IOC Report
Insight_Medical_Publishing_4.one

loading gif

Files

File Path
Type
Category
Malicious
Insight_Medical_Publishing_4.one
data
initial sample
malicious
C:\Users\user\AppData\Local\Temp\click.wsf
ASCII text, with no line terminators
dropped
malicious
C:\Users\user\AppData\Local\Temp\rad16F69.tmp.dll
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
malicious
C:\Users\user\Desktop\Insight_Medical_Publishing_4.one
data
dropped
malicious
C:\Windows\System32\BqnZyHskpeTuo\PjkJxfQvhUP.dll (copy)
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
malicious
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506
Microsoft Cabinet archive data, Windows 2000/XP setup, 62582 bytes, 1 file, at 0x2c +A "authroot.stl", number 1, 6 datablocks, 0x1 compression
dropped
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
data
modified
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\1A820D3C-0F4E-4D92-BB7D-90BF78AE86CD
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000005.bin (copy)
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000006.bin (copy)
PNG image data, 127 x 138, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000007.bin (copy)
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000008.bin (copy)
PNG image data, 749 x 126, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000009.bin (copy)
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000A.bin (copy)
PNG image data, 163 x 131, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000B.bin (copy)
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000C.bin (copy)
PNG image data, 123 x 103, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000D.bin (copy)
PNG image data, 59 x 61, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000E.bin (copy)
PNG image data, 563 x 211, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000F.bin (copy)
PNG image data, 742 x 104, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000G.bin (copy)
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000H.bin (copy)
PNG image data, 651 x 254, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000I.bin (copy)
PNG image data, 220 x 170, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000J.bin (copy)
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000K.bin (copy)
PNG image data, 167 x 131, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000M.bin (copy)
PNG image data, 230 x 68, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000N.bin (copy)
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000O.bin (copy)
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000P.bin (copy)
PNG image data, 213 x 85, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000Q.bin (copy)
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000R.bin (copy)
PNG image data, 171 x 50, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000S.bin (copy)
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000T.bin (copy)
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000U.bin (copy)
PNG image data, 164 x 89, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000V.bin (copy)
PNG image data, 162 x 89, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000010.bin (copy)
PNG image data, 452 x 277, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000011.bin (copy)
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000012.bin (copy)
PNG image data, 452 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000013.bin (copy)
PNG image data, 185 x 76, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000014.bin (copy)
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000015.bin (copy)
PNG image data, 167 x 92, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000016.bin (copy)
PNG image data, 221 x 77, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000017.bin (copy)
PNG image data, 232 x 50, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000018.bin (copy)
PNG image data, 340 x 79, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000019.bin (copy)
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001C.bin (copy)
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001D.bin (copy)
PNG image data, 127 x 138, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001E.bin (copy)
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001F.bin (copy)
PNG image data, 749 x 126, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001G.bin (copy)
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001H.bin (copy)
PNG image data, 163 x 131, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001I.bin (copy)
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001J.bin (copy)
PNG image data, 123 x 103, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001K.bin (copy)
PNG image data, 59 x 61, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001L.bin (copy)
PNG image data, 563 x 211, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001M.bin (copy)
PNG image data, 742 x 104, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001N.bin (copy)
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001O.bin (copy)
PNG image data, 651 x 254, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001P.bin (copy)
PNG image data, 220 x 170, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001Q.bin (copy)
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001R.bin (copy)
PNG image data, 167 x 131, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001T.bin (copy)
PNG image data, 230 x 68, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001U.bin (copy)
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001V.bin (copy)
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000020.bin (copy)
PNG image data, 213 x 85, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000021.bin (copy)
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000022.bin (copy)
PNG image data, 171 x 50, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000023.bin (copy)
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000024.bin (copy)
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000025.bin (copy)
PNG image data, 164 x 89, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000026.bin (copy)
PNG image data, 162 x 89, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000027.bin (copy)
PNG image data, 452 x 277, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000028.bin (copy)
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000029.bin (copy)
PNG image data, 452 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002A.bin (copy)
PNG image data, 185 x 76, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002B.bin (copy)
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002C.bin (copy)
PNG image data, 167 x 92, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002D.bin (copy)
PNG image data, 221 x 77, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002E.bin (copy)
PNG image data, 232 x 50, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002F.bin (copy)
PNG image data, 340 x 79, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002G.bin (copy)
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002H.bin (copy)
PNG image data, 220 x 170, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002I.bin (copy)
PNG image data, 651 x 254, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002J.bin (copy)
PNG image data, 59 x 61, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002K.bin (copy)
PNG image data, 127 x 138, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002L.bin (copy)
PNG image data, 742 x 104, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002M.bin (copy)
PNG image data, 563 x 211, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002N.bin (copy)
PNG image data, 123 x 103, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002O.bin (copy)
PNG image data, 163 x 131, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002P.bin (copy)
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002Q.bin (copy)
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002R.bin (copy)
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002S.bin (copy)
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002T.bin (copy)
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002U.bin (copy)
PNG image data, 167 x 131, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002V.bin (copy)
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000030.bin (copy)
PNG image data, 749 x 126, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000031.bin (copy)
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000032.bin (copy)
PNG image data, 185 x 76, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000033.bin (copy)
PNG image data, 452 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000034.bin (copy)
PNG image data, 213 x 85, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000035.bin (copy)
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000036.bin (copy)
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000037.bin (copy)
PNG image data, 164 x 89, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000038.bin (copy)
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000039.bin (copy)
PNG image data, 340 x 79, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003A.bin (copy)
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003B.bin (copy)
PNG image data, 167 x 92, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003C.bin (copy)
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003D.bin (copy)
PNG image data, 230 x 68, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003E.bin (copy)
PNG image data, 171 x 50, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003F.bin (copy)
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003G.bin (copy)
PNG image data, 221 x 77, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003H.bin (copy)
PNG image data, 452 x 277, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003I.bin (copy)
PNG image data, 232 x 50, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003J.bin (copy)
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003K.bin (copy)
PNG image data, 162 x 89, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003Q.bin (copy)
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003R.bin (copy)
PNG image data, 123 x 103, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003S.bin (copy)
PNG image data, 563 x 211, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003T.bin (copy)
PNG image data, 742 x 104, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003U.bin (copy)
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003V.bin (copy)
PNG image data, 749 x 126, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000040.bin (copy)
PNG image data, 220 x 170, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000041.bin (copy)
PNG image data, 59 x 61, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000042.bin (copy)
PNG image data, 163 x 131, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000043.bin (copy)
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000044.bin (copy)
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000045.bin (copy)
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000046.bin (copy)
PNG image data, 127 x 138, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000047.bin (copy)
PNG image data, 651 x 254, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000048.bin (copy)
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000049.bin (copy)
PNG image data, 167 x 131, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004B.bin (copy)
PNG image data, 162 x 89, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004C.bin (copy)
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004D.bin (copy)
PNG image data, 171 x 50, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004E.bin (copy)
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004F.bin (copy)
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004G.bin (copy)
PNG image data, 452 x 277, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004H.bin (copy)
PNG image data, 452 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004I.bin (copy)
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004J.bin (copy)
PNG image data, 340 x 79, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004K.bin (copy)
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004L.bin (copy)
PNG image data, 185 x 76, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004M.bin (copy)
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004N.bin (copy)
PNG image data, 213 x 85, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004O.bin (copy)
PNG image data, 164 x 89, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004P.bin (copy)
PNG image data, 167 x 92, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004Q.bin (copy)
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004R.bin (copy)
PNG image data, 230 x 68, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004S.bin (copy)
PNG image data, 221 x 77, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004T.bin (copy)
PNG image data, 232 x 50, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004U.bin (copy)
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000051.bin (copy)
HTML document, ASCII text, with very long lines (792), with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000052.bin (copy)
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000053.bin (copy)
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1248x1624, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\header
Matlab v4 mat-file (little endian) h\001, numeric, rows 262223750, columns 0
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000005.bin
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000006.bin
PNG image data, 127 x 138, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000007.bin
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000008.bin
PNG image data, 749 x 126, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000009.bin
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000A.bin
PNG image data, 163 x 131, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000B.bin
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000C.bin
PNG image data, 123 x 103, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000D.bin
PNG image data, 59 x 61, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000E.bin
PNG image data, 563 x 211, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000F.bin
PNG image data, 742 x 104, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000G.bin
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000H.bin
PNG image data, 651 x 254, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000I.bin
PNG image data, 220 x 170, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000J.bin
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000K.bin
PNG image data, 167 x 131, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000M.bin
PNG image data, 230 x 68, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000N.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000O.bin
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000P.bin
PNG image data, 213 x 85, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000Q.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000R.bin
PNG image data, 171 x 50, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000S.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000T.bin
