Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
malware.one
|
data
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Temp\click.wsf
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\rad66B18.tmp.dll
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\Desktop\malware.one
|
data
|
dropped
|
|
|
|
C:\Windows\System32\JMgyzwrCUAZpIA\OfEg.dll (copy)
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506
|
Microsoft Cabinet archive data, Windows 2000/XP setup, 62582 bytes, 1 file, at 0x2c +A "authroot.stl", number 1, 6 datablocks,
0x1 compression
|
dropped
|
||
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
|
data
|
modified
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\C41609EF-1ECD-4EEF-916A-7808B4AAB9B7
|
XML 1.0 document, ASCII text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000005.bin (copy)
|
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000006.bin (copy)
|
PNG image data, 127 x 138, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000007.bin (copy)
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000008.bin (copy)
|
PNG image data, 749 x 126, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000009.bin (copy)
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000A.bin (copy)
|
PNG image data, 163 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000B.bin (copy)
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000C.bin (copy)
|
PNG image data, 123 x 103, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000D.bin (copy)
|
PNG image data, 59 x 61, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000E.bin (copy)
|
PNG image data, 563 x 211, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000F.bin (copy)
|
PNG image data, 742 x 104, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000G.bin (copy)
|
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000H.bin (copy)
|
PNG image data, 651 x 254, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000I.bin (copy)
|
PNG image data, 220 x 170, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000J.bin (copy)
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000K.bin (copy)
|
PNG image data, 167 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000M.bin (copy)
|
PNG image data, 230 x 68, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000N.bin (copy)
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000O.bin (copy)
|
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000P.bin (copy)
|
PNG image data, 213 x 85, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000Q.bin (copy)
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000R.bin (copy)
|
PNG image data, 171 x 50, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000S.bin (copy)
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000T.bin (copy)
|
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000U.bin (copy)
|
PNG image data, 164 x 89, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000000V.bin (copy)
|
PNG image data, 162 x 89, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000010.bin (copy)
|
PNG image data, 452 x 277, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000011.bin (copy)
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000012.bin (copy)
|
PNG image data, 452 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000013.bin (copy)
|
PNG image data, 185 x 76, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000014.bin (copy)
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000015.bin (copy)
|
PNG image data, 167 x 92, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000016.bin (copy)
|
PNG image data, 221 x 77, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000017.bin (copy)
|
PNG image data, 232 x 50, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000018.bin (copy)
|
PNG image data, 340 x 79, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000019.bin (copy)
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001C.bin (copy)
|
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001D.bin (copy)
|
PNG image data, 127 x 138, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001E.bin (copy)
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001F.bin (copy)
|
PNG image data, 749 x 126, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001G.bin (copy)
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001H.bin (copy)
|
PNG image data, 163 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001I.bin (copy)
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001J.bin (copy)
|
PNG image data, 123 x 103, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001K.bin (copy)
|
PNG image data, 59 x 61, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001L.bin (copy)
|
PNG image data, 563 x 211, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001M.bin (copy)
|
PNG image data, 742 x 104, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001N.bin (copy)
|
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001O.bin (copy)
|
PNG image data, 651 x 254, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001P.bin (copy)
|
PNG image data, 220 x 170, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001Q.bin (copy)
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001R.bin (copy)
|
PNG image data, 167 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001T.bin (copy)
|
PNG image data, 230 x 68, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001U.bin (copy)
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000001V.bin (copy)
|
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000020.bin (copy)
|
PNG image data, 213 x 85, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000021.bin (copy)
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000022.bin (copy)
|
PNG image data, 171 x 50, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000023.bin (copy)
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000024.bin (copy)
|
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000025.bin (copy)
|
PNG image data, 164 x 89, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000026.bin (copy)
|
PNG image data, 162 x 89, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000027.bin (copy)
|
PNG image data, 452 x 277, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000028.bin (copy)
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000029.bin (copy)
|
PNG image data, 452 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002A.bin (copy)
|
PNG image data, 185 x 76, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002B.bin (copy)
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002C.bin (copy)
|
PNG image data, 167 x 92, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002D.bin (copy)
|
PNG image data, 221 x 77, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002E.bin (copy)
|
PNG image data, 232 x 50, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002F.bin (copy)
|
PNG image data, 340 x 79, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002G.bin (copy)
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002H.bin (copy)
|
PNG image data, 220 x 170, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002I.bin (copy)
|
