Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
Insight_Medical_Publishing_1.one
|
data
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Temp\click.wsf
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\rad617F4.tmp.dll
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\Desktop\Insight_Medical_Publishing_1.one
|
data
|
dropped
|
|
|
|
C:\Windows\System32\FtYcgioKSiXTtw\clpHRoMLOOCr.dll (copy)
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506
|
Microsoft Cabinet archive data, Windows 2000/XP setup, 62582 bytes, 1 file, at 0x2c +A "authroot.stl", number 1, 6 datablocks,
0x1 compression
|
dropped
|
||
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
|
data
|
modified
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\D0161517-DEC8-4879-886E-56C64A97E450
|
XML 1.0 document, ASCII text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000005.bin (copy)
|
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000006.bin (copy)
|
PNG image data, 127 x 138, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000007.bin (copy)
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000008.bin (copy)
|
PNG image data, 749 x 126, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000009.bin (copy)
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000A.bin (copy)
|
PNG image data, 163 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000B.bin (copy)
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000C.bin (copy)
|
PNG image data, 123 x 103, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000D.bin (copy)
|
PNG image data, 59 x 61, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000E.bin (copy)
|
PNG image data, 563 x 211, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000F.bin (copy)
|
PNG image data, 742 x 104, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000G.bin (copy)
|
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000H.bin (copy)
|
PNG image data, 651 x 254, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000I.bin (copy)
|
PNG image data, 220 x 170, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000J.bin (copy)
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000K.bin (copy)
|
PNG image data, 167 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000M.bin (copy)
|
PNG image data, 230 x 68, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000N.bin (copy)
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000O.bin (copy)
|
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000P.bin (copy)
|
PNG image data, 213 x 85, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000Q.bin (copy)
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000R.bin (copy)
|
PNG image data, 171 x 50, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000S.bin (copy)
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000T.bin (copy)
|
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000U.bin (copy)
|
PNG image data, 164 x 89, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000V.bin (copy)
|
PNG image data, 162 x 89, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000010.bin (copy)
|
PNG image data, 452 x 277, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000011.bin (copy)
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000012.bin (copy)
|
PNG image data, 452 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000013.bin (copy)
|
PNG image data, 185 x 76, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000014.bin (copy)
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000015.bin (copy)
|
PNG image data, 167 x 92, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000016.bin (copy)
|
PNG image data, 221 x 77, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000017.bin (copy)
|
PNG image data, 232 x 50, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000018.bin (copy)
|
PNG image data, 340 x 79, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000019.bin (copy)
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001C.bin (copy)
|
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001D.bin (copy)
|
PNG image data, 127 x 138, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001E.bin (copy)
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001F.bin (copy)
|
PNG image data, 749 x 126, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001G.bin (copy)
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001H.bin (copy)
|
PNG image data, 163 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001I.bin (copy)
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001J.bin (copy)
|
PNG image data, 123 x 103, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001K.bin (copy)
|
PNG image data, 59 x 61, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001L.bin (copy)
|
PNG image data, 563 x 211, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001M.bin (copy)
|
PNG image data, 742 x 104, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001N.bin (copy)
|
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001O.bin (copy)
|
PNG image data, 651 x 254, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001P.bin (copy)
|
PNG image data, 220 x 170, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001Q.bin (copy)
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001R.bin (copy)
|
PNG image data, 167 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001T.bin (copy)
|
PNG image data, 230 x 68, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001U.bin (copy)
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001V.bin (copy)
|
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000020.bin (copy)
|
PNG image data, 213 x 85, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000021.bin (copy)
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000022.bin (copy)
|
PNG image data, 171 x 50, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000023.bin (copy)
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000024.bin (copy)
|
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000025.bin (copy)
|
PNG image data, 164 x 89, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000026.bin (copy)
|
PNG image data, 162 x 89, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000027.bin (copy)
|
PNG image data, 452 x 277, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000028.bin (copy)
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000029.bin (copy)
|
PNG image data, 452 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002A.bin (copy)
|
PNG image data, 185 x 76, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002B.bin (copy)
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002C.bin (copy)
|
PNG image data, 167 x 92, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002D.bin (copy)
|
PNG image data, 221 x 77, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002E.bin (copy)
|
PNG image data, 232 x 50, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002F.bin (copy)
|
PNG image data, 340 x 79, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002G.bin (copy)
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002H.bin (copy)
|
PNG image data, 220 x 170, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002I.bin (copy)
|
PNG image data, 651 x 254, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002J.bin (copy)
|
PNG image data, 59 x 61, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002K.bin (copy)
|
PNG image data, 127 x 138, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002L.bin (copy)
|
PNG image data, 742 x 104, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002M.bin (copy)
|
PNG image data, 563 x 211, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002N.bin (copy)
|
PNG image data, 123 x 103, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002O.bin (copy)
|
PNG image data, 163 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002P.bin (copy)
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002Q.bin (copy)
|
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002R.bin (copy)
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002S.bin (copy)
|
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002T.bin (copy)
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002U.bin (copy)
|
PNG image data, 167 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002V.bin (copy)
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000030.bin (copy)
|
PNG image data, 749 x 126, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000031.bin (copy)
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000032.bin (copy)
|
PNG image data, 185 x 76, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000033.bin (copy)
|
PNG image data, 452 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000034.bin (copy)
|
PNG image data, 213 x 85, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000035.bin (copy)
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000036.bin (copy)
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000037.bin (copy)
|
PNG image data, 164 x 89, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000038.bin (copy)
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000039.bin (copy)
|
PNG image data, 340 x 79, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003A.bin (copy)
|
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003B.bin (copy)
|
PNG image data, 167 x 92, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003C.bin (copy)
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003D.bin (copy)
|
PNG image data, 230 x 68, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003E.bin (copy)
|
PNG image data, 171 x 50, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003F.bin (copy)
|
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003G.bin (copy)
|
PNG image data, 221 x 77, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003H.bin (copy)
|
PNG image data, 452 x 277, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003I.bin (copy)
|
PNG image data, 232 x 50, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003J.bin (copy)
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003K.bin (copy)
|
PNG image data, 162 x 89, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003Q.bin (copy)
|
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003R.bin (copy)
|
PNG image data, 123 x 103, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003S.bin (copy)
|
PNG image data, 563 x 211, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003T.bin (copy)
|
PNG image data, 742 x 104, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003U.bin (copy)
|
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003V.bin (copy)
|
PNG image data, 749 x 126, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000040.bin (copy)
|
PNG image data, 220 x 170, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000041.bin (copy)
|
PNG image data, 59 x 61, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000042.bin (copy)
|
PNG image data, 163 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000043.bin (copy)
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000044.bin (copy)
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000045.bin (copy)
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000046.bin (copy)
|
PNG image data, 127 x 138, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000047.bin (copy)
|
PNG image data, 651 x 254, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000048.bin (copy)
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000049.bin (copy)
|
PNG image data, 167 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004B.bin (copy)
|
PNG image data, 162 x 89, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004C.bin (copy)
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004D.bin (copy)
|
PNG image data, 171 x 50, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004E.bin (copy)
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004F.bin (copy)
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004G.bin (copy)
|
PNG image data, 452 x 277, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004H.bin (copy)
|
PNG image data, 452 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004I.bin (copy)
|
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004J.bin (copy)
|
PNG image data, 340 x 79, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004K.bin (copy)
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004L.bin (copy)
|
PNG image data, 185 x 76, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004M.bin (copy)
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004N.bin (copy)
|
PNG image data, 213 x 85, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004O.bin (copy)
|
PNG image data, 164 x 89, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004P.bin (copy)
|
PNG image data, 167 x 92, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004Q.bin (copy)
|
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004R.bin (copy)
|
PNG image data, 230 x 68, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004S.bin (copy)
|
PNG image data, 221 x 77, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004T.bin (copy)
|
PNG image data, 232 x 50, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004U.bin (copy)
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000051.bin (copy)
|
HTML document, ASCII text, with very long lines (792), with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000052.bin (copy)
|
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000053.bin (copy)
|
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1248x1624, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\header
|
Matlab v4 mat-file (little endian) @, numeric, rows 262223750, columns 0
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000005.bin
|
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000006.bin
|
PNG image data, 127 x 138, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000007.bin
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000008.bin
|
PNG image data, 749 x 126, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000009.bin
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000A.bin
|
PNG image data, 163 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000B.bin
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000C.bin
|
PNG image data, 123 x 103, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000D.bin
|
PNG image data, 59 x 61, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000E.bin
|
PNG image data, 563 x 211, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000F.bin
|
PNG image data, 742 x 104, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000G.bin
|
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000H.bin
|
PNG image data, 651 x 254, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000I.bin
|
PNG image data, 220 x 170, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000J.bin
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000K.bin
|
PNG image data, 167 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000M.bin
|
PNG image data, 230 x 68, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000N.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000O.bin
|
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000P.bin
|
PNG image data, 213 x 85, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000Q.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000R.bin
|
PNG image data, 171 x 50, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000S.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000T.bin
|
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000U.bin
|
PNG image data, 164 x 89, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000V.bin
|
PNG image data, 162 x 89, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000010.bin
|
PNG image data, 452 x 277, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000011.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000012.bin
|
PNG image data, 452 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000013.bin
|
PNG image data, 185 x 76, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000014.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000015.bin
|
PNG image data, 167 x 92, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000016.bin
|
PNG image data, 221 x 77, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000017.bin
|
PNG image data, 232 x 50, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000018.bin
|
PNG image data, 340 x 79, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000019.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001C.bin
|
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001D.bin
|
PNG image data, 127 x 138, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001E.bin
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001F.bin
|
PNG image data, 749 x 126, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001G.bin
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001H.bin
|
PNG image data, 163 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001I.bin
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001J.bin
|
PNG image data, 123 x 103, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001K.bin
|
PNG image data, 59 x 61, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001L.bin
|
PNG image data, 563 x 211, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001M.bin
|
PNG image data, 742 x 104, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001N.bin
|
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001O.bin
|
PNG image data, 651 x 254, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001P.bin
|
PNG image data, 220 x 170, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001Q.bin
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001R.bin
|
PNG image data, 167 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001T.bin
|
PNG image data, 230 x 68, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001U.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001V.bin
|
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000020.bin
|
PNG image data, 213 x 85, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000021.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000022.bin
|
PNG image data, 171 x 50, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000023.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000024.bin
|
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000025.bin
|
PNG image data, 164 x 89, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000026.bin
|
PNG image data, 162 x 89, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000027.bin
|
PNG image data, 452 x 277, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000028.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000029.bin
|
PNG image data, 452 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002A.bin
|
PNG image data, 185 x 76, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002B.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002C.bin
|
PNG image data, 167 x 92, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002D.bin
|
PNG image data, 221 x 77, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002E.bin
|
PNG image data, 232 x 50, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002F.bin
|
PNG image data, 340 x 79, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002G.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002H.bin
|
PNG image data, 220 x 170, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002I.bin
|
PNG image data, 651 x 254, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002J.bin
|
PNG image data, 59 x 61, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002K.bin
|
PNG image data, 127 x 138, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002L.bin
|
PNG image data, 742 x 104, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002M.bin
|
PNG image data, 563 x 211, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002N.bin
|
PNG image data, 123 x 103, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002O.bin
|
PNG image data, 163 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002P.bin
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002Q.bin
|
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002R.bin
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002S.bin
|
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002T.bin
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002U.bin
|
PNG image data, 167 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002V.bin
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000030.bin
|
PNG image data, 749 x 126, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000031.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000032.bin
|
PNG image data, 185 x 76, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000033.bin
|
PNG image data, 452 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000034.bin
|
PNG image data, 213 x 85, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000035.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000036.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000037.bin
|
PNG image data, 164 x 89, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000038.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000039.bin
|
PNG image data, 340 x 79, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003A.bin
|
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003B.bin
|
PNG image data, 167 x 92, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003C.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003D.bin
|
PNG image data, 230 x 68, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003E.bin
|
PNG image data, 171 x 50, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003F.bin
|
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003G.bin
|
PNG image data, 221 x 77, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003H.bin
|
PNG image data, 452 x 277, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003I.bin
|
PNG image data, 232 x 50, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003J.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003K.bin
|
PNG image data, 162 x 89, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003Q.bin
|
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003R.bin
|
PNG image data, 123 x 103, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003S.bin
|
PNG image data, 563 x 211, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003T.bin
|
PNG image data, 742 x 104, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003U.bin
|
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003V.bin
|
PNG image data, 749 x 126, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000040.bin
|
PNG image data, 220 x 170, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000041.bin
|
PNG image data, 59 x 61, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000042.bin
|
PNG image data, 163 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000043.bin
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000044.bin
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000045.bin
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000046.bin
|
PNG image data, 127 x 138, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000047.bin
|
PNG image data, 651 x 254, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000048.bin
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000049.bin
|
PNG image data, 167 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004B.bin
|
PNG image data, 162 x 89, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004C.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004D.bin
|
PNG image data, 171 x 50, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004E.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004F.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004G.bin