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000U.bin
PNG image data, 164 x 89, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000V.bin
PNG image data, 162 x 89, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000010.bin
PNG image data, 452 x 277, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000011.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000012.bin
PNG image data, 452 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000013.bin
PNG image data, 185 x 76, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000014.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000015.bin
PNG image data, 167 x 92, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000016.bin
PNG image data, 221 x 77, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000017.bin
PNG image data, 232 x 50, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000018.bin
PNG image data, 340 x 79, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000019.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001C.bin
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001D.bin
PNG image data, 127 x 138, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001E.bin
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001F.bin
PNG image data, 749 x 126, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001G.bin
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001H.bin
PNG image data, 163 x 131, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001I.bin
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001J.bin
PNG image data, 123 x 103, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001K.bin
PNG image data, 59 x 61, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001L.bin
PNG image data, 563 x 211, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001M.bin
PNG image data, 742 x 104, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001N.bin
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001O.bin
PNG image data, 651 x 254, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001P.bin
PNG image data, 220 x 170, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001Q.bin
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001R.bin
PNG image data, 167 x 131, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001T.bin
PNG image data, 230 x 68, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001U.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001V.bin
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000020.bin
PNG image data, 213 x 85, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000021.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000022.bin
PNG image data, 171 x 50, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000023.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000024.bin
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000025.bin
PNG image data, 164 x 89, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000026.bin
PNG image data, 162 x 89, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000027.bin
PNG image data, 452 x 277, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000028.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000029.bin
PNG image data, 452 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002A.bin
PNG image data, 185 x 76, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002B.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002C.bin
PNG image data, 167 x 92, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002D.bin
PNG image data, 221 x 77, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002E.bin
PNG image data, 232 x 50, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002F.bin
PNG image data, 340 x 79, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002G.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002H.bin
PNG image data, 220 x 170, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002I.bin
PNG image data, 651 x 254, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002J.bin
PNG image data, 59 x 61, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002K.bin
PNG image data, 127 x 138, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002L.bin
PNG image data, 742 x 104, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002M.bin
PNG image data, 563 x 211, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002N.bin
PNG image data, 123 x 103, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002O.bin
PNG image data, 163 x 131, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002P.bin
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002Q.bin
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002R.bin
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002S.bin
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002T.bin
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002U.bin
PNG image data, 167 x 131, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002V.bin
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000030.bin
PNG image data, 749 x 126, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000031.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000032.bin
PNG image data, 185 x 76, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000033.bin
PNG image data, 452 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000034.bin
PNG image data, 213 x 85, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000035.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000036.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000037.bin
PNG image data, 164 x 89, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000038.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000039.bin
PNG image data, 340 x 79, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003A.bin
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003B.bin
PNG image data, 167 x 92, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003C.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003D.bin
PNG image data, 230 x 68, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003E.bin
PNG image data, 171 x 50, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003F.bin
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003G.bin
PNG image data, 221 x 77, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003H.bin
PNG image data, 452 x 277, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003I.bin
PNG image data, 232 x 50, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003J.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003K.bin
PNG image data, 162 x 89, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003Q.bin
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003R.bin
PNG image data, 123 x 103, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003S.bin
PNG image data, 563 x 211, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003T.bin
PNG image data, 742 x 104, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003U.bin
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003V.bin
PNG image data, 749 x 126, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000040.bin
PNG image data, 220 x 170, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000041.bin
PNG image data, 59 x 61, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000042.bin
PNG image data, 163 x 131, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000043.bin
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000044.bin
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000045.bin
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000046.bin
PNG image data, 127 x 138, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000047.bin
PNG image data, 651 x 254, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000048.bin
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000049.bin
PNG image data, 167 x 131, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004B.bin
PNG image data, 162 x 89, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004C.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004D.bin
PNG image data, 171 x 50, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004E.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004F.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004G.bin
PNG image data, 452 x 277, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004H.bin
PNG image data, 452 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004I.bin
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004J.bin
PNG image data, 340 x 79, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004K.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004L.bin
PNG image data, 185 x 76, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004M.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004N.bin
PNG image data, 213 x 85, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004O.bin
PNG image data, 164 x 89, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004P.bin
PNG image data, 167 x 92, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004Q.bin
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004R.bin
PNG image data, 230 x 68, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004S.bin
PNG image data, 221 x 77, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004T.bin
PNG image data, 232 x 50, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004U.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000051.bin
HTML document, ASCII text, with very long lines (792), with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000052.bin
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000053.bin
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1248x1624, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000058.bin
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005A.bin
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 7.0, datetime=2004:03:04 13:19:29], progressive, precision 8, 221x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005C.bin
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005E.bin
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005G.bin
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 7.0, datetime=2004:03:04 13:18:09], progressive, precision 8, 164x641, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000006L.bin
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 7.0, datetime=2004:03:04 13:06:24], progressive, precision 8, 38x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000006N.bin
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000006P.bin
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000006R.bin
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000006T.bin
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000006V.bin
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000071.bin
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000074.bin
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 814x105, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000076.bin
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 728x77, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000078.bin
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 69x630, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000007A.bin
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 105x441, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000007B.bin
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 76x97, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000007D.bin
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 95x498, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000007E.bin
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 700x114, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000007G.bin
PNG image data, 813 x 99, 8-bit/color RGBA, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000007I.bin
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 780x107, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000007K.bin
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 613x144, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000007M.bin
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 276x139, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000007O.bin
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 814x45, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000007Q.bin
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 262x277, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000007S.bin
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 70x626, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000007U.bin
PNG image data, 177 x 123, 8-bit/color RGBA, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000080.bin
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 17x608, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000082.bin
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 357x69, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000083.bin
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 14x341, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000085.bin
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2004:03:12 11:15:20], progressive, precision 8, 604x784, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000087.bin
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2004:03:12 11:13:06], progressive, precision 8, 570x779, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000089.bin
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000008B.bin
PNG image data, 40 x 623, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000008D.bin
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000008F.bin
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2004:03:12 11:10:32], progressive, precision 8, 594x773, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000008H.bin
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2004:03:12 11:12:29], progressive, precision 8, 598x766, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000008J.bin
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 7.0, datetime=2004:03:04 13:19:29], progressive, precision 8, 221x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000008L.bin
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000008N.bin
PNG image data, 60 x 336, 4-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000008P.bin
PNG image data, 40 x 617, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000008R.bin
PNG image data, 50 x 600, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000008T.bin
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000008V.bin
PNG image data, 77 x 627, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000091.bin
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000093.bin
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000095.bin
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000097.bin
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2004:03:12 11:05:55], progressive, precision 8, 612x618, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000099.bin
PNG image data, 176 x 513, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000009B.bin
PNG image data, 40 x 650, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000009D.bin
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 7.0, datetime=2004:03:04 13:27:10], progressive, precision 8, 102x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000009F.bin
