714-38F0FFF99CE6}
PNG image data, 88 x 574, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{AB62EFEA-BFB4-4CC9-B748-D6B20108B707}
Windows Enhanced Metafile (EMF) image data version 0x10000
dropped
C:\Users\user\AppData\Local\Temp\{ABF3415F-F7C9-4C4F-A178-9A44EE0DBE53}
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{AD3EB2AB-41BC-400A-85E7-A4081164E86D}
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2004:03:12 11:12:29], progressive, precision 8, 598x766, components 3
dropped
C:\Users\user\AppData\Local\Temp\{AF732D20-56E1-4DF8-9594-B7D035309CD2}
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 105x441, components 3
dropped
C:\Users\user\AppData\Local\Temp\{AF90321C-B6C0-420C-A925-60B9484869E1}
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{B05432A4-63C0-488C-9D10-5F61BA216A90}
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2004:03:12 11:05:55], progressive, precision 8, 612x618, components 3
dropped
C:\Users\user\AppData\Local\Temp\{B2B45F0F-3441-44D9-9C42-BA9D11E02C2F}
PNG image data, 30 x 700, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{B5A5D563-D26E-4BE1-9BC2-688B0D0A1E65}
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{BA0E176F-B623-4926-925C-315AAAFC9217}
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{BBA37195-5E90-443C-9B5D-70FF6CDC470A}
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{BCA8E32B-1F9F-4805-92E3-DD8DFE4E7798}
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 95x498, components 3
dropped
C:\Users\user\AppData\Local\Temp\{BE282793-5CF8-425E-8422-5E99DFEC4E40}
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{BE9331F4-0880-48D1-BF5E-C18B0B64BC98}
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 17x608, components 3
dropped
C:\Users\user\AppData\Local\Temp\{C5DB8565-B1A9-4FD3-913C-93394E226B02}
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 7.0, datetime=2004:03:04 13:19:29], progressive, precision 8, 221x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{C7F38BD2-06F2-4F6A-93C1-FA4FF882E59F}
PNG image data, 85 x 470, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{D3853C54-1F1F-40CB-8EDB-3FE8D0A479C3}
PNG image data, 189 x 305, 8-bit/color RGBA, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{D527EF59-68A6-4DC2-8534-9CAD589637DA}
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2004:03:12 11:05:55], progressive, precision 8, 612x618, components 3
dropped
C:\Users\user\AppData\Local\Temp\{D688276D-BA55-4241-99C9-C2FA931A84F1}
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{D94D310E-4443-4B85-8340-938165793337}
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 76x97, components 3
dropped
C:\Users\user\AppData\Local\Temp\{D9E8579B-D65B-420B-9544-DB7243D31342}
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{DC613E79-615F-4D76-A056-4B9A4010DE52}
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{DCBA69B4-548E-4C23-BC45-449C1219C9F4}
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 700x114, components 3
dropped
C:\Users\user\AppData\Local\Temp\{E1429C68-210B-4059-8D2B-9C23CBE103C2}
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{E2F7F7CB-6953-4ECC-BE2A-C8BAC724A909}
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 70x626, components 3
dropped
C:\Users\user\AppData\Local\Temp\{E4CC9F25-C69C-43CF-8AEC-DF5C04CD7B61}
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{E5E2C209-4354-4930-B646-386A787BE224}
PNG image data, 60 x 336, 4-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{E7D31BA4-8E69-4776-AE78-4794E5803393}
Windows Enhanced Metafile (EMF) image data version 0x10000
dropped
C:\Users\user\AppData\Local\Temp\{EC13B8F9-A53B-4D00-A88C-77A3A175FB82}
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{F271160C-1F7E-4C1E-A976-3B45F5DB0E56}
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{FA4173CC-60A5-4A66-94D0-A893942DF1EE}
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 7.0, datetime=2004:03:04 13:19:29], progressive, precision 8, 221x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{FCE8AD9F-D1E1-4FEE-B2D7-9CC72DB0EAD2}
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2004:03:12 11:11:38], progressive, precision 8, 577x757, components 3
dropped
C:\Users\user\AppData\Local\Temp\{FE7A0F1E-850B-4513-9E70-94DB58212ADB}
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 728x77, components 3
dropped
C:\Users\user\AppData\Roaming\Adobe\Acrobat\DC\Collab\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Adobe\Acrobat\DC\Forms\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Adobe\Acrobat\DC\JSCache\GlobData.Qs2QSInbk
OpenPGP Public Key
dropped
C:\Users\user\AppData\Roaming\Adobe\Acrobat\DC\JSCache\GlobSettings.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Roaming\Adobe\Acrobat\DC\JSCache\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Adobe\Acrobat\DC\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Adobe\Acrobat\DC\Security\ES_session_store.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Roaming\Adobe\Acrobat\DC\Security\ES_session_storek.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Roaming\Adobe\Acrobat\DC\Security\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Adobe\Acrobat\DC\TMDocs.sav.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Roaming\Adobe\Acrobat\DC\TMGrpPrm.sav.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Roaming\Adobe\Acrobat\Preflight Acrobat Continuous\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Adobe\Acrobat\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Adobe\CRLogs\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Adobe\CRLogs\crashlogs\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Adobe\Flash Player\NativeCache\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Adobe\Flash Player\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Adobe\Headlights\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Adobe\Linguistics\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Adobe\LogTransport2CC\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Adobe\LogTransport2\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Adobe\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Adobe\RTTransfer\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Adobe\Sonar\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Adobe\Sonar\SonarCC\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Microsoft\OneNote\16.0\Preferences.dat
data
dropped
C:\Users\user\AppData\Roaming\Mozilla\Extensions\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Crash Reports\InstallTime20230927232528.Qs2QSInbk
data
dropped
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Crash Reports\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Crash Reports\events\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Pending Pings\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\com.adobe.dunamis\56079431-ea46-4833-94f9-1ff5658cdb1c\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\com.adobe.dunamis\61f56613-c62c-4b17-84dd-62b60d5776aa\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\com.adobe.dunamis\6d9d9777-7ded-4768-8191-9a707d72b009\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\com.adobe.dunamis\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\com.adobe.dunamis\f2eb6c79-671d-4de2-b7be-3b2eea7abc47\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\Documents\BJZFPPWAPT.docx.Qs2QSInbk
data
dropped
C:\Users\user\Documents\BJZFPPWAPT.jpg.Qs2QSInbk
COM executable for DOS
dropped
C:\Users\user\Documents\BJZFPPWAPT.xlsx.Qs2QSInbk
data
dropped
C:\Users\user\Documents\DUUDTUBZFW.mp3.Qs2QSInbk
data
dropped
C:\Users\user\Documents\DUUDTUBZFW.pdf.Qs2QSInbk
data
dropped
C:\Users\user\Documents\DUUDTUBZFW.xlsx.Qs2QSInbk
data
dropped
C:\Users\user\Documents\EFOYFBOLXA.docx.Qs2QSInbk
data
dropped
C:\Users\user\Documents\EFOYFBOLXA.xlsx.Qs2QSInbk
OpenPGP Secret Key
dropped
C:\Users\user\Documents\EIVQSAOTAQ.pdf.Qs2QSInbk
data
dropped
C:\Users\user\Documents\EWZCVGNOWT.png.Qs2QSInbk
data
dropped
C:\Users\user\Documents\GLTYDMDUST.png.Qs2QSInbk
data
dropped
C:\Users\user\Documents\GRXZDKKVDB.docx.Qs2QSInbk
data
dropped
C:\Users\user\Documents\GRXZDKKVDB.pdf.Qs2QSInbk
data
dropped
C:\Users\user\Documents\HMPPSXQPQV.mp3.Qs2QSInbk
data
dropped
C:\Users\user\Documents\KLIZUSIQEN.jpg.Qs2QSInbk
data
dropped
C:\Users\user\Documents\KLIZUSIQEN.mp3.Qs2QSInbk
data
dropped
C:\Users\user\Documents\KLIZUSIQEN.pdf.Qs2QSInbk
data
dropped
C:\Users\user\Documents\NVWZAPQSQL.docx.Qs2QSInbk
data
dropped
C:\Users\user\Documents\NWCXBPIUYI.mp3.Qs2QSInbk
data
dropped
C:\Users\user\Documents\NYMMPCEIMA.jpg.Qs2QSInbk
data
dropped
C:\Users\user\Documents\QCOILOQIKC.png.Qs2QSInbk
data
dropped
C:\Users\user\Documents\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\Downloads\BJZFPPWAPT.docx.Qs2QSInbk
data
dropped
C:\Users\user\Downloads\BJZFPPWAPT.jpg.Qs2QSInbk
data
dropped
C:\Users\user\Downloads\BJZFPPWAPT.xlsx.Qs2QSInbk
data
dropped
C:\Users\user\Downloads\DUUDTUBZFW.mp3.Qs2QSInbk
data
dropped
C:\Users\user\Downloads\DUUDTUBZFW.pdf.Qs2QSInbk
data
dropped
C:\Users\user\Downloads\DUUDTUBZFW.xlsx.Qs2QSInbk
DOS executable (COM, 0x8C-variant)
dropped
C:\Users\user\Downloads\EFOYFBOLXA.docx.Qs2QSInbk
data
dropped
C:\Users\user\Downloads\EFOYFBOLXA.xlsx.Qs2QSInbk
data
dropped
C:\Users\user\Downloads\EIVQSAOTAQ.pdf.Qs2QSInbk
data
dropped
C:\Users\user\Downloads\EWZCVGNOWT.png.Qs2QSInbk
data
dropped
C:\Users\user\Downloads\GLTYDMDUST.png.Qs2QSInbk
SYMMETRY i386 .o not stripped version 59926373
dropped
C:\Users\user\Downloads\GRXZDKKVDB.docx.Qs2QSInbk
data
dropped
C:\Users\user\Downloads\GRXZDKKVDB.pdf.Qs2QSInbk
data
dropped
C:\Users\user\Downloads\HMPPSXQPQV.mp3.Qs2QSInbk
data
dropped
C:\Users\user\Downloads\KLIZUSIQEN.jpg.Qs2QSInbk
data
dropped
C:\Users\user\Downloads\KLIZUSIQEN.mp3.Qs2QSInbk
data
dropped
C:\Users\user\Downloads\KLIZUSIQEN.pdf.Qs2QSInbk
data
dropped
C:\Users\user\Downloads\NVWZAPQSQL.docx.Qs2QSInbk
data
dropped
C:\Users\user\Downloads\NWCXBPIUYI.mp3.Qs2QSInbk
data
dropped
C:\Users\user\Downloads\NYMMPCEIMA.jpg.Qs2QSInbk
OpenPGP Public Key
dropped
C:\Users\user\Downloads\PALRGUCVEH.png.Qs2QSInbk
data
dropped
C:\Users\user\Downloads\QCOILOQIKC.png.Qs2QSInbk
data
dropped
C:\Users\user\Downloads\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\Downloads\ZGGKNSUKOP.jpg.Qs2QSInbk
data
dropped
C:\Users\user\Downloads\ZGGKNSUKOP.xlsx.Qs2QSInbk
data
dropped
C:\Users\user\Favorites\Amazon.url.Qs2QSInbk
data
dropped
C:\Users\user\Favorites\Bing.url.Qs2QSInbk
data
dropped
C:\Users\user\Favorites\Facebook.url.Qs2QSInbk
data
dropped
C:\Users\user\Favorites\Google.url.Qs2QSInbk
data
dropped
C:\Users\user\Favorites\Links\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\Favorites\Live.url.Qs2QSInbk
data
dropped
C:\Users\user\Favorites\NYTimes.url.Qs2QSInbk
data
dropped
C:\Users\user\Favorites\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\Favorites\Reddit.url.Qs2QSInbk
data
dropped
C:\Users\user\Favorites\Twitter.url.Qs2QSInbk
data
dropped
C:\Users\user\Favorites\Wikipedia.url.Qs2QSInbk
data
dropped
C:\Users\user\Favorites\Youtube.url.Qs2QSInbk
data
dropped
C:\Users\user\Links\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\Music\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\OneDrive\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\Pictures\Camera Roll\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\Pictures\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\Pictures\Saved Pictures\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\Recent\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\Saved Games\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\Searches\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\Searches\winrt--{S-1-5-21-2246122658-3693405117-2476756634-1003}-.searchconnector-ms.Qs2QSInbk
data
dropped
C:\Users\user\Videos\Qs2QSInbk.README.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\_curlrc.Qs2QSInbk
data
dropped
C:\Windows\System32\spool\PRINTERS\00002.SPL
Microsoft OOXML
dropped
\Device\Null
ASCII text, with CRLF line terminators
dropped
There are 1681 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\Document.doc.scr.exe
"C:\Users\user\Desktop\Document.doc.scr.exe"
malicious
C:\ProgramData\2172.tmp
"C:\ProgramData\2172.tmp"
malicious
C:\Windows\SysWOW64\cmd.exe
"C:\Windows\System32\cmd.exe" /C DEL /F /Q C:\PROGRA~3\2172.tmp >> NUL
malicious
C:\Windows\splwow64.exe
C:\Windows\splwow64.exe 12288
C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTE.EXE
/insertdoc "C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\{EA82EC72-B970-44A4-8C1B-42CD300B85FB}.xps" 133584884697420000
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

URLs

Name
IP
Malicious
https://tox.chat/
unknown
malicious
http://lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onionic
unknown
malicious
http://lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion
unknown
malicious
http://lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onionk
unknown
malicious
http://lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.oniong
unknown
malicious
http://lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onionic
unknown
malicious
http://lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onional
unknown
malicious
http://lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onionl2
unknown
malicious
http://lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onionin
unknown
malicious
http://lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onionin
unknown
malicious
http://lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion0
unknown
malicious
http://lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onionc~
unknown
malicious
http://lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onionedA
unknown
malicious
http://lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion
unknown
malicious
http://lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion
unknown
malicious
http://lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onionl
unknown
malicious
https://www.ebay.co.uk/
unknown
https://login.windows.net
unknown
https://www.amazon.com/
unknown
https://www.ctrip.com/
unknown
https://twitter.com/
unknown
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
unknown
https://www.youtube.com/
unknown
http://lockbitapt.uz
unknown
http://lockbitsupp.uz
unknown
https://bugzilla.mo
unknown
https://tox.::
unknown
https://support.mozilla.org/products/firefoxgro.allizom.troppus.GVegJq3nFfBL
unknown
https://www.google.com/complete/
unknown
https://support.mozilla.org
unknown
https://tox.:
unknown
https://www.google.com/
unknown
https://content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-202
unknown
https://www.baidu.com/
unknown
There are 24 hidden URLs, click here to show them.