|
PNG image data, 452 x 277, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004H.bin
|
PNG image data, 452 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004I.bin
|
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004J.bin
|
PNG image data, 340 x 79, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004K.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004L.bin
|
PNG image data, 185 x 76, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004M.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004N.bin
|
PNG image data, 213 x 85, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004O.bin
|
PNG image data, 164 x 89, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004P.bin
|
PNG image data, 167 x 92, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004Q.bin
|
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004R.bin
|
PNG image data, 230 x 68, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004S.bin
|
PNG image data, 221 x 77, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004T.bin
|
PNG image data, 232 x 50, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004U.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000051.bin
|
HTML document, ASCII text, with very long lines (792), with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000052.bin
|
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000053.bin
|
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1248x1624, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000058.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005A.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:19:29], progressive, precision 8, 221x792, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005C.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005E.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005G.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:18:09], progressive, precision 8, 164x641, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000006L.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:06:24], progressive, precision 8, 38x792, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000006N.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000006P.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000006R.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000006T.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000006V.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000071.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000074.bin
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 814x105, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000076.bin
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 728x77, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000078.bin
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 69x630, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000007A.bin
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 105x441,
components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000007B.bin
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 76x97, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000007D.bin
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 95x498, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000007E.bin
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 700x114, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000007G.bin
|
PNG image data, 813 x 99, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000007I.bin
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 780x107,
components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000007K.bin
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 613x144, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000007M.bin
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 276x139,
components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000007O.bin
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 814x45, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000007Q.bin
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 262x277,
components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000007S.bin
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 70x626, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000007U.bin
|
PNG image data, 177 x 123, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000080.bin
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 17x608, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000082.bin
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 357x69, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000083.bin
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 14x341, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000085.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:15:20], progressive, precision 8, 604x784, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000087.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:13:06], progressive, precision 8, 570x779, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000089.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000008B.bin
|
PNG image data, 40 x 623, 8-bit colormap, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000008D.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000008F.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:10:32], progressive, precision 8, 594x773, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000008H.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:12:29], progressive, precision 8, 598x766, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000008J.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:19:29], progressive, precision 8, 221x792, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000008L.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000008N.bin
|
PNG image data, 60 x 336, 4-bit colormap, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000008P.bin
|
PNG image data, 40 x 617, 8-bit colormap, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000008R.bin
|
PNG image data, 50 x 600, 8-bit colormap, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000008T.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000008V.bin
|
PNG image data, 77 x 627, 8-bit colormap, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000091.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000093.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000095.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000097.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:05:55], progressive, precision 8, 612x618, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000099.bin
|
PNG image data, 176 x 513, 8-bit colormap, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000009B.bin
|
PNG image data, 40 x 650, 8-bit colormap, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000009D.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:27:10], progressive, precision 8, 102x792, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000009F.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:18:09], progressive, precision 8, 164x641, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000009H.bin
|
PNG image data, 50 x 556, 8-bit colormap, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000009J.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000009L.bin
|
PNG image data, 171 x 552, 8-bit colormap, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000009N.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:11:38], progressive, precision 8, 577x757, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000009P.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:26:15], progressive, precision 8, 216x792, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000009R.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:09:29], progressive, precision 8, 609x675, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000009T.bin
|
Windows Enhanced Metafile (EMF) image data version 0x10000
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000009U.bin
|
PNG image data, 189 x 305, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000009V.bin
|
Windows Enhanced Metafile (EMF) image data version 0x10000
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000A0.bin
|
PNG image data, 189 x 305, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000A1.bin
|
Windows Enhanced Metafile (EMF) image data version 0x10000
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000A2.bin
|
PNG image data, 189 x 305, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000A4.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000A6.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000A8.bin
|
PNG image data, 50 x 500, 8-bit colormap, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000AA.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000AC.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:08:07], baseline, precision 8, 595x450, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000AE.bin
|
Windows Enhanced Metafile (EMF) image data version 0x10000
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000AF.bin
|
PNG image data, 3005 x 184, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000AH.bin
|
PNG image data, 39 x 600, 8-bit colormap, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000AJ.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000AL.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:44:07], progressive, precision 8, 611x163, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000AN.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000AP.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000AR.bin
|
PNG image data, 39 x 579, 8-bit colormap, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000AT.bin
|
PNG image data, 30 x 700, 8-bit colormap, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000AV.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000B1.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000B3.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:06:24], progressive, precision 8, 38x792, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000B5.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000B7.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000B9.bin
|
PNG image data, 85 x 470, 8-bit colormap, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000BB.bin
|
PNG image data, 88 x 574, 8-bit colormap, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000BD.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000BF.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000BH.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000BK.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:05:55], progressive, precision 8, 612x618, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000BM.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:08:07], baseline, precision 8, 595x450, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000BO.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
modified
|
||
|
C:\Users\user\AppData\Local\Temp\OneNote Archive\Getting Started.one
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\OneNote Archive\Open Notebook.onetoc2
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\OneNote15WatsonLog.etl
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{007E2434-CF2A-44E9-96B7-B1F3807D47FD}
|
PNG image data, 189 x 305, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{00EF12F1-DE32-4EC0-8D82-9B91A564EAAE}.bin
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{029FBFD0-B61D-4F5F-ACCD-009DEDCA62D2}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{02DC9B69-A53A-46D1-8EBD-7C2B3E74598B}.bin
|
PNG image data, 452 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{031C1558-38FE-4A59-A10F-453065FF0CA3}.bin
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{040A4241-326B-4C18-8B0D-66961D04C831}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{041726F2-F83F-494C-B2B8-A775DD9A3C1A}.bin
|
PNG image data, 452 x 277, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{04594D6A-6657-46E0-A89B-CD7EB7A030AB}.bin
|
PNG image data, 221 x 77, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{04C34D9D-2C4C-419E-8D67-29C53AE2AFED}.bin
|
PNG image data, 167 x 92, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{05DF36A6-4010-4DB9-879A-122704E49427}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:08:07], baseline, precision 8, 595x450, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{06358D16-FD3C-40E9-AD49-F615A7A9F1A7}.bin
|
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{08431D37-3FCA-4CDE-8BAA-B966BC3A255C}
|
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{0A5C9AA1-1AF2-4C0B-8485-9509DF545D8E}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{0AC9C610-A83C-45B6-8E69-BA771C718D5F}.bin
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{0ADD2075-FC2D-4FE2-8CC6-B108848904AE}
|
PNG image data, 232 x 50, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{0B288449-5196-46A3-9158-AC6D386F2789}
|
PNG image data, 220 x 170, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{0B2C0A07-4D7F-43E9-A25B-57703029B751}.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{0BD71FC8-8292-4D13-A9E6-09DE59A219A9}
|
PNG image data, 220 x 170, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{0CEC181F-ED63-409F-BEDC-D0F58B320978}
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 276x139,
components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{0EA5C00C-EC0D-474A-825D-4DC15FDA5844}
|
PNG image data, 171 x 50, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{10727504-E718-4D56-9B30-472206688922}.bin
|
PNG image data, 167 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{114B83D3-5F05-4C22-97AB-72AEB826B1AE}
|
PNG image data, 749 x 126, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{11C41906-8F74-4E57-BA80-E6436C1D74DD}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{11FD383E-690D-4C4E-B564-68AA0549C33E}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{12895D0F-6702-4E14-B74A-61F6015DF738}
|
Windows Enhanced Metafile (EMF) image data version 0x10000
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{13318DA1-E908-4B6F-B22D-597C11719E13}
|
PNG image data, 88 x 574, 8-bit colormap, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{140BAB7D-53EC-41C9-8E67-8E12BF2ED0CF}.bin
|
PNG image data, 167 x 92, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{142F369A-8682-4CA6-95DF-18E5E8472E22}
|
PNG image data, 167 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{1543F5E0-4EF2-4572-826D-A2E2F7AE9A31}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{173EB255-A222-4DAC-9D57-C79353CA4DA3}.bin
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{17660AE9-88B3-495E-A0E0-4D92BF6B5BCD}.bin
|
PNG image data, 563 x 211, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{1815151C-1C87-412C-8575-38E092814770}
|
PNG image data, 127 x 138, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{1868016D-840E-4295-A8CB-C2F972BA1A7B}.bin
|
PNG image data, 164 x 89, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{195884F3-1C9A-49FC-A821-8A8C45C72141}
|
PNG image data, 59 x 61, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{19E4E844-6A99-492C-8E31-ED6091AD3084}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{1A0909DE-ABAA-490C-B71F-B29C27B6FA35}.bin
|
PNG image data, 749 x 126, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{1A595306-DA15-4F29-8C1F-5FD03AB438F7}
|
PNG image data, 230 x 68, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{1D331634-6AB7-4CD9-9B2C-C1190A0CABA6}.bin
|
PNG image data, 127 x 138, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{1D868CFC-1A8C-474E-B431-88D89FAA2FD5}
|
PNG image data, 340 x 79, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{1FC5DFF7-25EC-4D03-A86C-0F98C15BA673}
|
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{2117BC1C-70B5-43CE-BF52-A08F40F963C4}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:19:29], progressive, precision 8, 221x792, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{2228100C-9A83-4FE8-B4AC-183C99304E80}
|
PNG image data, 164 x 89, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{240F5535-34F9-422E-BABF-8E62B4762A16}.bin
|
PNG image data, 742 x 104, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{25C24257-5D37-470C-97E0-9D9044BC3EEC}.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{2678939A-2C8A-4095-B548-2B694687A727}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:19:29], progressive, precision 8, 221x792, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{2738344F-AEDA-470D-9692-E3EC0330E08E}
|
PNG image data, 563 x 211, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{279304AF-96D7-442A-B714-77684F37863E}
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 17x608, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{27EFDE2F-A922-41B4-8AAC-CAA081B4965A}
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{290C9870-E39F-411E-A584-651E2768D8D5}.bin
|
PNG image data, 563 x 211, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{29643502-D4C5-49A0-AF36-8AAD8B06D4D2}
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{296D4924-A03A-4F76-BFBF-9A960E5F381A}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{2AA34B7D-DFBA-41D8-AD1C-98BD5068625A}.bin
|
PNG image data, 220 x 170, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{2C15ECC5-F0A8-4C3F-A541-D38A55A90839}
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{2C5C27D7-B4AC-4246-85E7-ECD3B377E111}.bin
|
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{2CDD4CA3-6EB0-42EB-B93D-7C02D919E325}
|
PNG image data, 749 x 126, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{2D0852DA-B089-470F-8629-D5AAF0A83E21}.bin
|
PNG image data, 162 x 89, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{2D0C3FCD-E484-4E3E-9162-0F9EC5EF3749}
|
PNG image data, 340 x 79, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{2D422CB1-F334-44F0-8858-90A9C6C0C6AE}.bin
|
PNG image data, 742 x 104, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{2D6FBFA5-CE92-4F34-B3EA-15D6CA4C4C7A}.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{2DBD263F-CBF4-472B-903B-7C780AB3CC56}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:09:29], progressive, precision 8, 609x675, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{2E3504EB-356A-46D7-9403-EFF6D7D64D37}.bin
|
PNG image data, 123 x 103, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{309DB5D0-DAB4-4D11-B65C-FEF247E94EBF}.bin
|
PNG image data, 749 x 126, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{30C057CA-E502-44FD-A0B7-5AD6BFB017B8}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{30E87821-4B64-4B08-8A8A-F31A4450103E}.bin
|
PNG image data, 742 x 104, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{316D2570-BD3D-4019-AB3C-65704D74E2C0}.bin
|
PNG image data, 452 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{3331EAF2-11CF-4C29-A051-2FFDC7C887C0}
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 262x277,
components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{3399FC93-FF6A-49AD-A60E-27692DC1631B}
|
PNG image data, 176 x 513, 8-bit colormap, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{34DCD8AA-A5EC-44F3-95F7-C30C4B3EED3A}
|
PNG image data, 563 x 211, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{369B2634-2FC8-4105-95F2-439DF8E8E575}.bin
|
PNG image data, 185 x 76, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{38AD74DD-DBD4-4983-865B-CC82CD505853}
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 95x498, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{3950818A-DE12-433D-ADEF-60DC6D155919}
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 76x97, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{3B65BB4C-B36A-4406-8609-ABAF67B6B722}
|
PNG image data, 39 x 579, 8-bit colormap, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{3B6D2615-2DE9-469F-9E0F-4959C202139D}
|
PNG image data, 59 x 61, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{3BD6766D-CFEB-499A-8BCD-557F95822B09}
|
PNG image data, 164 x 89, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{3C6250FB-318E-4BDD-860D-BD8290D12AB6}
|
PNG image data, 123 x 103, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{3D0F540F-6193-43EA-BBCB-F5274EF6CF31}
|
PNG image data, 167 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{3D1E7E2C-1E07-411C-9733-ADE79B0BDD16}
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{3FF4F276-9AC0-4F68-8F39-56CEC34A814E}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{4059F6AF-344E-432E-B08A-104C1B006045}.bin
|
PNG image data, 59 x 61, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{434F7D2D-91B4-43E8-86FC-AE2CD40DA2CC}
|
PNG image data, 167 x 92, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{43575BDF-D200-49D0-AA54-D0F9C9F6FF28}.bin
|
PNG image data, 221 x 77, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{44789F78-73C4-40B1-A031-568933ED3955}.bin
|
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{44C26739-CA4B-4BE5-AF2D-CB9B3A8EBB7F}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:08:07], baseline, precision 8, 595x450, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{4604EF6B-C966-4EEA-B700-AD3B1315FEC2}
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 728x77, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{4717DBBC-6EBE-429A-BEE0-A57FF1629C65}
|
PNG image data, 232 x 50, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{49C8B643-9173-4AC4-82E3-2FDBD12B3EBA}
|
PNG image data, 452 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{4C6E989A-BB51-4768-AB54-196E54195ECC}
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{4CEBC810-2055-41A8-9598-714D71477D95}.bin
|
PNG image data, 162 x 89, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{4D11CBD7-F53D-4F79-BC85-6BE56E62316E}
|
PNG image data, 50 x 600, 8-bit colormap, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{4DDEBE29-AE1D-4F72-9122-33C1807BF2D2}
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 357x69, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{4E03FE1B-6E98-4F27-9C67-730D56D2785C}.bin
|
PNG image data, 651 x 254, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{4EA246DC-CA35-4799-918B-97D54F58DAEA}.bin
|
PNG image data, 163 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{4F328AD6-54AB-4D9D-98AE-0B38F9FFCA0C}
|
PNG image data, 127 x 138, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{4F51E40E-1456-43AA-BBC5-67AA53EDA094}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:05:55], progressive, precision 8, 612x618, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{4F590CF0-E638-4A89-BDA4-10D16AAB2B93}.bin
|
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{520E04EE-7ABF-4189-92F0-616CBCF5B26F}
|
PNG image data, 162 x 89, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{53063CD3-5040-43C9-BD1B-7174EAC983B8}
|
PNG image data, 3005 x 184, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{531F32E7-2864-4063-92DB-AAE568103C7D}
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 69x630, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{53CCF0CB-23FB-42CB-9EBA-D13566DB9EB4}.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{53E101B9-C80A-41DF-AFD9-F99D3B4FBE68}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{53EAFA43-DDE4-4225-862D-44D74719F86A}
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{5413E824-DC21-4E23-9059-0B574AE1D4A3}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{541459BF-D78C-49A4-ADDF-4381598C6687}.bin
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{5436B009-899F-4F1A-AEEB-6A6F0BA72F9D}
|
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{549788BB-7E86-45A3-8786-CC9561AB8873}