PNG image data, 651 x 254, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002J.bin (copy)
|
PNG image data, 59 x 61, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002K.bin (copy)
|
PNG image data, 127 x 138, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002L.bin (copy)
|
PNG image data, 742 x 104, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002M.bin (copy)
|
PNG image data, 563 x 211, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002N.bin (copy)
|
PNG image data, 123 x 103, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002O.bin (copy)
|
PNG image data, 163 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002P.bin (copy)
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002Q.bin (copy)
|
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002R.bin (copy)
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002S.bin (copy)
|
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002T.bin (copy)
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002U.bin (copy)
|
PNG image data, 167 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000002V.bin (copy)
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000030.bin (copy)
|
PNG image data, 749 x 126, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000031.bin (copy)
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000032.bin (copy)
|
PNG image data, 185 x 76, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000033.bin (copy)
|
PNG image data, 452 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000034.bin (copy)
|
PNG image data, 213 x 85, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000035.bin (copy)
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000036.bin (copy)
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000037.bin (copy)
|
PNG image data, 164 x 89, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000038.bin (copy)
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000039.bin (copy)
|
PNG image data, 340 x 79, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003A.bin (copy)
|
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003B.bin (copy)
|
PNG image data, 167 x 92, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003C.bin (copy)
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003D.bin (copy)
|
PNG image data, 230 x 68, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003E.bin (copy)
|
PNG image data, 171 x 50, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003F.bin (copy)
|
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003G.bin (copy)
|
PNG image data, 221 x 77, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003H.bin (copy)
|
PNG image data, 452 x 277, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003I.bin (copy)
|
PNG image data, 232 x 50, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003J.bin (copy)
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003K.bin (copy)
|
PNG image data, 162 x 89, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003Q.bin (copy)
|
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003R.bin (copy)
|
PNG image data, 123 x 103, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003S.bin (copy)
|
PNG image data, 563 x 211, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003T.bin (copy)
|
PNG image data, 742 x 104, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003U.bin (copy)
|
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000003V.bin (copy)
|
PNG image data, 749 x 126, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000040.bin (copy)
|
PNG image data, 220 x 170, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000041.bin (copy)
|
PNG image data, 59 x 61, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000042.bin (copy)
|
PNG image data, 163 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000043.bin (copy)
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000044.bin (copy)
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000045.bin (copy)
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000046.bin (copy)
|
PNG image data, 127 x 138, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000047.bin (copy)
|
PNG image data, 651 x 254, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000048.bin (copy)
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000049.bin (copy)
|
PNG image data, 167 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004B.bin (copy)
|
PNG image data, 162 x 89, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004C.bin (copy)
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004D.bin (copy)
|
PNG image data, 171 x 50, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004E.bin (copy)
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004F.bin (copy)
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004G.bin (copy)
|
PNG image data, 452 x 277, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004H.bin (copy)
|
PNG image data, 452 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004I.bin (copy)
|
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004J.bin (copy)
|
PNG image data, 340 x 79, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004K.bin (copy)
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004L.bin (copy)
|
PNG image data, 185 x 76, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004M.bin (copy)
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004N.bin (copy)
|
PNG image data, 213 x 85, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004O.bin (copy)
|
PNG image data, 164 x 89, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004P.bin (copy)
|
PNG image data, 167 x 92, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004Q.bin (copy)
|
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004R.bin (copy)
|
PNG image data, 230 x 68, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004S.bin (copy)
|
PNG image data, 221 x 77, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004T.bin (copy)
|
PNG image data, 232 x 50, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\0000004U.bin (copy)
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000051.bin (copy)
|
HTML document, ASCII text, with very long lines (744), with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000052.bin (copy)
|
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1248x1624, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\00000053.bin (copy)
|
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\header
|
Matlab v4 mat-file (little endian) @, numeric, rows 262223750, columns 0
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000005.bin
|
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000006.bin
|
PNG image data, 127 x 138, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000007.bin
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000008.bin
|
PNG image data, 749 x 126, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000009.bin
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000A.bin
|
PNG image data, 163 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000B.bin
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000C.bin
|
PNG image data, 123 x 103, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000D.bin
|