Registry

Path
Value
Malicious
HKEY_CURRENT_USER\Control Panel\Desktop
WallPaper
malicious
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.Qs2QSInbk
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Qs2QSInbk\DefaultIcon
NULL
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
Owner
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
SessionHash
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
Sequence
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
RegFiles0000
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
RegFilesHash
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
Owner
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
SessionHash
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
Sequence
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
RegFiles0000
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
RegFilesHash
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
Owner
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
SessionHash
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
Sequence
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
RegFiles0000
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
RegFilesHash
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
Owner
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
SessionHash
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
Sequence
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
RegFiles0000
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
RegFilesHash
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
Owner
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
SessionHash
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
Sequence
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
RegFiles0000
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
RegFilesHash
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
Owner
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
SessionHash
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
Sequence
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
RegFiles0000
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
RegFilesHash
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer
GlobalAssocChangedCounter
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\AirSpaceChannel
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Analytic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\DirectShowFilterGraph
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\EndpointMapper
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Intel-iaLPSS-GPIO/Analytic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Intel-iaLPSS-I2C/Analytic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Intel-iaLPSS2-GPIO2/Debug
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Intel-iaLPSS2-GPIO2/Performance
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Intel-iaLPSS2-I2C/Debug
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\MedaFoundationVideoProcD3D
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\MediaFoundationAsyncWrapper
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\MediaFoundationPlatform
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\MF_MediaFoundationDeviceProxy
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-AppV-Client/Admin
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-AppV-Client/Admin
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-AppV-Client/Debug
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-AppV-Client/Operational
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-AppV-Client/Operational
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-AppV-Client/Virtual Applications
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Client-License-Flexible-Platform/Admin
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Client-License-Flexible-Platform/Diagnostic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Client-Licensing-Platform/Admin
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Client-Licensing-Platform/Admin
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Client-Licensing-Platform/Debug
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-IEFRAME/Diagnostic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-JSDumpHeap/Diagnostic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-User Experience Virtualization-SQM Uploader/Operational
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AppID/Operational
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AppID/Operational
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-ApplicabilityEngine/Operational
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AppLocker/EXE and DLL
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AppLocker/EXE and DLL
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AppModel-State/Debug
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AppReadiness/Admin
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AppReadiness/Admin
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AppXDeploymentServer/Operational
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AppXDeploymentServer/Restricted
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AppxPackaging/Debug
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AppxPackaging/Operational
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-ASN1/Operational
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AssignedAccess/Admin
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AssignedAccess/Admin
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AssignedAccessBroker/Admin
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AssignedAccessBroker/Admin
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AssignedAccessBroker/Operational
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AsynchronousCausality/Causality
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-ATAPort/SATA-LPM
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Audio/Informational
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Audio/Operational
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Audio/Operational
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Audio/Performance
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Authentication/ProtectedUser-Client
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-BackgroundTransfer-ContentPrefetcher/Operational
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-BitLocker-DrivePreparationTool/Admin
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-BitLocker-DrivePreparationTool/Operational
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-BitLocker-DrivePreparationTool/Operational
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-BitLocker/Tracing
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Bits-Client/Analytic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Bluetooth-Bthmini/Operational
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Bluetooth-MTPEnum/Operational
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Bluetooth-MTPEnum/Operational
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-BranchCache/Operational
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-BranchCacheSMB/Analytic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-BranchCacheSMB/Operational
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-BranchCacheSMB/Operational
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-BTH-BTHPORT/HCI
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-BTH-BTHPORT/L2CAP
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-BTH-BTHUSB/Diagnostic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-BTH-BTHUSB/Performance
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-CAPI2/Catalog Database Debug
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-CAPI2/Operational
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-CDROM/Operational
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-CertificateServicesClient-Lifecycle-System/Operational
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-CertificateServicesClient-Lifecycle-System/Operational
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Cleanmgr/Diagnostic
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Cleanmgr/Diagnostic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-ClearTypeTextTuner/Diagnostic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-CloudStore/Operational
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-CodeIntegrity/Operational
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-CodeIntegrity/Operational
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-COM/Analytic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-COM/CreateInstance
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-ComDlg32/Analytic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Compat-Appraiser/Analytic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-COMRuntime/Tracing
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Containers-Wcifs/Operational
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-CoreApplication/Diagnostic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Crypto-BCRYPT/Analytic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Crypto-DPAPI/BackUpKeySvc
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Crypto-DPAPI/BackUpKeySvc
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Crypto-DSSEnh/Analytic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Crypto-RNG/Analytic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-DAL-Provider/Analytic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-DAL-Provider/Operational
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-DCLocator/Debug
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Deduplication/Diagnostic
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Deduplication/Diagnostic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Deduplication/Performance
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-DeviceAssociationService/Performance
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Admin
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Debug
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-DeviceSync/Analytic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-DeviceSync/Operational
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-DeviceSync/Operational
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-DeviceUpdateAgent/Operational
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-DeviceUpdateAgent/Operational
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-DiagCpl/Debug
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Diagnosis-AdvancedTaskManager/Analytic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Diagnosis-DPS/Analytic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Diagnosis-WDC/Analytic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Diagnostics-Networking/Debug
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Diagnostics-Networking/Operational
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Diagnostics-Networking/Operational
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Diagnostics-Performance/Operational
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Diagnostics-PerfTrack-Counters/Diagnostic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Diagnostics-PerfTrack/Diagnostic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-DirectManipulation/Diagnostic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-DirectShow-KernelSupport/Performance
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-DXGI/Logging
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-DxgKrnl-Admin
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-DxgKrnl-Admin
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-EapHost/Operational
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-EapHost/Operational
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-EapMethods-RasChap/Operational
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-EapMethods-RasChap/Operational
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-EapMethods-Ttls/Operational
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-EapMethods-Ttls/Operational
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-EDP-Audit-Regular/Admin
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-EDP-Audit-Regular/Admin
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Energy-Estimation-Engine/EventLog
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-FeatureConfiguration/Analytic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-FileHistory-Catalog/Debug
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-FileHistory-Engine/BackupLog
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-FMS/Analytic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-FMS/Operational
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-GroupPolicy/Operational
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Help/Operational
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Hyper-V-Hypervisor-Admin
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Hyper-V-NETVSC/Diagnostic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Hyper-V-VID-Admin
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-IdCtrls/Operational
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-IdCtrls/Operational
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-IKE/Operational
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-IME-TCCORE/Analytic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-IME-TCTIP/Analytic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-InputSwitch/Diagnostic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-International-RegionalOptionsControlPanel/Operational
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-KdsSvc/Operational
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Kernel-ApphelpCache/Operational
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Kernel-ApphelpCache/Operational
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Kernel-Boot/Operational
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Kernel-Boot/Operational
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Kernel-Disk/Analytic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Kernel-File/Analytic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Kernel-Power/Diagnostic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Kernel-Prefetch/Diagnostic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Kernel-Registry/Analytic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Kernel-StoreMgr/Analytic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Kernel-WDI/Analytic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Kernel-WDI/Debug
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Kernel-WDI/Operational
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-KeyboardFilter/Admin
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-KeyboardFilter/Admin
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-LanguagePackSetup/Operational
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-LDAP-Client/Debug
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-LiveId/Analytic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-LSA/Operational
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-LSA/Performance
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Media-Streaming/MDE
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Mobile-Broadband-Experience-Api-Internal/Analytic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Mobile-Broadband-Experience-Parser-Task/Operational
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-MUI/Operational
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-NetShell/Performance
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-NetworkLocationWizard/Operational
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-NetworkProvider/Operational
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-NetworkSecurity/Debug
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Ntfs/WHC
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Ntfs/WHC
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-ntshrui
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-OfflineFiles/Analytic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-OfflineFiles/Debug
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-OOBE-Machine-Plugins-Wireless/Diagnostic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-ParentalControls/Operational
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-PCI/Diagnostic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-PerceptionRuntime/Operational
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-PerceptionSensorDataService/Operational
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-PerceptionSensorDataService/Operational
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-PersistentMemory-Nvdimm/Analytic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-PersistentMemory-Nvdimm/Operational