|
PNG image data, 50 x 500, 8-bit colormap, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{56EF16D0-4B94-430B-AED3-A6A7162C1874}
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{576732E2-C3B3-4726-8B49-A250577E3FE0}.bin
|
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{5A91E6EF-F65A-4A61-9C9E-FF3C1209B7B5}
|
PNG image data, 123 x 103, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{5B0C0C3D-1208-4C11-AF6C-1EE5BEBE7A57}.bin
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{5BA96239-D15E-4EF7-B56D-399E91841E73}
|
PNG image data, 39 x 600, 8-bit colormap, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{5BB1E5B9-C907-410F-950F-E1F8A7FAF884}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:18:09], progressive, precision 8, 164x641, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{5BD06BCF-A833-4625-B7FE-5BC963192CEB}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{5C8FDD59-673C-4712-93EF-9F5ADAE865E8}
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 613x144, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{5CD4A12A-BC38-4183-A3B0-7DF48DC118BF}.bin
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{6019A482-DDE0-4BE7-98D5-AA0ECA202BF1}.bin
|
PNG image data, 123 x 103, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{63A7963F-8E42-4F8E-844A-F3C14DC0C466}.bin
|
PNG image data, 563 x 211, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{63DD725C-3AB4-45EB-A35A-C6FED1D1FF61}
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 700x114, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{646287FE-1DC6-4DA3-85DD-5D0B7451A61C}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{652D6712-B1DE-458D-93F4-8FA97E912A67}
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{6618D600-954D-4F10-893B-476F9EE383CA}.bin
|
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{66216B00-34D2-455B-813E-2A028D9F7EE5}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:26:15], progressive, precision 8, 216x792, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{6762DBA0-0A4F-4AF6-99C9-6D2C143C4933}.bin
|
PNG image data, 340 x 79, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{67E11D36-35B5-471A-B3FB-D89244A1C45C}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{6A0072D2-E3C9-4E8F-9ED9-8B053B33BB74}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{6B7563C2-DDBD-4276-AE6B-AE6558BE2BB2}
|
PNG image data, 177 x 123, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{6BF8A2FD-2C19-47B5-93D1-0299ED99995E}.bin
|
PNG image data, 232 x 50, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{6D375BF8-F7BC-46C8-8DA6-C3FADED5E748}
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 105x441,
components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{6D7F7614-65D7-4BB4-995A-E20469E02967}
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 780x107,
components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{6DCEBB62-A6A6-4F1F-8C7B-AE3232EA9C74}.bin
|
PNG image data, 164 x 89, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{6E6765A9-7C59-487D-848C-C0A96E51E18C}.bin
|
PNG image data, 232 x 50, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{6F04B0E8-7756-4A11-868F-9B247313D202}.bin
|
PNG image data, 340 x 79, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{6FF806AA-FAE6-425B-8777-EB1AF4D0E8D9}
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{705BFBBD-AD07-4A50-8BBE-AE4D63916A4E}.bin
|
PNG image data, 221 x 77, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{70CE6078-AAC5-4C7C-99BB-DCB698E83C36}.bin
|
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{716672EA-4E54-49DD-94BC-B1ACB156842D}
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{73393CE8-01D6-4E08-9E23-CC72BD2C986D}
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 70x626, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{74A9E448-6A66-492B-9BE2-D3B6F632D7AA}.bin
|
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1248x1624, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{75BFE402-C7C2-4415-BF57-385FBB409B64}.bin
|
PNG image data, 162 x 89, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{760C5FC1-6BAC-4070-BD66-4DC3C4BB8F4F}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:44:07], progressive, precision 8, 611x163, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{77801A6C-A7FA-4397-8B01-91153C8630B7}
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 814x105, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{79D68AD4-8DA8-479F-91FB-647E9499AD4B}.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{79FC03C5-2C4D-4613-B694-D3B8B6D34ED6}.bin
|
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{7A808603-1F44-4820-83E1-F44443E4E08E}.bin
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{7AA06F0C-436D-4316-9A0F-548505B9CFAE}
|
PNG image data, 742 x 104, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{7B748D5B-27B2-42AB-85AE-AC9CC02B4E29}.bin
|
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{7C4A2EA7-2F13-4E90-A898-638B1E91F36B}
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{7CE75506-28BE-4F40-9220-95AAD3DBE3CD}
|
PNG image data, 213 x 85, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{7D4C1916-BC36-4500-BC83-ABCAACD12199}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{7D8911E6-D68C-46E1-BA24-9C634A6568D8}.bin
|
PNG image data, 749 x 126, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{7DA03EB5-159B-43A7-8248-CFA0B4BA1407}.bin
|
PNG image data, 213 x 85, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{7DA3047B-7EDE-4C76-A03F-F268DC268846}
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{7EFEEB39-D30D-4ED2-B8CA-4FA86AD08688}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{7F1B60AF-3E62-47E1-9E96-B62D57D6FDB2}.bin
|
PNG image data, 123 x 103, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{7FF02078-47E2-4FE3-9003-6C9D28A8A672}
|
PNG image data, 189 x 305, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{7FF6D6D8-4169-4584-BCF5-8D75261B7005}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{81D964BF-D056-4156-92B3-6A07CCA8E432}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:12:29], progressive, precision 8, 598x766, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{8253796E-C8D4-4475-A188-F6CE7C016502}.bin
|
PNG image data, 232 x 50, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{832ED68C-5D36-4C80-A673-0D8DB8BA4448}.bin
|
PNG image data, 213 x 85, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{8494FB7B-3275-4AB1-9189-B0A85C74D14E}
|
PNG image data, 163 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{852F3DC6-0CD6-487C-8EEE-70C6937BB0B5}.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{8A242FA7-CF57-4B52-981F-27F085C43FDA}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:06:24], progressive, precision 8, 38x792, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{8AF39E93-9143-4248-BCB0-1D11B089919F}.bin
|
PNG image data, 185 x 76, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{8CF3A201-5104-46C4-A9AA-7D8572692C44}.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{8D72256A-257C-4BEE-AE60-53EDB6CF675F}.bin
|
PNG image data, 127 x 138, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{8F046AE3-25F1-464D-BE11-E0F08F3B9E23}.bin
|
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{8FFB1524-81B9-49FF-B095-7D2D3F22EC2E}
|
Windows Enhanced Metafile (EMF) image data version 0x10000
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{905E6FA1-A837-4D7F-9C3E-A1D667477B5D}.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{91AA26E3-ED9A-4A81-8D01-432A4C48FF80}
|
PNG image data, 651 x 254, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{91B26002-081C-4ED5-A433-40B6F5AF9A80}.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{91F0D826-C9F8-4FD3-B98E-7116D0076A73}.bin
|
PNG image data, 452 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{93F31D41-510F-40E6-9288-3AD1834B7BAE}
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{964CFC3D-F97B-49A4-B185-745A2B6A21DE}.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{9726D7F8-801D-4BD8-89BA-689D6E34BD16}.bin
|
PNG image data, 127 x 138, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{97AA1A11-8BF9-40DD-9A19-7F147E6B938E}.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{9854AD86-2FAE-4AF1-9581-519D6F73E39F}.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{9AA27895-B4D1-4431-B6D8-905E53828BBC}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:10:32], progressive, precision 8, 594x773, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{9EB02E9B-64AE-4C21-BE45-13038967758E}.bin
|
PNG image data, 563 x 211, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{9ED8511A-975A-4476-B434-16AF579EC9AC}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{9F28B94D-5114-46BC-A7E3-53E875E67288}
|
PNG image data, 85 x 470, 8-bit colormap, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{9F5A63BA-6A3D-4C93-B5BC-14DE54FCF24F}
|
PNG image data, 171 x 50, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{A122454F-2933-4403-8796-ABD2E1DE70CD}.bin
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{A18E55E9-ADF9-43CB-9989-05600570D3F9}
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{A1FD471C-3B90-4CEA-9E1F-C7FFD5C74C8E}.bin
|
PNG image data, 651 x 254, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{A4363DA2-9E64-4EC9-AB26-93A115DB893B}
|
PNG image data, 40 x 617, 8-bit colormap, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{A454EED3-9BBF-4E48-9864-3FFB68D17AD4}
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 814x45, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{A4CF784A-809C-44BF-A58C-2BD5D7E6C9D3}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:15:20], progressive, precision 8, 604x784, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{A683D8E1-458E-449E-A20C-E592F965D1BA}.bin
|
PNG image data, 742 x 104, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{A780A0BC-29E1-4DE7-8FA9-E30F511B1696}.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{A799A2C0-9CD3-48E5-B2AB-E83018796CA3}
|
PNG image data, 742 x 104, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{A7E48278-EF90-46F4-AE1F-51588C7A8797}
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{AA980875-ED38-4692-8267-FA0A01CBB004}.bin
|
PNG image data, 185 x 76, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{AAB27656-6733-4731-8628-F30EE3592807}
|
PNG image data, 189 x 305, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{AB75D318-733F-473D-8296-6DB1021473D3}
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 14x341, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{ABA25D20-F7A7-4359-9E56-9D5F59AA4901}.bin
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{AC239DF7-1965-4667-8331-01645F0D8076}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:05:55], progressive, precision 8, 612x618, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{AC7844EF-E209-4028-8D71-12844B2CA80B}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{AD35EECB-937F-4445-BAA0-F3C8A0CD4B89}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:11:38], progressive, precision 8, 577x757, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{ADA2AC5F-7448-491A-BCEB-5CAA2DDBFA47}
|
PNG image data, 452 x 277, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{AEB10311-CFC2-41F7-ABC5-07410C5390E0}
|
PNG image data, 50 x 556, 8-bit colormap, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{AF84D8E1-6E5F-4EA3-9F17-BF84164EF8AC}.bin
|
PNG image data, 163 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{B1081271-C77E-4333-9D8C-BD46F333F699}
|
Windows Enhanced Metafile (EMF) image data version 0x10000
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{B10C67DE-F667-4033-A70F-6468CFAEF7A8}.bin
|
PNG image data, 167 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{B139FE5A-5C47-422A-9E4F-76F98DA40506}.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{B215BEC3-9DB5-4635-9B1B-4E4C3890AA20}.bin
|
PNG image data, 220 x 170, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{B21C4345-39FA-4D35-8189-A0C2DA6298BB}.bin
|
PNG image data, 220 x 170, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{B2E68442-2306-4244-AF44-64C5EB0BA0F7}.bin
|
PNG image data, 163 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{B42DC2AD-0B13-4C20-885A-EAEA549A5761}
|
PNG image data, 230 x 68, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{B44F7697-2AA3-44DA-898A-85FCDD5E7EC4}.bin
|
PNG image data, 452 x 277, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{B5AB729E-E611-482C-8C6A-118C8CD3BA4B}
|
PNG image data, 813 x 99, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{B66A547E-B0A1-4B49-B0B3-02849E607001}.bin
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{B6F1D1C2-767D-4113-A0F3-AD5791B806F5}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:13:06], progressive, precision 8, 570x779, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{B7181CB7-AC96-449D-AAE0-4DC13820040C}.bin
|
PNG image data, 171 x 50, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{B7EB5ED6-E234-4227-8CA2-E9851576F5DE}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{B804FE41-540F-4746-A4E8-F4B64F14912C}
|
PNG image data, 30 x 700, 8-bit colormap, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{B9278544-B004-491A-9FF4-B4C930E5C0C4}
|
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{B9D35794-B9AE-41D4-9FF8-A5840EF6B48A}
|
PNG image data, 221 x 77, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{BA32DD6E-F7F3-4CB1-9C7F-776175A2900F}
|
PNG image data, 162 x 89, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{BA540A55-0F7B-41AE-B15B-53F64D270953}.bin
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{BA7451AC-6C64-43D2-9B4C-AA3572AB428F}
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{BAA36EFD-42DF-4BBE-A299-8F6F1D593A0A}.bin
|
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{BAB609D6-1F10-403F-A859-1FE569CF0CFC}.bin
|
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{BBFE1C4F-097D-454B-8957-AC5B926C841D}
|
PNG image data, 213 x 85, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{BEAD5058-4BD1-4E54-AD25-B228B0F015DE}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{C007B14E-2899-49D0-B272-E7D44BC923DE}
|
PNG image data, 60 x 336, 4-bit colormap, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{C137B77B-9F28-4D5E-99C5-52CD342E33EC}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:18:09], progressive, precision 8, 164x641, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{C29E0BB1-DF9C-4DA0-A545-4A816298CF44}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{C2F44FBF-82C5-4F52-8D20-A803C31DBE0C}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:06:24], progressive, precision 8, 38x792, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{C49BE421-4034-4505-B96C-D6904CA84A0A}.bin
|
PNG image data, 651 x 254, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{C5019AF7-7D98-4364-8F53-2C6662EF1A82}.bin
|
PNG image data, 59 x 61, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{C5B2FC42-8C55-428D-8B58-D86F7DCE1A98}
|
PNG image data, 452 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{C6B689E9-00BB-4FC0-97F6-B069A8992604}.bin
|
PNG image data, 651 x 254, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{C7D0C416-0233-45EB-A7CA-91B015272A74}.bin
|
PNG image data, 59 x 61, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{C8AA9356-1AEB-4900-B7FD-86BB97AA209E}.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{C91A4277-C3B2-4F75-8DDA-208D72EFB697}.bin
|
PNG image data, 127 x 138, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{CABE65C0-4C48-4FED-AC4A-4021C1888419}
|
PNG image data, 77 x 627, 8-bit colormap, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{CB2B11A4-7D6C-48F0-853E-14AF7BD15EF9}
|
PNG image data, 452 x 277, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{CB890F05-306D-429A-A78F-343A9C2BE620}.bin
|
PNG image data, 171 x 50, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{CD6B9975-BE01-441E-82B5-8510D1A4763A}.bin
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{CD751F52-59AC-45E5-9223-DD3B65479C72}
|
PNG image data, 40 x 623, 8-bit colormap, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{CDE6E470-5E64-498C-B15B-CDB8BFF16920}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{CDFDDB33-15AC-4132-9D3D-2926F0CF9E1F}
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{CE56AADB-3800-4529-A20B-D3A652BA4BF6}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{CEA2E23B-44E2-4534-953F-CA180092A728}.bin
|
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{CEEB4A9C-29A6-4772-967D-B6B777F753FA}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:27:10], progressive, precision 8, 102x792, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{CF98E5ED-59E7-4F5D-8F89-A9D37B4DC984}.bin
|
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{D0208C61-E9B8-496F-AA76-D8A3B63F227D}
|
PNG image data, 221 x 77, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{D15CE827-1A86-4813-8198-413EEFC757E4}
|
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{D702F4B6-2529-4186-8443-32D8BA41A952}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{D7EB3C51-DDA5-4BC6-8A6A-C24A99E8125A}
|
PNG image data, 167 x 92, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{DAC99414-C6A5-4E62-8A07-2C1128718B70}
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{DB6CBE07-BA21-417B-8C7E-AFCEA0BA67F3}
|
PNG image data, 163 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{DBB6601F-6AA0-46D6-BA7F-5C0FBAC002CE}.bin
|
PNG image data, 123 x 103, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{DBDE4ECF-ECC9-4863-B58E-4E6CC98CAD7B}.bin
|
PNG image data, 167 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{DC539AAE-F1E1-426E-92DE-E94EE217A048}.bin
|
PNG image data, 220 x 170, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{DCDF6F59-52FC-41A8-9B03-9AA9D75850CE}.bin
|
PNG image data, 171 x 50, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{DD369DC0-64A0-440A-8E8E-F09D784FEE7A}.bin
|
PNG image data, 340 x 79, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{DD8D4739-C01E-4F44-B146-F1D22A0DC010}
|
PNG image data, 171 x 552, 8-bit colormap, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{DDA7AE46-BBE1-415D-A668-2D4F831EAF89}.bin
|
PNG image data, 230 x 68, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{DFB1B1AB-550F-44E2-A398-0BF8B4A0F71F}.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{E087FEF5-6E32-4991-BB82-9A1EDD95EECC}
|
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{E1A08393-4ECB-47DD-B0A0-BCF06D42F6C6}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{E1B4ED56-B1F5-492E-BB74-FFB619B54C1E}.bin
|
PNG image data, 213 x 85, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{E228CF3F-116C-4573-B3BA-8FB5B503F70C}.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{E43129EA-618C-4378-9318-E8DF8293F776}.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{E54BCA7F-5382-4481-80CB-867C816AE250}.bin
|
PNG image data, 749 x 126, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{E58F9233-1CB9-4869-8B5F-24BEA90243E6}
|
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{E679063D-E1F7-411D-8D19-90E6B4871153}.bin
|
PNG image data, 452 x 277, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{E7782D65-36E3-49C7-8B0F-6410276F3827}
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{E855DCC5-5EC5-40DA-B18C-89BEE0515A69}.bin
|
PNG image data, 167 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{E96E73CF-AA52-4E46-8213-9FEC22567AB5}
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{EBE5A086-6115-4CBB-A2E6-E489E763360E}
|
PNG image data, 40 x 650, 8-bit colormap, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{EC37955A-E6D0-4983-8C5D-E9F8C1388A87}
|
PNG image data, 185 x 76, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{ED0FC3EE-23CE-4215-9612-5200B0740E9E}
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{EEB37972-ABBB-45F7-81E1-5BAB6389EADA}
|
PNG image data, 651 x 254, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{F0BDE405-78A9-48C1-A983-CC14AC7AA4A3}
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{F1FB6101-53C9-4C80-A72F-8BEF2698CD17}
|
HTML document, ASCII text, with very long lines (792), with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{F421A4C0-6278-4F69-B310-DF79FE0947B9}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{F437F60C-481E-49F4-AABF-3C95DEF9EBAC}
|
PNG image data, 185 x 76, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{F5070293-F6FB-4F71-BFA7-8432332F6B3B}.bin
|
PNG image data, 230 x 68, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{F56961F8-80D5-423A-85D2-B6481991AC04}.bin
|
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{F5921D9D-9D3E-4D72-868E-56676034C148}
|
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{F68B434C-4EF5-46D5-AD88-532153E319C2}
|
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{F6922BCF-CB96-4858-87D1-E870080163E7}.bin
|
PNG image data, 164 x 89, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{F713D160-F3F2-4786-B27F-DFEE6A14F046}.bin
|
PNG image data, 163 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{FD97F471-FEBC-47CD-8B01-AB55A092E88E}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{FDBC368B-25BA-43AC-A0D8-CF43A3A0E3A9}
|
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1248x1624, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{FDD326B1-D384-49B7-AB22-DC02338CF50C}.bin
|
PNG image data, 230 x 68, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{FE40314B-2CDB-4F74-9B3E-ED93C34A1D96}.bin
|
PNG image data, 59 x 61, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{FE44BE42-CDBC-42BE-9F4B-393DEF1DCB1B}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{FF987C6E-C4A6-45C3-8FA0-D0A9491E9012}.bin
|
PNG image data, 167 x 92, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{FFFCC25B-9466-4BE3-9358-EAE763F4FA49}
|
Windows Enhanced Metafile (EMF) image data version 0x10000
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\36a44befa49650d0.customDestinations-ms (copy)
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\BD1WL3R5TV3ZM06PG4MP.temp
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Send to OneNote.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Description string, Has Relative path, Has command
line arguments, Archive, ctime=Tue Jun 30 15:57:16 2015, mtime=Fri Mar 17 15:20:20 2023, atime=Tue Jun 30 15:57:16 2015, length=157872,
window=hide
|
dropped
|
||
|
C:\Users\user\Documents\OneNote Notebooks\My Notebook\Open Notebook.onetoc2
|
data
|
dropped
|
||
|
C:\Users\user\Documents\OneNote Notebooks\My Notebook\Quick Notes.one
|
data
|
dropped
|
There are 683 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\ONENOTE.EXE
|
C:\Program Files (x86)\Microsoft Office\Office16\ONENOTE.EXE" "C:\Users\user\Desktop\Insight_Medical_Publishing_1.one
|
|
|
|
C:\Windows\SysWOW64\wscript.exe
|
C:\Windows\System32\WScript.exe "C:\Users\user\AppData\Local\Temp\click.wsf"
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
C:\Windows\System32\regsvr32.exe" "C:\Users\user\AppData\Local\Temp\rad617F4.tmp.dll
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
"C:\Users\user\AppData\Local\Temp\rad617F4.tmp.dll"
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
C:\Windows\system32\regsvr32.exe "C:\Windows\system32\FtYcgioKSiXTtw\clpHRoMLOOCr.dll"
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\ONENOTEM.EXE
|
/tsr
|
||
|
C:\Program Files (x86)\Microsoft Office\Office16\ONENOTEM.EXE
|
"C:\Program Files (x86)\Microsoft Office\Office16\ONENOTEM.EXE" /tsr
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://penshorn.org/
|
unknown
|
|
|
|
https://penshorn.org/admin/Ses8712iGR8du/tM
|
unknown
|
|
|
|
https://penshorn.org/8.