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 7.0, datetime=2004:03:04 13:18:09], progressive, precision 8, 164x641, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000009H.bin
PNG image data, 50 x 556, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000009J.bin
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000009L.bin
PNG image data, 171 x 552, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000009N.bin
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2004:03:12 11:11:38], progressive, precision 8, 577x757, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000009P.bin
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 7.0, datetime=2004:03:04 13:26:15], progressive, precision 8, 216x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000009R.bin
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2004:03:12 11:09:29], progressive, precision 8, 609x675, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000009T.bin
Windows Enhanced Metafile (EMF) image data version 0x10000
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000009U.bin
PNG image data, 189 x 305, 8-bit/color RGBA, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000009V.bin
Windows Enhanced Metafile (EMF) image data version 0x10000
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000A0.bin
PNG image data, 189 x 305, 8-bit/color RGBA, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000A1.bin
Windows Enhanced Metafile (EMF) image data version 0x10000
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000A2.bin
PNG image data, 189 x 305, 8-bit/color RGBA, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000A4.bin
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000A6.bin
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000A8.bin
PNG image data, 50 x 500, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000AA.bin
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000AC.bin
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2004:03:12 11:08:07], baseline, precision 8, 595x450, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000AE.bin
Windows Enhanced Metafile (EMF) image data version 0x10000
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000AF.bin
PNG image data, 3005 x 184, 8-bit/color RGBA, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000AH.bin
PNG image data, 39 x 600, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000AJ.bin
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000AL.bin
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 7.0, datetime=2004:03:04 13:44:07], progressive, precision 8, 611x163, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000AN.bin
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000AP.bin
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000AR.bin
PNG image data, 39 x 579, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000AT.bin
PNG image data, 30 x 700, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000AV.bin
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000B1.bin
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000B3.bin
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 7.0, datetime=2004:03:04 13:06:24], progressive, precision 8, 38x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000B5.bin
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000B7.bin
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000B9.bin
PNG image data, 85 x 470, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000BB.bin
PNG image data, 88 x 574, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000BD.bin
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000BF.bin
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000BH.bin
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000BK.bin
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2004:03:12 11:05:55], progressive, precision 8, 612x618, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000BM.bin
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2004:03:12 11:08:07], baseline, precision 8, 595x450, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000BO.bin
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
modified
C:\Users\user\AppData\Local\Temp\OneNote Archive\Getting Started.one
data
dropped
C:\Users\user\AppData\Local\Temp\OneNote Archive\Open Notebook.onetoc2
data
dropped
C:\Users\user\AppData\Local\Temp\OneNote15WatsonLog.etl
data
dropped
C:\Users\user\AppData\Local\Temp\{00B4667A-0009-4CAE-8232-1BCB0342810E}.bin
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{00BB475B-3E13-4BDA-987F-4DA83EF10A95}.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{01453947-2F7B-4D67-806C-DA8607230B17}
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{02A24394-14D3-4113-91C0-61849D4F69F0}.bin
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{035C665B-D14F-4CAA-BE51-D1F05704AF90}
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 7.0, datetime=2004:03:04 13:27:10], progressive, precision 8, 102x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{03AC5DB5-D7D9-426A-A37A-EFD4EFAC7B9B}
PNG image data, 164 x 89, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{044F96EC-EB7C-4B38-A110-9AAABD84882F}.bin
PNG image data, 162 x 89, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{04B80500-EE5B-4287-9A27-F121123B2659}
PNG image data, 742 x 104, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{05396612-E231-4EBF-A254-36E33E1B7198}.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{05A6303F-6566-461E-B5AC-53BBA05319A8}.bin
PNG image data, 185 x 76, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{061B3274-F6DC-44B0-B341-6E74E44D97D6}
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{0679CD42-DD83-49F0-8D6E-D3FE98BCA7EF}.bin
PNG image data, 213 x 85, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{06A3E423-BB65-4EBB-906E-09CB0F2BC278}
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 357x69, components 3
dropped
C:\Users\user\AppData\Local\Temp\{06F468A7-049F-45DF-A417-9EE8D771C738}
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{079A4792-80F9-4EEE-976B-1BC8055DCAF0}
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{0A2D9CFD-2394-4516-8E04-D06A6A048EC0}
PNG image data, 221 x 77, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{0A687075-AFF3-4FDE-9288-E5AA1460AF3E}.bin
PNG image data, 651 x 254, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{0B0D92C9-47DB-41B3-8756-806F5E8C6183}
PNG image data, 651 x 254, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{0B5D64E7-87D2-43A1-BF9D-849AB2B6D599}
PNG image data, 123 x 103, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{0BAABD55-294F-4178-83C7-06F275D90B53}.bin
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{0BDF512A-3852-4876-BE00-B15F9AB165CE}
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 7.0, datetime=2004:03:04 13:44:07], progressive, precision 8, 611x163, components 3
dropped
C:\Users\user\AppData\Local\Temp\{0C1A4FDE-7B30-4A03-A497-9062BAAD70D4}
PNG image data, 39 x 600, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{0D1E15F7-2E37-408D-8AA2-55984C76431A}
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{0E04ED18-80CA-4117-B649-2DEA6C2FF554}
PNG image data, 340 x 79, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{0E57B19E-8A6E-48B9-A5B3-6B841D686CE2}
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2004:03:12 11:15:20], progressive, precision 8, 604x784, components 3
dropped
C:\Users\user\AppData\Local\Temp\{0F239F01-7387-43B9-AC82-2ED376B81CFB}
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{0F6F64AE-4EC3-480C-8105-1DC5E3761D39}
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 7.0, datetime=2004:03:04 13:06:24], progressive, precision 8, 38x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{0FF5AE1A-8CC6-4BC2-AC3A-E4E16FE58EE0}.bin
PNG image data, 232 x 50, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{108F4470-4541-4AEB-A691-8F7C1CCCAAA6}
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 76x97, components 3
dropped
C:\Users\user\AppData\Local\Temp\{120F8287-DAA6-4A38-8388-1DFB30108896}.bin
PNG image data, 59 x 61, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{12C5352A-927F-4938-B487-34C5F06FEC4B}
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{13713C0D-8DB8-43BC-A2DF-EBE5CB6E1865}
Windows Enhanced Metafile (EMF) image data version 0x10000
dropped
C:\Users\user\AppData\Local\Temp\{13A8B4B7-2D8A-4CE6-A843-8F6BB17B2E54}.bin
PNG image data, 163 x 131, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{14D6C864-A69F-4AA4-9F7E-162009B5803C}
PNG image data, 220 x 170, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{151CC436-7325-471D-A165-2D714F009D47}.bin
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{15C45397-E64A-4687-9812-65C9EB1A5636}
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 69x630, components 3
dropped
C:\Users\user\AppData\Local\Temp\{160CED52-115A-44FA-90F0-55CCB3872D51}
PNG image data, 167 x 92, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{177BC19C-64B2-414D-A31A-63A16DC22C0D}
PNG image data, 50 x 500, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{17B1DE9C-1341-4DAD-9593-6887268BA76B}
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{19005016-3685-463E-B5E7-0F5C325563BD}
PNG image data, 176 x 513, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{1B5BBC40-9BC1-479B-812A-D69F726D77DD}
PNG image data, 127 x 138, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{1BB81B1A-4B4B-49A3-B63B-F62C2DD2D61C}
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 262x277, components 3
dropped
C:\Users\user\AppData\Local\Temp\{1DE2CA4F-AC8B-4D91-8ACB-34229E29C3BC}
PNG image data, 232 x 50, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{207C544E-A4E6-44CC-B5E8-00E1369AA151}
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{207CB4D5-7327-4985-8F1B-09EA1BA1D71E}
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{20BC231D-8D89-4837-8C6C-C3625946D33B}
PNG image data, 221 x 77, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{22CE6CE3-76DE-4CB0-9463-1F9206E54F2E}.bin
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{2390D2BE-A08A-449A-910B-3D7EFCA4EAE2}
PNG image data, 40 x 623, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{23BC901A-7328-41EA-A5C9-15380647477B}
PNG image data, 189 x 305, 8-bit/color RGBA, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{2469E2B0-BE2D-43E5-98D6-6559AFF9E463}.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{25616D72-56E0-4EC2-9BE3-FBB0DF640DBD}.bin
PNG image data, 221 x 77, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{27F77280-EEAA-43D2-A902-AB20AF295A25}
HTML document, ASCII text, with very long lines (792), with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\{289BE926-6AF9-40DA-9703-44B81BBBF62E}.bin
HTML document, ASCII text, with very long lines (792), with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\{28CC4680-55C1-499E-A772-8714E9C0D0EE}.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{2CF92CDE-DCBA-4A31-BF13-93A235B1FF6A}
PNG image data, 171 x 552, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{2E4E3522-7F76-4065-8B96-2F0D9B0F5CB0}.bin
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{2F5C2CCF-581B-4AD0-B27B-B2CC91516B2E}
PNG image data, 340 x 79, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{30BB3FEC-12B4-4686-B2C0-2A70C10279B7}.bin
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{33A69E53-C613-4390-A255-FF02E6FF2A93}.bin
PNG image data, 185 x 76, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{34C32B91-CD2F-42D0-AD9C-D7316D730966}.bin
PNG image data, 749 x 126, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{356C426D-2428-44D1-AB6E-F99E3A64E321}
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{36436631-8EE3-4151-A866-93E25FA067E1}
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{369B15FD-4FC8-45FB-926A-C109A6FFF6C7}
PNG image data, 85 x 470, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{379A8E05-8162-4A0A-A9EB-B1A1624443F9}
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2004:03:12 11:13:06], progressive, precision 8, 570x779, components 3
dropped
C:\Users\user\AppData\Local\Temp\{38FF7A0C-C44B-4EA0-B865-E4344863ADE9}.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{3B0F66CC-68CD-478B-BDE2-83192D3D09CD}.bin
PNG image data, 340 x 79, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{3DA3D1DE-E584-4302-AD94-3382C8A6E343}
PNG image data, 123 x 103, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{3F4C81BA-FFDB-492F-921B-BCCD0654B4DA}.bin
PNG image data, 563 x 211, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{3FFC27E0-FE09-435E-BB4C-EDD39E9A7FDB}
PNG image data, 189 x 305, 8-bit/color RGBA, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{412D568F-A2A5-44D1-A546-3393F64299F5}.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{41FA16E1-7DA2-4798-9D85-51AF673C7364}.bin
PNG image data, 452 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{426C4AD8-F62B-47C5-8C4D-D9FC9EEB63DE}.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{433734AB-EAD3-4F54-AE12-4A966D1F8B8A}.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{44DCB131-7302-44C2-B2F0-8F3D8C368A05}
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{44EF2DD4-F1BC-42C4-994A-4322E92E8AD5}
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{45281967-CA82-4665-AA27-275502DEE55A}.bin
PNG image data, 232 x 50, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{471A89FE-0674-4D8C-A649-DB4538400C67}
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 700x114, components 3
dropped
C:\Users\user\AppData\Local\Temp\{47C0B329-6385-48C8-8B36-2B8DD169752A}
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{4A177920-B6CC-4EFC-AE5B-105EB872AE34}
PNG image data, 651 x 254, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{4DFB07BF-B1BC-4B08-A921-80CCF154DC5A}
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{4ECB337B-30CA-433B-B193-E6410944FEB7}
PNG image data, 3005 x 184, 8-bit/color RGBA, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{4F4C04ED-A391-4759-AD79-B28E4C8413DC}
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{4FC7B2DD-3053-4C91-997B-368635273EAC}
PNG image data, 50 x 600, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{50DE8ED1-C2C9-4BBB-85BB-EBFF9E89E720}.bin
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{510A4DC9-7ABE-48E9-B2BA-040F3AA1731D}.bin
PNG image data, 185 x 76, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{539EC58A-C820-44FE-9F86-F429E1C21580}.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{56064A89-E73B-493C-9749-C22BEBBA8117}.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{562C0DCE-101E-4020-AD50-8B63921265F5}.bin
PNG image data, 452 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{56900BFA-6009-403D-A883-F9B0E22A686F}
PNG image data, 39 x 579, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{57082D53-4D11-477E-8A8C-084FF145AF14}
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{5710AA08-644D-4CBD-ADFE-E7D2FF7A89F3}
PNG image data, 213 x 85, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{576827F1-B240-43BC-8FF2-CDAF09142C92}
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{577E9C92-688A-4C74-85E4-B27A4BC80E0C}.bin
PNG image data, 164 x 89, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{58CB0834-036B-4B3E-9772-A8E4331A3937}.bin
PNG image data, 742 x 104, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{590AD0E2-85A8-4F90-99C9-A8A52C39C394}