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-PersistentMemory-PmemDisk/Analytic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-PersistentMemory-PmemDisk/Diagnostic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-PersistentMemory-ScmBus/Analytic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-PersistentMemory-ScmBus/Certification
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-PersistentMemory-ScmBus/Operational
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-PersistentMemory-ScmBus/Operational
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-PhotoAcq/Analytic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-PowerShell-DesiredStateConfiguration-FileDownloadManager/Analytic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-PowerShell/Analytic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-PowerShell/Debug
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-PowerShell/Operational
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-PrintBRM/Admin
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-PrintBRM/Admin
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-PrintService/Admin
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-PushNotification-Platform/Operational
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-QoS-Pacer/Diagnostic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-RasAgileVpn/Debug
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-ReadyBoostDriver/Operational
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-ReadyBoostDriver/Operational
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-ReFS/Operational
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-ReFS/Operational
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Regsvr32/Operational
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Regsvr32/Operational
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-RemoteApp and Desktop Connections/Admin
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-RemoteApp and Desktop Connections/Admin
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-RemoteAssistance/Admin
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-RemoteAssistance/Admin
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-RemoteAssistance/Operational
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-RemoteAssistance/Operational
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-RemoteAssistance/Tracing
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Admin
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Admin
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Debug
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-ResourcePublication/Tracing
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-RRAS/Operational
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Runtime-Web-Http/Tracing
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Runtime-WebAPI/Tracing
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Schannel-Events/Perf
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Security-Adminless/Operational
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Security-Audit-Configuration-Client/Operational
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Security-Mitigations/KernelMode
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Security-Mitigations/KernelMode
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-SecurityMitigationsBroker/Operational
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-SecurityMitigationsBroker/Operational
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-SendTo/Diagnostic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Serial-ClassExtension-V2/Analytic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Serial-ClassExtension/Analytic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-SettingSync-Azure/Operational
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-SettingSync-OneDrive/Operational
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-SettingSync-OneDrive/Operational
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Setup/Analytic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-SetupPlatform/Analytic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-SetupUGC/Analytic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-ShareMedia-ControlPanel/Diagnostic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Shell-AuthUI-CredentialProviderUser/Diagnostic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Shell-AuthUI-CredUI/Diagnostic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Shell-AuthUI-LogonUI/Diagnostic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-SmartCard-DeviceEnum/Operational
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-SmartCard-TPM-VCard-Module/Admin
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-SmartCard-TPM-VCard-Module/Admin
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-SmartCard-TPM-VCard-Module/Operational
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-SmartCard-TPM-VCard-Module/Operational
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-SMBClient/Analytic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-SmbClient/Audit
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-SmbClient/Audit
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-SmbClient/Connectivity
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-SMBClient/ObjectStateDiagnostic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-SMBClient/Operational
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-SmbClient/Security
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-SMBServer/Analytic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-SMBServer/Audit
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-SMBServer/Connectivity
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-SMBServer/Operational
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-SMBServer/Operational
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-SMBServer/Performance
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-SMBWitnessClient/Admin
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-SMBWitnessClient/Informational
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-SPB-HIDI2C/Analytic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Speech-UserExperience/Diagnostic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Storage-ATAPort/Admin
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Storage-ATAPort/Analytic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Storage-ATAPort/Debug
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Storage-ClassPnP/Admin
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Storage-ClassPnP/Debug
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Storage-ClassPnP/Diagnose
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Storage-Disk/Analytic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Storage-Disk/Operational
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Storage-Storport/Analytic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-StorageManagement/Debug
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-StorageManagement/Operational
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-StorageSettings/Diagnostic
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-StorageSettings/Diagnostic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-StorPort/Operational
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-TaskbarCPL/Diagnostic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-TaskScheduler/Diagnostic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-TCPIP/Diagnostic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-TenantRestrictions/Operational
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-TenantRestrictions/Operational
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-TerminalServices-ClientUSBDevices/Admin
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-TerminalServices-ClientUSBDevices/Admin
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-TerminalServices-Printers/Operational
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-TerminalServices-Printers/Operational
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-TerminalServices-RdpSoundDriver/Playback
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-TerminalServices-RemoteConnectionManager/Debug
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-ThemeUI/Diagnostic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Time-Service-PTP-Provider/PTP-Operational
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Time-Service-PTP-Provider/PTP-Operational
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Time-Service/Operational
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Time-Service/Operational
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-TSF-msctf/Diagnostic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-TSF-msutb/Diagnostic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-TTS/Diagnostic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-TunnelDriver
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-TWinUI/Diagnostic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-TZSync/Operational
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-TZSync/Operational
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-UAC-FileVirtualization/Operational
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-UAC-FileVirtualization/Operational
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-UIAutomationCore/Debug
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-UIAutomationCore/Diagnostic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-UIAutomationCore/Perf
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-UIRibbon/Diagnostic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-USB-MAUSBHOST-Analytic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-USB-USBHUB/Diagnostic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-USB-USBHUB3-Analytic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-USB-USBXHCI-Trustlet-Analytic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-User Control Panel/Operational
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-User Device Registration/Admin
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-User Device Registration/Debug
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-User Profile Service/Operational
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-User Profile Service/Operational
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-UserModePowerService/Diagnostic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-VolumeControl/Performance
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Websocket-Protocol-Component/Tracing
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-WFP/Operational
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-WFP/Operational
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Windeploy/Analytic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Windows Firewall With Advanced Security/ConnectionSecurity
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-WindowsUIImmersive/Operational
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Wordpad/Debug
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-WorkFolders/Analytic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-WPD-MTPClassDriver/Analytic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-WPD-MTPClassDriver/Operational
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-WPD-MTPIP/Analytic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-WUSA/Debug
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-WWAN-CFE/Diagnostic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Network Isolation Operational
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\NIS-Driver-WFP/Diagnostic
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\OfficeChannel
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\OpenSSH/Admin
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\OpenSSH/Debug
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\OpenSSH/Operational
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\OpenSSH/Operational
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\SystemEventsBroker
ChannelAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Windows Networking Vpn Plugin Platform/Operational
ChannelAccess
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\ClientTelemetry\Sampling
12
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\ONENOTE\2284
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\onenote\Resiliency\StartupItems
nv7
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Experiment\onenote
Language
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Experiment\onenote
EcsRequestPending
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Experiment\onenote
SubscriptionCustomerLicenseInfo
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{C9590FA7-2132-47FB-9A78-AF0BF19AF4E6}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{C9590FA7-2132-47FB-9A78-AF0BF19AF4E6}\ProxyStubClsid32
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{C9590FA7-2132-47FB-9A78-AF0BF19AF4E6}\TypeLib
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{C9590FA7-2132-47FB-9A78-AF0BF19AF4E6}\TypeLib
Version
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{2DA16203-3F58-404F-839D-E4CDE7DD0DED}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{2DA16203-3F58-404F-839D-E4CDE7DD0DED}\ProxyStubClsid32
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{2DA16203-3F58-404F-839D-E4CDE7DD0DED}\TypeLib
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{2DA16203-3F58-404F-839D-E4CDE7DD0DED}\TypeLib
Version
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{1D12BD3F-89B6-4077-AA2C-C9DC2BCA42F9}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{1D12BD3F-89B6-4077-AA2C-C9DC2BCA42F9}\ProxyStubClsid32
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{1D12BD3F-89B6-4077-AA2C-C9DC2BCA42F9}\TypeLib
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{1D12BD3F-89B6-4077-AA2C-C9DC2BCA42F9}\TypeLib
Version
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{627EA7B4-95B5-4980-84C1-9D20DA4460B1}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{627EA7B4-95B5-4980-84C1-9D20DA4460B1}\ProxyStubClsid32
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{627EA7B4-95B5-4980-84C1-9D20DA4460B1}\TypeLib
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{627EA7B4-95B5-4980-84C1-9D20DA4460B1}\TypeLib
Version
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{452AC71A-B655-4967-A208-A4CC39DD7949}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{452AC71A-B655-4967-A208-A4CC39DD7949}\ProxyStubClsid32
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{452AC71A-B655-4967-A208-A4CC39DD7949}\TypeLib
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{452AC71A-B655-4967-A208-A4CC39DD7949}\TypeLib
Version
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{6D4B9C3E-CC05-493F-85E2-43D1006DF96A}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{6D4B9C3E-CC05-493F-85E2-43D1006DF96A}\ProxyStubClsid32
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{6D4B9C3E-CC05-493F-85E2-43D1006DF96A}\TypeLib
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{6D4B9C3E-CC05-493F-85E2-43D1006DF96A}\TypeLib
Version
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{E2E1511D-502D-4BD0-8B3A-8A89A05CDCAE}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{E2E1511D-502D-4BD0-8B3A-8A89A05CDCAE}\TypeLib
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{E2E1511D-502D-4BD0-8B3A-8A89A05CDCAE}\TypeLib
Version
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\onenote\general
ConsecutiveBootCrashes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\onenote\general
ConsecutiveEarlyCrashes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\onenote\general
EDPLastRevokeCheckTime
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\onenote\Options\Save
BackupFilenamePostfixStartSP1
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\onenote\Options\Save
BackupFilenamePostfixEndSP1
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\onenote\Options\Save
BackupFilenamePostfixEndRerepairSP1
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\onenote\general
DateLastAttemptedOpeningLocalNotebooksOnBoot
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\onenote\Options\Other
EnableMemoryTrayMenuItem
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\onenote\Page Sync Status
PageSyncStatusPersistentData
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\onenote\Page Sync Status
PageSyncStatusPersistentDataLastUpdateDate
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\onenote\general
LastCacheFclRepairSuccessTime
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Experiment\onenote
BuildNumber
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote
Expires
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
1
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
1.1
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
1.2
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
1.3
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
1.4
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
1.5
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
1.6
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