PNG image data, 59 x 61, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000E.bin
|
PNG image data, 563 x 211, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000F.bin
|
PNG image data, 742 x 104, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000G.bin
|
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000H.bin
|
PNG image data, 651 x 254, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000I.bin
|
PNG image data, 220 x 170, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000J.bin
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000K.bin
|
PNG image data, 167 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000M.bin
|
PNG image data, 230 x 68, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000N.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000O.bin
|
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000P.bin
|
PNG image data, 213 x 85, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000Q.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000R.bin
|
PNG image data, 171 x 50, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000S.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000T.bin
|
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000U.bin
|
PNG image data, 164 x 89, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000000V.bin
|
PNG image data, 162 x 89, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000010.bin
|
PNG image data, 452 x 277, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000011.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000012.bin
|
PNG image data, 452 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000013.bin
|
PNG image data, 185 x 76, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000014.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000015.bin
|
PNG image data, 167 x 92, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000016.bin
|
PNG image data, 221 x 77, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000017.bin
|
PNG image data, 232 x 50, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000018.bin
|
PNG image data, 340 x 79, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000019.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001C.bin
|
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001D.bin
|
PNG image data, 127 x 138, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001E.bin
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001F.bin
|
PNG image data, 749 x 126, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001G.bin
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001H.bin
|
PNG image data, 163 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001I.bin
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001J.bin
|
PNG image data, 123 x 103, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001K.bin
|
PNG image data, 59 x 61, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001L.bin
|
PNG image data, 563 x 211, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001M.bin
|
PNG image data, 742 x 104, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001N.bin
|
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001O.bin
|
PNG image data, 651 x 254, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001P.bin
|
PNG image data, 220 x 170, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001Q.bin
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001R.bin
|
PNG image data, 167 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001T.bin
|
PNG image data, 230 x 68, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001U.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000001V.bin
|
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000020.bin
|
PNG image data, 213 x 85, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000021.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000022.bin
|
PNG image data, 171 x 50, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000023.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000024.bin
|
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000025.bin
|
PNG image data, 164 x 89, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000026.bin
|
PNG image data, 162 x 89, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000027.bin
|
PNG image data, 452 x 277, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000028.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000029.bin
|
PNG image data, 452 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002A.bin
|
PNG image data, 185 x 76, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002B.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002C.bin
|
PNG image data, 167 x 92, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002D.bin
|
PNG image data, 221 x 77, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002E.bin
|
PNG image data, 232 x 50, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002F.bin
|
PNG image data, 340 x 79, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002G.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002H.bin
|
PNG image data, 220 x 170, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002I.bin
|
PNG image data, 651 x 254, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002J.bin
|
PNG image data, 59 x 61, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002K.bin
|
PNG image data, 127 x 138, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002L.bin
|
PNG image data, 742 x 104, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002M.bin
|
PNG image data, 563 x 211, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002N.bin
|
PNG image data, 123 x 103, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002O.bin
|
PNG image data, 163 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002P.bin
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002Q.bin
|
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002R.bin
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002S.bin
|
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002T.bin
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002U.bin
|
PNG image data, 167 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000002V.bin
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000030.bin
|
PNG image data, 749 x 126, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000031.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000032.bin
|
PNG image data, 185 x 76, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000033.bin
|
PNG image data, 452 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000034.bin
|
PNG image data, 213 x 85, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000035.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000036.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000037.bin
|
PNG image data, 164 x 89, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000038.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000039.bin
|
PNG image data, 340 x 79, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003A.bin
|
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003B.bin
|
PNG image data, 167 x 92, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003C.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003D.bin