|
unknown
|
|
|
|
https://penshorn.org/admin/Ses8712iGR8du/otn
|
unknown
|
|
|
|
https://penshorn.org:443/admin/Ses8712iGR8du/
|
unknown
|
|
|
|
https://shell.suite.office.com:1443
|
unknown
|
||
|
https://autodiscover-s.outlook.com/
|
unknown
|
||
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
|
unknown
|
||
|
https://cdn.entity.
|
unknown
|
||
|
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
|
unknown
|
||
|
https://rpsticket.partnerservices.getmicrosoftkey.com
|
unknown
|
||
|
https://lookup.onenote.com/lookup/geolocation/v1
|
unknown
|
||
|
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
||
|
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
|
unknown
|
||
|
https://bbvoyage.com/useragreement/ElKHvb4QIQqSrh6Hqm/
|
unknown
|
||
|
https://api.aadrm.com/
|
unknown
|
||
|
https://66.228.32.31:7080/
|
unknown
|
||
|
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
|
unknown
|
||
|
https://api.microsoftstream.com/api/
|
unknown
|
||
|
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
|
unknown
|
||
|
https://cr.office.com
|
unknown
|
||
|
https://res.getmicrosoftkey.com/api/redemptionevents
|
unknown
|
||
|
https://tasks.office.com
|
unknown
|
||
|
https://officeci.azurewebsites.net/api/
|
unknown
|
||
|
http://ozmeydan.com/cekici/9/
|
unknown
|
||
|
https://my.microsoftpersonalcontent.com
|
unknown
|
||
|
https://store.office.cn/addinstemplate
|
unknown
|
||
|
https://160.16.142.56:8080/acfnurik/pjkp/
|
unknown
|
||
|
https://messaging.engagement.office.com/
|
unknown
|
||
|
http://wrappixels.com/wp-admin/GdIA2oOQEiO5G/0
|
unknown
|
||
|
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
||
|
https://www.odwebp.svc.ms
|
unknown
|
||
|
https://api.powerbi.com/v1.0/myorg/groups
|
unknown
|
||
|
https://web.microsoftstream.com/video/
|
unknown
|
||
|
https://api.addins.store.officeppe.com/addinstemplate
|
unknown
|
||
|
https://graph.windows.net
|
unknown
|
||
|
https://consent.config.office.com/consentcheckin/v1.0/consents
|
unknown
|
||
|
https://learningtools.onenote.com/learningtoolsapi/v2.0/Getvoices
|
unknown
|
||
|
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
|
unknown
|
||
|
https://d.docs.live.net
|
unknown
|
||
|
https://ncus.contentsync.
|
unknown
|
||
|
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
|
unknown
|
||
|
http://weather.service.msn.com/data.aspx
|
unknown
|
||
|
https://163.44.196.120:8080/acfnurik/pjkp/
|
unknown
|
||
|
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
|
unknown
|
||
|
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
|
unknown
|
||
|
https://pushchannel.1drv.ms
|
unknown
|
||
|
https://104.168.155.143:8080/l
|
unknown
|
||
|
https://wus2.contentsync.
|
unknown
|
||
|
https://clients.config.office.net/user/v1.0/ios
|
unknown
|
||
|
https://91.121.146.47:8080/acfnurik/pjkp/
|
unknown
|
||
|
https://o365auditrealtimeingestion.manage.office.com
|
unknown
|
||
|
https://outlook.office365.com/api/v1.0/me/Activities
|
unknown
|
||
|
https://159.89.202.34/acfnurik/pjkp/G
|
unknown
|
||
|
https://clients.config.office.net/user/v1.0/android/policies
|
unknown
|
||
|
https://164.90.222.65/acfnurik/pjkp/-
|
unknown
|
||
|
https://entitlement.diagnostics.office.com
|
unknown
|
||
|
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
|
unknown
|
||
|
https://outlook.office.com/
|
unknown
|
||
|
https://187.63.160.88:80/acfnurik/pjkp/q
|
unknown
|
||
|
https://storage.live.com/clientlogs/uploadlocation
|
unknown
|
||
|
https://microsoftapc-my.sharepoint.com
|
unknown
|
||
|
https://substrate.office.com/search/api/v1/SearchHistory
|
unknown
|
||
|
https://104.168.155.143:8080/acfnurik/pjkp/
|
unknown
|
||
|
https://clients.config.office.net/c2r/v1.0/InteractiveInstallation
|
unknown
|
||
|
https://graph.windows.net/
|
unknown
|
||
|
https://devnull.onenote.com
|
unknown
|
||
|
https://messaging.office.com/
|
unknown
|
||
|
https://159.89.202.34/acfnurik/pjkp/
|
unknown
|
||
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
|
unknown
|
||
|
https://skyapi.live.net/Activity/
|
unknown
|
||
|
https://www.gomespontes.com.br/logs/pd/
|
unknown
|
||
|
https://159.65.88.10:8080/
|
unknown
|
||
|
https://api.cortana.ai
|
unknown
|
||
|
https://messaging.action.office.com/setcampaignaction
|
unknown
|
||
|
https://visio.uservoice.com/forums/368202-visio-on-devices
|
unknown
|
||
|
https://staging.cortana.ai
|
unknown
|
||
|
https://onedrive.live.com/embed?
|
unknown
|
||
|
https://augloop.office.com
|
unknown
|
||
|
https://163.44.196.120:8080/L
|
unknown
|
||
|
https://159.65.88.10:8080/acfnurik/pjkp/
|
unknown
|
||
|
https://api.diagnosticssdf.office.com/v2/file
|
unknown
|
||
|
https://prod.mds.office.com/mds/api/v1.0/clientmodeldirectory
|
unknown
|
||
|
https://api.diagnostics.office.com
|
unknown
|
||
|
https://store.office.de/addinstemplate
|
unknown
|
||
|
https://wus2.pagecontentsync.
|
unknown
|
||
|
https://api.powerbi.com/v1.0/myorg/datasets
|
unknown
|
||
|
http://ozmeydan.com/cekici/9/xM
|
unknown
|
||
|
https://cortana.ai/api
|
unknown
|
||
|
https://104.168.155.143:8080/
|
unknown
|
||
|
https://160.16.142.56:8080/
|
unknown
|
||
|
https://api.diagnosticssdf.office.com
|
unknown
|
||
|
https://login.microsoftonline.com/
|
unknown
|
||
|
http://softwareulike.com/cWIYxWMPkK/
|
unknown
|
||
|
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
|
unknown
|
||
|
https://api.addins.omex.office.net/appinfo/query
|
unknown
|
||
|
https://clients.config.office.net/user/v1.0/tenantassociationkey
|
unknown
|
||
|
https://powerlift.acompli.net
|
unknown
|
||
|
https://cortana.ai
|
unknown
|
||
|
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
There are 90 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
penshorn.org
|
203.26.41.131
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
110.232.117.186
|
unknown
|
Australia
|
|
|
|
103.132.242.26
|
unknown
|
India
|
|
|
|
104.168.155.143
|
unknown
|
United States
|
|
|
|
79.137.35.198
|
unknown
|
France
|
|
|
|
115.68.227.76
|
unknown
|
Korea Republic of
|
|
|
|
163.44.196.120
|
unknown
|
Singapore
|
|
|
|
206.189.28.199
|
unknown
|
United States
|
|
|
|
203.26.41.131
|
penshorn.org
|
Australia
|
|
|
|
107.170.39.149
|
unknown
|
United States
|
|
|
|
66.228.32.31
|
unknown
|
United States
|
|
|
|
197.242.150.244
|
unknown
|
South Africa
|
|
|
|
185.4.135.165
|
unknown
|
Greece
|
|
|
|
183.111.227.137
|
unknown
|
Korea Republic of
|
|
|
|
45.176.232.124
|
unknown
|
Colombia
|
|
|
|
169.57.156.166
|
unknown
|
United States
|
|
|
|
164.68.99.3
|
unknown
|
Germany
|
|
|
|
139.59.126.41
|
unknown
|
Singapore
|
|
|
|
167.172.253.162
|
unknown
|
United States
|
|
|
|
167.172.199.165
|
unknown
|
United States
|
|
|
|
202.129.205.3
|
unknown
|
Thailand
|
|
|
|
147.139.166.154
|
unknown
|
United States
|
|
|
|
153.92.5.27
|
unknown
|
Germany
|
|
|
|
159.65.88.10
|
unknown
|
United States
|
|
|
|
172.105.226.75
|
unknown
|
United States
|
|
|
|
164.90.222.65
|
unknown
|
United States
|
|
|
|
213.239.212.5
|
unknown
|
Germany
|
|
|
|
5.135.159.50
|
unknown
|
France
|
|
|
|
186.194.240.217
|
unknown
|
Brazil
|
|
|
|
119.59.103.152
|
unknown
|
Thailand
|
|
|
|
159.89.202.34
|
unknown
|
United States
|
|
|
|
91.121.146.47
|
unknown
|
France
|
|
|
|
160.16.142.56
|
unknown
|
Japan
|
|
|
|
201.94.166.162
|
unknown
|
Brazil
|
|
|
|
91.207.28.33
|
unknown
|
Kyrgyzstan
|
|
|
|
103.75.201.2
|
unknown
|
Thailand
|
|
|
|
103.43.75.120
|
unknown
|
Japan
|
|
|
|
188.44.20.25
|
unknown
|
Macedonia
|
|
|
|
45.235.8.30
|
unknown
|
Brazil
|
|
|
|
153.126.146.25
|
unknown
|
Japan
|
|
|
|
72.15.201.15
|
unknown
|
United States
|
|
|
|
187.63.160.88
|
unknown
|
Brazil
|
|
|
|
82.223.21.224
|
unknown
|
Spain
|
|
|
|
173.212.193.249
|
unknown
|
Germany
|
|
|
|
95.217.221.146
|
unknown
|
Germany
|
|
|
|
149.56.131.28
|
unknown
|
Canada
|
|
|
|
182.162.143.56
|
unknown
|
Korea Republic of
|
|
|
|
1.234.2.232
|
unknown
|
Korea Republic of
|
|
|
|
129.232.188.93
|
unknown
|
South Africa
|
|
|
|
94.23.45.86
|
unknown
|
France
|
|
|
|
192.168.2.1
|
unknown
|
unknown
|
There are 40 hidden IPs, click here to show them.