1.7
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
1.8
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
1.9
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
1.10
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
1.11
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
1.12
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
1.13
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
1.14
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
1.15
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
1.16
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
1.17
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
1.18
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
1.19
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
1.20
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
1.21
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
VersionId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote
ETag
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote
DeferredConfigs
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote
ConfigIds
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Roaming
RoamingLastSyncTimeOneNote
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Roaming
RoamingLastWriteTimeOneNote
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\IdentityCRL\ClockData
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\IdentityCRL\ClockData
ClockTimeSeconds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\IdentityCRL\ClockData
TickCount
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\000061091A0090400000000000F01FEC\Usage
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\000061091A0090400000000000F01FEC\Usage
OneNoteNonBootFilesIntl_1033
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\onenote\general
LastMyDocumentsPathUsed
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\onenote\general
LastAppliedNotebookColor
HKEY_CURRENT_USER\SOFTWARE\Microsoft\IdentityCRL\Immersive\production\Property
0018400E19D550B0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\ClientTelemetry\Volatile
MsaDevice
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\onenote\general
LastNotebookSyncTypeLogTime
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
en-CH
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
en-GB
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
en-CH
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
en-GB
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common
SessionId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\ONENOTE\2284
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\ONENOTE\2284
0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\TypeLib\{F2A7EE29-8BF6-4a6d-83F1-098E366C709C}\1.0
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{C9590FA7-2132-47FB-9A78-AF0BF19AF4E6}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{C9590FA7-2132-47FB-9A78-AF0BF19AF4E6}\ProxyStubClsid32
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{C9590FA7-2132-47FB-9A78-AF0BF19AF4E6}\TypeLib
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{2DA16203-3F58-404F-839D-E4CDE7DD0DED}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{2DA16203-3F58-404F-839D-E4CDE7DD0DED}\ProxyStubClsid32
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{2DA16203-3F58-404F-839D-E4CDE7DD0DED}\TypeLib
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\TypeLib\{0EA692EE-BB50-4E3C-AEF0-356D91732725}\1.1
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{1D12BD3F-89B6-4077-AA2C-C9DC2BCA42F9}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{1D12BD3F-89B6-4077-AA2C-C9DC2BCA42F9}\ProxyStubClsid32
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{1D12BD3F-89B6-4077-AA2C-C9DC2BCA42F9}\TypeLib
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{627EA7B4-95B5-4980-84C1-9D20DA4460B1}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{627EA7B4-95B5-4980-84C1-9D20DA4460B1}\ProxyStubClsid32
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{627EA7B4-95B5-4980-84C1-9D20DA4460B1}\TypeLib
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{452AC71A-B655-4967-A208-A4CC39DD7949}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{452AC71A-B655-4967-A208-A4CC39DD7949}\ProxyStubClsid32
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{452AC71A-B655-4967-A208-A4CC39DD7949}\TypeLib
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{6D4B9C3E-CC05-493F-85E2-43D1006DF96A}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{6D4B9C3E-CC05-493F-85E2-43D1006DF96A}\ProxyStubClsid32
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{6D4B9C3E-CC05-493F-85E2-43D1006DF96A}\TypeLib
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{8E8304B8-CBD1-44F8-B0E8-89C625B2002E}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Wow6432Node\Interface\{E2E1511D-502D-4BD0-8B3A-8A89A05CDCAE}\ProxyStubClsid32
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{E2E1511D-502D-4BD0-8B3A-8A89A05CDCAE}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{E2E1511D-502D-4BD0-8B3A-8A89A05CDCAE}\ProxyStubClsid32
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{E2E1511D-502D-4BD0-8B3A-8A89A05CDCAE}\TypeLib
NULL
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=8192&uilcid=1033&build=16.0.16827&crev=3\0
FilePath
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=8192&uilcid=1033&build=16.0.16827&crev=3\0
StartDate
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=8192&uilcid=1033&build=16.0.16827&crev=3\0
EndDate
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Roaming
RoamingConfigurableSettings
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Roaming
RoamingConfigurableSettings
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote
Expires
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\ONENOTE\2284
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Internet\WebServiceCache
LastClean
HKEY_CURRENT_USER\SOFTWARE\Microsoft\IdentityCRL\Immersive\production\Token\{2B379600-B42B-4FE9-A59C-A312FB934935}
DeviceTicket
HKEY_CURRENT_USER\SOFTWARE\Microsoft\IdentityCRL\Immersive\production\Token\{2B379600-B42B-4FE9-A59C-A312FB934935}
DeviceId
There are 506 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
931000
unkown
page execute read
malicious
107B000
heap
page read and write
malicious
107B000
heap
page read and write
malicious
107B000
heap
page read and write
malicious
FEE000
heap
page read and write
malicious
931000
unkown
page execute read
malicious
107B000
heap
page read and write
malicious
107B000
heap
page read and write
malicious
F44000
heap
page read and write
1038000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
107B000
heap
page read and write
1095000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
1067000
heap
page read and write
1076000
heap
page read and write
F20000
heap
page execute and read and write
107B000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
30DA000
heap
page read and write
107B000
heap
page read and write
30D3000
heap
page read and write
F44000
heap
page read and write
F44000
heap
page read and write
1095000
heap
page read and write
1014000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
1095000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
1067000
heap
page read and write
1163000
heap
page read and write
107B000
heap
page read and write
1055000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
1067000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
F44000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
1045000
heap
page read and write
10E2000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
1095000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
F44000
heap
page read and write
107B000
heap
page read and write
110E000
heap
page read and write
1095000
heap
page read and write
107E000
heap
page read and write
104E000
heap
page read and write
1076000
heap
page read and write
105D000
heap
page read and write
2EDF000
stack
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
2F01000
heap
page read and write
F44000
heap
page read and write
1151000
heap
page read and write
1095000
heap
page read and write
107B000
heap
page read and write
1055000
heap
page read and write
107E000
heap
page read and write
1076000
heap
page read and write
1093000
heap
page read and write
1038000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
1011000
heap
page read and write
1055000
heap
page read and write
1066000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
1067000
heap
page read and write
107B000
heap
page read and write
1067000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
1095000
heap
page read and write
1067000
heap
page read and write
F44000
heap
page read and write
30DD000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
F44000
heap
page read and write
30D6000
heap
page read and write
F44000
heap
page read and write
1067000
heap
page read and write
1067000
heap
page read and write
F44000
heap
page read and write
FCE000
stack
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
108B000
heap
page read and write
107B000
heap
page read and write
107E000
heap
page read and write
104E000
heap
page read and write
10E2000
heap
page read and write
1076000
heap
page read and write
94A000
unkown
page readonly
1076000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
400000
unkown
page readonly
107E000
heap
page read and write
1095000
heap
page read and write
2D9F000
stack
page read and write
F44000
heap
page read and write
1067000
heap
page read and write
10AD000
heap
page read and write
107B000
heap
page read and write
10E2000
heap
page read and write
107E000
heap
page read and write
107B000
heap
page read and write
10E2000
heap
page read and write
107B000
heap
page read and write
10FF000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
1077000
heap
page read and write
106B000
heap
page read and write
1130000
heap
page read and write
F44000
heap
page read and write
1011000
heap
page read and write
114D000
heap
page read and write
10C6000
heap
page read and write
1045000
heap
page read and write
1095000
heap
page read and write
10E2000
heap
page read and write
1095000
heap
page read and write
F44000
heap
page read and write
F40000
heap
page read and write
107B000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
10A0000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
106A000
heap
page read and write
1076000
heap
page read and write
1067000
heap
page read and write
30D0000
heap
page read and write
1054000
heap
page read and write
1032000
heap
page read and write
102E000
heap
page read and write
1095000
heap
page read and write
1076000
heap
page read and write
1095000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
10E2000
heap
page read and write
30D8000
heap
page read and write
1076000
heap
page read and write
10B8000
heap
page read and write
1193000
heap
page read and write
107B000
heap
page read and write
107C000
heap
page read and write
107B000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
107B000
heap
page read and write
F44000
heap
page read and write
30D5000
heap
page read and write
956000
unkown
page write copy
F44000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
1038000
heap
page read and write
F44000
heap
page read and write
F44000
heap
page read and write
1055000
heap
page read and write
1066000
heap
page read and write
1067000
heap
page read and write
1076000
heap
page read and write
1067000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
1095000
heap
page read and write
1088000
heap
page read and write
107B000
heap
page read and write
3CC0000
direct allocation
page read and write
1067000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
94A000
unkown
page readonly
F44000
heap
page read and write
30D0000
heap
page read and write
1171000
heap
page read and write
1066000
heap
page read and write
1076000
heap
page read and write
1095000
heap
page read and write
F44000
heap
page read and write
107E000
heap
page read and write
1130000
heap
page read and write
112F000
heap
page read and write
F44000
heap
page read and write
1095000
heap
page read and write
1076000
heap
page read and write
30D3000
heap
page read and write
107B000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
1047000
heap
page read and write
1076000
heap
page read and write
1095000
heap
page read and write
1095000
heap
page read and write
1082000
heap
page read and write
107B000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
107E000
heap
page read and write
30DF000
heap
page read and write
107B000
heap
page read and write
1067000
heap
page read and write
107B000
heap
page read and write
112F000
heap
page read and write
10E2000
heap
page read and write
1095000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
30D4000
heap
page read and write
1014000
heap
page read and write
113A000
heap
page read and write
107B000
heap
page read and write
1097000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
10D1000
heap
page read and write
107B000
heap
page read and write
1095000
heap
page read and write
10EF000
heap
page read and write
1076000
heap
page read and write
30DF000
heap
page read and write
F44000
heap
page read and write
1175000
heap
page read and write
10ED000
heap
page read and write
1163000
heap
page read and write
F44000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
1054000
heap
page read and write
1067000
heap
page read and write
1067000
heap
page read and write
1095000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
30D3000
heap
page read and write
1093000
heap
page read and write
3CD0000
heap
page read and write
1076000
heap
page read and write
10E2000
heap
page read and write
1095000
heap
page read and write
F44000
heap
page read and write
1014000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
1095000
heap
page read and write
1132000
heap
page read and write
1010000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
109D000
heap
page read and write
2F01000
heap
page read and write
10E2000
heap
page read and write
107B000
heap
page read and write
1095000
heap
page read and write
10E2000
heap
page read and write
30DD000
heap
page read and write
10E2000
heap
page read and write
1130000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
108B000
heap
page read and write
107B000
heap
page read and write
1095000
heap
page read and write
105D000
heap
page read and write
107B000
heap
page read and write
1095000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
112F000
heap
page read and write
F44000
heap
page read and write
107B000
heap
page read and write
1095000
heap
page read and write
2E7E000
stack
page read and write
107B000
heap
page read and write
F44000
heap
page read and write
1095000
heap
page read and write
1067000
heap
page read and write
1192000
heap
page read and write
107B000
heap
page read and write
1086000
heap
page read and write
10D5000
heap
page read and write
F44000
heap
page read and write
1038000
heap
page read and write
107B000
heap
page read and write
10E2000
heap
page read and write
1095000
heap
page read and write
1067000
heap
page read and write
F44000
heap
page read and write
F44000
heap
page read and write
F44000
heap
page read and write
107B000
heap
page read and write
10E2000
heap
page read and write
1076000
heap
page read and write
1095000
heap
page read and write
DE0000
heap
page read and write
1143000
heap
page read and write
1095000
heap
page read and write
1095000
heap
page read and write
F44000
heap
page read and write
F44000
heap
page read and write
2EF0000
heap
page execute and read and write
1067000
heap
page read and write
10D8000
heap
page read and write
102E000
heap
page read and write
F44000
heap
page read and write
107B000
heap
page read and write
F44000
heap
page read and write
107B000
heap
page read and write
1095000
heap
page read and write
1076000
heap
page read and write
1067000
heap
page read and write
1067000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
F44000
heap
page read and write
1067000
heap
page read and write
1066000
heap
page read and write
107E000
heap
page read and write
107B000
heap
page read and write
10B7000
heap
page read and write
1095000
heap
page read and write
1067000
heap
page read and write
1047000
heap
page read and write
1038000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
F44000
heap
page read and write
107E000
heap
page read and write
107B000
heap
page read and write
104E000
heap
page read and write
1151000
heap
page read and write
1055000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
1095000
heap
page read and write
10E2000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
1093000
heap
page read and write
1095000
heap
page read and write
30D2000
heap
page read and write
1038000
heap
page read and write
1082000
heap
page read and write
100F000
heap
page read and write
1095000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
1095000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
2F01000
heap
page read and write
1067000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
107E000
heap
page read and write
1076000
heap
page read and write
10E2000
heap
page read and write
10B6000
heap
page read and write
1055000
heap
page read and write
107B000
heap
page read and write
301C000