|
PNG image data, 230 x 68, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003E.bin
|
PNG image data, 171 x 50, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003F.bin
|
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003G.bin
|
PNG image data, 221 x 77, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003H.bin
|
PNG image data, 452 x 277, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003I.bin
|
PNG image data, 232 x 50, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003J.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003K.bin
|
PNG image data, 162 x 89, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003Q.bin
|
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003R.bin
|
PNG image data, 123 x 103, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003S.bin
|
PNG image data, 563 x 211, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003T.bin
|
PNG image data, 742 x 104, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003U.bin
|
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000003V.bin
|
PNG image data, 749 x 126, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000040.bin
|
PNG image data, 220 x 170, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000041.bin
|
PNG image data, 59 x 61, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000042.bin
|
PNG image data, 163 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000043.bin
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000044.bin
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000045.bin
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000046.bin
|
PNG image data, 127 x 138, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000047.bin
|
PNG image data, 651 x 254, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000048.bin
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000049.bin
|
PNG image data, 167 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004B.bin
|
PNG image data, 162 x 89, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004C.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004D.bin
|
PNG image data, 171 x 50, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004E.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004F.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004G.bin
|
PNG image data, 452 x 277, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004H.bin
|
PNG image data, 452 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004I.bin
|
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004J.bin
|
PNG image data, 340 x 79, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004K.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004L.bin
|
PNG image data, 185 x 76, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004M.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004N.bin
|
PNG image data, 213 x 85, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004O.bin
|
PNG image data, 164 x 89, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004P.bin
|
PNG image data, 167 x 92, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004Q.bin
|
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004R.bin
|
PNG image data, 230 x 68, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004S.bin
|
PNG image data, 221 x 77, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004T.bin
|
PNG image data, 232 x 50, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000004U.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000051.bin
|
HTML document, ASCII text, with very long lines (744), with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000052.bin
|
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1248x1624, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000053.bin
|
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000059.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005B.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:19:29], progressive, precision 8, 221x792, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005D.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005F.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000005H.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:18:09], progressive, precision 8, 164x641, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000006M.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:06:24], progressive, precision 8, 38x792, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000006O.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000006Q.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000006S.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000006U.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000070.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000072.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000075.bin
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 814x105, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000077.bin
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 728x77, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000079.bin
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 69x630, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000007B.bin
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 105x441,
components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000007C.bin
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 76x97, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000007E.bin
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 95x498, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000007F.bin
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 700x114, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000007H.bin
|
PNG image data, 813 x 99, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000007J.bin
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 780x107,
components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000007L.bin
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 613x144, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000007N.bin
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 276x139,
components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000007P.bin
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 814x45, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000007R.bin
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 262x277,
components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000007T.bin
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 70x626, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000007V.bin
|
PNG image data, 177 x 123, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000081.bin
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 17x608, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000083.bin
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 357x69, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000084.bin