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\Resiliency\StartupItems
|
!},
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\Resiliency\StartupItems
|
"},
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\Word\Addins\OneNote.WordAddinTakeNotesButton
|
FriendlyName
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\Word\Addins\OneNote.WordAddinTakeNotesButton
|
Description
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\Word\Addins\OneNote.WordAddinTakeNotesButton
|
LoadBehavior
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\Word\Addins\OneNote.WordAddinTakeNotesButton
|
CommandLineSafe
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\PowerPoint\Addins\OneNote.PowerPointAddinTakeNotesButton
|
FriendlyName
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\PowerPoint\Addins\OneNote.PowerPointAddinTakeNotesButton
|
Description
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\PowerPoint\Addins\OneNote.PowerPointAddinTakeNotesButton
|
LoadBehavior
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\PowerPoint\Addins\OneNote.PowerPointAddinTakeNotesButton
|
CommandLineSafe
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\General
|
LastMyDocumentsPathUsed
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\General
|
ProgressWindowPosLeft
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\General
|
ProgressWindowPosTop
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\General
|
ConsecutiveBootCrashes
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\General
|
ConsecutiveEarlyCrashes
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\Options\Save
|
BackupFilenamePostfixStartSP1
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\Options\Save
|
BackupFilenamePostfixEndSP1
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\Options\Save
|
BackupFilenamePostfixEndRerepairSP1
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote
|
FirstBootStatus
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\Options
|
WatsonLoggingUserId
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache
|
RemoteClearDate
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3
|
Last
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
|
FilePath
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
|
StartDate
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
|
EndDate
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
|
Properties
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
|
Url
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache
|
LastClean
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
DisableWinHttpCertAuth
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
DisableIsOwnerRegex
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
DisableSessionAwareHttpClose
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
DisableADALForExtendedApps
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
DisableADALSetSilentAuth
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
msoridDisableGuestCredProvider
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
msoridDisableOstringReplace
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\OpenNotebooks
|
1
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\000061091A0090400000000000F01FEC\Usage
|
OneNoteNonBootFilesIntl_1033
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\OpenNotebooks
|
1
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\OpenNotebooks
|
2
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\General
|
LastCacheFclRepairSuccessTime
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\General
|
LastAppliedNotebookColor
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\OpenNotebooks
|
1
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\Resiliency
|
RepairQuickNotesOnBoot
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\General
|
LastNotebookHierarchySQMUpdate
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\FavoritePens
|
Data
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\Place MRU\Change
|
ChangeId
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\RecentNotebooks\Change
|
ChangeId
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\General
|
OneNoteProtocolShouldPrompt
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\Options\Paths
|
UnfiledNotesSection
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\Options\ClientTelemetry
|
LastDataCollectionTimeAfterBoot
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109110000000000000000F01FEC\Usage
|
OneNoteFiles
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109110000000000000000F01FEC\Usage
|
ProductFiles
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
|
en-US
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
|
en-US
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{F2A7EE29-8BF6-4a6d-83F1-098E366C709C}\1.0
|
NULL
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{F2A7EE29-8BF6-4a6d-83F1-098E366C709C}\1.0\0\win32
|
NULL
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{0EA692EE-BB50-4E3C-AEF0-356D91732725}\1.1
|
NULL
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{0EA692EE-BB50-4E3C-AEF0-356D91732725}\1.1\0\win32
|
NULL
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{1D12BD3F-89B6-4077-AA2C-C9DC2BCA42F9}\TypeLib
|
Version
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1D12BD3F-89B6-4077-AA2C-C9DC2BCA42F9}\TypeLib
|
Version
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{627EA7B4-95B5-4980-84C1-9D20DA4460B1}\TypeLib
|
Version
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{627EA7B4-95B5-4980-84C1-9D20DA4460B1}\TypeLib
|
Version
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{452AC71A-B655-4967-A208-A4CC39DD7949}\TypeLib
|
Version
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{452AC71A-B655-4967-A208-A4CC39DD7949}\TypeLib
|
Version
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{6D4B9C3E-CC05-493F-85E2-43D1006DF96A}\TypeLib
|
Version
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6D4B9C3E-CC05-493F-85E2-43D1006DF96A}\TypeLib
|
Version
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{8E8304B8-CBD1-44F8-B0E8-89C625B2002E}\TypeLib
|
Version
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{8E8304B8-CBD1-44F8-B0E8-89C625B2002E}\TypeLib
|
Version
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{E2E1511D-502D-4BD0-8B3A-8A89A05CDCAE}\ProxyStubClsid32
|
NULL
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{E2E1511D-502D-4BD0-8B3A-8A89A05CDCAE}\TypeLib
|
Version
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E2E1511D-502D-4BD0-8B3A-8A89A05CDCAE}\ProxyStubClsid32
|
NULL
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E2E1511D-502D-4BD0-8B3A-8A89A05CDCAE}\TypeLib
|
Version
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote
|
FirstBootStatus
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\General
|
LastAppliedNotebookColor
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote
|
FirstBootStatus
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109110000000000000000F01FEC\Usage
|
ProductFiles
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Roaming
|
RoamingConfigurableSettings
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Roaming
|
RoamingLastSyncTime
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Roaming
|
RoamingLastWriteTime
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote
|
FirstBootStatus
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog
|
CacheReady
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog
|
LastRequest
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog
|
CacheReady
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog
|
LastUpdate
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog
|
NextUpdate
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\General
|
LastAppliedNotebookColor
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\000061091A0090400000000000F01FEC\Usage
|
OneNoteNonBootFilesIntl_1033
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\General
|
LastAppliedNotebookColor
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\000061091A0090400000000000F01FEC\Usage
|
OneNoteFilesIntl_1033
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109110000000000000000F01FEC\Usage
|
OneNoteFiles
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\000061091A0090400000000000F01FEC\Usage
|
OneNoteFilesIntl_1033
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109110000000000000000F01FEC\Usage
|
OneNoteFiles
|
There are 82 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
8F0000
|
direct allocation
|
page execute and read and write
|
|
|
|
921000
|
direct allocation
|
page execute read
|
|
|
|
9C8000
|
heap
|
page read and write
|
|
|
|
2550000
|
direct allocation
|
page execute and read and write
|
|
|
|
2581000
|
direct allocation
|
page execute read
|
|
|
|
A9A000
|
heap
|
page read and write
|
||
|
51F7000
|
heap
|
page read and write
|
||
|
51F1000
|
heap
|
page read and write
|
||
|
56DF000
|
heap
|
page read and write
|
||
|
180001000
|
unkown
|
page execute read
|
||
|
1D1583B0000
|
heap
|
page read and write
|
||
|
27CCD248000
|
heap
|
page read and write
|
||
|
19FE5E6E000
|
heap
|
page read and write
|
||
|
2C4E000
|
stack
|
page read and write
|
||
|
DDE7C7B000
|
stack
|
page read and write
|
||
|
1FC34A30000
|
heap
|
page read and write
|
||
|
3144000
|
heap
|
page read and write
|
||
|
3155000
|
heap
|
page read and write
|
||
|
27CCD26D000
|
heap
|
page read and write
|
||
|
27CCD27E000
|
heap
|
page read and write
|
||
|
A3D000
|
heap
|
page read and write
|
||
|
22D07058000
|
heap
|
page read and write
|
||
|
1FC34090000
|
heap
|
page read and write
|
||
|
7416FA000
|
stack
|
page read and write
|
||
|
51F9000
|
heap
|
page read and write
|
||
|
5179000
|
heap
|
page read and write
|
||
|
59B6000
|
heap
|
page read and write
|
||
|
111ADFE000
|
stack
|
page read and write
|
||
|
58AD000
|
heap
|
page read and write
|
||
|
27CCD26A000
|
heap
|
page read and write
|
||
|
55D0000
|
heap
|
page read and write
|
||
|
34A8000
|
heap
|
page read and write
|
||
|
51EF000
|
heap
|
page read and write
|
||
|
5A3A000
|
heap
|
page read and write
|
||
|
1CCAF813000
|
heap
|
page read and write
|
||
|
1CCAF802000
|
heap
|
page read and write
|
||
|
A1B000
|
heap
|
page read and write
|
||
|
51DB000
|
heap
|
page read and write
|
||
|
1FC3403D000
|
heap
|
page read and write
|
||
|
2BD0000
|
heap
|
page read and write
|
||
|
19FE5E66000
|
heap
|
page read and write
|
||
|
5744000
|
heap
|
page read and write
|
||
|
5E9E000
|
stack
|
page read and write
|
||
|
59CA000
|
heap
|
page read and write
|
||
|
51E2000
|
heap
|
page read and write
|
||
|
61AE000
|
stack
|
page read and write
|
||
|
22D0703D000
|
heap
|
page read and write
|
||
|
1FC34055000
|
heap
|
page read and write
|
||
|
22D07013000
|
heap
|
page read and write
|
||
|
54CC000
|
heap
|
page read and write
|
||
|
25AB000
|
direct allocation
|
page read and write
|
||
|
5634000
|
heap
|
page read and write
|
||
|
2C20000
|
heap
|
page read and write
|
||
|
1FC34088000
|
heap
|
page read and write
|
||
|
5799000
|
heap
|
page read and write
|
||
|
61D0000
|
heap
|
page read and write
|
||
|
19FE65C0000
|
trusted library allocation
|
page read and write
|
||
|
5A20000
|
heap
|
page read and write
|
||
|
A37000
|
heap
|
page read and write
|
||
|
2BD1000
|
heap
|
page read and write
|
||
|
58AD000
|
heap
|
page read and write
|
||
|
7415FF000
|
stack
|
page read and write
|
||
|
BD86B7E000
|
stack
|
page read and write
|
||
|
570E000
|
heap
|
page read and write
|
||
|
3089000
|
heap
|
page read and write
|
||
|
1FC34A23000
|
heap
|
page read and write
|
||
|
2540000
|
heap
|
page read and write
|
||
|
27A8000
|
stack
|
page read and write
|
||
|
A17000
|
heap
|
page read and write
|
||
|
58D5000
|
heap
|
page read and write
|
||
|
5784000
|
heap
|
page read and write
|
||
|
2A67000
|
heap
|
page read and write
|
||
|
5957000
|
heap
|
page read and write
|
||
|
57BE000
|
heap
|
page read and write
|
||
|
27CCD229000
|
heap
|
page read and write
|
||
|
311D000
|
heap
|
page read and write
|
||
|
34A4000
|
heap
|
page read and write
|
||
|
28270F9000
|
stack
|
page read and write
|
||
|
19FE5D20000
|
heap
|
page read and write
|
||
|
1FC3496F000
|
heap
|
page read and write
|
||
|
19FE5EC3000
|
heap
|
page read and write
|
||
|
5507000
|
heap
|
page read and write
|
||
|
51DB000
|
heap
|
page read and write
|
||
|
51DF000
|
heap
|
page read and write
|
||
|
5654000
|
heap
|
page read and write
|
||
|
5AF4000
|
heap
|
page read and write
|
||
|
59C0000
|
heap
|
page read and write
|
||
|
2DDB000
|
heap
|
page read and write
|
||
|
26AF000
|
stack
|
page read and write
|
||
|
556E000
|
heap
|
page read and write
|
||
|
1FC34943000
|
heap
|
page read and write
|
||
|
28CD000
|
stack
|
page read and write
|
||
|
5199000
|
heap
|
page read and write
|
||
|
2A30000
|
heap
|
page read and write
|
||
|
56E6000
|
heap
|
page read and write
|
||
|
55B0000
|
heap
|
page read and write
|
||
|
27CCD24E000
|
heap
|
page read and write
|
||
|
54F3000
|
heap
|
page read and write
|
||
|
30E7000
|
heap
|
page read and write
|
||
|
19FE6602000
|
heap
|
page read and write
|
||
|
18D57FE000
|
stack
|
page read and write
|
||
|
248B000
|
stack
|
page read and write
|
||
|
5682000
|
heap
|
page read and write