stack
page read and write
1066000
heap
page read and write
76E000
heap
page read and write
107D000
heap
page read and write
1095000
heap
page read and write
107C000
heap
page read and write
105D000
heap
page read and write
10A8000
heap
page read and write
1132000
heap
page read and write
F44000
heap
page read and write
104E000
heap
page read and write
1055000
heap
page read and write
10E2000
heap
page read and write
F44000
heap
page read and write
F44000
heap
page read and write
30DA000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
F44000
heap
page read and write
107B000
heap
page read and write
1045000
heap
page read and write
107B000
heap
page read and write
1095000
heap
page read and write
1066000
heap
page read and write
1078000
heap
page read and write
1067000
heap
page read and write
1076000
heap
page read and write
1095000
heap
page read and write
109D000
heap
page read and write
1067000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
14DE000
stack
page read and write
1095000
heap
page read and write
1076000
heap
page read and write
1018000
heap
page read and write
1045000
heap
page read and write
107B000
heap
page read and write
1046000
heap
page read and write
410000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
10ED000
heap
page read and write
F44000
heap
page read and write
F44000
heap
page read and write
107B000
heap
page read and write
1171000
heap
page read and write
107B000
heap
page read and write
30DB000
heap
page read and write
30D9000
heap
page read and write
107B000
heap
page read and write
32C0000
heap
page read and write
10E2000
heap
page read and write
104E000
heap
page read and write
1095000
heap
page read and write
107B000
heap
page read and write
1095000
heap
page read and write
1067000
heap
page read and write
1095000
heap
page read and write
107B000
heap
page read and write
10E2000
heap
page read and write
2F01000
heap
page read and write
107B000
heap
page read and write
F44000
heap
page read and write
107B000
heap
page read and write
112F000
heap
page read and write
10C6000
heap
page read and write
1095000
heap
page read and write
1095000
heap
page read and write
F44000
heap
page read and write
1055000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
1095000
heap
page read and write
1095000
heap
page read and write
1067000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
30D5000
heap
page read and write
F44000
heap
page read and write
1077000
heap
page read and write
F44000
heap
page read and write
10E2000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
1095000
heap
page read and write
7FE10000
direct allocation
page read and write
1067000
heap
page read and write
F44000
heap
page read and write
1014000
heap
page read and write
10C5000
heap
page read and write
1076000
heap
page read and write
1067000
heap
page read and write
F44000
heap
page read and write
1034000
heap
page read and write
1067000
heap
page read and write
10D1000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
1095000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
1087000
heap
page read and write
105D000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
107E000
heap
page read and write
1095000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
1045000
heap
page read and write
1066000
heap
page read and write
1014000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
30DD000
heap
page read and write
F44000
heap
page read and write
1014000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
1067000
heap
page read and write
1067000
heap
page read and write
104E000
heap
page read and write
F44000
heap
page read and write
107E000
heap
page read and write
1054000
heap
page read and write
10B8000
heap
page read and write
1066000
heap
page read and write
104A000
heap
page read and write
10E2000
heap
page read and write
1095000
heap
page read and write
10D2000
heap
page read and write
10E2000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
10C6000
heap
page read and write
30D6000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
F44000
heap
page read and write
2F01000
heap
page read and write
1067000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
30DD000
heap
page read and write
1076000
heap
page read and write
1067000
heap
page read and write
30D8000
heap
page read and write
F44000
heap
page read and write
10E2000
heap
page read and write
1095000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
1055000
heap
page read and write
1067000
heap
page read and write
1076000
heap
page read and write
1067000
heap
page read and write
107B000
heap
page read and write
1067000
heap
page read and write
30C0000
heap
page read and write
107E000
heap
page read and write
108C000
heap
page read and write
1081000
heap
page read and write
1095000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
1139000
heap
page read and write
703000
heap
page execute and read and write
107B000
heap
page read and write
112F000
heap
page read and write
2F01000
heap
page read and write
1076000
heap
page read and write
1095000
heap
page read and write
1095000
heap
page read and write
1076000
heap
page read and write
1095000
heap
page read and write
1095000
heap
page read and write
107B000
heap
page read and write
1095000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
F44000
heap
page read and write
104E000
heap
page read and write
1076000
heap
page read and write
1047000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
1067000
heap
page read and write
110E000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
1067000
heap
page read and write
107B000
heap
page read and write
10D5000
heap
page read and write
2F01000
heap
page read and write
30D6000
heap
page read and write
107E000
heap
page read and write
1076000
heap
page read and write
1086000
heap
page read and write
F44000
heap
page read and write
111E000
heap
page read and write
1076000
heap
page read and write
1097000
heap
page read and write
1154000
heap
page read and write
1067000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
1095000
heap
page read and write
1034000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
1187000
heap
page read and write
107B000
heap
page read and write
105D000
heap
page read and write
30DC000
heap
page read and write
10C8000
heap
page read and write
1034000
heap
page read and write
107B000
heap
page read and write
112A000
heap
page read and write
1077000
heap
page read and write
1076000
heap
page read and write
1067000
heap
page read and write
1153000
heap
page read and write
110F000
heap
page read and write
1076000
heap
page read and write
1159000
heap
page read and write
1067000
heap
page read and write
1067000
heap
page read and write
1034000
heap
page read and write
1067000
heap
page read and write
102E000
heap
page read and write
F44000
heap
page read and write
106B000
heap
page read and write
1013000
heap
page read and write
10E2000
heap
page read and write
F44000
heap
page read and write
107B000
heap
page read and write
10ED000
heap
page read and write
1055000
heap
page read and write
107E000
heap
page read and write
10E2000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
1093000
heap
page read and write
1095000
heap
page read and write
1095000
heap
page read and write
1076000
heap
page read and write
2A1E000
stack
page read and write
1095000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
1133000
heap
page read and write
F44000
heap
page read and write
1067000
heap
page read and write
1067000
heap
page read and write
10AF000
heap
page read and write
1095000
heap
page read and write
1034000
heap
page read and write
1095000
heap
page read and write
1076000
heap
page read and write
1095000
heap
page read and write
1151000
heap
page read and write
105F000
heap
page read and write
1066000
heap
page read and write
1159000
heap
page read and write
105D000
heap
page read and write
107E000
heap
page read and write
112F000
heap
page read and write
113A000
heap
page read and write
1076000
heap
page read and write
1095000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
113A000
heap
page read and write
1076000
heap
page read and write
107E000
heap
page read and write
1097000
heap
page read and write
1095000
heap
page read and write
F44000
heap
page read and write
F44000
heap
page read and write
1067000
heap
page read and write
1059000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
1095000
heap
page read and write
10E2000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
1067000
heap
page read and write
F44000
heap
page read and write
1096000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
111A000
heap
page read and write
107B000
heap
page read and write
105D000
heap
page read and write
1055000
heap
page read and write
1095000
heap
page read and write
1095000
heap
page read and write
1055000
heap
page read and write
1076000
heap
page read and write
1045000
heap
page read and write
1095000
heap
page read and write
107E000
heap
page read and write
1067000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
30D3000
heap
page read and write
F44000
heap
page read and write
1095000
heap
page read and write
10C6000
heap
page read and write
1067000
heap
page read and write
F44000
heap
page read and write
F44000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
1067000
heap
page read and write
1038000
heap
page read and write
107B000
heap
page read and write
30D9000
heap
page read and write
1067000
heap
page read and write
113A000
heap
page read and write
F44000
heap
page read and write
10CD000
heap
page read and write
107B000
heap
page read and write
1095000
heap
page read and write
1076000
heap
page read and write
740000
heap
page read and write
112F000
heap
page read and write
107B000
heap
page read and write
F44000
heap
page read and write
105D000
heap
page read and write
1095000
heap
page read and write
F44000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
10E2000
heap
page read and write
107B000
heap
page read and write
106A000
heap
page read and write
1014000
heap
page read and write
1067000
heap
page read and write
108B000
heap
page read and write
1095000
heap
page read and write
1034000
heap
page read and write
1067000
heap
page read and write
F44000
heap
page read and write
1067000
heap
page read and write
107B000
heap
page read and write
1095000
heap
page read and write
30D0000
heap
page read and write
2DDE000
stack
page read and write
F44000
heap
page read and write
24DE000
stack
page read and write
1169000
heap
page read and write
107B000
heap
page read and write
1077000
heap
page read and write
1095000
heap
page read and write
F44000
heap
page read and write
1054000
heap
page read and write
1095000
heap
page read and write
F44000
heap
page read and write
1055000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
30D3000
heap
page read and write
1095000
heap
page read and write
1076000
heap
page read and write
1095000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
108F000
heap
page read and write
1018000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
30DD000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
1103000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
1095000
heap
page read and write
1076000
heap
page read and write
1067000
heap
page read and write
1067000
heap
page read and write
1038000
heap
page read and write
107B000
heap
page read and write
1066000
heap
page read and write
31F0000
direct allocation
page read and write
F44000
heap
page read and write
107B000
heap
page read and write
1066000
heap
page read and write
107B000
heap
page read and write
1067000
heap
page read and write
105D000
heap
page read and write
1047000
heap
page read and write
404000
unkown
page readonly
107E000
heap
page read and write
F44000
heap
page read and write
10E2000
heap
page read and write
107B000
heap
page read and write
F44000
heap
page read and write
107B000
heap
page read and write
1067000
heap
page read and write
1076000
heap
page read and write
1038000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
30DF000
heap
page read and write
1076000
heap
page read and write
10E2000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
1093000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
1095000
heap
page read and write
1067000
heap
page read and write
1095000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
1093000
heap
page read and write
102E000
heap
page read and write
107B000
heap
page read and write
1095000
heap
page read and write
114F000
heap
page read and write
30D0000
heap
page read and write
107B000
heap
page read and write
10E2000
heap
page read and write
1066000
heap
page read and write
1140000
heap
page read and write
104E000
heap
page read and write
10BF000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
107E000
heap
page read and write
1093000
heap
page read and write
1067000
heap
page read and write
1076000
heap
page read and write
105D000
heap
page read and write
1097000
heap
page read and write
104E000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
108F000
heap
page read and write
10E2000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
107B000
heap
page read and write
1082000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
1077000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
10E2000
heap
page read and write
10E2000
heap
page read and write
793000
heap
page read and write
30D6000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
107E000
heap
page read and write
1045000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
1175000
heap
page read and write
1014000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
104E000
heap
page read and write
1076000
heap
page read and write
1077000
heap
page read and write
107E000
heap
page read and write
7FE20000
direct allocation
page execute and read and write
1047000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
104E000
heap
page read and write
1076000
heap
page read and write
1097000
heap
page read and write
1067000
heap
page read and write
F44000
heap
page read and write
115C000
heap
page read and write
117B000
heap
page read and write
107B000
heap
page read and write
1055000
heap
page read and write
30D5000
heap
page read and write
10E2000
heap
page read and write
1067000
heap
page read and write
1076000
heap
page read and write
110E000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
408F000
stack
page read and write
F44000
heap
page read and write
1067000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
1095000
heap
page read and write
107B000
heap
page read and write
1045000
heap
page read and write
1076000
heap
page read and write
113A000
heap
page read and write
F44000
heap
page read and write
1093000
heap
page read and write
1067000
heap
page read and write
F44000
heap
page read and write
107E000
heap
page read and write
114F000
heap
page read and write
106A000
heap
page read and write
1067000
heap
page read and write
1095000
heap
page read and write
1095000
heap
page read and write
30DE000
heap
page read and write
10B5000
heap
page read and write
1067000
heap
page read and write
104E000
heap
page read and write
1076000
heap
page read and write
2F01000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
1095000
heap
page read and write
F44000
heap
page read and write
F44000
heap
page read and write
112F000
heap
page read and write
4F0000
heap
page read and write
115F000
heap
page read and write
F44000
heap
page read and write
30D2000
heap
page read and write
107E000
heap
page read and write
1087000
heap
page read and write
1067000
heap
page read and write
1095000
heap
page read and write
110E000
heap
page read and write
1067000
heap
page read and write
1077000
heap
page read and write
F44000
heap
page read and write
1067000
heap
page read and write
107B000
heap
page read and write
107E000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
107B000
heap
page read and write
D8C000
stack
page read and write
F44000
heap
page read and write
1158000
heap
page read and write
1013000
heap
page read and write
10B6000
heap
page read and write
1095000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
1067000
heap
page read and write
F44000
heap
page read and write
308E000
stack
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
1067000
heap
page read and write
1067000
heap
page read and write
104E000
heap
page read and write
107B000
heap
page read and write
105A000
heap
page read and write
1076000
heap
page read and write
107E000
heap
page read and write
1095000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
105D000
heap
page read and write
104E000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
1067000
heap
page read and write
113A000
heap
page read and write
1095000
heap
page read and write
F44000
heap
page read and write
1067000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
1095000
heap
page read and write
F44000
heap
page read and write
F44000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
108A000
heap
page read and write
1067000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
F44000
heap
page read and write
10CE000
heap
page read and write
1067000
heap
page read and write
10E2000
heap
page read and write
107B000
heap
page read and write
1077000
heap
page read and write
30DA000
heap
page read and write