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 14x341, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000086.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:15:20], progressive, precision 8, 604x784, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000088.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:13:06], progressive, precision 8, 570x779, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000008A.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000008C.bin
|
PNG image data, 40 x 623, 8-bit colormap, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000008E.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000008G.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:10:32], progressive, precision 8, 594x773, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000008I.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:12:29], progressive, precision 8, 598x766, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000008K.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:19:29], progressive, precision 8, 221x792, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000008M.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000008O.bin
|
PNG image data, 60 x 336, 4-bit colormap, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000008Q.bin
|
PNG image data, 40 x 617, 8-bit colormap, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000008S.bin
|
PNG image data, 50 x 600, 8-bit colormap, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000008U.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000090.bin
|
PNG image data, 77 x 627, 8-bit colormap, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000092.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000094.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000096.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\00000098.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:05:55], progressive, precision 8, 612x618, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000009A.bin
|
PNG image data, 176 x 513, 8-bit colormap, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000009C.bin
|
PNG image data, 40 x 650, 8-bit colormap, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000009E.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:27:10], progressive, precision 8, 102x792, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000009G.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:18:09], progressive, precision 8, 164x641, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000009I.bin
|
PNG image data, 50 x 556, 8-bit colormap, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000009K.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000009M.bin
|
PNG image data, 171 x 552, 8-bit colormap, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000009O.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:11:38], progressive, precision 8, 577x757, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000009Q.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:26:15], progressive, precision 8, 216x792, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000009S.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:09:29], progressive, precision 8, 609x675, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000009U.bin
|
Windows Enhanced Metafile (EMF) image data version 0x10000
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\0000009V.bin
|
PNG image data, 189 x 305, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000A0.bin
|
Windows Enhanced Metafile (EMF) image data version 0x10000
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000A1.bin
|
PNG image data, 189 x 305, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000A2.bin
|
Windows Enhanced Metafile (EMF) image data version 0x10000
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000A3.bin
|
PNG image data, 189 x 305, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000A5.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000A7.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000A9.bin
|
PNG image data, 50 x 500, 8-bit colormap, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000AB.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000AD.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:08:07], baseline, precision 8, 595x450, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000AF.bin
|
Windows Enhanced Metafile (EMF) image data version 0x10000
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000AG.bin
|
PNG image data, 3005 x 184, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000AI.bin
|
PNG image data, 39 x 600, 8-bit colormap, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000AK.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000AM.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:44:07], progressive, precision 8, 611x163, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000AO.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000AQ.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000AS.bin
|
PNG image data, 39 x 579, 8-bit colormap, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000AU.bin
|
PNG image data, 30 x 700, 8-bit colormap, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000B0.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000B2.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000B4.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:06:24], progressive, precision 8, 38x792, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000B6.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000B8.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000BA.bin
|
PNG image data, 85 x 470, 8-bit colormap, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000BC.bin
|
PNG image data, 88 x 574, 8-bit colormap, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000BE.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000BG.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000BI.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000BL.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:05:55], progressive, precision 8, 612x618, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000BN.bin
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:08:07], baseline, precision 8, 595x450, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000000BP.bin
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
modified
|
||
|
C:\Users\user\AppData\Local\Temp\OneNote Archive\Getting Started.one
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\OneNote Archive\Open Notebook.onetoc2
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\OneNote15WatsonLog.etl
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\rad04F81.tmp.dll
|
HTML document, ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{022C9FF8-D0F4-45A4-BEB3-4C3502113F39}
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 17x608, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{02BB056D-6DC7-4CC9-A901-FCACBE062B20}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{0312A4F2-477E-4FA8-A0C4-C0266FBCB03A}
|
PNG image data, 742 x 104, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{04EC4706-9739-4FE5-A631-B018AACC6EB4}
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{05AAB5F1-1F00-43DB-95FC-BEF2822A1A83}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:06:24], progressive, precision 8, 38x792, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{05B93411-5977-44A8-9215-975683FABB0F}