Windows Enhanced Metafile (EMF) image data version 0x10000
dropped
C:\Users\user\AppData\Local\Temp\{59B1052D-7E2A-4EB3-8E9F-4AEFEC3D0479}
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{5A9584CB-F73A-4C1D-AAA9-B71B027FFC60}
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{5B5970CE-90B4-468B-9DF8-35ABA3AE5FED}.bin
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{5CBB2827-BC71-4BD9-83F4-BD24FADACD50}.bin
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{60A3B544-D9B8-420C-A43A-AB086ADD3752}.bin
PNG image data, 163 x 131, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{613A202E-BDE3-4E55-B988-C97B7DE40AF9}.bin
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{613B9903-4D4C-4A6E-B114-DD5BA0B0BF28}
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{61A0ED3A-7C53-4F9C-9DDC-B5AA83D944F4}.bin
PNG image data, 167 x 131, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{61CD23EC-2D74-43EB-962B-D22BF53770DB}
PNG image data, 749 x 126, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{625011D9-D118-4DD3-9692-CFCD926F2651}.bin
PNG image data, 563 x 211, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{625FE3CC-0D82-4E0F-A136-FE87C36B88A5}
PNG image data, 563 x 211, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{6326F44D-15E0-4D9B-ACF3-7DB1DEA97F79}.bin
PNG image data, 59 x 61, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{655642A3-25B2-4FA5-B74D-F41BE2E5C68F}.bin
PNG image data, 232 x 50, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{65610ECA-E82C-4E47-8149-D063B608A764}.bin
PNG image data, 164 x 89, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{65702E3B-E6CE-4E72-BF8B-876A9B12B3DC}
PNG image data, 230 x 68, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{6713FF13-FBEE-4A51-80BE-EADCD40C6D32}
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{67228177-7471-4A19-8706-83E1E3BBA143}
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 814x45, components 3
dropped
C:\Users\user\AppData\Local\Temp\{679B195D-3427-42B8-9756-69CC56C10D4E}.bin
PNG image data, 123 x 103, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{68A44D1E-365A-4678-8C19-71707A84F6C2}
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2004:03:12 11:11:38], progressive, precision 8, 577x757, components 3
dropped
C:\Users\user\AppData\Local\Temp\{6A748AEE-88C1-46D9-A541-A02A87829698}
PNG image data, 213 x 85, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{6BB32635-5FE5-4E22-B463-3D898F92AB3C}
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 7.0, datetime=2004:03:04 13:19:29], progressive, precision 8, 221x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{6D5D1834-2A30-4943-80E9-21B281274420}
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{6DEEE892-FE9D-4496-AA30-293F7669898F}.bin
PNG image data, 220 x 170, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{6E254EE5-F13F-4B12-ABF4-3D6DC62007AC}
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{6F3F7DEB-F963-4352-A391-89EBCAE461E7}
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 95x498, components 3
dropped
C:\Users\user\AppData\Local\Temp\{7025E513-17AF-4B39-ABCB-8226BACA8B71}.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{70A393F4-6C80-47F6-8D7B-35CAE9121B85}
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{71565DAB-4EEF-4B52-8FEC-F46BF65D4BCB}
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{725D6959-0D47-45CB-B266-CF3C1EC7AA0A}
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{73149BF2-C242-4C1D-82BA-906112068872}.bin
PNG image data, 220 x 170, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{739D921F-DC69-4C13-88F6-B226EEDFB734}.bin
PNG image data, 651 x 254, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{74441DF7-5601-42A8-93E4-A19EF2AEA0B7}.bin
PNG image data, 123 x 103, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{7462CF45-AE02-4130-A2BC-95750A19A515}.bin
PNG image data, 167 x 131, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{753E3D03-4FA0-4184-9DF3-EA3FF257DA90}.bin
PNG image data, 59 x 61, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{75E0C2E0-53F4-460E-A3FA-8E559DCBB71E}.bin
PNG image data, 167 x 131, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{75E818DC-F236-4EE8-B5AF-FE5619B2659A}.bin
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{768432D7-835C-490C-AA8A-7001B4137476}
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2004:03:12 11:08:07], baseline, precision 8, 595x450, components 3
dropped
C:\Users\user\AppData\Local\Temp\{76EDC975-FF7D-4A91-B22D-BDE979191EC2}.bin
PNG image data, 167 x 92, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{799911ED-0130-420C-9CCE-EB42BF7F59DA}
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{79AD6AC0-320A-4251-A739-EF65BEA7CDF7}
PNG image data, 749 x 126, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{79EB3845-4E90-4A6A-80A4-0DCCD7A33904}
PNG image data, 164 x 89, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{7A33A1AD-D343-4A4B-9A17-6817EA4EEBBE}
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 105x441, components 3
dropped
C:\Users\user\AppData\Local\Temp\{7A4B4663-48B7-4A05-87C0-7AD1800348FF}.bin
PNG image data, 127 x 138, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{7BAB034E-25D8-41AA-9D19-A476AA95369E}.bin
PNG image data, 742 x 104, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{7D04F7D5-5F59-4365-8F43-9BC603C17D26}.bin
PNG image data, 220 x 170, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{7E328A8F-F2A8-4243-AFE9-E4CBFBBCD3AC}
PNG image data, 452 x 277, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{7E4EE6A8-3397-45F3-9E5F-7D506C2FCD52}
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{7F7A7CBA-1D54-4C83-B72E-6C3D29274750}
PNG image data, 171 x 50, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{7FCEF373-8325-42E0-86F5-985D655503C9}
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{820DDCF1-2B74-4872-963C-45635BF1203F}.bin
PNG image data, 163 x 131, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{823F2D44-B425-4EBA-BA04-3AE4A91B08EF}.bin
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{825EA737-41E9-4236-8CBC-280A42010837}.bin
PNG image data, 171 x 50, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{82CA354B-42C4-4E68-AB70-455616333E78}
PNG image data, 40 x 617, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{838F0B3A-7B89-49D3-84B4-26B6C957E8BA}
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{84F6E3DC-C434-43E8-A7BA-495CFB4C90EA}
PNG image data, 59 x 61, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{85E39A17-B6C7-4F0B-889B-628F6646B82A}.bin
PNG image data, 452 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{86A1B48C-AC03-4644-97D8-B27AAD9586C8}.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{86BF35B8-4BE4-41EE-B56B-139A77416967}
PNG image data, 177 x 123, 8-bit/color RGBA, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{86D6C1FF-3FA4-4ECE-B327-AC402FCC6396}
PNG image data, 563 x 211, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{87687ADB-B4EC-4905-887E-6140F31F5150}.bin
PNG image data, 749 x 126, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{87E4821C-5419-4904-863F-FA1878691DC9}.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{88A94005-24CD-4C8C-8E7E-17D7091C5DBF}.bin
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1248x1624, components 3
dropped
C:\Users\user\AppData\Local\Temp\{89BD946D-A7F4-45B9-AE48-9D7E635AF3F7}.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{8A1CB886-96C6-4D47-9F1C-F0CF76E1A553}
PNG image data, 162 x 89, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{8A3AB389-1D68-454A-9115-66E2536061FC}.bin
PNG image data, 452 x 277, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{8AD97103-A531-410E-8511-EB249E9B45DE}
PNG image data, 813 x 99, 8-bit/color RGBA, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{8B1DD6CA-047D-4E1C-9686-804B2FEE767B}.bin
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{8B74521F-6A5E-4FA4-BC72-56EE454B2E5B}
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 7.0, datetime=2004:03:04 13:26:15], progressive, precision 8, 216x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{8B8B4CC4-431E-4C9F-BBFB-E458D5076843}.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{8BC3CD87-1C28-42B4-9CB3-144C6747D66D}.bin
PNG image data, 213 x 85, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{8C33D5E9-A306-429B-A897-9E304121195F}
PNG image data, 452 x 277, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{8CEB5C05-8345-4A03-BCB9-5317D44A4509}.bin
PNG image data, 230 x 68, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{8D8894CD-805F-4A42-909B-3C357BCA7FD3}
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 7.0, datetime=2004:03:04 13:18:09], progressive, precision 8, 164x641, components 3
dropped
C:\Users\user\AppData\Local\Temp\{8E313225-9C4B-43C6-9F89-DAAA37D19EAF}.bin
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{8FCA0D1D-A239-4B4A-A397-DAEC694F57B9}
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{90BFB183-562E-41FB-B031-19EDD39C9EA4}
PNG image data, 167 x 131, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{925BA582-9B1D-43E3-B6D3-2B3DC9BFAAD5}.bin
PNG image data, 563 x 211, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{927BCC0D-522B-4A9E-B00C-5CE8E01712DD}.bin
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{92CD9EF3-8BD7-4532-B8F6-76404D4A40EF}.bin
PNG image data, 162 x 89, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{93F053A8-8C9D-4CC2-A107-CD932094E1C3}.bin
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{970FF6F3-B089-429F-8634-D11BA5F590D8}.bin
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{97FE5FB5-FE44-450A-910C-576F988B90B8}.bin
PNG image data, 167 x 92, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{981820F5-825C-4C65-87E7-FB875AA878F0}
PNG image data, 220 x 170, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{985B8E2A-5C23-4F1A-9FCA-821D15293660}
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{98E1E656-C046-4CCB-BFA7-4B7076825F72}
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{996E8EA4-7A2B-45C1-9070-16CEF16B9709}
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{998DA5C4-497E-4DDC-B60A-1C2141192C1D}
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{9C2F9649-2B35-4495-A913-2A1E2AC1DA95}.bin
PNG image data, 230 x 68, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{9C9D98B7-8052-4B25-BBAF-0B6DB4990726}
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{9E2274A0-32C1-4045-984E-3B8021F012AD}
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{9E738882-FB5A-4BA8-8D44-D552A85AD92C}
PNG image data, 77 x 627, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{9F275B62-58AA-4E86-96DC-D3C595844DD5}.bin
HTML document, ASCII text, with very long lines (792), with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\{A0A98CDB-F7D2-45A4-BAB3-9BA576E9AB7B}
PNG image data, 167 x 92, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{A0E28E11-8D63-4957-9320-1B28EE5291B2}.bin
PNG image data, 749 x 126, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{A308423F-0EF1-48E1-A3BE-762E8F58768B}
PNG image data, 88 x 574, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{A4D170B5-E087-4FD7-B354-F8CDDFE94C2A}.bin
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{A5692402-7EEA-4829-B57C-A7475266DF4F}
PNG image data, 163 x 131, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{A5BE5CB1-6DA1-4D29-8C96-E16CC32EAF3C}
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{A6907DF1-6631-437C-93FB-5E6098231911}.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{A767134E-C2DA-47A5-BC61-E7CCC501E26B}
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 780x107, components 3
dropped
C:\Users\user\AppData\Local\Temp\{A8EB0A0B-9CF0-4D15-86B8-7AB74264A4D6}.bin
PNG image data, 163 x 131, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{A9A59522-7EEB-4004-8887-3AC5D394951F}.bin
PNG image data, 213 x 85, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{AB42E564-049D-4580-9B8A-2C0EE8DF745A}.bin
PNG image data, 123 x 103, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{AB67E66C-4E08-4719-8B2F-0A92960B8CB6}
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 276x139, components 3
dropped
C:\Users\user\AppData\Local\Temp\{ACE17BFF-8A57-4775-B9BA-DAC8483DCDCE}
PNG image data, 452 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{ACF01DFF-4EFA-4665-A7ED-7AA4BBD4BAFE}
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{AFB776A4-2A60-4D68-82D2-093D11D2A861}
PNG image data, 230 x 68, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{B26AC8D6-0627-4601-8519-2DD268D5433F}.bin
PNG image data, 340 x 79, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{B2C1DCDC-34A6-47EF-9F82-EB32E0512934}
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{B34EE07E-13BC-47EF-91FD-9BF06694704E}
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{B439EC72-38D5-4A9F-8488-6224FF199322}.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{B637BFF8-E1F4-4A9E-93BA-753E7639AA2B}.bin
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{B669E7B2-B462-4564-B794-00EC1401A30E}
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{B80CCE1A-256E-42A6-9034-ADF043635872}.bin
PNG image data, 59 x 61, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{B80E750F-85F2-4D53-BE4D-72E67319F19C}.bin
PNG image data, 164 x 89, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{B937F719-4C91-4247-A610-ACB92A4B9D4B}.bin
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{B970ECF8-4EBB-481D-9409-18F7B1AD967D}.bin
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{BA16F6D7-6812-4A10-9E4A-44C8782F74DD}.bin
PNG image data, 452 x 277, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{BA4CEA1F-9D86-4E2B-A645-360F40220678}.bin
PNG image data, 742 x 104, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{BAA66A29-3C40-4E38-BC2F-EA5165CBD016}
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1248x1624, components 3
dropped
C:\Users\user\AppData\Local\Temp\{BBBB401E-97A4-4D3F-B2D8-83BFBCBBA977}
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 728x77, components 3
dropped
C:\Users\user\AppData\Local\Temp\{BBC9E359-6C08-408A-B651-AE7911C868D7}
PNG image data, 40 x 650, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{BC8ACE5B-5066-4E09-876A-ACC2D1D37164}.bin
PNG image data, 220 x 170, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{BCF6C68A-A5F7-4EAF-B1C9-81BB78279758}
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 613x144, components 3
dropped
C:\Users\user\AppData\Local\Temp\{BDB6412E-DD2E-41EA-B059-F8957AB6818E}
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{BDF156E7-F8AD-4712-99A4-9F36141E7B37}
PNG image data, 185 x 76, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{BDFBA49E-8C8B-4653-B3CC-9D08B8A84EED}
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 814x105, components 3
dropped
C:\Users\user\AppData\Local\Temp\{BED74DF2-5D8E-4662-B99E-CC42D75BCEF3}
PNG image data, 127 x 138, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{BF990A65-665A-43FE-90D6-FD64085AF6EC}
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{C07B4FF5-E4AF-4C56-9395-8D0539739D5F}
PNG image data, 59 x 61, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{C124AD3C-9463-46FF-B18E-61CBEFDF06B2}.bin