1100000
heap
page read and write
F44000
heap
page read and write
107E000
heap
page read and write
1095000
heap
page read and write
1076000
heap
page read and write
30D6000
heap
page read and write
F44000
heap
page read and write
F44000
heap
page read and write
10F7000
heap
page read and write
114D000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
108B000
heap
page read and write
2530000
heap
page read and write
105D000
heap
page read and write
1067000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
F44000
heap
page read and write
1095000
heap
page read and write
10FF000
heap
page read and write
1067000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
930000
unkown
page readonly
107B000
heap
page read and write
1076000
heap
page read and write
1130000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
1067000
heap
page read and write
F44000
heap
page read and write
1077000
heap
page read and write
110D000
heap
page read and write
107B000
heap
page read and write
10AF000
heap
page read and write
1095000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
1095000
heap
page read and write
105A000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
1105000
heap
page read and write
1067000
heap
page read and write
107B000
heap
page read and write
1095000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
107B000
heap
page read and write
F44000
heap
page read and write
105D000
heap
page read and write
107B000
heap
page read and write
1095000
heap
page read and write
107B000
heap
page read and write
10D1000
heap
page read and write
30D7000
heap
page read and write
107B000
heap
page read and write
1067000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
100F000
heap
page read and write
30D9000
heap
page read and write
F44000
heap
page read and write
1045000
heap
page read and write
1095000
heap
page read and write
1067000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
1067000
heap
page read and write
F44000
heap
page read and write
1067000
heap
page read and write
1067000
heap
page read and write
107B000
heap
page read and write
1140000
heap
page read and write
1095000
heap
page read and write
107E000
heap
page read and write
F44000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
114D000
heap
page read and write
10B8000
heap
page read and write
107B000
heap
page read and write
1066000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
3E0F000
stack
page read and write
107B000
heap
page read and write
1093000
heap
page read and write
107E000
heap
page read and write
F44000
heap
page read and write
957000
unkown
page readonly
F44000
heap
page read and write
1095000
heap
page read and write
10E2000
heap
page read and write
F44000
heap
page read and write
F44000
heap
page read and write
1151000
heap
page read and write
117B000
heap
page read and write
F44000
heap
page read and write
F44000
heap
page read and write
1095000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
1095000
heap
page read and write
3F8E000
stack
page read and write
1095000
heap
page read and write
F44000
heap
page read and write
F44000
heap
page read and write
107B000
heap
page read and write
F44000
heap
page read and write
1077000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
1067000
heap
page read and write
1067000
heap
page read and write
1132000
heap
page read and write
1067000
heap
page read and write
1095000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
1067000
heap
page read and write
1095000
heap
page read and write
1156000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
F44000
heap
page read and write
30DC000
heap
page read and write
F44000
heap
page read and write
1067000
heap
page read and write
1067000
heap
page read and write
1067000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
10E2000
heap
page read and write
F44000
heap
page read and write
105D000
heap
page read and write
1095000
heap
page read and write
1010000
heap
page read and write
F44000
heap
page read and write
107B000
heap
page read and write
104E000
heap
page read and write
1067000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
105D000
heap
page read and write
107B000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
1095000
heap
page read and write
113E000
heap
page read and write
F44000
heap
page read and write
107B000
heap
page read and write
F44000
heap
page read and write
107B000
heap
page read and write
19B000
stack
page read and write
1067000
heap
page read and write
10E2000
heap
page read and write
113A000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
107E000
heap
page read and write
107B000
heap
page read and write
1045000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
30D1000
heap
page read and write
1095000
heap
page read and write
30D8000
heap
page read and write
1076000
heap
page read and write
1047000
heap
page read and write
F44000
heap
page read and write
112F000
heap
page read and write
F44000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
1096000
heap
page read and write
F44000
heap
page read and write
107E000
heap
page read and write
107B000
heap
page read and write
F44000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
100E000
heap
page read and write
F44000
heap
page read and write
1095000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
10E2000
heap
page read and write
1067000
heap
page read and write
107B000
heap
page read and write
1095000
heap
page read and write
F44000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
1067000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
1045000
heap
page read and write
1067000
heap
page read and write
1095000
heap
page read and write
107B000
heap
page read and write
104E000
heap
page read and write
107B000
heap
page read and write
107E000
heap
page read and write
1047000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
1067000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
1095000
heap
page read and write
1076000
heap
page read and write
1077000
heap
page read and write
30DE000
heap
page read and write
107B000
heap
page read and write
2F01000
heap
page read and write
1095000
heap
page read and write
F44000
heap
page read and write
F44000
heap
page read and write
1067000
heap
page read and write
107B000
heap
page read and write
F44000
heap
page read and write
1095000
heap
page read and write
1067000
heap
page read and write
1095000
heap
page read and write
1076000
heap
page read and write
10E2000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
1067000
heap
page read and write
1067000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
1130000
heap
page read and write
1095000
heap
page read and write
10E2000
heap
page read and write
1067000
heap
page read and write
1076000
heap
page read and write
565000
heap
page read and write
F44000
heap
page read and write
1095000
heap
page read and write
107E000
heap
page read and write
30D4000
heap
page read and write
2F01000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
107B000
heap
page read and write
F44000
heap
page read and write
1095000
heap
page read and write
F44000
heap
page read and write
107B000
heap
page read and write
10E2000
heap
page read and write
1103000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
1097000
heap
page read and write
F44000
heap
page read and write
30D6000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
30D0000
heap
page read and write
10E2000
heap
page read and write
F44000
heap
page read and write
1095000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
107B000
heap
page read and write
30DF000
heap
page read and write
1076000
heap
page read and write
2F01000
heap
page read and write
1045000
heap
page read and write
F44000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
30DB000
heap
page read and write
1067000
heap
page read and write
1047000
heap
page read and write
1038000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
104E000
heap
page read and write
1066000
heap
page read and write
1067000
heap
page read and write
113C000
heap
page read and write
1095000
heap
page read and write
30DB000
heap
page read and write
1097000
heap
page read and write
1067000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
1059000
heap
page read and write
107B000
heap
page read and write
1095000
heap
page read and write
1067000
heap
page read and write
1095000
heap
page read and write
1014000
heap
page read and write
1130000
heap
page read and write
F44000
heap
page read and write
F44000
heap
page read and write
F44000
heap
page read and write
F44000
heap
page read and write
1095000
heap
page read and write
1076000
heap
page read and write
1067000
heap
page read and write
1067000
heap
page read and write
1076000
heap
page read and write
1095000
heap
page read and write
107C000
heap
page read and write
1095000
heap
page read and write
1076000
heap
page read and write
1067000
heap
page read and write
560000
heap
page read and write
107B000
heap
page read and write
F44000
heap
page read and write
105D000
heap
page read and write
30DB000
heap
page read and write
1067000
heap
page read and write
1095000
heap
page read and write
1066000
heap
page read and write
1095000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
107B000
heap
page read and write
F44000
heap
page read and write
107B000
heap
page read and write
10FD000
heap
page read and write
1045000
heap
page read and write
F44000
heap
page read and write
10E2000
heap
page read and write
107B000
heap
page read and write
1067000
heap
page read and write
30D0000
heap
page read and write
108C000
heap
page read and write
107B000
heap
page read and write
107E000
heap
page read and write
1066000
heap
page read and write
101A000
heap
page read and write
1076000
heap
page read and write
30DE000
heap
page read and write
F44000
heap
page read and write
1095000
heap
page read and write
1095000
heap
page read and write
1076000
heap
page read and write
104E000
heap
page read and write
1067000
heap
page read and write
107B000
heap
page read and write
107E000
heap
page read and write
1067000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
1095000
heap
page read and write
1066000
heap
page read and write
10F4000
heap
page read and write
1076000
heap
page read and write
1047000
heap
page read and write
101B000
heap
page read and write
1055000
heap
page read and write
10E2000
heap
page read and write
F44000
heap
page read and write
1054000
heap
page read and write
1087000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
1045000
heap
page read and write
1076000
heap
page read and write
1067000
heap
page read and write
30DF000
heap
page read and write
10E2000
heap
page read and write
10D8000
heap
page read and write
105D000
heap
page read and write
F44000
heap
page read and write
107B000
heap
page read and write
10FD000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
1095000
heap
page read and write
10E2000
heap
page read and write
1038000
heap
page read and write
1095000
heap
page read and write
1047000
heap
page read and write
1076000
heap
page read and write
10E2000
heap
page read and write
104A000
heap
page read and write
1055000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
1093000
heap
page read and write
1067000
heap
page read and write
107B000
heap
page read and write
550000
heap
page execute and read and write
F44000
heap
page read and write
1045000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
1054000
heap
page read and write
F44000
heap
page read and write
1067000
heap
page read and write
F44000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
1066000
heap
page read and write
30D0000
heap
page read and write
10A8000
heap
page read and write
107B000
heap
page read and write
107E000
heap
page read and write
107B000
heap
page read and write
107E000
heap
page read and write
107B000
heap
page read and write
F44000
heap
page read and write
1095000
heap
page read and write
10E2000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
1066000
heap
page read and write
1045000
heap
page read and write
10B7000
heap
page read and write
10E2000
heap
page read and write
10C2000
heap
page read and write
F44000
heap
page read and write
1067000
heap
page read and write
1067000
heap
page read and write
104A000
heap
page read and write
3F4F000
stack
page read and write
107B000
heap
page read and write
F44000
heap
page read and write
10E2000
heap
page read and write
1093000
heap
page read and write
30D8000
heap
page read and write
1076000
heap
page read and write
1095000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
105D000
heap
page read and write
30D8000
heap
page read and write
10AB000
heap
page read and write
1076000
heap
page read and write
1067000
heap
page read and write
1095000
heap
page read and write
1045000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
1095000
heap
page read and write
1095000
heap
page read and write
1067000
heap
page read and write
107B000
heap
page read and write
1095000
heap
page read and write
1067000
heap
page read and write
F44000
heap
page read and write
10ED000
heap
page read and write
1067000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
1095000
heap
page read and write
1192000
heap
page read and write
1067000
heap
page read and write
1095000
heap
page read and write
1095000
heap
page read and write
107B000
heap
page read and write
2F01000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
107E000
heap
page read and write
53E000
stack
page read and write
2C9E000
stack
page read and write
1097000
heap
page read and write
1076000
heap
page read and write
1067000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
1095000
heap
page read and write
F44000
heap
page read and write
10E2000
heap
page read and write
10E2000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
F44000
heap
page read and write
F44000
heap
page read and write
1047000
heap
page read and write
10E2000
heap
page read and write
1076000
heap
page read and write
1045000
heap
page read and write
F44000
heap
page read and write
1093000
heap
page read and write
F44000
heap
page read and write
1097000
heap
page read and write
F44000
heap
page read and write
1066000
heap
page read and write
1077000
heap
page read and write
1095000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
1095000
heap
page read and write
F44000
heap
page read and write
F44000
heap
page read and write
1014000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
2F01000
heap
page read and write
F44000
heap
page read and write
F44000
heap
page read and write
1075000
heap
page read and write
10AA000
heap
page read and write
1076000
heap
page read and write
1097000
heap
page read and write
10B5000
heap
page read and write
107B000
heap
page read and write
30D7000
heap
page read and write
10E2000
heap
page read and write
1083000
heap
page read and write
F44000
heap
page read and write
30DC000
heap
page read and write
1047000
heap
page read and write
1055000
heap
page read and write
1136000
heap
page read and write
1067000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
1067000
heap
page read and write
107B000
heap
page read and write
1151000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
10CB000
heap
page read and write
1047000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
405000
unkown
page write copy
F44000
heap
page read and write
107B000
heap
page read and write
10E2000
heap
page read and write
107E000
heap
page read and write
107B000
heap
page read and write
1067000
heap
page read and write
1085000
heap
page read and write
1045000
heap
page read and write
30D4000
heap
page read and write
113A000
heap
page read and write
1095000
heap
page read and write
1176000
heap
page read and write
2440000
heap
page read and write
30D7000
heap
page read and write
1095000
heap
page read and write
1076000
heap
page read and write
10E2000
heap
page read and write
1091000
heap
page read and write
2F01000
heap
page read and write
1141000
heap
page read and write
105D000
heap
page read and write
F44000
heap
page read and write
10E2000
heap
page read and write
1067000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
1059000
heap
page read and write
104E000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
1097000
heap
page read and write
F44000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
30D3000
heap
page read and write
1097000
heap
page read and write
1095000
heap
page read and write
1095000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
1013000
heap
page read and write
107B000
heap
page read and write
101B000
heap
page read and write
1076000
heap
page read and write
1067000
heap
page read and write
C8B000
stack
page read and write
30D1000
heap
page read and write
F44000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
107E000
heap
page read and write
1080000
heap
page read and write
107B000
heap
page read and write
1136000
heap
page read and write
30DA000
heap
page read and write
1095000
heap
page read and write
10E2000
heap
page read and write
107B000
heap
page read and write
94B000
unkown
page write copy
107E000
heap
page read and write
1067000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
F44000
heap
page read and write
66F000
stack
page read and write
1067000
heap
page read and write
107B000
heap
page read and write
104E000
heap
page read and write