|
||
|
56CB000
|
heap
|
page read and write
|
||
|
1CCAF610000
|
heap
|
page read and write
|
||
|
5A60000
|
heap
|
page read and write
|
||
|
DDE7EFE000
|
stack
|
page read and write
|
||
|
9C0000
|
heap
|
page read and write
|
||
|
22D0702D000
|
heap
|
page read and write
|
||
|
34A8000
|
heap
|
page read and write
|
||
|
5669000
|
heap
|
page read and write
|
||
|
1FC341B9000
|
heap
|
page read and write
|
||
|
55C6000
|
heap
|
page read and write
|
||
|
2A3A000
|
heap
|
page read and write
|
||
|
5911000
|
heap
|
page read and write
|
||
|
5518000
|
heap
|
page read and write
|
||
|
597D000
|
heap
|
page read and write
|
||
|
58C4000
|
heap
|
page read and write
|
||
|
5A86000
|
heap
|
page read and write
|
||
|
1CCAF5B0000
|
heap
|
page read and write
|
||
|
55E8000
|
heap
|
page read and write
|
||
|
16FDAFD000
|
stack
|
page read and write
|
||
|
5691000
|
heap
|
page read and write
|
||
|
57B0000
|
heap
|
page read and write
|
||
|
554B000
|
heap
|
page read and write
|
||
|
59E7000
|
heap
|
page read and write
|
||
|
54C0000
|
heap
|
page read and write
|
||
|
2BF8000
|
heap
|
page read and write
|
||
|
5A60000
|
heap
|
page read and write
|
||
|
552F000
|
heap
|
page read and write
|
||
|
16FDDFC000
|
stack
|
page read and write
|
||
|
55CD000
|
heap
|
page read and write
|
||
|
5568000
|
heap
|
page read and write
|
||
|
19FE6712000
|
heap
|
page read and write
|
||
|
7E06D7B000
|
stack
|
page read and write
|
||
|
5957000
|
heap
|
page read and write
|
||
|
561B000
|
heap
|
page read and write
|
||
|
1FC34000000
|
heap
|
page read and write
|
||
|
55BE000
|
heap
|
page read and write
|
||
|
1A78EC02000
|
trusted library allocation
|
page read and write
|
||
|
5894000
|
heap
|
page read and write
|
||
|
58EC000
|
heap
|
page read and write
|
||
|
1AEE4228000
|
heap
|
page read and write
|
||
|
571C000
|
heap
|
page read and write
|
||
|
2826F7E000
|
stack
|
page read and write
|
||
|
58B5000
|
heap
|
page read and write
|
||
|
520A000
|
heap
|
page read and write
|
||
|
51E3000
|
heap
|
page read and write
|
||
|
51EE000
|
heap
|
page read and write
|
||
|
A9A000
|
heap
|
page read and write
|
||
|
574C000
|
heap
|
page read and write
|
||
|
A52000
|
heap
|
page read and write
|
||
|
AA7000
|
heap
|
page read and write
|
||
|
1AEE3FA0000
|
heap
|
page read and write
|
||
|
1D158613000
|
heap
|
page read and write
|
||
|
2A3A000
|
heap
|
page read and write
|
||
|
5FD0000
|
remote allocation
|
page read and write
|
||
|
27CCD230000
|
heap
|
page read and write
|
||
|
1A78E252000
|
heap
|
page read and write
|
||
|
22D07000000
|
heap
|
page read and write
|
||
|
3100000
|
heap
|
page read and write
|
||
|
596B000
|
heap
|
page read and write
|
||
|
30C5000
|
heap
|
page read and write
|
||
|
3060000
|
heap
|
page read and write
|
||
|
1FC349D0000
|
heap
|
page read and write
|
||
|
51B3000
|
heap
|
page read and write
|
||
|
593B000
|
heap
|
page read and write
|
||
|
ABE000
|
heap
|
page read and write
|
||
|
1AEE4213000
|
heap
|
page read and write
|
||
|
2A47000
|
heap
|
page read and write
|
||
|
564C000
|
heap
|
page read and write
|
||
|
5730000
|
heap
|
page read and write
|
||
|
30BD000
|
heap
|
page read and write
|
||
|
5730000
|
heap
|
page read and write
|
||
|
34AB000
|
heap
|
page read and write
|
||
|
5A16000
|
heap
|
page read and write
|
||
|
111AA7B000
|
stack
|
page read and write
|
||
|
5ADB000
|
heap
|
page read and write
|
||
|
1A78E170000
|
heap
|
page read and write
|
||
|
55E1000
|
heap
|
page read and write
|
||
|
5A24000
|
heap
|
page read and write
|
||
|
3150000
|
heap
|
page read and write
|
||
|
51FA000
|
heap
|
page read and write
|
||
|
55CD000
|
heap
|
page read and write
|
||
|
55B6000
|
heap
|
page read and write
|
||
|
A16000
|
heap
|
page read and write
|
||
|
5669000
|
heap
|
page read and write
|
||
|
30A7000
|
heap
|
page read and write
|
||
|
27CCD240000
|
heap
|
page read and write
|
||
|
5A34000
|
heap
|
page read and write
|
||
|
6DDE000
|
stack
|
page read and write
|
||
|
240C000
|
stack
|
page read and write
|
||
|
1D158657000
|
heap
|
page read and write
|
||
|
AB7000
|
heap
|
page read and write
|
||
|
1FC3405B000
|
heap
|
page read and write
|
||
|
5ADB000
|
heap
|
page read and write
|
||
|
1FC34802000
|
heap
|
page read and write
|
||
|
1AEE4265000
|
heap
|
page read and write
|
||
|
27CCD284000
|
heap
|
page read and write
|
||
|
5744000
|
heap
|
page read and write
|
||
|
54ED000
|
heap
|
page read and write
|
||
|
5200000
|
heap
|
page read and write
|
||
|
CE5000
|
heap
|
page read and write
|
||
|
970000
|
trusted library allocation
|
page read and write
|
||
|
180021000
|
unkown
|
page read and write
|
||
|
A37000
|
heap
|
page read and write
|
||
|
30C6000
|
heap
|
page read and write
|
||
|
307C000
|
heap
|
page read and write
|
||
|
309C000
|
heap
|
page read and write
|
||
|
5963000
|
heap
|
page read and write
|
||
|
19FE5F02000
|
heap
|
page read and write
|
||
|
2A47000
|
heap
|
page read and write
|
||
|
573C000
|
heap
|
page read and write
|
||
|
7E06E7E000
|
stack
|
page read and write
|
||
|
262F000
|
stack
|
page read and write
|
||
|
C70000
|
direct allocation
|
page execute and read and write
|
||
|
57B0000
|
heap
|
page read and write
|
||
|
51ED000
|
heap
|
page read and write
|
||
|
5827000
|
heap
|
page read and write
|
||
|
59DC000
|
heap
|
page read and write
|
||
|
2DD2000
|
heap
|
page read and write
|
||
|
2BCC000
|
stack
|
page read and write
|
||
|
AB3000
|
heap
|
page read and write
|
||
|
34AD000
|
heap
|
page read and write
|
||
|
569C000
|
heap
|
page read and write
|
||
|
5A34000
|
heap
|
page read and write
|
||
|
A52000
|
heap
|
page read and write
|
||
|
596D000
|
heap
|
page read and write
|
||
|
51E3000
|
heap
|
page read and write
|
||
|
34AE000
|
heap
|
page read and write
|
||
|
520A000
|
heap
|
page read and write
|
||
|
920000
|
direct allocation
|
page read and write
|
||
|
5551000
|
heap
|
page read and write
|
||
|
1D158626000
|
heap
|
page read and write
|
||
|
1A78E1E0000
|
heap
|
page read and write
|
||
|
57B0000
|
heap
|
page read and write
|
||
|
3097000
|
heap
|
page read and write
|
||
|
588C000
|
heap
|
page read and write
|
||
|
30B9000
|
heap
|
page read and write
|
||
|
59D3000
|
heap
|
page read and write
|
||
|
5760000
|
heap
|
page read and write
|
||
|
1CCAF7E0000
|
remote allocation
|
page read and write
|
||
|
560F000
|
heap
|
page read and write
|
||
|
5960000
|
heap
|
page read and write
|
||
|
1A78E180000
|
heap
|
page read and write
|
||
|
2A50000
|
heap
|
page read and write
|
||
|
520A000
|
heap
|
page read and write
|
||
|
A9C000
|
heap
|
page read and write
|
||
|
A9C000
|
heap
|
page read and write
|
||
|
18D4CFC000
|
stack
|
page read and write
|
||
|
594B000
|
heap
|
page read and write
|
||
|
5654000
|
heap
|
page read and write
|
||
|
1D158510000
|
trusted library allocation
|
page read and write
|
||
|
ABE000
|
heap
|
page read and write
|
||
|
57BE000
|
heap
|
page read and write
|
||
|
5920000
|
heap
|
page read and write
|
||
|
A3F000
|
heap
|
page read and write
|
||
|
180016000
|
unkown
|
page readonly
|
||
|
311F000
|
heap
|
page read and write
|
||
|
592D000
|
heap
|
page read and write
|
||
|
58E3000
|
heap
|
page read and write
|
||
|
51CF000
|
heap
|
page read and write
|
||
|
5737000
|
heap
|
page read and write
|
||
|
A9C000
|
heap
|
page read and write
|
||
|
250C000
|
stack
|
page read and write
|
||
|
27CCD1E0000
|
trusted library allocation
|
page read and write
|
||
|
59D1000
|
heap
|
page read and write
|
||
|
51E6000
|
heap
|
page read and write
|
||
|
565B000
|
heap
|
page read and write
|
||
|
5608000
|
heap
|
page read and write
|
||
|
18D50FC000
|
stack
|
page read and write
|
||
|
523E000
|
heap
|
page read and write
|
||
|
57E5000
|
heap
|
page read and write
|
||
|
30B9000
|
heap
|
page read and write
|
||
|
19FE5E00000
|
heap
|
page read and write
|
||
|
2C50000
|
heap
|
page read and write
|
||
|
180001000
|
unkown
|
page execute read
|
||
|
5819000
|
heap
|
page read and write
|
||
|
BD8667E000
|
stack
|
page read and write
|
||
|
19FE5ECB000
|
heap
|
page read and write
|
||
|
8D0000
|
heap
|
page read and write
|
||
|
5A2E000
|
heap
|
page read and write
|
||
|
51B3000
|
heap
|
page read and write
|
||
|
ABE000
|
heap
|
page read and write
|
||
|
27CCD268000
|
heap
|
page read and write
|
||
|
6A2E000
|
stack
|
page read and write
|
||
|
51DA000
|
heap
|
page read and write
|
||
|
5A45000
|
heap
|
page read and write
|
||
|
5A0C000
|
heap
|
page read and write
|
||
|
16FD9FE000
|
stack
|
page read and write
|
||
|
1D158E02000
|
trusted library allocation
|
page read and write
|
||
|
34A0000
|
heap
|
page read and write
|
||
|
16FD8FF000
|
stack
|
page read and write
|
||
|
5944000
|
heap
|
page read and write
|
||
|
2C1F000
|
heap
|
page read and write
|
||
|
59C8000
|
heap
|
page read and write
|
||
|
55BE000
|
heap
|
page read and write
|
||
|
A9C000
|
heap
|
page read and write
|
||
|
57C7000
|
heap
|
page read and write
|
||
|
B3A000
|
stack
|
page read and write
|
||
|
A17000
|
heap
|
page read and write
|
||
|
57B8000
|
heap
|
page read and write
|
||
|
27CCD22E000
|
heap
|
page read and write
|
||
|
30D2000
|
heap
|
page read and write
|
||
|
5886000
|
heap
|
page read and write
|
||
|
5568000
|
heap
|
page read and write
|
||
|
54D1000
|
heap
|
page read and write
|
||
|
1CCAF858000
|
heap
|
page read and write
|
||
|
5508000
|
heap
|
page read and write
|
||
|
592B000
|
heap
|
page read and write
|
||
|
56AF000
|
heap
|
page read and write
|
||
|
30C5000
|
heap
|
page read and write
|
||
|
3117000
|
heap
|
page read and write
|
||
|
599B000
|
heap
|
page read and write
|
||
|
1AEE4202000
|
heap
|
page read and write
|
||
|
180000000
|
unkown
|
page readonly
|
||
|
960000
|
trusted library allocation
|
page read and write
|
||
|
312C000
|
heap
|
page read and write
|
||
|
592F000
|
heap
|
page read and write
|
||
|
2C41000
|
heap
|
page read and write
|
||
|
51DC000
|
heap
|
page read and write
|
||
|
59AF000
|
heap
|
page read and write
|
||
|
1A78EA80000
|
trusted library allocation
|
page read and write
|
||
|
520A000
|
heap
|
page read and write
|
||
|
55EB000
|
heap
|
page read and write
|
||
|
3068000
|
heap
|
page read and write
|
||
|
5529000
|
heap
|
page read and write
|
||
|
3094000
|
heap
|
page read and write
|
||
|
A1B000
|
heap
|
page read and write
|
||
|
5901000
|
heap
|
page read and write
|
||
|
740F7F000
|
stack
|
page read and write
|
||
|
592B000
|
heap
|
page read and write
|
||
|
312F000
|
heap
|
page read and write
|
||
|
5803000
|
heap
|
page read and write
|
||
|
5922000
|
heap
|
page read and write
|
||
|
5939000
|
heap
|
page read and write
|
||
|
55C0000
|
heap
|
page read and write
|
||
|
5901000
|
heap
|
page read and write
|
||
|
27CCD250000
|
heap
|
page read and write
|
||
|
28272FF000
|
stack
|
page read and write
|
||
|
28271FE000
|
stack
|
page read and write
|
||
|
1AEE4100000
|
trusted library allocation
|
page read and write
|
||
|
310C000
|
heap
|
page read and write
|
||
|
51DC000
|
heap
|
page read and write
|
||
|
16FDCFE000
|
stack
|
page read and write
|
||
|
51DD000
|
heap
|
page read and write
|
||
|
950000
|
heap
|
page readonly
|
||
|
1AEE4286000
|
heap
|
page read and write
|
||
|
5759000
|
heap
|
page read and write
|
||
|
2D71000
|
heap
|
page read and write
|
||
|
5640000
|
heap
|
page read and write
|
||
|
ABE000
|
heap
|
page read and write
|
||
|
3158000
|
heap
|
page read and write
|
||
|
5175000
|
heap
|
page read and write
|
||
|
A17000
|
heap
|
page read and write
|
||
|
1FC341E5000
|
heap
|
page read and write
|
||
|
A45000
|
heap
|
page read and write
|
||
|
A9A000
|
heap
|
page read and write
|
||
|
51CF000
|
heap
|
page read and write
|
||
|
583E000
|
heap
|
page read and write
|
||
|
22D06F70000
|
heap
|
page read and write
|
||
|
55A2000
|
heap
|
page read and write
|
||
|
27CCD267000
|
heap
|
page read and write
|
||
|
1FC34013000
|
heap
|
page read and write
|
||
|
27CCD277000
|
heap
|
page read and write
|
||
|
2520000
|
heap
|
page readonly
|
||
|
5669000
|
heap
|
page read and write
|
||
|
1FC33F40000
|
trusted library allocation
|
page read and write
|
||
|
5A53000
|
heap
|
page read and write
|
||
|
307D000
|
heap
|
page read and write
|
||
|
59A6000
|
heap
|
page read and write
|
||
|
57C1000
|
heap
|
page read and write
|
||
|
ABE000
|
heap
|
page read and write
|
||
|
5706000
|
heap
|
page read and write
|
||
|
740FFF000
|
stack
|
page read and write
|
||
|
57A1000
|
heap
|
page read and write
|
||
|
27CCD279000
|
heap
|
page read and write
|
||
|
27CCDA02000
|
trusted library allocation
|
page read and write
|
||
|
1AEE422A000
|
heap
|
page read and write
|
||
|
55BE000
|
heap
|
page read and write
|
||
|
56A3000
|
heap
|
page read and write
|
||
|
589C000
|
heap
|
page read and write
|
||
|
5554000
|
heap
|
page read and write
|
||
|
54F6000
|
heap
|
page read and write
|
||
|
5591000
|
heap
|
page read and write
|
||
|
7E06B7B000
|
stack
|
page read and write
|
||
|
1FC34044000
|
heap
|
page read and write
|
||
|
A0F000
|
heap
|
page read and write
|
||
|
DDE817D000
|
stack
|
page read and write
|
||
|
BD866FE000
|
stack
|
page read and write
|
||
|
A5F000
|
heap
|
page read and write
|
||
|
5A23000
|
heap
|
page read and write
|
||
|
2DD8000
|
heap
|
page read and write
|
||
|
5776000
|
heap
|
page read and write