PNG image data, 127 x 138, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{C1CD7103-E063-4264-A5AD-F624453541CD}
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2004:03:12 11:08:07], baseline, precision 8, 595x450, components 3
dropped
C:\Users\user\AppData\Local\Temp\{C4EE2ABE-5DA8-495C-AD3D-AB07E4791071}
data
dropped
C:\Users\user\AppData\Local\Temp\{C58067CF-5AE5-4264-A2E3-7B36C06CF432}
PNG image data, 452 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{C580B290-0DD5-4463-BFCE-E2184D613FE3}.bin
PNG image data, 230 x 68, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{C86C9CB3-A183-4373-86E2-01CBEA2C0641}
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 7.0, datetime=2004:03:04 13:18:09], progressive, precision 8, 164x641, components 3
dropped
C:\Users\user\AppData\Local\Temp\{C91072F9-27AF-42C0-A76C-0515173710B5}
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{CA9BF441-B223-4FA7-BE15-E4516D677C20}
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2004:03:12 11:09:29], progressive, precision 8, 609x675, components 3
dropped
C:\Users\user\AppData\Local\Temp\{CB035F62-477E-4921-B245-622B5A5E4856}
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{CC8ACB40-3F1C-40F3-82BB-AEE475250338}.bin
PNG image data, 651 x 254, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{CD4AA668-64FA-4C86-88F1-EA6A8D8249E5}.bin
PNG image data, 452 x 277, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{CD9D3FC4-A13E-4E8C-AC4D-3E7CACFFA2D3}
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2004:03:12 11:05:55], progressive, precision 8, 612x618, components 3
dropped
C:\Users\user\AppData\Local\Temp\{CDE17D1A-D09B-4EA2-94CC-49144ABF7010}.bin
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{CDE78E13-B996-4F45-A043-9CDACD55D2E8}
PNG image data, 163 x 131, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{CF8577A8-67C1-44B4-B47B-63AA1CC66729}.bin
PNG image data, 162 x 89, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{CF9562EA-9595-4E45-ADBA-4FB1EC96BC1E}
PNG image data, 50 x 556, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{CFD7B608-0F5F-46F2-99D5-6232F6EBB2A7}
PNG image data, 30 x 700, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{D19EE8B7-E754-43CD-9848-5F384FA16EF0}.bin
PNG image data, 167 x 131, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{D1C8E964-20C5-4222-BC69-EA0F6C8B3EE0}
PNG image data, 162 x 89, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{D3887EB0-33C6-442A-AA5B-1E8FF4F25C70}.bin
PNG image data, 340 x 79, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{D629E798-AD10-4CF1-9220-BCDEC0AC0FA8}.bin
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{D6D5BAF1-225A-4337-84C8-82544369B847}.bin
PNG image data, 742 x 104, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{D7D0CF62-236C-4B19-98AB-66A09BDF499C}
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{DA92EE50-C386-4E6C-A676-F1C405EDC2F5}
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 7.0, datetime=2004:03:04 13:06:24], progressive, precision 8, 38x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{DA9CEF39-CCBE-46D5-AE1D-42CCC93DF1E1}
PNG image data, 60 x 336, 4-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{DAD0BDD5-A8B1-48A3-B25F-518D00E41530}
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{DB80F4BF-E55A-4BE2-9019-1085B82FB696}
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{DBFE7029-4370-41DF-8FFA-0A9B487F56FE}
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 70x626, components 3
dropped
C:\Users\user\AppData\Local\Temp\{DD25EB00-2A4C-4DA8-9BD6-B1BA63AA4239}.bin
PNG image data, 563 x 211, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{DD398BD5-1138-459F-AD0C-96D91F303C74}
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{DE326023-40C0-4BCC-A157-23ADEAE9C302}
Windows Enhanced Metafile (EMF) image data version 0x10000
dropped
C:\Users\user\AppData\Local\Temp\{DFEBC249-50EB-49F7-96E6-0E15AF7429BB}
PNG image data, 185 x 76, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{E0A604A6-AB2E-4F03-B4C3-2D1C66CA017B}.bin
PNG image data, 127 x 138, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{E1810D19-9E0F-4C25-B632-C234EBD38B44}
PNG image data, 742 x 104, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{E2C1AF7E-FBD6-4582-93D2-C8894E734E4A}
PNG image data, 167 x 131, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{E47AB987-919B-490E-A358-F7D6FE27DC52}.bin
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{E47EFC73-6089-41D7-9F98-4C057E6982A3}
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 14x341, components 3
dropped
C:\Users\user\AppData\Local\Temp\{E4F0F48C-55B4-4902-825F-2DCABF6DA505}
PNG image data, 232 x 50, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{E5484C51-516E-4532-92F7-949B3B947EF6}
PNG image data, 189 x 305, 8-bit/color RGBA, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{E7097FF6-54B2-4C46-819E-996FB622C63A}
data
dropped
C:\Users\user\AppData\Local\Temp\{E730FF2E-6F0D-4110-AE2D-F59C0584DD74}.bin
PNG image data, 127 x 138, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{E8648D11-95CF-44E1-99B5-6DAC6F77211F}
PNG image data, 171 x 50, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{E8A03445-94C6-4EA1-99B0-3147419FACFC}.bin
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{E8A945B1-70A2-4106-9BB8-934A0CCCACD1}
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{E953B3FB-0B5A-4AB3-8794-EA1D4A05D2E0}.bin
PNG image data, 167 x 92, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{EA3C4BE3-3E35-4EA2-8AFA-8739DBE03B67}
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 7.0, datetime=2004:03:04 13:19:29], progressive, precision 8, 221x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{EB56BBB9-DC90-4B8B-8069-00EA11A1E861}
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{ECCDC94F-DB14-429B-8D11-13635EF8119A}
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{EDEA6070-8213-47C2-9E2F-13204EA3A76E}
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{EE97E291-8DB8-4514-9336-E5B2FF0960B8}
Windows Enhanced Metafile (EMF) image data version 0x10000
dropped
C:\Users\user\AppData\Local\Temp\{EF805874-98E5-4E8E-8DD8-E1C2B044B997}
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2004:03:12 11:05:55], progressive, precision 8, 612x618, components 3
dropped
C:\Users\user\AppData\Local\Temp\{F0064D30-4780-448B-A496-89367768C0B2}
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2004:03:12 11:10:32], progressive, precision 8, 594x773, components 3
dropped
C:\Users\user\AppData\Local\Temp\{F1674A20-3523-4FDB-87C1-095AAAD72719}
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2004:03:12 11:12:29], progressive, precision 8, 598x766, components 3
dropped
C:\Users\user\AppData\Local\Temp\{F1AD88CD-DEC6-463D-B1BE-9D50C96D2EB3}
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{F23AB30A-5E30-4152-B810-DF9C47CE8973}
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 17x608, components 3
dropped
C:\Users\user\AppData\Local\Temp\{F2D0A424-8631-4965-91AB-9B959A45F8C2}
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{F3389BA3-BFFB-4915-A36A-C38867FFD896}.bin
PNG image data, 171 x 50, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{F4978B6A-F788-4A8B-A1A7-24A7013D6661}.bin
PNG image data, 221 x 77, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{F5903642-0B22-41E2-A14F-CF58D0DA93B6}.bin
PNG image data, 123 x 103, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{F624B55A-1650-405B-A72D-3E0E526C9F33}.bin
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{F698A0E8-5AD4-4476-AB43-CD902D10DF96}.bin
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{F6FEB43A-0F3E-4816-836E-5699BC1301AC}.bin
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{F76D221A-E1E5-4361-90FF-9BE87B60C3F6}.bin
PNG image data, 221 x 77, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{F94F6A97-BBA5-41B8-8CDF-5243CF1315B8}
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{F9AF5CEF-C5D6-4A8D-A1F3-262BE8366D35}.bin
PNG image data, 171 x 50, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{F9F64A55-68CE-4E19-8130-A967A8D1A629}
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components 3
dropped
C:\Users\user\AppData\Local\Temp\{FBF54453-CA90-4BF4-A2D3-B7596538A521}.bin
PNG image data, 749 x 126, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{FF52E6D8-A87D-45B4-B471-10AF628AF715}.bin
PNG image data, 651 x 254, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\36a44befa49650d0.customDestinations-ms (copy)
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\IT6SPRAB9YJU3HR4PB0U.temp
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Send to OneNote.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Description string, Has Relative path, Has command line arguments, Archive, ctime=Tue Jun 30 15:57:16 2015, mtime=Fri Mar 17 15:12:00 2023, atime=Tue Jun 30 15:57:16 2015, length=157872, window=hide
dropped
C:\Users\user\Documents\OneNote Notebooks\My Notebook\Open Notebook.onetoc2
data
dropped
C:\Users\user\Documents\OneNote Notebooks\My Notebook\Quick Notes.one
data
dropped
There are 685 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files (x86)\Microsoft Office\Office16\ONENOTE.EXE
C:\Program Files (x86)\Microsoft Office\Office16\ONENOTE.EXE" "C:\Users\user\Desktop\Insight_Medical_Publishing_4.one
malicious
C:\Windows\SysWOW64\wscript.exe
C:\Windows\System32\WScript.exe "C:\Users\user\AppData\Local\Temp\click.wsf"
malicious
C:\Windows\SysWOW64\regsvr32.exe
C:\Windows\System32\regsvr32.exe" "C:\Users\user\AppData\Local\Temp\rad16F69.tmp.dll
malicious
C:\Windows\System32\regsvr32.exe
"C:\Users\user\AppData\Local\Temp\rad16F69.tmp.dll"
malicious
C:\Windows\System32\regsvr32.exe
C:\Windows\system32\regsvr32.exe "C:\Windows\system32\BqnZyHskpeTuo\PjkJxfQvhUP.dll"
malicious
C:\Program Files (x86)\Microsoft Office\Office16\ONENOTEM.EXE
/tsr
C:\Program Files (x86)\Microsoft Office\Office16\ONENOTEM.EXE
"C:\Program Files (x86)\Microsoft Office\Office16\ONENOTEM.EXE" /tsr

URLs

Name
IP
Malicious
http://wrappixels.com/wp-admin/GdIA2oOQEiO5G/i
unknown
malicious
http://wrappixels.com/wp-admin/GdIA2oOQEiO5G/s
unknown
malicious
https://www.gomespontes.com.br/logs/pd/windic2
unknown
malicious
https://portalevolucao.com/GerarBoleto/fLIOoFbFs1jHtX/w11798
unknown
malicious
https://66.228.32.31:7080/f
unknown
malicious
https://104.168.155.143:8080/wviitvvypaw/exnwmeb/fqgitydelxiavmv/
unknown
malicious
https://159.89.202.34/wviitvvypaw/exnwmeb/fqgitydelxiavmv/
unknown
malicious
https://penshorn.org/admin/Ses8712iGR8
unknown
malicious
https://159.65.88.10:8080/xJ
unknown
malicious
https://159.65.88.10:8080/wviitvvypaw/exnwmeb/fqgitydelxiavmv//
unknown
malicious
http://ozmeydan.com/cekici/9/jn7
unknown
malicious
https://104.168.155.143:8080/wviitvvypaw/exnwmeb/fqgitydelxiavmv/A4
unknown
malicious
https://penshorn.org/admin/Ses8712iGR8du/ocal
unknown
malicious
https://penshorn.org/admin/Ses8712iGR8du/tM
unknown
malicious
https://penshorn.org/admin/Ses8712iGR8du/
203.26.41.131
malicious
https://182.162.143.56/wviitvvypaw/exnwmeb/fqgitydelxiavmv/
182.162.143.56
malicious
https://penshorn.org/admin/Ses8712iGR8du/R
unknown
malicious
https://penshorn.org/admin/Ses8712iGR8du/o
unknown
malicious
http://softwareulike.com/cWIYxWMPkK/
unknown
https://182.162.143.56/
unknown
https://bbvoyage.com/useragreement/ElKHvb4QIQqSrh6Hqm/
unknown
https://penshorn.org/V
unknown
https://66.228.32.31:7080/
unknown
https://www.gomespontes.com.br/logs/pd/vM
unknown
http://wrappixels.com/wp-
unknown
https://91.121.146.47:8080/Y
unknown
http://wrappixels.com
unknown
https://169.65.88.10:8080/
unknown
https://159.65.88.10:8080/wviitvvypaw/exnwmeb/fqgitydelxiavmv/=
unknown
http://ozmeydan.com/cekici/9/
unknown
https://penshorn.org/
unknown
https://portalevolucao.com/GerarBoleto/fLIOoFbFs1jHtX/wM
unknown
https://www.gomespontes.com.br/logs/pd/
unknown
https://159.65.88.10:8080/
unknown
https://91.121.146.47:8080/wviitvvypaw/exnwmeb/fqgitydelxiavmv/
unknown
https://159.89.202.34/cH
unknown
http://wrappixels.com/wp-admin/GdIA2oOQEiO5G/0
unknown
https://bbvoyage.com/useragreement/ElKHvb4QIQqSrh6Hqm/uM
unknown
https://159.65.88.10:8080/wviitvvypaw/exnwmeb/fqgitydelxiavmv/%4
unknown
https://159.65.88.10:8080/wviitvvypaw/exnwmeb/fqgitydelxiavmv/
unknown
https://159.65.88.10:8080/hJ
unknown
http://wrappixels.com/wp-admin/GdIA2oOQEiO5G/
unknown
https://91.121.146.47:8080/wviitvvypaw/exnwmeb/fqgitydelxiavmv/=
unknown
https://100.16.142.56:8080/
unknown
http://softwareulike.com/cWIYxWMPkK/yM
unknown
http://wrappixels.com/wp-admin/GdIA2oOQEiO5G/j2
unknown
https://160.16.142.56:8080/wviitvvypaw/exnwmeb/fqgitydelxiavmv/
unknown
https://163.44.196.120:8080/wviitvvypaw/exnwmeb/fqgitydelxiavmv/H
unknown
http://ozmeydan.com/cekici/9/xM
unknown
https://163.44.196.120:8080/wviitvvypaw/exnwmeb/fqgitydelxiavmv/
unknown
http://ozmeydan.com/cekici
unknown
https://portalevolucao.com/GerarBoleto/fLIOoFbFs1jHtX/
unknown
http://wrappixels.com/wp-admin/GdIA2oOQEiO5G/zM
unknown
https://160.16.142.56:8080/
unknown
https://159.65.88.10:8080/wviitvvypaw/exnwmeb/fqgitydelxiavmv/Xa4
unknown
https://bbvoyage.com/useragreement/ElKHvb4QIQqSrh6Hqm/temobj
unknown
There are 46 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
penshorn.org
203.26.41.131
malicious

IPs

IP
Domain
Country
Malicious
110.232.117.186
unknown
Australia
malicious
103.132.242.26
unknown
India
malicious
104.168.155.143
unknown
United States
malicious
79.137.35.198
unknown
France
malicious
115.68.227.76
unknown
Korea Republic of
malicious
163.44.196.120
unknown
Singapore
malicious
206.189.28.199
unknown
United States
malicious
203.26.41.131
penshorn.org
Australia
malicious
107.170.39.149
unknown
United States
malicious
66.228.32.31
unknown
United States
malicious
197.242.150.244
unknown
South Africa
malicious
185.4.135.165
unknown
Greece
malicious
183.111.227.137
unknown
Korea Republic of
malicious
45.176.232.124
unknown
Colombia
malicious
169.57.156.166
unknown
United States
malicious
164.68.99.3
unknown
Germany
malicious
139.59.126.41
unknown
Singapore
malicious
167.172.253.162
unknown
United States
malicious
167.172.199.165
unknown
United States
malicious
202.129.205.3
unknown
Thailand
malicious
147.139.166.154
unknown
United States
malicious
153.92.5.27
unknown
Germany
malicious
159.65.88.10
unknown
United States
malicious
172.105.226.75
unknown
United States
malicious
164.90.222.65
unknown
United States
malicious
213.239.212.5
unknown
Germany
malicious
5.135.159.50
unknown
France
malicious
186.194.240.217
unknown
Brazil
malicious
119.59.103.152
unknown
Thailand
malicious
159.89.202.34
unknown
United States
malicious
91.121.146.47
unknown
France
malicious
160.16.142.56
unknown
Japan
malicious
201.94.166.162
unknown
Brazil
malicious
91.207.28.33
unknown
Kyrgyzstan
malicious
103.75.201.2
unknown
Thailand
malicious
103.43.75.120
unknown
Japan
malicious
188.44.20.25
unknown
Macedonia
malicious
45.235.8.30
unknown
Brazil
malicious
153.126.146.25
unknown
Japan
malicious
72.15.201.15
unknown
United States
malicious
187.63.160.88
unknown
Brazil
malicious
82.223.21.224
unknown
Spain
malicious
173.212.193.249
unknown
Germany
malicious
95.217.221.146
unknown
Germany
malicious
149.56.131.28
unknown
Canada
malicious
182.162.143.56
unknown
Korea Republic of
malicious
1.234.2.232
unknown
Korea Republic of
malicious
129.232.188.93
unknown
South Africa
malicious
94.23.45.86
unknown
France
malicious
There are 39 hidden IPs, click here to show them.