107B000
heap
page read and write
10D8000
heap
page read and write
1095000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
1130000
heap
page read and write
107E000
heap
page read and write
1038000
heap
page read and write
1097000
heap
page read and write
105D000
heap
page read and write
2B1F000
stack
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
1116000
heap
page read and write
10E2000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
107D000
heap
page read and write
1096000
heap
page read and write
107B000
heap
page read and write
108B000
heap
page read and write
1159000
heap
page read and write
1067000
heap
page read and write
1076000
heap
page read and write
1095000
heap
page read and write
F44000
heap
page read and write
1067000
heap
page read and write
1067000
heap
page read and write
F44000
heap
page read and write
F44000
heap
page read and write
F44000
heap
page read and write
1038000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
1067000
heap
page read and write
1076000
heap
page read and write
30D0000
heap
page read and write
401000
unkown
page execute and read and write
F44000
heap
page read and write
1067000
heap
page read and write
107B000
heap
page read and write
1066000
heap
page read and write
105D000
heap
page read and write
FE0000
heap
page read and write
104E000
heap
page read and write
1130000
heap
page read and write
1117000
heap
page read and write
107B000
heap
page read and write
1095000
heap
page read and write
1067000
heap
page read and write
10EF000
heap
page read and write
30D9000
heap
page read and write
1093000
heap
page read and write
F44000
heap
page read and write
107B000
heap
page read and write
1055000
heap
page read and write
F44000
heap
page read and write
1095000
heap
page read and write
1154000
heap
page read and write
F44000
heap
page read and write
1095000
heap
page read and write
F44000
heap
page read and write
107B000
heap
page read and write
1066000
heap
page read and write
1095000
heap
page read and write
107B000
heap
page read and write
1095000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
1067000
heap
page read and write
F44000
heap
page read and write
1059000
heap
page read and write
107E000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
1095000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
1055000
heap
page read and write
10E2000
heap
page read and write
1095000
heap
page read and write
1087000
heap
page read and write
F44000
heap
page read and write
1067000
heap
page read and write
107B000
heap
page read and write
1095000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
108B000
heap
page read and write
F44000
heap
page read and write
1054000
heap
page read and write
1034000
heap
page read and write
107B000
heap
page read and write
104E000
heap
page read and write
104A000
heap
page read and write
1095000
heap
page read and write
107B000
heap
page read and write
10E2000
heap
page read and write
1095000
heap
page read and write
1067000
heap
page read and write
107D000
heap
page read and write
107B000
heap
page read and write
1095000
heap
page read and write
107B000
heap
page read and write
1107000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
1093000
heap
page read and write
1122000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
1066000
heap
page read and write
1130000
heap
page read and write
1076000
heap
page read and write
30D7000
heap
page read and write
117A000
heap
page read and write
10B1000
heap
page read and write
F44000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
1095000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
1154000
heap
page read and write
10E2000
heap
page read and write
3CC0000
direct allocation
page read and write
1067000
heap
page read and write
1067000
heap
page read and write
107B000
heap
page read and write
1137000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
30DB000
heap
page read and write
1047000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
1066000
heap
page read and write
107B000
heap
page read and write
1067000
heap
page read and write
1095000
heap
page read and write
1095000
heap
page read and write
10D7000
heap
page read and write
1095000
heap
page read and write
30D9000
heap
page read and write
1076000
heap
page read and write
105D000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
107E000
heap
page read and write
10B7000
heap
page read and write
1067000
heap
page read and write
F44000
heap
page read and write
104E000
heap
page read and write
1067000
heap
page read and write
1085000
heap
page read and write
107B000
heap
page read and write
1095000
heap
page read and write
1067000
heap
page read and write
1055000
heap
page read and write
F44000
heap
page read and write
F44000
heap
page read and write
1095000
heap
page read and write
1045000
heap
page read and write
10E2000
heap
page read and write
1095000
heap
page read and write
1105000
heap
page read and write
F44000
heap
page read and write
1086000
heap
page read and write
1076000
heap
page read and write
30D7000
heap
page read and write
F44000
heap
page read and write
1045000
heap
page read and write
1066000
heap
page read and write
10B1000
heap
page read and write
1034000
heap
page read and write
1143000
heap
page read and write
1067000
heap
page read and write
F44000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
107B000
heap
page read and write
109D000
heap
page read and write
1076000
heap
page read and write
1155000
heap
page read and write
1038000
heap
page read and write
1095000
heap
page read and write
1130000
heap
page read and write
1067000
heap
page read and write
1096000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
F44000
heap
page read and write
107B000
heap
page read and write
113A000
heap
page read and write
102E000
heap
page read and write
105D000
heap
page read and write
107E000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
1045000
heap
page read and write
F44000
heap
page read and write
105D000
heap
page read and write
1095000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
104E000
heap
page read and write
404000
unkown
page readonly
1067000
heap
page read and write
101F000
heap
page read and write
1055000
heap
page read and write
1095000
heap
page read and write
1045000
heap
page read and write
1076000
heap
page read and write
1067000
heap
page read and write
104E000
heap
page read and write
1076000
heap
page read and write
1093000
heap
page read and write
107E000
heap
page read and write
108F000
heap
page read and write
10E2000
heap
page read and write
1067000
heap
page read and write
1067000
heap
page read and write
F44000
heap
page read and write
30DB000
heap
page read and write
1095000
heap
page read and write
2EF3000
heap
page execute and read and write
F44000
heap
page read and write
F44000
heap
page read and write
1034000
heap
page read and write
1038000
heap
page read and write
1095000
heap
page read and write
107B000
heap
page read and write
1049000
heap
page read and write
107B000
heap
page read and write
1097000
heap
page read and write
112F000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
1066000
heap
page read and write
1055000
heap
page read and write
F44000
heap
page read and write
1067000
heap
page read and write
1067000
heap
page read and write
F44000
heap
page read and write
107B000
heap
page read and write
F44000
heap
page read and write
1095000
heap
page read and write
10E2000
heap
page read and write
1095000
heap
page read and write
F44000
heap
page read and write
1095000
heap
page read and write
104E000
heap
page read and write
100F000
heap
page read and write
954000
unkown
page read and write
1095000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
1054000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
104A000
heap
page read and write
1025000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
1069000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
2F01000
heap
page read and write
1067000
heap
page read and write
107B000
heap
page read and write
10AD000
heap
page read and write
10E2000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
105D000
heap
page read and write
1067000
heap
page read and write
1067000
heap
page read and write
10B7000
heap
page read and write
107B000
heap
page read and write
F44000
heap
page read and write
3D0E000
stack
page read and write
1076000
heap
page read and write
1095000
heap
page read and write
1095000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
107B000
heap
page read and write
1067000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
112F000
heap
page read and write
104E000
heap
page read and write
10E2000
heap
page read and write
1076000
heap
page read and write
700000
heap
page execute and read and write
107B000
heap
page read and write
108F000
heap
page read and write
1095000
heap
page read and write
F44000
heap
page read and write
F44000
heap
page read and write
1159000
heap
page read and write
10E2000
heap
page read and write
107B000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
F44000
heap
page read and write
1095000
heap
page read and write
107B000
heap
page read and write
1100000
heap
page read and write
107B000
heap
page read and write
1095000
heap
page read and write
10E2000
heap
page read and write
1038000
heap
page read and write
1095000
heap
page read and write
1067000
heap
page read and write
1116000
heap
page read and write
10E2000
heap
page read and write
1077000
heap
page read and write
1076000
heap
page read and write
1038000
heap
page read and write
F44000
heap
page read and write
107B000
heap
page read and write
F44000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
1067000
heap
page read and write
1067000
heap
page read and write
10E2000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
1067000
heap
page read and write
F44000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
107E000
heap
page read and write
1143000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
1067000
heap
page read and write
10EE000
heap
page read and write
1055000
heap
page read and write
1093000
heap
page read and write
1055000
heap
page read and write
107B000
heap
page read and write
F44000
heap
page read and write
1055000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
1047000
heap
page read and write
1045000
heap
page read and write
1076000
heap
page read and write
10E2000
heap
page read and write
107B000
heap
page read and write
1066000
heap
page read and write
107E000
heap
page read and write
107E000
heap
page read and write
E5F000
stack
page read and write
107B000
heap
page read and write
1095000
heap
page read and write
F44000
heap
page read and write
10FD000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
1135000
heap
page read and write
1045000
heap
page read and write
1095000
heap
page read and write
1049000
heap
page read and write
1095000
heap
page read and write
107B000
heap
page read and write
1096000
heap
page read and write
1095000
heap
page read and write
76A000
heap
page read and write
F44000
heap
page read and write
30D7000
heap
page read and write
7FE40000
direct allocation
page execute and read and write
107B000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
1067000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
F44000
heap
page read and write
1038000
heap
page read and write
1095000
heap
page read and write
6C0000
heap
page read and write
F44000
heap
page read and write
107B000
heap
page read and write
1067000
heap
page read and write
1076000
heap
page read and write
1055000
heap
page read and write
1067000
heap
page read and write
1066000
heap
page read and write
1067000
heap
page read and write
107B000
heap
page read and write
10E2000
heap
page read and write
1096000
heap
page read and write
F44000
heap
page read and write
F44000
heap
page read and write
1066000
heap
page read and write
F44000
heap
page read and write
F44000
heap
page read and write
1103000
heap
page read and write
F8D000
stack
page read and write
1095000
heap
page read and write
107B000
heap
page read and write
1095000
heap
page read and write
10E2000
heap
page read and write
F44000
heap
page read and write
1095000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
10ED000
heap
page read and write
30D1000
heap
page read and write
107B000
heap
page read and write
107E000
heap
page read and write
1067000
heap
page read and write
F44000
heap
page read and write
1047000
heap
page read and write
30D9000
heap
page read and write
F44000
heap
page read and write
F44000
heap
page read and write
2F00000
heap
page read and write
1095000
heap
page read and write
1077000
heap
page read and write
107B000
heap
page read and write
1047000
heap
page read and write
1059000
heap
page read and write
1095000
heap
page read and write
F44000
heap
page read and write
10E2000
heap
page read and write
30D2000
heap
page read and write
1076000
heap
page read and write
2D7E000
stack
page read and write
30DB000
heap
page read and write
1095000
heap
page read and write
10D1000
heap
page read and write
1067000
heap
page read and write
1095000
heap
page read and write
F44000
heap
page read and write
1095000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
2F01000
heap
page read and write
30D3000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
10E2000
heap
page read and write
107B000
heap
page read and write
F44000
heap
page read and write
10FD000
heap
page read and write
107B000
heap
page read and write
1067000
heap
page read and write
1095000
heap
page read and write
1095000
heap
page read and write
F44000
heap
page read and write
F44000
heap
page read and write
1095000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
107E000
heap
page read and write
107B000
heap
page read and write
10E2000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
1067000
heap
page read and write
1095000
heap
page read and write
F44000
heap
page read and write
104E000
heap
page read and write
1067000
heap
page read and write
30D5000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
1124000
heap
page read and write
1076000
heap
page read and write
1038000
heap
page read and write
1076000
heap
page read and write
1067000
heap
page read and write
1047000
heap
page read and write
1095000
heap
page read and write
F44000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
10D8000
heap
page read and write
1067000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
10E2000
heap
page read and write
107B000
heap
page read and write
1095000
heap
page read and write
107B000
heap
page read and write
10E2000
heap
page read and write
1067000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
1067000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
1049000
heap
page read and write
406000
unkown
page readonly
1076000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
1067000
heap
page read and write
F44000
heap
page read and write
1067000
heap
page read and write
1076000
heap
page read and write
1095000
heap
page read and write
107B000
heap
page read and write
10E2000
heap
page read and write
10B6000
heap
page read and write
30D2000
heap
page read and write
F44000
heap
page read and write
108B000
heap
page read and write
107B000
heap
page read and write
10D5000
heap
page read and write
1143000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
1067000
heap
page read and write
1076000
heap
page read and write
1067000
heap
page read and write
F44000
heap
page read and write
30D7000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
1067000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
1085000
heap
page read and write
1076000
heap
page read and write
1066000
heap
page read and write
1067000
heap
page read and write
107B000
heap
page read and write
10E2000
heap
page read and write
10D8000
heap
page read and write
1067000
heap
page read and write
F44000
heap
page read and write
F44000
heap
page read and write
11A7000
heap
page read and write
1076000
heap
page read and write
104A000
heap
page read and write
1067000
heap
page read and write
1067000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
1095000
heap
page read and write
F44000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
1095000
heap
page read and write
F44000
heap
page read and write
1067000
heap
page read and write
107B000
heap
page read and write
1095000
heap
page read and write
1151000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
6AE000
stack
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
F44000
heap
page read and write
104E000
heap
page read and write
3E4E000
stack
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
F44000
heap
page read and write
104E000
heap
page read and write
1055000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
1095000
heap
page read and write
F44000
heap
page read and write
107B000
heap
page read and write
1095000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
1095000
heap
page read and write
1076000
heap
page read and write
1038000
heap
page read and write
30DB000
heap
page read and write
107B000
heap
page read and write
F44000
heap
page read and write
108B000
heap
page read and write
30C5000
heap
page read and write
1069000
heap
page read and write
F44000
heap
page read and write
30D5000
heap
page read and write
108B000
heap
page read and write