|
||
|
520A000
|
heap
|
page read and write
|
||
|
2A47000
|
heap
|
page read and write
|
||
|
22D06F80000
|
heap
|
page read and write
|
||
|
5A45000
|
heap
|
page read and write
|
||
|
596B000
|
heap
|
page read and write
|
||
|
19FE5EE1000
|
heap
|
page read and write
|
||
|
6F366000
|
unkown
|
page readonly
|
||
|
6B2F000
|
stack
|
page read and write
|
||
|
A0F000
|
heap
|
page read and write
|
||
|
74117F000
|
stack
|
page read and write
|
||
|
51E3000
|
heap
|
page read and write
|
||
|
55B000
|
stack
|
page read and write
|
||
|
5642000
|
heap
|
page read and write
|
||
|
582F000
|
heap
|
page read and write
|
||
|
56D2000
|
heap
|
page read and write
|
||
|
34A4000
|
heap
|
page read and write
|
||
|
585F000
|
heap
|
page read and write
|
||
|
1CCAF5A0000
|
heap
|
page read and write
|
||
|
30BC000
|
heap
|
page read and write
|
||
|
18D557C000
|
stack
|
page read and write
|
||
|
111B1FD000
|
stack
|
page read and write
|
||
|
6EDC000
|
stack
|
page read and write
|
||
|
27CCD271000
|
heap
|
page read and write
|
||
|
C80000
|
heap
|
page read and write
|
||
|
19FE5EBA000
|
heap
|
page read and write
|
||
|
2A35000
|
heap
|
page read and write
|
||
|
1FC34059000
|
heap
|
page read and write
|
||
|
CC7000
|
heap
|
page read and write
|
||
|
74127B000
|
stack
|
page read and write
|
||
|
34A8000
|
heap
|
page read and write
|
||
|
5503000
|
heap
|
page read and write
|
||
|
57E5000
|
heap
|
page read and write
|
||
|
A1B000
|
heap
|
page read and write
|
||
|
51D3000
|
heap
|
page read and write
|
||
|
5648000
|
heap
|
page read and write
|
||
|
585F000
|
heap
|
page read and write
|
||
|
19FE5EE7000
|
heap
|
page read and write
|
||
|
55D9000
|
heap
|
page read and write
|
||
|
C88000
|
heap
|
page read and write
|
||
|
2C20000
|
heap
|
page read and write
|
||
|
1FC3406D000
|
heap
|
page read and write
|
||
|
2A3A000
|
heap
|
page read and write
|
||
|
5894000
|
heap
|
page read and write
|
||
|
5669000
|
heap
|
page read and write
|
||
|
5F0000
|
heap
|
page read and write
|
||
|
25AC000
|
direct allocation
|
page readonly
|
||
|
16FDBFC000
|
stack
|
page read and write
|
||
|
1CCAF842000
|
heap
|
page read and write
|
||
|
1FC34A02000
|
heap
|
page read and write
|
||
|
571C000
|
heap
|
page read and write
|
||
|
990000
|
remote allocation
|
page read and write
|
||
|
349E000
|
stack
|
page read and write
|
||
|
A9A000
|
heap
|
page read and write
|
||
|
562D000
|
heap
|
page read and write
|
||
|
94A000
|
direct allocation
|
page readonly
|
||
|
30F5000
|
heap
|
page read and write
|
||
|
A3D000
|
heap
|
page read and write
|
||
|
7E0659C000
|
stack
|
page read and write
|
||
|
A52000
|
heap
|
page read and write
|
||
|
27CCD241000
|
heap
|
page read and write
|
||
|
58F2000
|
heap
|
page read and write
|
||
|
1CCAF7E0000
|
remote allocation
|
page read and write
|
||
|
559C000
|
heap
|
page read and write
|
||
|
335E000
|
stack
|
page read and write
|
||
|
111B3FE000
|
stack
|
page read and write
|
||
|
5744000
|
heap
|
page read and write
|
||
|
51DD000
|
heap
|
page read and write
|
||
|
34A6000
|
heap
|
page read and write
|
||
|
589D000
|
heap
|
page read and write
|
||
|
596C000
|
heap
|
page read and write
|
||
|
1FC33DC0000
|
heap
|
page read and write
|
||
|
599C000
|
heap
|
page read and write
|
||
|
59E8000
|
heap
|
page read and write
|
||
|
60AE000
|
stack
|
page read and write
|
||
|
517D000
|
heap
|
page read and write
|
||
|
27CCD26B000
|
heap
|
page read and write
|
||
|
5AAC000
|
heap
|
page read and write
|
||
|
520A000
|
heap
|
page read and write
|
||
|
111AC7B000
|
stack
|
page read and write
|
||
|
5A30000
|
heap
|
page read and write
|
||
|
5992000
|
heap
|
page read and write
|
||
|
5867000
|
heap
|
page read and write
|
||
|
22D07002000
|
heap
|
page read and write
|
||
|
27CCD256000
|
heap
|
page read and write
|
||
|
5178000
|
heap
|
page read and write
|
||
|
19FE5CB0000
|
heap
|
page read and write
|
||
|
29F2000
|
heap
|
page read and write
|
||
|
1CCAF7E0000
|
remote allocation
|
page read and write
|
||
|
2D50000
|
heap
|
page read and write
|
||
|
294F000
|
stack
|
page read and write
|
||
|
19FE6700000
|
heap
|
page read and write
|
||
|
BD8697E000
|
stack
|
page read and write
|
||
|
1CCAF848000
|
heap
|
page read and write
|
||
|
27CCD200000
|
heap
|
page read and write
|
||
|
1A78E228000
|
heap
|
page read and write
|
||
|
51F2000
|
heap
|
page read and write
|
||
|
51E0000
|
heap
|
page read and write
|
||
|
592B000
|
heap
|
page read and write
|
||
|
51F0000
|
heap
|
page read and write
|
||
|
2A3A000
|
heap
|
page read and write
|
||
|
3030000
|
heap
|
page read and write
|
||
|
27B0000
|
trusted library allocation
|
page read and write
|
||
|
ABE000
|
heap
|
page read and write
|
||
|
1FC34113000
|
heap
|
page read and write
|
||
|
970000
|
trusted library allocation
|
page read and write
|
||
|
582F000
|
heap
|
page read and write
|
||
|
5640000
|
heap
|
page read and write
|
||
|
27CCD23A000
|
heap
|
page read and write
|
||
|
2580000
|
direct allocation
|
page read and write
|
||
|
AB3000
|
heap
|
page read and write
|
||
|
27CCD244000
|
heap
|
page read and write
|
||
|
9D0000
|
heap
|
page read and write
|
||
|
5839000
|
heap
|
page read and write
|
||
|
313F000
|
heap
|
page read and write
|
||
|
5A86000
|
heap
|
page read and write
|
||
|
6F36F000
|
unkown
|
page readonly
|
||
|
19FE5E13000
|
heap
|
page read and write
|
||
|
1CCAF7A0000
|
trusted library allocation
|
page read and write
|
||
|
A9A000
|
heap
|
page read and write
|
||
|
2530000
|
trusted library allocation
|
page read and write
|
||
|
3100000
|
heap
|
page read and write
|
||
|
58BD000
|
heap
|
page read and write
|
||
|
1D158616000
|
heap
|
page read and write
|
||
|
2A35000
|
heap
|
page read and write
|
||
|
5875000
|
heap
|
page read and write
|
||
|
27CCD275000
|
heap
|
page read and write
|
||
|
ABE000
|
heap
|
page read and write
|
||
|
1CCAF902000
|
heap
|
page read and write
|
||
|
16FD47C000
|
stack
|
page read and write
|
||
|
1CCB1202000
|
trusted library allocation
|
page read and write
|
||
|
5608000
|
heap
|
page read and write
|
||
|
2A2C000
|
heap
|
page read and write
|
||
|
1D15863D000
|
heap
|
page read and write
|
||
|
AB1000
|
heap
|
page read and write
|
||
|
1CCAF847000
|
heap
|
page read and write
|
||
|
111AEFD000
|
stack
|
page read and write
|
||
|
A1B000
|
heap
|
page read and write
|
||
|
5204000
|
heap
|
page read and write
|
||
|
111B0FD000
|
stack
|
page read and write
|
||
|
1AEE4000000
|
heap
|
page read and write
|
||
|
3093000
|
heap
|
page read and write
|
||
|
59E5000
|
heap
|
page read and write
|
||
|
18D53FE000
|
stack
|
page read and write
|
||
|
6212000
|
heap
|
page read and write
|
||
|
3117000
|
heap
|
page read and write
|
||
|
5697000
|
heap
|
page read and write
|
||
|
1D15862E000
|
heap
|
page read and write
|
||
|
5A97000
|
heap
|
page read and write
|
||
|
111B6FE000
|
stack
|
page read and write
|
||
|
59F2000
|
heap
|
page read and write
|
||
|
5990000
|
heap
|
page read and write
|
||
|
30CE000
|
heap
|
page read and write
|
||
|
C75000
|
heap
|
page read and write
|
||
|
51EB000
|
heap
|
page read and write
|
||
|
27CCD249000
|
heap
|
page read and write
|
||
|
A52000
|
heap
|
page read and write
|
||
|
1FC34A13000
|
heap
|
page read and write
|
||
|
51DA000
|
heap
|
page read and write
|
||
|
29F0000
|
heap
|
page read and write
|
||
|
1AEE4313000
|
heap
|
page read and write
|
||
|
DDE82FD000
|
stack
|
page read and write
|
||
|
5571000
|
heap
|
page read and write
|
||
|
97B000
|
stack
|
page read and write
|
||
|
5D1D000
|
stack
|
page read and write
|
||
|
5A73000
|
heap
|
page read and write
|
||
|
2A35000
|
heap
|
page read and write
|
||
|
55B0000
|
heap
|
page read and write
|
||
|
5A16000
|
heap
|
page read and write
|
||
|
19FE673A000
|
heap
|
page read and write
|
||
|
AB7000
|
heap
|
page read and write
|
||
|
3118000
|
heap
|
page read and write
|
||
|
22D07029000
|
heap
|
page read and write
|
||
|
558A000
|
heap
|
page read and write
|
||
|
7413FE000
|
stack
|
page read and write
|
||
|
1FC34033000
|
heap
|
page read and write
|
||
|
2A0D000
|
heap
|
page read and write
|
||
|
51CF000
|
heap
|
page read and write
|
||
|
5C1E000
|
stack
|
page read and write
|
||
|
5171000
|
heap
|
page read and write
|
||
|
5F9F000
|
stack
|
page read and write
|
||
|
51DD000
|
heap
|
page read and write
|
||
|
27CCD272000
|
heap
|
page read and write
|
||
|
180023000
|
unkown
|
page readonly
|
||
|
1D15863B000
|
heap
|
page read and write
|
||
|
1AEE423C000
|
heap
|
page read and write
|
||
|
597F000
|
heap
|
page read and write
|
||
|
1FC34994000
|
heap
|
page read and write
|
||
|
5744000
|
heap
|
page read and write
|
||
|
5901000
|
heap
|
page read and write
|
||
|
5507000
|
heap
|
page read and write
|
||
|
A9A000
|
heap
|
page read and write
|
||
|
22D06FE0000
|
heap
|
page read and write
|
||
|
5903000
|
heap
|
page read and write
|
||
|
520A000
|
heap
|
page read and write
|
||
|
2CC0000
|
heap
|
page read and write
|
||
|
1FC34922000
|
heap
|
page read and write
|
||
|
27CCD239000
|
heap
|
page read and write
|
||
|
51DF000
|
heap
|
page read and write
|
||
|
1FC349C6000
|
heap
|
page read and write
|
||
|
C50000
|
heap
|
page read and write
|
||
|
990000
|
remote allocation
|
page read and write
|
||
|
27CCD274000
|
heap
|
page read and write
|
||
|
5507000
|
heap
|
page read and write
|
||
|
5759000
|
heap
|
page read and write
|
||
|
550D000
|
heap
|
page read and write
|
||
|
5730000
|
heap
|
page read and write
|
||
|
2F4E000
|
stack
|
page read and write
|
||
|
1A78E302000
|
heap
|
page read and write
|
||
|
315E000
|
heap
|
page read and write
|
||
|
1FC34A27000
|
heap
|
page read and write
|
||
|
300D000
|
stack
|
page read and write
|
||
|
18D55FB000
|
stack
|
page read and write
|
||
|
1D158702000
|
heap
|
page read and write
|
||
|
520A000
|
heap
|
page read and write
|
||
|
59F0000
|
heap
|
page read and write
|
||
|
59D1000
|
heap
|
page read and write
|
||
|
599B000
|
heap
|
page read and write
|
||
|
27CCD213000
|
heap
|
page read and write
|
||
|
27CCD264000
|
heap
|
page read and write
|
||
|
C70000
|
heap
|
page read and write
|
||
|
55C1000
|
heap
|
page read and write
|
||
|
27CCD261000
|
heap
|
page read and write
|
||
|
51E7000
|
heap
|
page read and write
|
||
|
1A78E213000
|
heap
|
page read and write
|
||
|
94C000
|
direct allocation
|
page readonly
|
||
|
180000000
|
unkown
|
page readonly
|
||
|
555A000
|
heap
|
page read and write
|
||
|
272E000
|
stack
|
page read and write
|
||
|
1D158600000
|
heap
|
page read and write
|
||
|
18D59FF000
|
stack
|
page read and write
|
||
|
1D158410000
|
heap
|
page read and write
|
||
|
30E9000
|
heap
|
page read and write
|
||
|
A37000
|
heap
|
page read and write
|
||
|
27CCD0E0000
|
heap
|
page read and write
|
||
|
2FA5000
|
heap
|
page read and write
|
||
|
16FD67D000
|
stack
|
page read and write
|
||
|
4A0000
|
heap
|
page read and write
|
||
|
56EA000
|
heap
|
page read and write
|
||
|
5706000
|
heap
|
page read and write
|
||
|
2826B3B000
|
stack
|
page read and write
|
||
|
1FC34081000
|
heap
|
page read and write
|
||
|
C20000
|
heap
|
page read and write
|
||
|
57C0000
|
heap
|
page read and write
|
||
|
30F2000
|
heap
|
page read and write
|
||
|
27CCD262000
|
heap
|
page read and write
|
||
|
308D000
|
heap
|
page read and write
|
||
|
56F2000
|
heap
|
page read and write
|
||
|
2A35000
|
heap
|
page read and write
|
||
|
57D7000
|
heap
|
page read and write
|
||
|
5974000
|
heap
|
page read and write
|
||
|
1CCAF863000
|
heap
|
page read and write
|
||
|
27CCD26F000
|
heap
|
page read and write
|
||
|
1D158644000
|
heap
|
page read and write
|
||
|
54C1000
|
heap
|
page read and write
|
||
|
5A47000
|
heap
|
page read and write
|
||
|
5204000
|
heap
|
page read and write
|
||
|
BA0000
|
heap
|
page read and write
|
||
|
51F1000
|
heap
|
page read and write
|
||
|
6B30000
|
heap
|
page read and write
|
||
|
5204000
|
heap
|
page read and write
|
||
|
180016000
|
unkown
|
page readonly
|
||
|
1A78E200000
|
heap
|
page read and write
|
||
|
57ED000
|
heap
|
page read and write
|
||
|
1CCAF913000
|
heap
|
page read and write
|
||
|
1CCAF918000
|
heap
|
page read and write
|
||
|
5691000
|
heap
|
page read and write
|
||
|
590000
|
heap
|
page read and write
|
||
|
27CCD246000
|
heap
|
page read and write
|
||
|
6F351000
|
unkown
|
page execute read
|
||
|
19FE5F13000
|
heap
|
page read and write
|
||
|
59F9000
|
heap
|
page read and write
|
||
|
30E2000
|
heap
|
page read and write
|
||
|
111B5FE000
|
stack
|
page read and write
|
||
|
59DA000
|
heap
|
page read and write
|
||
|
51E2000
|
heap
|
page read and write
|
||
|
19FE5E3E000
|
heap
|
page read and write
|
||
|
22D07102000
|
heap
|
page read and write
|
||
|
57FB000
|
heap
|
page read and write
|
||
|
5170000
|
heap
|
page read and write
|
||
|
DDE7F7C000
|
stack
|
page read and write
|
||
|
5A4B000
|
heap
|
page read and write
|
||
|
180023000
|
unkown
|
page readonly
|
||
|
1FC3406B000
|
heap
|
page read and write
|
||
|
AB3000
|
heap
|
page read and write
|
||
|
567C000
|
heap
|
page read and write
|
||
|
588C000
|
heap
|
page read and write
|
||
|
4E0E000
|
stack
|
page read and write
|
||
|
51DA000
|
heap
|
page read and write
|
||
|
51D7000
|
heap
|
page read and write
|
||
|
27CCD265000
|
heap
|
page read and write
|
||
|
592B000
|
heap