Registry

Path
Value
Malicious
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\Resiliency\StartupItems
835
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\Resiliency\StartupItems
935
HKEY_CURRENT_USER\Software\Microsoft\Office\Word\Addins\OneNote.WordAddinTakeNotesButton
FriendlyName
HKEY_CURRENT_USER\Software\Microsoft\Office\Word\Addins\OneNote.WordAddinTakeNotesButton
Description
HKEY_CURRENT_USER\Software\Microsoft\Office\Word\Addins\OneNote.WordAddinTakeNotesButton
LoadBehavior
HKEY_CURRENT_USER\Software\Microsoft\Office\Word\Addins\OneNote.WordAddinTakeNotesButton
CommandLineSafe
HKEY_CURRENT_USER\Software\Microsoft\Office\PowerPoint\Addins\OneNote.PowerPointAddinTakeNotesButton
FriendlyName
HKEY_CURRENT_USER\Software\Microsoft\Office\PowerPoint\Addins\OneNote.PowerPointAddinTakeNotesButton
Description
HKEY_CURRENT_USER\Software\Microsoft\Office\PowerPoint\Addins\OneNote.PowerPointAddinTakeNotesButton
LoadBehavior
HKEY_CURRENT_USER\Software\Microsoft\Office\PowerPoint\Addins\OneNote.PowerPointAddinTakeNotesButton
CommandLineSafe
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\General
LastMyDocumentsPathUsed
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\General
ProgressWindowPosLeft
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\General
ProgressWindowPosTop
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\General
ConsecutiveBootCrashes
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\General
ConsecutiveEarlyCrashes
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\Options\Save
BackupFilenamePostfixStartSP1
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\Options\Save
BackupFilenamePostfixEndSP1
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\Options\Save
BackupFilenamePostfixEndRerepairSP1
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote
FirstBootStatus
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\Options
WatsonLoggingUserId
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache
RemoteClearDate
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3
Last
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
FilePath
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
StartDate
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
EndDate
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
Properties
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
Url
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache
LastClean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
DisableWinHttpCertAuth
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
DisableIsOwnerRegex
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
DisableSessionAwareHttpClose
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
DisableADALForExtendedApps
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
DisableADALSetSilentAuth
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
msoridDisableGuestCredProvider
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
msoridDisableOstringReplace
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\OpenNotebooks
1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\000061091A0090400000000000F01FEC\Usage
OneNoteNonBootFilesIntl_1033
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\OpenNotebooks
1
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\OpenNotebooks
2
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\General
LastCacheFclRepairSuccessTime
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\General
LastAppliedNotebookColor
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\OpenNotebooks
1
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\Resiliency
RepairQuickNotesOnBoot
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\General
LastNotebookHierarchySQMUpdate
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\FavoritePens
Data
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\Place MRU\Change
ChangeId
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\RecentNotebooks\Change
ChangeId
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\General
OneNoteProtocolShouldPrompt
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\Options\Paths
UnfiledNotesSection
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\Options\ClientTelemetry
LastDataCollectionTimeAfterBoot
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109110000000000000000F01FEC\Usage
OneNoteFiles
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109110000000000000000F01FEC\Usage
ProductFiles
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
en-US
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
en-US
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{F2A7EE29-8BF6-4a6d-83F1-098E366C709C}\1.0
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{F2A7EE29-8BF6-4a6d-83F1-098E366C709C}\1.0\0\win32
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{0EA692EE-BB50-4E3C-AEF0-356D91732725}\1.1
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{0EA692EE-BB50-4E3C-AEF0-356D91732725}\1.1\0\win32
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{1D12BD3F-89B6-4077-AA2C-C9DC2BCA42F9}\TypeLib
Version
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1D12BD3F-89B6-4077-AA2C-C9DC2BCA42F9}\TypeLib
Version
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{627EA7B4-95B5-4980-84C1-9D20DA4460B1}\TypeLib
Version
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{627EA7B4-95B5-4980-84C1-9D20DA4460B1}\TypeLib
Version
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{452AC71A-B655-4967-A208-A4CC39DD7949}\TypeLib
Version
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{452AC71A-B655-4967-A208-A4CC39DD7949}\TypeLib
Version
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{6D4B9C3E-CC05-493F-85E2-43D1006DF96A}\TypeLib
Version
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6D4B9C3E-CC05-493F-85E2-43D1006DF96A}\TypeLib
Version
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{8E8304B8-CBD1-44F8-B0E8-89C625B2002E}\TypeLib
Version
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{8E8304B8-CBD1-44F8-B0E8-89C625B2002E}\TypeLib
Version
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{E2E1511D-502D-4BD0-8B3A-8A89A05CDCAE}\ProxyStubClsid32
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{E2E1511D-502D-4BD0-8B3A-8A89A05CDCAE}\TypeLib
Version
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E2E1511D-502D-4BD0-8B3A-8A89A05CDCAE}\ProxyStubClsid32
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E2E1511D-502D-4BD0-8B3A-8A89A05CDCAE}\TypeLib
Version
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote
FirstBootStatus
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\General
LastAppliedNotebookColor
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote
FirstBootStatus
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109110000000000000000F01FEC\Usage
ProductFiles
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Roaming
RoamingConfigurableSettings
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Roaming
RoamingLastSyncTime
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Roaming
RoamingLastWriteTime
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote
FirstBootStatus
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog
CacheReady
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog
LastRequest
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog
CacheReady
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog
LastUpdate
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog
NextUpdate
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\General
LastAppliedNotebookColor
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\000061091A0090400000000000F01FEC\Usage
OneNoteNonBootFilesIntl_1033
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\General
LastAppliedNotebookColor
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\000061091A0090400000000000F01FEC\Usage
OneNoteFilesIntl_1033
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109110000000000000000F01FEC\Usage
OneNoteFiles
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\000061091A0090400000000000F01FEC\Usage
OneNoteFilesIntl_1033
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109110000000000000000F01FEC\Usage
OneNoteFiles
There are 82 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
1041000
direct allocation
page execute read
malicious
107B000
heap
page read and write
malicious
590000
direct allocation
page execute and read and write
malicious
1010000
direct allocation
page execute and read and write
malicious
5C1000
direct allocation
page execute read
malicious
1AC36E02000
trusted library allocation
page read and write
571B000
heap
page read and write
50FB000
heap
page read and write
605000
heap
page read and write
5874000
heap
page read and write
30F7000
heap
page read and write
1AC3523D000
heap
page read and write
1114000
heap
page read and write
3109000
heap
page read and write
1DDF405A000
heap
page read and write
325F000
stack
page read and write
5BDA4FB000
stack
page read and write
1840B629000
heap
page read and write
5119000
heap
page read and write
300B000
heap
page read and write
2802CFF000
stack
page read and write
55C3000
heap
page read and write
58CF000
heap
page read and write
546C000
heap
page read and write
1576507A000
heap
page read and write
CFA000
stack
page read and write
58C7000
heap
page read and write
50F3000
heap
page read and write
54D0000
heap
page read and write
1109000
heap
page read and write
5957000
heap
page read and write
10CC000
heap
page read and write
628000
heap
page read and write
557B000
heap
page read and write
5942000
heap
page read and write
1300000
heap
page readonly
5483000
heap
page read and write
1AC36C70000
trusted library allocation
page read and write
44E1BFE000
stack
page read and write
28029FB000
stack
page read and write
5479000
heap
page read and write
130101D0000
heap
page read and write
18721069000
heap
page read and write
1576504E000
heap
page read and write
5099000
heap
page read and write
1114000
heap
page read and write
59B2000
heap
page read and write
1109000
heap
page read and write
3060000
heap
page read and write
5646000
heap
page read and write
106B000
direct allocation
page read and write
512A000
heap
page read and write
5747000
heap
page read and write
310E000
heap
page read and write
191EFE000
stack
page read and write
5582000
heap
page read and write
746007F000
stack
page read and write
54AF000
heap
page read and write
510B000
heap
page read and write
746027F000
stack
page read and write
1AC351E0000
remote allocation
page read and write
1DDF3DA0000
heap
page read and write
1576507E000
heap
page read and write
A2A817E000
stack
page read and write
1320000
trusted library allocation
page read and write
5102000
heap
page read and write
3004000
heap
page read and write
745FC7C000
stack
page read and write
180023000
unkown
page readonly
5567000
heap
page read and write
15765079000
heap
page read and write
511A000
heap
page read and write
5862000
heap
page read and write
5535000
heap
page read and write
510F000
heap
page read and write
13010A70000
trusted library allocation
page read and write
50FA000
heap
page read and write
316A000
heap
page read and write
561C000
heap
page read and write
54FA000
heap
page read and write
30BB000
heap
page read and write
316A000
heap
page read and write
560E000
heap
page read and write
1AC35302000
heap
page read and write
13010170000
heap
page read and write
591E000
heap
page read and write
590C000
heap
page read and write
3098000
heap
page read and write
5899000
heap
page read and write
50EF000
heap
page read and write
53E2000
heap
page read and write
10ED000
heap
page read and write
5EB000
direct allocation
page read and write
1840B624000
heap
page read and write
1AC36CB0000
trusted library allocation
page read and write
6EA1DFC000
stack
page read and write
13010DC8000
heap
page read and write
1AC35289000
heap
page read and write
180016000
unkown
page readonly
57D4000
heap
page read and write
5DAE000
stack
page read and write
1DDF3DB0000
heap
page read and write
15765063000
heap
page read and write
6F7A1000
unkown
page execute read
5BDA7FD000
stack
page read and write
1AC35313000
heap
page read and write
10B7000
heap
page read and write
280249B000
stack
page read and write
54CC000
heap
page read and write
18720EA0000
heap
page read and write
1310000
trusted library allocation
page read and write
512A000
heap
page read and write
10C3000
heap
page read and write
5112000
heap
page read and write
6EA20FE000
stack
page read and write
58C5000
heap
page read and write
1840B580000
heap
page read and write
13010313000
heap
page read and write
5685000
heap
page read and write
3110000
heap
page read and write
57BC000
heap
page read and write
2731B400000
heap
page read and write
746017F000
stack
page read and write
10F3000
heap
page read and write
2731B360000
trusted library allocation
page read and write
191A7F000
stack
page read and write
3093000
heap
page read and write
5608000
heap
page read and write
54D1000
heap
page read and write
47B000
stack
page read and write
1918FA000
stack
page read and write
570D000
heap
page read and write
10C5000
heap
page read and write
1D248C13000
heap
page read and write
309E000
heap
page read and write
5479000
heap
page read and write
3008000
heap
page read and write
10F3000
heap
page read and write
5A08000
heap
page read and write
1576505E000
heap
page read and write
13010160000