10E2000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
1095000
heap
page read and write
1038000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
1095000
heap
page read and write
1055000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
1014000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
1014000
heap
page read and write
107B000
heap
page read and write
1067000
heap
page read and write
1067000
heap
page read and write
108C000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
1047000
heap
page read and write
104C000
heap
page read and write
F44000
heap
page read and write
30D3000
heap
page read and write
1095000
heap
page read and write
1095000
heap
page read and write
107B000
heap
page read and write
1143000
heap
page read and write
F44000
heap
page read and write
115C000
heap
page read and write
10E2000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
1130000
heap
page read and write
1067000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
1067000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
1095000
heap
page read and write
107B000
heap
page read and write
108B000
heap
page read and write
1055000
heap
page read and write
1095000
heap
page read and write
1095000
heap
page read and write
107B000
heap
page read and write
1095000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
10BF000
heap
page read and write
107B000
heap
page read and write
1067000
heap
page read and write
1066000
heap
page read and write
1077000
heap
page read and write
401000
unkown
page execute read
F44000
heap
page read and write
107B000
heap
page read and write
94B000
unkown
page write copy
7AC000
heap
page read and write
107B000
heap
page read and write
10E2000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
1067000
heap
page read and write
10E2000
heap
page read and write
F44000
heap
page read and write
F44000
heap
page read and write
107B000
heap
page read and write
1067000
heap
page read and write
1097000
heap
page read and write
F44000
heap
page read and write
107B000
heap
page read and write
105D000
heap
page read and write
1087000
heap
page read and write
107B000
heap
page read and write
1095000
heap
page read and write
10B8000
heap
page read and write
1076000
heap
page read and write
1067000
heap
page read and write
10B0000
heap
page read and write
1095000
heap
page read and write
107B000
heap
page read and write
F44000
heap
page read and write
2E90000
heap
page read and write
107B000
heap
page read and write
105D000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
10E2000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
1067000
heap
page read and write
1076000
heap
page read and write
1067000
heap
page read and write
1067000
heap
page read and write
1103000
heap
page read and write
105D000
heap
page read and write
1076000
heap
page read and write
1095000
heap
page read and write
104C000
heap
page read and write
1076000
heap
page read and write
1093000
heap
page read and write
107B000
heap
page read and write
107C000
heap
page read and write
10E2000
heap
page read and write
107B000
heap
page read and write
F44000
heap
page read and write
1038000
heap
page read and write
107E000
heap
page read and write
1055000
heap
page read and write
1076000
heap
page read and write
1045000
heap
page read and write
1095000
heap
page read and write
1076000
heap
page read and write
102D000
heap
page read and write
1095000
heap
page read and write
1067000
heap
page read and write
107B000
heap
page read and write
107E000
heap
page read and write
1067000
heap
page read and write
F44000
heap
page read and write
30D1000
heap
page read and write
F44000
heap
page read and write
1055000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
105D000
heap
page read and write
105D000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
1176000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
10E2000
heap
page read and write
1095000
heap
page read and write
956000
unkown
page write copy
1076000
heap
page read and write
1095000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
405000
unkown
page read and write
1095000
heap
page read and write
10E2000
heap
page read and write
1095000
heap
page read and write
1076000
heap
page read and write
112F000
heap
page read and write
1047000
heap
page read and write
1076000
heap
page read and write
114E000
heap
page read and write
107B000
heap
page read and write
107E000
heap
page read and write
1076000
heap
page read and write
1095000
heap
page read and write
1067000
heap
page read and write
1076000
heap
page read and write
30D2000
heap
page read and write
1095000
heap
page read and write
107B000
heap
page read and write
1138000
heap
page read and write
1045000
heap
page read and write
1095000
heap
page read and write
107B000
heap
page read and write
1049000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
1055000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
1067000
heap
page read and write
107B000
heap
page read and write
1095000
heap
page read and write
107E000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
400000
unkown
page readonly
107E000
heap
page read and write
1076000
heap
page read and write
FEA000
heap
page read and write
F44000
heap
page read and write
F44000
heap
page read and write
1095000
heap
page read and write
1095000
heap
page read and write
1076000
heap
page read and write
1014000
heap
page read and write
1122000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
F44000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
10CB000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
3CC0000
direct allocation
page read and write
105D000
heap
page read and write
1038000
heap
page read and write
F44000
heap
page read and write
10BE000
heap
page read and write
1055000
heap
page read and write
1076000
heap
page read and write
1095000
heap
page read and write
107B000
heap
page read and write
1095000
heap
page read and write
1176000
heap
page read and write
1067000
heap
page read and write
1095000
heap
page read and write
1067000
heap
page read and write
1159000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
1093000
heap
page read and write
107B000
heap
page read and write
1045000
heap
page read and write
107E000
heap
page read and write
1067000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
1095000
heap
page read and write
1067000
heap
page read and write
1067000
heap
page read and write
1095000
heap
page read and write
116B000
heap
page read and write
1076000
heap
page read and write
1124000
heap
page read and write
10E2000
heap
page read and write
1067000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
1122000
heap
page read and write
1076000
heap
page read and write
10ED000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
10E2000
heap
page read and write
107B000
heap
page read and write
1014000
heap
page read and write
107B000
heap
page read and write
F44000
heap
page read and write
1067000
heap
page read and write
1095000
heap
page read and write
1047000
heap
page read and write
10B5000
heap
page read and write
30DC000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
112F000
heap
page read and write
1095000
heap
page read and write
1067000
heap
page read and write
107B000
heap
page read and write
105D000
heap
page read and write
107B000
heap
page read and write
1066000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
1038000
heap
page read and write
1130000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
1137000
heap
page read and write
107B000
heap
page read and write
F44000
heap
page read and write
107E000
heap
page read and write
10E2000
heap
page read and write
1076000
heap
page read and write
30D4000
heap
page read and write
F44000
heap
page read and write
104E000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
104E000
heap
page read and write
1076000
heap
page read and write
30D5000
heap
page read and write
107E000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
33CF000
stack
page read and write
1067000
heap
page read and write
10E2000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
10B1000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
112F000
heap
page read and write
1067000
heap
page read and write
2F01000
heap
page read and write
1095000
heap
page read and write
1067000
heap
page read and write
F44000
heap
page read and write
1095000
heap
page read and write
F44000
heap
page read and write
107B000
heap
page read and write
30D3000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
1095000
heap
page read and write
1067000
heap
page read and write
1014000
heap
page read and write
7FE30000
direct allocation
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
1055000
heap
page read and write
107E000
heap
page read and write
1067000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
30D0000
heap
page read and write
1067000
heap
page read and write
1130000
heap
page read and write
1095000
heap
page read and write
F44000
heap
page read and write
251E000
stack
page read and write
10E2000
heap
page read and write
F44000
heap
page read and write
30D8000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
1095000
heap
page read and write
F44000
heap
page read and write
1066000
heap
page read and write
F44000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
10E2000
heap
page read and write
1095000
heap
page read and write
1067000
heap
page read and write
F44000
heap
page read and write
107B000
heap
page read and write
F44000
heap
page read and write
1067000
heap
page read and write
1066000
heap
page read and write
2F01000
heap
page read and write
30D9000
heap
page read and write
1076000
heap
page read and write
1095000
heap
page read and write
1193000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
1067000
heap
page read and write
107B000
heap
page read and write
10ED000
heap
page read and write
F44000
heap
page read and write
10E2000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
104A000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
1077000
heap
page read and write
109C000
heap
page read and write
107B000
heap
page read and write
6D0000
direct allocation
page read and write
F44000
heap
page read and write
2F01000
heap
page read and write
1067000
heap
page read and write
1045000
heap
page read and write
1045000
heap
page read and write
1067000
heap
page read and write
104E000
heap
page read and write
105D000
heap
page read and write
30D4000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
1055000
heap
page read and write
30DE000
heap
page read and write
1067000
heap
page read and write
1067000
heap
page read and write
107B000
heap
page read and write
10E2000
heap
page read and write
30DB000
heap
page read and write
1067000
heap
page read and write
F44000
heap
page read and write
107B000
heap
page read and write
104E000
heap
page read and write
F44000
heap
page read and write
30DC000
heap
page read and write
30DB000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
1070000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
30DB000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
102E000
heap
page read and write
30D6000
heap
page read and write
10D7000
heap
page read and write
1095000
heap
page read and write
1014000
heap
page read and write
1076000
heap
page read and write
1067000
heap
page read and write
1066000
heap
page read and write
107B000
heap
page read and write
1045000
heap
page read and write
107B000
heap
page read and write
1095000
heap
page read and write
10C6000
heap
page read and write
1070000
heap
page read and write
105D000
heap
page read and write
107E000
heap
page read and write
10E2000
heap
page read and write
1103000
heap
page read and write
107B000
heap
page read and write
112F000
heap
page read and write
104E000
heap
page read and write
10D8000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
1095000
heap
page read and write
105D000
heap
page read and write
107B000
heap
page read and write
F0E000
stack
page read and write
1067000
heap
page read and write
1093000
heap
page read and write
1077000
heap
page read and write
107B000
heap
page read and write
10A3000
heap
page read and write
107B000
heap
page read and write
F44000
heap
page read and write
107B000
heap
page read and write
1095000
heap
page read and write
1095000
heap
page read and write
104A000
heap
page read and write
1095000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
957000
unkown
page readonly
1095000
heap
page read and write
1076000
heap
page read and write
30D9000
heap
page read and write
114E000
heap
page read and write
10D2000
heap
page read and write
107E000
heap
page read and write
1067000
heap
page read and write
F44000
heap
page read and write
107B000
heap
page read and write
1160000
heap
page read and write
30D8000
heap
page read and write
1038000
heap
page read and write
1095000
heap
page read and write
1076000
heap
page read and write
112F000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
105D000
heap
page read and write
107B000
heap
page read and write
30D0000
heap
page read and write
1076000
heap
page read and write
1067000
heap
page read and write
F44000
heap
page read and write
107E000
heap
page read and write
1067000
heap
page read and write
2F01000
heap
page read and write
1095000
heap
page read and write
10E2000
heap
page read and write
1130000
heap
page read and write
F44000
heap
page read and write
1067000
heap
page read and write
1076000
heap
page read and write
1067000
heap
page read and write
1076000
heap
page read and write
1014000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
10E2000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
1086000
heap
page read and write
1047000
heap
page read and write
106D000
heap
page read and write
107B000
heap
page read and write
930000
unkown
page readonly
107E000
heap
page read and write
1076000
heap
page read and write
105D000
heap
page read and write
114E000
heap
page read and write
1095000
heap
page read and write
1076000
heap
page read and write
1095000
heap
page read and write
107B000
heap
page read and write
F44000
heap
page read and write
10E2000
heap
page read and write
1095000
heap
page read and write
107B000
heap
page read and write
1067000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
107E000
heap
page read and write
107B000
heap
page read and write
112F000
heap
page read and write
2F1C000
stack
page read and write
107E000
heap
page read and write
F44000
heap
page read and write
F44000
heap
page read and write
30D7000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
30D9000
heap
page read and write
1067000
heap
page read and write
406000
unkown
page readonly
F44000
heap
page read and write
F44000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
1095000
heap
page read and write
10B7000
heap
page read and write
107B000
heap
page read and write
1066000
heap
page read and write
10E2000
heap
page read and write
1095000
heap
page read and write
107B000
heap
page read and write
1124000
heap
page read and write
1038000
heap
page read and write
1038000
heap
page read and write
1095000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
1097000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
1045000
heap
page read and write
1093000
heap
page read and write
1086000
heap
page read and write
107B000
heap
page read and write
F44000
heap
page read and write
1055000
heap
page read and write
1067000
heap
page read and write
1067000
heap
page read and write
107B000
heap
page read and write
10E2000
heap
page read and write
1014000
heap
page read and write
1076000
heap
page read and write
10FD000
heap
page read and write
107E000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
2C5F000
stack
page read and write
1130000
heap
page read and write
F44000
heap
page read and write
112F000
heap
page read and write
1012000
heap
page read and write
F44000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
F44000
heap
page read and write
1038000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
2B5E000
stack
page read and write
1066000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
1055000
heap
page read and write
107B000
heap
page read and write
760000
heap
page read and write
10F7000
heap
page read and write
107B000
heap
page read and write
10AD000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
107B000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
1014000
heap
page read and write
7FDC0000
direct allocation
page execute and read and write
107B000
heap
page read and write
30D2000
heap
page read and write
1095000
heap
page read and write
104E000
heap
page read and write
1067000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
1095000
heap
page read and write
1095000
heap
page read and write
F44000
heap
page read and write
F44000
heap
page read and write
9B000
stack
page read and write
107B000
heap
page read and write
F44000
heap
page read and write
1093000
heap
page read and write
1076000
heap
page read and write
1076000
heap
page read and write
107B000
heap
page read and write
1047000
heap
page read and write
104E000
heap
page read and write
10B1000
heap
page read and write
107B000
heap
page read and write
EC0000
heap
page read and write
10AF000
heap
page read and write
10E2000
heap
page read and write
There are 2931 hidden memdumps, click here to show them.