|
page read and write
|
||
|
571C000
|
heap
|
page read and write
|
||
|
22D07880000
|
trusted library allocation
|
page read and write
|
||
|
57CF000
|
heap
|
page read and write
|
||
|
A60000
|
heap
|
page read and write
|
||
|
5A53000
|
heap
|
page read and write
|
||
|
55B0000
|
heap
|
page read and write
|
||
|
309D000
|
heap
|
page read and write
|
||
|
C00000
|
heap
|
page read and write
|
||
|
A3C000
|
stack
|
page read and write
|
||
|
58AD000
|
heap
|
page read and write
|
||
|
1AEE4A02000
|
trusted library allocation
|
page read and write
|
||
|
19FE5E68000
|
heap
|
page read and write
|
||
|
520A000
|
heap
|
page read and write
|
||
|
2FA0000
|
heap
|
page read and write
|
||
|
5957000
|
heap
|
page read and write
|
||
|
30A7000
|
heap
|
page read and write
|
||
|
C55000
|
heap
|
page read and write
|
||
|
594E000
|
heap
|
page read and write
|
||
|
56AF000
|
heap
|
page read and write
|
||
|
1FC349BC000
|
heap
|
page read and write
|
||
|
1AEE4302000
|
heap
|
page read and write
|
||
|
1FC34051000
|
heap
|
page read and write
|
||
|
51EC000
|
heap
|
page read and write
|
||
|
1A78E267000
|
heap
|
page read and write
|
||
|
1FC33E20000
|
heap
|
page read and write
|
||
|
2F0E000
|
stack
|
page read and write
|
||
|
2A67000
|
heap
|
page read and write
|
||
|
5ADB000
|
heap
|
page read and write
|
||
|
A3D000
|
heap
|
page read and write
|
||
|
1A78E278000
|
heap
|
page read and write
|
||
|
BD863BB000
|
stack
|
page read and write
|
||
|
5A97000
|
heap
|
page read and write
|
||
|
54DC000
|
heap
|
page read and write
|
||
|
5AFC000
|
heap
|
page read and write
|
||
|
5846000
|
heap
|
page read and write
|
||
|
5A49000
|
heap
|
page read and write
|
||
|
576F000
|
heap
|
page read and write
|
||
|
1FC3405E000
|
heap
|
page read and write
|
||
|
19FE5E87000
|
heap
|
page read and write
|
||
|
59AD000
|
heap
|
page read and write
|
||
|
A9C000
|
heap
|
page read and write
|
||
|
27CCD23D000
|
heap
|
page read and write
|
||
|
56B1000
|
heap
|
page read and write
|
||
|
1AEE3F90000
|
heap
|
page read and write
|
||
|
25AA000
|
direct allocation
|
page readonly
|
||
|
A0B000
|
heap
|
page read and write
|
||
|
520A000
|
heap
|
page read and write
|
||
|
54AF000
|
stack
|
page read and write
|
||
|
5621000
|
heap
|
page read and write
|
||
|
30D8000
|
heap
|
page read and write
|
||
|
5A60000
|
heap
|
page read and write
|
||
|
5579000
|
heap
|
page read and write
|
||
|
27CCD242000
|
heap
|
page read and write
|
||
|
1AEE4200000
|
heap
|
page read and write
|
||
|
561B000
|
heap
|
page read and write
|
||
|
2A3A000
|
heap
|
page read and write
|
||
|
5FD0000
|
remote allocation
|
page read and write
|
||
|
56A7000
|
heap
|
page read and write
|
||
|
5A53000
|
heap
|
page read and write
|
||
|
5568000
|
heap
|
page read and write
|
||
|
56FA000
|
heap
|
page read and write
|
||
|
5A86000
|
heap
|
page read and write
|
||
|
5510000
|
heap
|
page read and write
|
||
|
2A8F000
|
heap
|
page read and write
|
||
|
5609000
|
heap
|
page read and write
|
||
|
1CCAF900000
|
heap
|
page read and write
|
||
|
960000
|
trusted library allocation
|
page read and write
|
||
|
27CCD263000
|
heap
|
page read and write
|
||
|
1D1583C0000
|
heap
|
page read and write
|
||
|
1D158652000
|
heap
|
page read and write
|
||
|
5204000
|
heap
|
page read and write
|
||
|
8E0000
|
direct allocation
|
page execute and read and write
|
||
|
180021000
|
unkown
|
page read and write
|
||
|
53AE000
|
stack
|
page read and write
|
||
|
990000
|
remote allocation
|
page read and write
|
||
|
1D158602000
|
heap
|
page read and write
|
||
|
1FC34029000
|
heap
|
page read and write
|
||
|
5173000
|
heap
|
page read and write
|
||
|
2CCB000
|
stack
|
page read and write
|
||
|
5AAF000
|
heap
|
page read and write
|
||
|
A37000
|
heap
|
page read and write
|
||
|
55D5000
|
heap
|
page read and write
|
||
|
5784000
|
heap
|
page read and write
|
||
|
57B9000
|
heap
|
page read and write
|
||
|
325E000
|
stack
|
page read and write
|
||
|
1CCAF858000
|
heap
|
page read and write
|
||
|
558A000
|
heap
|
page read and write
|
||
|
5993000
|
heap
|
page read and write
|
||
|
3096000
|
heap
|
page read and write
|
||
|
1AEE4276000
|
heap
|
page read and write
|
||
|
56B7000
|
heap
|
page read and write
|
||
|
3107000
|
heap
|
page read and write
|
||
|
5992000
|
heap
|
page read and write
|
||
|
551E000
|
heap
|
page read and write
|
||
|
DDE7DFE000
|
stack
|
page read and write
|
||
|
3117000
|
heap
|
page read and write
|
||
|
27CCD27B000
|
heap
|
page read and write
|
||
|
592C000
|
heap
|
page read and write
|
||
|
2BCD000
|
stack
|
page read and write
|
||
|
1CCAF800000
|
heap
|
page read and write
|
||
|
3107000
|
heap
|
page read and write
|
||
|
566F000
|
heap
|
page read and write
|
||
|
5510000
|
heap
|
page read and write
|
||
|
5A30000
|
heap
|
page read and write
|
||
|
5819000
|
heap
|
page read and write
|
||
|
3158000
|
heap
|
page read and write
|
||
|
27CCD247000
|
heap
|
page read and write
|
||
|
1AEE425A000
|
heap
|
page read and write
|
||
|
536F000
|
stack
|
page read and write
|
||
|
3100000
|
heap
|
page read and write
|
||
|
DDE807E000
|
stack
|
page read and write
|
||
|
5A34000
|
heap
|
page read and write
|
||
|
51D2000
|
heap
|
page read and write
|
||
|
5744000
|
heap
|
page read and write
|
||
|
27CCD22D000
|
heap
|
page read and write
|
||
|
93C000
|
stack
|
page read and write
|
||
|
51DE000
|
heap
|
page read and write
|
||
|
1FC3402F000
|
heap
|
page read and write
|
||
|
2A49000
|
heap
|
page read and write
|
||
|
561B000
|
heap
|
page read and write
|
||
|
5B4A000
|
heap
|
page read and write
|
||
|
1A78E313000
|
heap
|
page read and write
|
||
|
111B4FF000
|
stack
|
page read and write
|
||
|
AB3000
|
heap
|
page read and write
|
||
|
1A78E241000
|
heap
|
page read and write
|
||
|
8EB000
|
stack
|
page read and write
|
||
|
740BBB000
|
stack
|
page read and write
|
||
|
56AF000
|
heap
|
page read and write
|
||
|
1FC33DB0000
|
heap
|
page read and write
|
||
|
315D000
|
heap
|
page read and write
|
||
|
5723000
|
heap
|
page read and write
|
||
|
1CCAF857000
|
heap
|
page read and write
|
||
|
2A47000
|
heap
|
page read and write
|
||
|
1FC349B0000
|
heap
|
page read and write
|
||
|
1AEE4289000
|
heap
|
page read and write
|
||
|
16FD7FF000
|
stack
|
page read and write
|
||
|
1CCAF730000
|
trusted library allocation
|
page read and write
|
||
|
27CCD245000
|
heap
|
page read and write
|
||
|
578C000
|
heap
|
page read and write
|
||
|
51CF000
|
heap
|
page read and write
|
||
|
597D000
|
heap
|
page read and write
|
||
|
DDE81FE000
|
stack
|
page read and write
|
||
|
19FE5CC0000
|
heap
|
page read and write
|
||
|
5FD0000
|
remote allocation
|
page read and write
|
||
|
3101000
|
heap
|
page read and write
|
||
|
517D000
|
heap
|
page read and write
|
||
|
57DD000
|
heap
|
page read and write
|
||
|
51F5000
|
heap
|
page read and write
|
||
|
34AE000
|
heap
|
page read and write
|
||
|
51FB000
|
heap
|
page read and write
|
||
|
3100000
|
heap
|
page read and write
|
||
|
7E06C7E000
|
stack
|
page read and write
|
||
|
51F2000
|
heap
|
page read and write
|
||
|
27CCD24B000
|
heap
|
page read and write
|
||
|
7412F9000
|
stack
|
page read and write
|
||
|
18D52FE000
|
stack
|
page read and write
|
||
|
29D1000
|
heap
|
page read and write
|
||
|
3050000
|
heap
|
page read and write
|
||
|
22D07A02000
|
trusted library allocation
|
page read and write
|
||
|
5582000
|
heap
|
page read and write
|
||
|
1A78E300000
|
heap
|
page read and write
|
||
|
22D078B0000
|
remote allocation
|
page read and write
|
||
|
34AD000
|
heap
|
page read and write
|
||
|
6F36D000
|
unkown
|
page read and write
|
||
|
ABE000
|
heap
|
page read and write
|
||
|
51FF000
|
heap
|
page read and write
|
||
|
585F000
|
heap
|
page read and write
|
||
|
517D000
|
heap
|
page read and write
|
||
|
5960000
|
heap
|
page read and write
|
||
|
18D547C000
|
stack
|
page read and write
|
||
|
57C8000
|
heap
|
page read and write
|
||
|
5933000
|
heap
|
page read and write
|
||
|
58AD000
|
heap
|
page read and write
|
||
|
55FA000
|
heap
|
page read and write
|
||
|
30E9000
|
heap
|
page read and write
|
||
|
ABE000
|
heap
|
page read and write
|
||
|
57BE000
|
heap
|
page read and write
|
||
|
A3D000
|
heap
|
page read and write
|
||
|
1CCAF848000
|
heap
|
page read and write
|
||
|
5846000
|
heap
|
page read and write
|
||
|
2BF7000
|
heap
|
page read and write
|
||
|
5507000
|
heap
|
page read and write
|
||
|
1CCAF870000
|
heap
|
page read and write
|
||
|
5540000
|
heap
|
page read and write
|
||
|
587D000
|
heap
|
page read and write
|
||
|
61F6000
|
heap
|
page read and write
|
||
|
BD8687E000
|
stack
|
page read and write
|
||
|
5554000
|
heap
|
page read and write
|
||
|
3095000
|
heap
|
page read and write
|
||
|
34AE000
|
heap
|
page read and write
|
||
|
1A78E27A000
|
heap
|
page read and write
|
||
|
830000
|
heap
|
page read and write
|
||
|
A52000
|
heap
|
page read and write
|
||
|
3060000
|
heap
|
page read and write
|
||
|
1FC34900000
|
heap
|
page read and write
|
||
|
30C5000
|
heap
|
page read and write
|
||
|
29D0000
|
heap
|
page read and write
|
||
|
1FC34954000
|
heap
|
page read and write
|
||
|
94B000
|
direct allocation
|
page read and write
|
||
|
22D078B0000
|
remote allocation
|
page read and write
|
||
|
18D56FD000
|
stack
|
page read and write
|
||
|
51F5000
|
heap
|
page read and write
|
||
|
1CCAF760000
|
trusted library allocation
|
page read and write
|
||
|
584F000
|
heap
|
page read and write
|
||
|
22D078B0000
|
remote allocation
|
page read and write
|
||
|
594C000
|
heap
|
page read and write
|
||
|
7414FA000
|
stack
|
page read and write
|
||
|
5B0000
|
heap
|
page read and write
|
||
|
314F000
|
heap
|
page read and write
|
||
|
1CCAF889000
|
heap
|
page read and write
|
||
|
27CCD27A000
|
heap
|
page read and write
|
||
|
58CC000
|
heap
|
page read and write
|
||
|
AB7000
|
heap
|
page read and write
|
||
|
59E5000
|
heap
|
page read and write
|
||
|
5A45000
|
heap
|
page read and write
|
||
|
A46000
|
heap
|
page read and write
|
||
|
5A86000
|
heap
|
page read and write
|
||
|
5846000
|
heap
|
page read and write
|
||
|
A9C000
|
heap
|
page read and write
|
||
|
5ADB000
|
heap
|
page read and write
|
||
|
1FC34902000
|
heap
|
page read and write
|
||
|
5A16000
|
heap
|
page read and write
|
||
|
27CCD302000
|
heap
|
page read and write
|
||
|
27CCD260000
|
heap
|
page read and write
|
||
|
5831000
|
heap
|
page read and write
|
||
|
51EB000
|
heap
|
page read and write
|
||
|
59A3000
|
heap
|
page read and write
|
||
|
5822000
|
heap
|
page read and write
|
||
|
557F000
|
heap
|
page read and write
|
||
|
27CCD24F000
|
heap
|
page read and write
|
||
|
5731000
|
heap
|
page read and write
|
||
|
1CCAF82A000
|
heap
|
page read and write
|
||
|
29CC000
|
stack
|
page read and write
|
||
|
34A6000
|
heap
|
page read and write
|
||
|
1FC34A00000
|
heap
|
page read and write
|
||
|
1FC34922000
|
heap
|
page read and write
|
||
|
27CCD080000
|
heap
|
page read and write
|
||
|
585F000
|
heap
|
page read and write
|
||
|
19FE5E29000
|
heap
|
page read and write
|
||
|
111B2FF000
|
stack
|
page read and write
|
||
|
1A78E202000
|
heap
|
page read and write
|
||
|
5A97000
|
heap
|
page read and write
|
||
|
1FC3418E000
|
heap
|
page read and write
|
||
|
5E5D000
|
stack
|
page read and write
|
||
|
6F350000
|
unkown
|
page readonly
|
||
|
5B97000
|
heap
|
page read and write
|
||
|
59E5000
|
heap
|
page read and write
|
||
|
55F3000
|
heap
|
page read and write
|
||
|
51F3000
|
heap
|
page read and write
|
||
|
5D5D000
|
stack
|
page read and write
|
||
|
BD86A7F000
|
stack
|
page read and write
|
||
|
51DA000
|
heap
|
page read and write
|
||
|
30DC000
|
heap
|
page read and write
|
||
|
30A8000
|
heap
|
page read and write
|
||
|
3100000
|
heap
|
page read and write
|
||
|
51F2000
|
heap
|
page read and write
|
||
|
5991000
|
heap
|
page read and write
|
||
|
54E2000
|
heap
|
page read and write
|
||
|
18D58FC000
|
stack
|
page read and write
|
||
|
27CCD070000
|
heap
|
page read and write
|
||
|
5730000
|
heap
|
page read and write
|
||
|
5A72000
|
heap
|
page read and write
|
||
|
5A04000
|
heap
|
page read and write
|
||
|
1CCAF710000
|
trusted library allocation
|
page read and write
|
||
|
1D158648000
|
heap
|
page read and write
|
||
|
59C8000
|
heap
|
page read and write
|
||
|
4E20000
|
heap
|
page read and write
|
||
|
5A97000
|
heap
|
page read and write
|
||
|
3105000
|
heap
|
page read and write
|
||
|
576F000
|
heap
|
page read and write
|
||
|
57A7000
|
heap
|
page read and write
|
||
|
5608000
|
heap
|
page read and write
|
||
|
51E6000
|
heap
|
page read and write
|
||
|
AB3000
|
heap
|
page read and write
|
||
|
2D5A000
|
heap
|
page read and write
|
||
|
A15000
|
heap
|
page read and write
|
||
|
1FC33F20000
|
trusted library allocation
|
page read and write
|
||
|
57B0000
|
heap
|
page read and write
|
||
|
5708000
|
heap
|
page read and write
|
||
|
553A000
|
heap
|
page read and write
|
||
|
558B000
|
heap
|
page read and write
|
||
|
592E000
|
heap
|
page read and write
|
||
|
314F000
|
heap
|
page read and write
|
||
|
56F2000
|
heap
|
page read and write
|
||
|
2A35000
|
heap
|
page read and write
|
||
|
2A2C000
|
heap
|
page read and write
|
||
|
51F6000
|
heap
|
page read and write
|
There are 962 hidden memdumps, click here to show them.