heap
page read and write
5AA1000
heap
page read and write
5C0000
direct allocation
page read and write
5548000
heap
page read and write
569A000
heap
page read and write
10F3000
heap
page read and write
13010D22000
heap
page read and write
1D248A80000
heap
page read and write
307D000
heap
page read and write
5A08000
heap
page read and write
30EA000
heap
page read and write
316F000
heap
page read and write
565A000
heap
page read and write
A2A76CB000
stack
page read and write
5739000
heap
page read and write
191F7E000
stack
page read and write
55C3000
heap
page read and write
10DA000
heap
page read and write
15765036000
heap
page read and write
3101000
heap
page read and write
13010DB0000
heap
page read and write
57ED000
heap
page read and write
1DDF4100000
heap
page read and write
58A4000
heap
page read and write
191BF9000
stack
page read and write
6A3000
heap
page read and write
3101000
heap
page read and write
5824000
heap
page read and write
5421000
heap
page read and write
5824000
heap
page read and write
54D6000
heap
page read and write
5539000
heap
page read and write
1DDF4000000
heap
page read and write
25EB000
stack
page read and write
57F4000
heap
page read and write
15765039000
heap
page read and write
3119000
heap
page read and write
30C6000
heap
page read and write
5A96000
heap
page read and write
2CA0000
heap
page read and write
3008000
heap
page read and write
5451000
heap
page read and write
583D000
heap
page read and write
15765A02000
trusted library allocation
page read and write
300D000
heap
page read and write
50FA000
heap
page read and write
15765051000
heap
page read and write
56E0000
heap
page read and write
30BE000
heap
page read and write
350E000
heap
page read and write
10C4000
heap
page read and write
50B9000
heap
page read and write
56AF000
heap
page read and write
53DC000
heap
page read and write
56D8000
heap
page read and write
5407000
heap
page read and write
1161000
heap
page read and write
542F000
heap
page read and write
5A96000
heap
page read and write
315C000
heap
page read and write
15765047000
heap
page read and write
5115000
heap
page read and write
10DA000
heap
page read and write
3327000
heap
page read and write
5652000
heap
page read and write
545D000
heap
page read and write
56ED000
heap
page read and write
6EA207D000
stack
page read and write
5947000
heap
page read and write
315E000
heap
page read and write
D50917B000
stack
page read and write
55B0000
heap
page read and write
44E18FE000
stack
page read and write
1301025C000
heap
page read and write
191CFF000
stack
page read and write
561C000
heap
page read and write
44E1CFE000
stack
page read and write
315E000
heap
page read and write
5429000
heap
page read and write
5567000
heap
page read and write
57B3000
heap
page read and write
57CC000
heap
page read and write
2731B413000
heap
page read and write
1FBE000
stack
page read and write
1AC351E0000
remote allocation
page read and write
1840B5E0000
heap
page read and write
300E000
heap
page read and write
10F3000
heap
page read and write
20D8000
stack
page read and write
5EA000
direct allocation
page readonly
1D248D02000
heap
page read and write
315A000
heap
page read and write
2F90000
heap
page read and write
30E4000
heap
page read and write
18720E40000
heap
page read and write
583B000
heap
page read and write
512A000
heap
page read and write
180021000
unkown
page read and write
A2A807C000
stack
page read and write
115C000
heap
page read and write
5440000
heap
page read and write
509D000
heap
page read and write
54C3000
heap
page read and write
1AC350F0000
heap
page read and write
620000
heap
page read and write
528F000
stack
page read and write
1840B63D000
heap
page read and write
A2A7C7F000
stack
page read and write
50D3000
heap
page read and write
130103BA000
heap
page read and write
3136000
heap
page read and write
15765030000
heap
page read and write
579C000
heap
page read and write
587C000
heap
page read and write
1AC351E0000
remote allocation
page read and write
10C5000
heap
page read and write
15765074000
heap
page read and write
13010293000
heap
page read and write
15765045000
heap
page read and write
3121000
heap
page read and write
10DA000
heap
page read and write
1310000
trusted library allocation
page read and write
3328000
heap
page read and write
2F95000
heap
page read and write
15765040000
heap
page read and write
545C000
heap
page read and write
54C9000
heap
page read and write
5766000
heap
page read and write
54E2000
heap
page read and write
55FE000
heap
page read and write
5F0000
heap
page readonly
678000
heap
page read and write
13010E13000
heap
page read and write
2731B44B000
heap
page read and write
10C5000
heap
page read and write
58D1000
heap
page read and write
5723000
heap
page read and write
5941000
heap
page read and write
5C6D000
stack
page read and write
1AC35160000
heap
page read and write
1D249402000
heap
page read and write
1D248A90000
heap
page read and write
13010213000
heap
page read and write
57CC000
heap
page read and write
18721802000
trusted library allocation
page read and write
1AC35247000
heap
page read and write
5606000
heap
page read and write
1DDF4028000
heap
page read and write
1FD0000
heap
page read and write
13010D92000
heap
page read and write
15765031000
heap
page read and write
311A000
heap
page read and write
55F3000
heap
page read and write
57A5000
heap
page read and write
13010D6F000
heap
page read and write
56C7000
heap
page read and write
15764F00000
heap
page read and write
551A000
heap
page read and write
5947000
heap
page read and write
15765046000
heap
page read and write
1DDF4002000
heap
page read and write
1840C002000
trusted library allocation
page read and write
15765077000
heap
page read and write
58D8000
heap
page read and write
316F000
heap
page read and write
50FC000
heap
page read and write
5666000
heap
page read and write
15765042000
heap
page read and write
3106000
heap
page read and write
511F000
heap
page read and write
577E000
heap
page read and write
5D6D000
stack
page read and write
15765029000
heap
page read and write
1D248C29000
heap
page read and write
50FE000
heap
page read and write
1840B702000
heap
page read and write
1109000
heap
page read and write
115B000
heap
page read and write
13010E00000
heap
page read and write
1D248D13000
heap
page read and write
584E000
heap
page read and write
350F000
heap
page read and write
50FD000
heap
page read and write
5124000
heap
page read and write
5824000
heap
page read and write
5091000
heap
page read and write
58A1000
heap
page read and write
1AC35248000
heap
page read and write
334F000
heap
page read and write
58F2000
heap
page read and write
2EFE000
stack
page read and write
300D000
heap
page read and write
1301023D000
heap
page read and write
10CC000
heap
page read and write
30BF000
heap
page read and write
3179000
heap
page read and write
10CC000
heap
page read and write
5955000
heap
page read and write
15764F90000
trusted library allocation
page read and write
5685000
heap
page read and write
54B5000
heap
page read and write
50FC000
heap
page read and write
308D000
heap
page read and write
15764EF0000
heap
page read and write
515E000
heap
page read and write
581D000
heap
page read and write
5897000
heap
page read and write
512A000
heap
page read and write
57E5000
heap
page read and write
3120000
heap
page read and write
2F7D000
stack
page read and write
5111000
heap
page read and write
20E0000
trusted library allocation
page read and write
54E8000
heap
page read and write
2F3E000
stack
page read and write
5491000
heap
page read and write
5864000
heap
page read and write
5590000
heap
page read and write
2802BFF000
stack
page read and write
13010C02000
heap
page read and write
2BBB000
stack
page read and write
56FB000
heap
page read and write
1AC3522A000
heap
page read and write
512A000
heap
page read and write
50FB000
heap
page read and write
15765102000
heap
page read and write
1AC35258000
heap
page read and write
3371000
heap
page read and write
30D0000
heap
page read and write
5685000
heap
page read and write
5115000
heap
page read and write
545C000
heap
page read and write
5466000
heap
page read and write
1AC351B0000
trusted library allocation
page read and write
5955000
heap
page read and write
10ED000
heap
page read and write
512A000
heap
page read and write
115C000
heap
page read and write
1DDF4102000
heap
page read and write
5BD9E7C000
stack
page read and write
13010276000
heap
page read and write
1340000
remote allocation
page read and write
549E000
heap
page read and write
180000000
unkown
page readonly
1AC35258000
heap
page read and write
313D000
heap
page read and write
3141000
heap
page read and write
312E000
heap
page read and write
2731B200000
heap
page read and write
57C2000
heap
page read and write
5705000
heap
page read and write
E9B000
stack
page read and write
316F000
heap
page read and write
10F3000
heap
page read and write
180001000
unkown
page execute read
1E0000
heap
page read and write
339B000
heap
page read and write
57E5000
heap
page read and write
745FF7E000
stack
page read and write
9E0000
heap
page read and write
15765049000
heap
page read and write
30DA000
heap
page read and write
6F7B6000
unkown
page readonly
18721013000
heap
page read and write
2731B260000
heap
page read and write
5462000
heap
page read and write
5676000
heap
page read and write
5113000
heap
page read and write
6F7A0000
unkown
page readonly
180001000
unkown
page execute read
1340000
remote allocation
page read and write
5BDA07C000
stack
page read and write
2731B43D000
heap
page read and write
13010E23000
heap
page read and write
53D1000
heap
page read and write
2731B432000
heap
page read and write
63DE000
stack
page read and write
309F000
heap
page read and write
5858000
heap
page read and write
53F2000
heap
page read and write
5646000
heap
page read and write
56AF000
heap
page read and write
44E1DFF000
stack
page read and write
547F000
heap
page read and write
56D8000
heap
page read and write
18721113000
heap
page read and write
5652000
heap
page read and write
2731B41D000
heap
page read and write
5111000
heap
page read and write
3131000
heap
page read and write
581D000
heap
page read and write
1F3E000
stack
page read and write
10ED000
heap
page read and write
3000000
heap
page read and write
5637000
heap
page read and write
5FAE000
stack
page read and write
2D4B000
stack
page read and write
54F4000
heap
page read and write
1AC35257000
heap
page read and write
1109000
heap
page read and write
5103000
heap
page read and write
541E000
heap
page read and write
15765013000
heap
page read and write
543A000
heap
page read and write
30EA000
heap
page read and write
1576507B000
heap
page read and write
1D248AF0000
heap
page read and write
1AC35262000
heap
page read and write
10C3000
heap
page read and write
1840B600000
heap
page read and write
50FD000
heap
page read and write
59AB000
heap
page read and write
56B7000
heap
page read and write
10DA000
heap
page read and write
5508000
heap
page read and write
5646000
heap
page read and write
3094000
heap
page read and write
5102000
heap
page read and write
54C3000
heap
page read and write
56A2000
heap
page read and write
1AC35100000
heap
page read and write
3006000
heap
page read and write
1D248C00000
heap
page read and write
510D000
heap
page read and write
5BDA1FE000
stack
page read and write
587E000
heap
page read and write
15765060000
heap
page read and write
5705000
heap
page read and write
5947000
heap
page read and write
6F7BF000
unkown
page readonly
18721102000
heap
page read and write
2731B502000
heap
page read and write
32FF000
stack
page read and write
1109000
heap
page read and write
5404000
heap
page read and write
510E000
heap
page read and write
585B000
heap
page read and write
6F7BD000
unkown
page read and write
3157000
heap
page read and write
BD0000
heap
page read and write
512A000
heap
page read and write
551A000
heap
page read and write
577E000
heap
page read and write
5AA1000
heap
page read and write
1D248CC0000
heap
page read and write
13010287000
heap
page read and write
44E197E000
stack
page read and write
5731000
heap
page read and write
316F000
heap
page read and write
24EC000
stack
page read and write
5568000
heap
page read and write
509D000
heap
page read and write
A2A7E7F000
stack
page read and write
3192000
heap
page read and write
5914000
heap
page read and write
5116000
heap
page read and write
1840BE80000
trusted library allocation
page read and write
13010E02000
heap
page read and write
30C6000
heap
page read and write
6EA1F7F000
stack
page read and write
315E000
heap
page read and write
13010244000
heap
page read and write
3500000
heap
page read and write
55A5000
heap
page read and write
1DDF4802000
trusted library allocation
page read and write
2802AFE000
stack
page read and write
50EF000
heap
page read and write
8D0000
heap
page read and write
547A000
heap
page read and write
10BB000
heap
page read and write
5596000
heap
page read and write
5A4B000
heap
page read and write
588D000
heap
page read and write
3181000
heap
page read and write
5590000
heap
page read and write
3119000
heap
page read and write
55C3000
heap
page read and write
10ED000
heap
page read and write
548B000
heap
page read and write
557B000
heap
page read and write
1AC35248000
heap
page read and write
50D3000
heap
page read and write
595B000
heap
page read and write
5731000
heap
page read and write
600000
heap
page read and write
3008000
heap
page read and write
30D4000
heap