|
PNG image data, 163 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{06315C72-EB48-4CA8-BBED-F8122FCE2EBD}
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 262x277,
components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{0946E3C5-105C-4105-AF2E-DB5B3967E456}
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{09493205-3DA1-44FA-AB1E-C23BD04C74B4}.bin
|
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{0D0A6C9B-20C7-4880-9182-E9997640D471}
|
PNG image data, 177 x 123, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{0F1831E0-F2F1-482C-978F-8FD2E9CE7BE5}
|
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{0FE253AE-DF86-4071-B97F-E057FEB65752}
|
PNG image data, 164 x 89, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{108C1F52-CE75-4076-AED1-0AE73518E75F}.bin
|
PNG image data, 452 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{11770F69-A393-4AB9-AB27-27F20E795C66}
|
PNG image data, 340 x 79, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{127EAD47-C1BB-4693-B85F-563336B48C1E}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{13FCAC43-0049-4600-A47F-69D835EE9831}
|
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{1454529D-74C4-433F-85C9-1ADFEA71E2A9}.bin
|
PNG image data, 221 x 77, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{146BBD48-94A3-4838-8B48-BD36D465F907}.bin
|
PNG image data, 163 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{146DD046-1353-4FF9-A26D-1D1C099A0044}.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{146FDA7C-22C8-4DBD-A062-025F19411934}
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{16E24D18-921E-4699-9544-E6DBD37BEA8D}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{181D68E2-78B9-4182-BC16-0DE50F7C34B3}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{184F2DFA-79DF-404A-892A-C7B5CB0BAF5B}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:26:15], progressive, precision 8, 216x792, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{1882A59D-8D1D-4CB7-8D2C-C307E65D21B0}.bin
|
PNG image data, 232 x 50, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{189E85CB-C1D1-4F23-BC88-597AEA5F69BE}
|
PNG image data, 3005 x 184, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{1A7FDF1F-DB44-4273-A46A-D268D33AB361}.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{1B16338B-5F9A-4E2B-85FD-59278ED2A5A8}
|
PNG image data, 176 x 513, 8-bit colormap, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{1C2DF11E-F290-4053-BE47-E77121DB68E9}.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{1D2BCCE1-8F73-42C1-8EC2-E6E9D4D34542}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{1D6F4A18-FA5A-4B86-84F3-B90E61D34F4B}.bin
|
PNG image data, 171 x 50, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{1EA54A45-ADB6-405A-BCC8-9E3BE666974D}.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{1F299545-F6E1-4855-A36F-ECB906CD24D7}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{1FAC2C35-959F-4E3D-8E93-216CED0C1DF8}
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 814x105, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{200CC703-7716-450F-AFD7-9138E62F655D}
|
PNG image data, 189 x 305, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{205665FD-847D-4A2E-A2A0-6BCFEBD60543}.bin
|
PNG image data, 742 x 104, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{221B2C47-E930-47E4-BFB7-7A58FE8CE57A}
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{23A2F287-EBF3-4B35-BFDA-3D2EE76E93B0}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{2552F201-51C8-4704-8061-87A8FC95E21E}.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{259E9E82-FB30-4ADD-9654-1951C8947C8A}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:08:07], baseline, precision 8, 595x450, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{25A0C9CB-5F31-4C14-B812-2BD6973450E9}.bin
|
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{25F3C49F-CCF8-471F-81EC-F1FEC618FB70}.bin
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{265E98C6-8131-4205-A96B-3C8B0E35EE09}.bin
|
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{26EDF2E9-9FE8-4FA1-8BF0-C54E568070F9}.bin
|
PNG image data, 185 x 76, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{28767BD3-C322-4DFE-8781-36C277541971}.bin
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{28996B75-F002-4D09-A524-77B12425091B}
|
PNG image data, 232 x 50, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{2980CBDA-3388-43D6-A4CB-25CF3B5C5D4E}.bin
|
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{2A6C8241-7A09-4842-B210-461D00AD3657}
|
PNG image data, 220 x 170, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{2B72AF08-3C39-4660-A9DB-3F0847E3BC15}
|
PNG image data, 452 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{2E3F8243-2C01-46AC-83D9-5A34660A4CF5}.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{2E8E7BD6-26B9-4372-B1B9-E719B1F177B2}.bin
|
PNG image data, 167 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{2EA3036A-E031-4C50-B16B-B61C4FCF8E2B}
|
Windows Enhanced Metafile (EMF) image data version 0x10000
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{3023B9BE-1472-418E-9215-4CD9337F8B07}.bin
|
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{31C09740-6075-4AA5-9412-CA12D35EEA22}
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 780x107,
components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{33745A09-A695-47EF-9C0C-C1A7A73EFDAA}.bin
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{358D62BB-9AA6-4311-8AA7-850D1AAFB656}
|
PNG image data, 651 x 254, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{36537677-7623-4D1C-AFD0-AD7AF03E6E2F}
|
PNG image data, 185 x 76, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{38926DBE-E8F4-41ED-B7A6-9FEF56BCF237}.bin
|
PNG image data, 742 x 104, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{3902E930-312F-42E6-9AAD-771D5B1AEA7C}
|
PNG image data, 59 x 61, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{3A37FFA3-3294-477B-8B26-B7409571382B}.bin
|
PNG image data, 749 x 126, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{3A813D6E-33DD-4FCC-BD1F-E75E16729C56}
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{3AA429E5-8BE9-4D42-80FE-7DD2FF9FA803}
|
PNG image data, 162 x 89, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{3B5B5510-1615-45D1-9231-AEE0D054C60D}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{3C0B09F6-C9D3-4319-ACBB-E43D167E3C11}.bin
|
PNG image data, 213 x 85, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{3CE327E1-DF71-43E1-B395-4397752EE966}.bin
|
PNG image data, 127 x 138, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{3D97EB3A-703D-42B8-8B48-116EF98333D2}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{3E8E6D67-C603-4403-AFBC-34D64D937778}.bin
|
PNG image data, 59 x 61, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{3FEC2471-40FC-452D-9396-C62C231DBE86}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:44:07], progressive, precision 8, 611x163, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{40DF0B06-9592-420D-A1E0-32B3DCB340CA}