page read and write
30DE000
heap
page read and write
A2A7D7E000
stack
page read and write
5826000
heap
page read and write
323A000
heap
page read and write
561D000
heap
page read and write
5943000
heap
page read and write
1AC35200000
heap
page read and write
5931000
heap
page read and write
1DDF4077000
heap
page read and write
54C3000
heap
page read and write
5ED0000
remote allocation
page read and write
130103E6000
heap
page read and write
5750000
heap
page read and write
54A4000
heap
page read and write
1070000
heap
page read and write
58A2000
heap
page read and write
3006000
heap
page read and write
5ED0000
remote allocation
page read and write
580000
direct allocation
page execute and read and write
584E000
heap
page read and write
10ED000
heap
page read and write
3068000
heap
page read and write
191FFF000
stack
page read and write
5095000
heap
page read and write
1D248C6D000
heap
page read and write
316A000
heap
page read and write
5928000
heap
page read and write
3100000
heap
page read and write
5100000
heap
page read and write
1D248CC9000
heap
page read and write
1040000
direct allocation
page read and write
1301022F000
heap
page read and write
56BD000
heap
page read and write
50EF000
heap
page read and write
580D000
heap
page read and write
5541000
heap
page read and write
5630000
heap
page read and write
587C000
heap
page read and write
4B3E000
stack
page read and write
13010270000
heap
page read and write
5106000
heap
page read and write
1DDF3F10000
trusted library allocation
page read and write
5955000
heap
page read and write
1914AC000
stack
page read and write
13010279000
heap
page read and write
5A21000
heap
page read and write
13010292000
heap
page read and write
5106000
heap
page read and write
745F59C000
stack
page read and write
5804000
heap
page read and write
180021000
unkown
page read and write
58BD000
heap
page read and write
D5096FA000
stack
page read and write
30BB000
heap
page read and write
3109000
heap
page read and write
2F7E000
stack
page read and write
1D249500000
heap
page read and write
5612000
heap
page read and write
58F4000
heap
page read and write
1340000
remote allocation
page read and write
15765062000
heap
page read and write
30A8000
heap
page read and write
13010D02000
heap
page read and write
58E9000
heap
page read and write
2731B42E000
heap
page read and write
316A000
heap
page read and write
5112000
heap
page read and write
5418000
heap
page read and write
5606000
heap
page read and write
309E000
heap
page read and write
64DC000
stack
page read and write
58CF000
heap
page read and write
5554000
heap
page read and write
577E000
heap
page read and write
512A000
heap
page read and write
2731B453000
heap
page read and write
1840B613000
heap
page read and write
30E8000
heap
page read and write
18720E30000
heap
page read and write
746037F000
stack
page read and write
5955000
heap
page read and write
1840BEB0000
remote allocation
page read and write
5110000
heap
page read and write
50FF000
heap
page read and write
55A5000
heap
page read and write
5EAF000
stack
page read and write
6EA237E000
stack
page read and write
30C6000
heap
page read and write
10C6000
heap
page read and write
552F000
heap
page read and write
1365000
heap
page read and write
A2A7AFC000
stack
page read and write
56C4000
heap
page read and write
2A30000
heap
page read and write
44E1AFE000
stack
page read and write
FB0000
heap
page read and write
3004000
heap
page read and write
561C000
heap
page read and write
5623000
heap
page read and write
3102000
heap
page read and write
2731B446000
heap
page read and write
3089000
heap
page read and write
574F000
heap
page read and write
584E000
heap
page read and write
3101000
heap
page read and write
745FE7D000
stack
page read and write
555B000
heap
page read and write
1DDF3E10000
heap
page read and write
5766000
heap
page read and write
2731B427000
heap
page read and write
15765000000
heap
page read and write
5BDA37C000
stack
page read and write
1360000
heap
page read and write
13010200000
heap
page read and write
5646000
heap
page read and write
5124000
heap
page read and write
5A9C000
heap
page read and write
552F000
heap
page read and write
311E000
heap
page read and write
30F3000
heap
page read and write
58AD000
heap
page read and write
5BDA2FF000
stack
page read and write
58CF000
heap
page read and write
6EA21FD000
stack
page read and write
1114000
heap
page read and write
300E000
heap
page read and write
5BDA8FE000
stack
page read and write
56C5000
heap
page read and write
1576504F000
heap
page read and write
30AA000
heap
page read and write
5124000
heap
page read and write
60AE000
stack
page read and write
54CC000
heap
page read and write
3251000
heap
page read and write
3101000
heap
page read and write
5705000
heap
page read and write
315C000
heap
page read and write
1AC35318000
heap
page read and write
591F000
heap
page read and write
1AC35190000
trusted library allocation
page read and write
1AC35300000
heap
page read and write
1D248BF0000
trusted library allocation
page read and write
59FE000
heap
page read and write
5415000
heap
page read and write
581D000
heap
page read and write
18721002000
heap
page read and write
564D000
heap
page read and write
5A08000
heap
page read and write
5554000
heap
page read and write
5B2E000
stack
page read and write
3172000
heap
page read and write
15765083000
heap
page read and write
5569000
heap
page read and write
106A000
direct allocation
page readonly
1DDF4113000
heap
page read and write
5117000
heap
page read and write
5479000
heap
page read and write
18720FA0000
trusted library allocation
page read and write
180016000
unkown
page readonly
1DDF4064000
heap
page read and write
549E000
heap
page read and write
569B000
heap
page read and write
106C000
direct allocation
page readonly
56C4000
heap
page read and write
556F000
heap
page read and write
550E000
heap
page read and write
191B7C000
stack
page read and write
3131000
heap
page read and write
31BA000
heap
page read and write
5A9C000
heap
page read and write
56CB000
heap
page read and write
5C2D000
stack
page read and write
586C000
heap
page read and write
10BB000
heap
page read and write
1840B65C000
heap
page read and write
4B80000
heap
page read and write
58AB000
heap
page read and write
93C000
stack
page read and write
44E187B000
stack
page read and write
1576506C000
heap
page read and write
53FF000
heap
page read and write
3165000
heap
page read and write
256F000
stack
page read and write
59AE000
heap
page read and write
2B3E000
stack
page read and write
180000000
unkown
page readonly
13010E31000
heap
page read and write
115C000
heap
page read and write
1DDF4079000
heap
page read and write
3121000
heap
page read and write
612E000
stack
page read and write
56A7000
heap
page read and write
13010269000
heap
page read and write
574F000
heap
page read and write
53CF000
stack
page read and write
576E000
heap
page read and write
57B3000
heap
page read and write
745F9FB000
stack
page read and write
57E5000
heap
page read and write
13010DBE000
heap
page read and write
18721076000
heap
page read and write
2731B402000
heap
page read and write
2DB0000
heap
page read and write
5794000
heap
page read and write
1C0000
heap
page read and write
540F000
heap
page read and write
5124000
heap
page read and write
5BDA6FE000
stack
page read and write
5932000
heap
page read and write
5103000
heap
page read and write
512A000
heap
page read and write
3122000
heap
page read and write
5107000
heap
page read and write
5685000
heap
page read and write
610000
trusted library allocation
page read and write
622F000
stack
page read and write
58B4000
heap
page read and write
10BB000
heap
page read and write
A2A7F7C000
stack
page read and write
15764F60000
heap
page read and write
56CA000
heap
page read and write
55AB000
heap
page read and write
3301000
heap
page read and write
13010D43000
heap
page read and write
50FA000
heap
page read and write
5941000
heap
page read and write
D5098FF000
stack
page read and write
1576505E000
heap
page read and write
50F2000
heap
page read and write
3300000
heap
page read and write
6EA191B000
stack
page read and write
115C000
heap
page read and write
150000
heap
page read and write
307C000
stack
page read and write
180023000
unkown
page readonly
5567000
heap
page read and write
5103000
heap
page read and write
316F000
heap
page read and write
15765055000
heap
page read and write
339B000
heap
page read and write
10C6000
heap
page read and write
3230000
heap
page read and write
52CE000
stack
page read and write
5786000
heap
page read and write
5BDA5FC000
stack
page read and write
5928000
heap
page read and write
685000
heap
page read and write
1872103D000
heap
page read and write
1D248C43000
heap
page read and write
F90000
heap
page read and write
15765075000
heap
page read and write
1000000
direct allocation
page execute and read and write
5508000
heap
page read and write
5851000
heap
page read and write
544B000
heap
page read and write
316A000
heap
page read and write
115B000
heap
page read and write
53ED000
heap
page read and write
5098000
heap
page read and write
5661000
heap
page read and write
31F0000
heap
page read and write
D5097FE000
stack
page read and write
10CC000
heap
page read and write
5ED0000
remote allocation
page read and write
D50957E000
stack
page read and write
5947000
heap
page read and write
5713000
heap
page read and write
569A000
heap
page read and write
3099000
heap
page read and write
3119000
heap
page read and write
566E000
heap
page read and write
6EA1E7E000
stack
page read and write
511B000
heap
page read and write
13010229000
heap
page read and write
3101000
heap
page read and write
56C8000
heap
page read and write
5758000
heap
page read and write
3040000
heap
page read and write
50FA000
heap
page read and write
2731B210000
heap
page read and write
1AC35202000
heap
page read and write
13010E31000
heap
page read and write
191DFA000
stack
page read and write
56F5000
heap
page read and write
5120000
heap
page read and write
300E000
heap
page read and write
30C8000
heap
page read and write
1872105A000
heap
page read and write
1840BEB0000
remote allocation
page read and write
5928000
heap
page read and write
3151000
heap
page read and write
2731BC02000
trusted library allocation
page read and write
5AAD000
heap
page read and write
3146000
heap
page read and write
53D0000
heap
page read and write
56D1000
heap
page read and write
2D0C000
stack
page read and write
5BDA47C000
stack
page read and write
586C000
heap
page read and write
54EC000
heap
page read and write
56C4000
heap
page read and write
1D249532000
heap
page read and write
58DA000
heap
page read and write
557B000
heap
page read and write
5834000
heap
page read and write
510C000
heap
page read and write
1872102A000
heap
page read and write
3131000
heap
page read and write
510B000
heap
page read and write
5112000
heap
page read and write
55CB000
heap
page read and write
5834000
heap
page read and write
9DD000
stack
page read and write
55DF000
heap
page read and write
13010E28000
heap
page read and write
5521000
heap
page read and write
A2A827F000
stack
page read and write
509D000
heap
page read and write
30FE000
stack
page read and write
1DDF4013000
heap
page read and write
2FFC000
stack
page read and write
50EF000
heap
page read and write
578D000
heap
page read and write
577E000
heap
page read and write
55E6000
heap
page read and write
1840BEB0000
remote allocation
page read and write
1301038F000
heap
page read and write
205E000
stack
page read and write
512A000
heap
page read and write
56D0000
heap
page read and write
50F7000
heap
page read and write
1D248CB8000
heap
page read and write
55B7000
heap
page read and write
58CF000
heap
page read and write
5941000
heap
page read and write
50FF000
heap
page read and write
307C000
heap
page read and write
13010A90000
trusted library allocation
page read and write
13010D00000
heap
page read and write
30A8000
heap
page read and write
3176000
heap
page read and write
551C000
heap
page read and write
584E000
heap
page read and write
4B40000
heap
page read and write
586D000
heap
page read and write
15765068000
heap
page read and write
1AC35213000
heap
page read and write
18721026000
heap
page read and write
18721000000
heap
page read and write
13010D22000
heap
page read and write
13010268000
heap
page read and write
15765065000
heap
page read and write
58C5000
heap
page read and write
745FB7E000
stack
page read and write
5804000
heap
page read and write
57FD000
heap
page read and write
3183000
heap
page read and write
1576504B000
heap
page read and write
588F000
heap
page read and write
1301028A000
heap
page read and write
10CC000
heap
page read and write
5EC000
direct allocation
page readonly
5959000
heap
page read and write
5093000
heap
page read and write
50FD000
heap
page read and write
568C000
heap
page read and write
55C5000
heap
page read and write
55FA000
heap
page read and write
115C000
heap
page read and write
53FF000
heap
page read and write
1840B570000
heap
page read and write
1576503D000
heap
page read and write
5666000
heap
page read and write
13010D54000
heap
page read and write
1320000
trusted library allocation
page read and write
1DDF4040000
heap
page read and write
590D000
heap
page read and write
335E000
stack
page read and write
5090000
heap
page read and write
1840B602000
heap
page read and write
5713000
heap
page read and write
There are 898 hidden memdumps, click here to show them.