|
PNG image data, 813 x 99, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{4151E0C8-07F6-4DA1-96DF-969A1D48A5C1}
|
PNG image data, 213 x 85, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{41769BAE-1919-4623-ADE8-49D3F3A3038C}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{421D02A2-9135-4738-B7BC-0D03A65550BB}
|
PNG image data, 88 x 574, 8-bit colormap, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{44970FF8-6EA9-46E0-AF5D-DF2308982E82}.bin
|
PNG image data, 452 x 277, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{456BCF67-8FF5-4E14-AC06-5582DF3A6763}
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{47FD458F-5BA7-4D3E-904C-1AF2D0FC6E54}
|
PNG image data, 167 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{489A9F35-8E7C-4FA5-88F5-F682E898C0EA}
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{4940AE90-45B4-4351-96C6-AFB0A721F5A3}
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{4986B563-3BCE-475E-8D50-3503FE3BF26E}.bin
|
PNG image data, 563 x 211, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{4AB3AA66-BECD-45E6-9F68-3677D6B77C3C}.bin
|
PNG image data, 127 x 138, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{4B5A3C0A-63BD-4ABE-BA5E-406249425D6A}
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{4D337626-CB77-4F1D-ABF5-56D4BF2EA287}
|
PNG image data, 50 x 500, 8-bit colormap, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{4EBFF15F-49AA-4919-95B9-C0F0E7405C35}.bin
|
PNG image data, 452 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{4F462F1F-6294-4F05-B59D-C088F192EC76}.bin
|
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1248x1624, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{51B120C3-4D73-4C2A-B0BD-E41ECB3E47C3}
|
PNG image data, 189 x 305, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{51D22235-F284-4016-91DD-E3E86C3C1B02}
|
PNG image data, 40 x 650, 8-bit colormap, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{5317D8D3-A2F1-4F95-AC12-9DDC5B5AB1D4}.bin
|
PNG image data, 167 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{5357C036-0BCF-4437-B672-3147CC9C4A35}.bin
|
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{53738069-D405-4927-A90D-6BABD8D58D48}
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 76x97, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{54850FE9-9A15-478B-AA6F-E866B051F19C}
|
PNG image data, 213 x 85, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{551F58EC-2973-4AF7-AB86-C38DAEE726CB}.bin
|
PNG image data, 163 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{597D9283-B7F3-4A86-925A-D8DD8101C2EB}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:13:06], progressive, precision 8, 570x779, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{59E0346D-7479-4A56-89F7-F1B49E60016E}
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 814x45, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{5AFB20EC-E092-44FD-8095-A0C07D6ACB78}
|
PNG image data, 742 x 104, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{5BB35153-31E8-4EA4-AF3C-14B27F145130}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:19:29], progressive, precision 8, 221x792, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{5DC7F243-DEC4-49EF-BBA5-C9276A2F55FD}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{5DC8BEDB-A0B9-42C2-A5BA-2F75ABA5C011}.bin
|
PNG image data, 167 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{5DE823BB-FE63-4D95-8592-ACCA50679E6B}
|
PNG image data, 230 x 68, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{5EF4CF79-0113-4FA9-BC32-F8702590F196}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:19:29], progressive, precision 8, 221x792, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{5FADE6EE-CAB8-44F0-B7D7-9262F1B7BB78}.bin
|
PNG image data, 452 x 277, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{6020BB2B-11AE-464B-B685-D52CECCFFA97}.bin
|
PNG image data, 164 x 89, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{61A338D2-7CAA-4F76-B490-CECA551A84AD}.bin
|
PNG image data, 162 x 89, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{6264209F-297F-4FFF-982A-05818A601FC5}.bin
|
PNG image data, 167 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{62AE9896-7211-4C5A-A04A-3A55A19FEBE8}.bin
|
PNG image data, 232 x 50, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{63161C63-C6BF-4D26-AAC5-2E26B8F7C117}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{667CD68E-FDF4-4AE8-98E6-ACAC080CD6F1}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{66E1866B-F229-4FB5-B508-C3ECB22A8206}
|
HTML document, ASCII text, with very long lines (744), with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{681E55BE-4EA9-45EC-87A7-5838242F5572}
|
PNG image data, 167 x 92, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{6AB97F70-19DC-4D66-A016-FA92E89BDA1E}.bin
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{6C79191F-679B-47B3-87EC-B8A248B334F2}.bin
|
PNG image data, 220 x 170, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{6C9C7B8A-CB84-4202-AEC7-8B75A7F5B879}
|
PNG image data, 171 x 50, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{6CEB0516-8E70-4978-A508-9294F403FA64}.bin
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{6D889215-DCE8-43FC-B573-5EC1AB84924A}.bin
|
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{6DAE5E1D-2390-45D2-90AB-8A7A28EF8C01}.bin
|
PNG image data, 123 x 103, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{6EDD2716-0987-475F-B7AB-61B6DB56923E}
|
PNG image data, 123 x 103, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{6F0A1A33-EB6A-480F-A6C8-E8E5804AADA9}
|
PNG image data, 39 x 579, 8-bit colormap, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{707E7C9C-AC96-4A31-9653-C698960C5AC5}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{71F7F5F8-2DEC-48AA-90F5-345FF80CCD76}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{730BF7D7-8378-4737-A484-B5A45E1E2AA5}
|
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1248x1624, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{73668B79-D911-4B9E-AAFE-900C3F40D0D3}
|
PNG image data, 749 x 126, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{7438AE1A-53FC-430E-A4CF-348EC0608115}.bin
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{760BAC70-5C23-4594-BEE1-11B6CFFEC9E3}.bin
|
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{77D4F67D-BEE3-4A09-8BE6-AC0BC40D7459}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{78722B2C-3230-4EE4-86F0-5316E802283C}
|
PNG image data, 164 x 89, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{7983701E-82F5-4F5F-9043-ED3FD1A3ECA2}.bin
|
PNG image data, 230 x 68, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{79ACD8B9-52CA-4E36-9988-A54D782627F9}.bin
|
PNG image data, 127 x 138, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{7A625EB0-34AF-43B4-9C8B-B481B846CEB1}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{7BA1A306-C64F-4720-BC53-6148DACA5303}
|
PNG image data, 749 x 126, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{7BDD990F-4599-46B4-9E54-A49F7161D6F6}
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 69x630, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{7C496750-2D20-4642-A338-11BB712FD4C5}
|
PNG image data, 221 x 77, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{7CBC4BFA-0A29-4677-82D2-2B78CD0CC4AE}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{7CE0CD0C-C2ED-4F86-A004-23950989A4E1}.bin
|
PNG image data, 127 x 138, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{7DD1E378-A9E0-4788-80FE-D49CFF8CC729}
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{7E485254-4D46-4F3F-A962-256E218A6653}
|
PNG image data, 50 x 600, 8-bit colormap, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{7E5AFB83-1C5B-4F92-B2FA-0AE37869D629}
|
PNG image data, 77 x 627, 8-bit colormap, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{7F114890-E51B-4444-BBFC-686ACC595FE4}
|
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{7FC54303-89CA-4E6D-B4CE-9D4A5228EAC9}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{80BD033C-9EBC-4BB3-90CE-6FC272032896}.bin
|
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{8125F1DB-E94C-4878-87E7-E5EF8D3F400F}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:08:07], baseline, precision 8, 595x450, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{821A88CC-6BB5-4F12-A3EC-AF43A431C53A}
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 700x114, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{830E3F2E-BDAD-44EA-9E9C-38B859154A11}
|
PNG image data, 40 x 623, 8-bit colormap, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{8334E65F-F424-4F5F-A325-6221945B7679}.bin
|
PNG image data, 340 x 79, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{8755A164-2B5E-4855-9B9D-4AD1A196B407}.bin
|
PNG image data, 232 x 50, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{8815919C-8D64-4C70-9AD3-671319F49876}
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{8887A304-FE7C-4B9D-B6AC-07BCD297D094}
|
PNG image data, 232 x 50, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{88A3BAE5-6055-4F2F-92CC-1FA8CB7A30F6}
|
PNG image data, 452 x 277, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{88E4EBE1-E4F0-4AB9-AAE7-FE59A17D02E2}.bin
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{8972EE62-B783-4BB5-8D26-6E971413BE1E}
|
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{8A9D61A8-0B09-452B-BE49-3EC6170421A8}
|
PNG image data, 30 x 700, 8-bit colormap, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{8D096828-8C62-4849-9B9A-BFC0DA53B558}
|
PNG image data, 163 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{8D1129D0-7765-4F74-8DAB-F69CF5D74B27}
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 95x498, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{8D69E8DD-90C7-46D0-8821-E589B52354A2}.bin
|
PNG image data, 221 x 77, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{8E7C14C5-D276-4E70-9962-9C880F8EE212}.bin
|
PNG image data, 163 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{8F240BEC-6DBF-4A14-9DFB-4DAF6DE3D61A}
|
PNG image data, 127 x 138, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{90D78F94-4154-4292-93E2-EB25F94F708C}
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{912801C5-AC29-4B91-8879-2952242CAC0F}.bin
|
PNG image data, 221 x 77, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{9170DB0A-E06D-4C35-9838-2D2FD8805B88}.bin
|
PNG image data, 340 x 79, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{91EF41BD-5259-489F-AE16-076FF2007CD6}
|
PNG image data, 123 x 103, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{91F57B09-9123-4B02-9841-E9864A759B6E}.bin
|
PNG image data, 563 x 211, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{922152E8-7943-465B-A754-997AECC3D719}
|
PNG image data, 162 x 89, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{92407984-87DF-4CFD-A27A-FE5AC5EFF312}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{9258658D-3015-401F-8193-26ABA753081E}.bin
|
PNG image data, 162 x 89, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{9548C66A-D02A-47B2-9F4F-730D2B315557}.bin
|
PNG image data, 230 x 68, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{973206EC-E218-4190-952D-689BDE79B46B}.bin
|
PNG image data, 340 x 79, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{97F0310C-B211-43AE-A19A-07FBCC05D5D2}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{988885FB-E2F7-49A8-AC53-EA232B88FDC1}
|
PNG image data, 452 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{99317E9B-0A27-48DA-9095-96C9C619F252}.bin
|
PNG image data, 651 x 254, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{99E38EF3-DF5E-46C8-A0D5-F368537AC552}.bin
|
PNG image data, 185 x 76, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{9A73228A-01D5-4841-A800-C4E65CAAC5D6}.bin
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{9BE785C7-CFC2-4955-8A26-122FC342AE32}.bin
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{9CC27FA9-96AC-42F7-AC51-082E0DF91DDE}
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{9CD03FAD-2423-4801-BE6C-957A5BBDC9E4}
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{9E18061D-6145-4558-8B33-793E62998F96}.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{9E313FAC-3CA3-4696-8A92-4578AD10A71E}
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{9E3D7BB2-BE43-4EF0-A688-390051FF9B03}.bin
|
PNG image data, 123 x 103, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{9E557843-60C8-479E-954B-2976C8C1488F}.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{9E8F8BB7-C14E-4B05-AE75-4A6D02AA67BC}.bin
|
PNG image data, 167 x 92, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{9E91E7BF-77EB-4748-B34B-2B214324428E}
|
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{A00EF16A-D5B7-42FC-B7B8-8322AF52AB9E}.bin
|
PNG image data, 220 x 170, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{A0393063-5089-4D8E-8A8E-B035F51C1243}
|
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{A1CFA596-6B39-4269-A320-0BCF161579BF}.bin
|
PNG image data, 171 x 50, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{A211ABF7-3DC3-4637-8BFD-769DC720603B}
|
PNG image data, 340 x 79, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{A32ECC92-EA6C-4884-924F-7AF1D5F4C7B3}
|
PNG image data, 127 x 138, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{A34A9AB0-40E8-47F8-81CA-1824AF12A7D2}.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{A40B5285-95CE-4235-B4A3-0E11FA44F178}.bin
|
PNG image data, 230 x 68, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{A5828253-25E6-4C9A-8FD7-27F5DD4B0875}.bin
|
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{A5B1B4BA-03B3-4DEE-8840-4B39C3BC4D3F}.bin
|
PNG image data, 563 x 211, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{A72C1100-6777-49FD-BE1C-84DA6400298D}.bin
|
PNG image data, 59 x 61, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{A73F823E-4514-41FD-A0F4-39AE8B3B052F}.bin
|
PNG image data, 164 x 89, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{A81AB157-1F04-42DE-AEE9-2E50C837A3C1}
|
PNG image data, 167 x 92, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{A8623239-FD5C-46E8-B842-97A8FFB0294E}.bin
|
PNG image data, 742 x 104, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{A87B6A44-AC2E-46DC-B0C6-6ABDC4837476}
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 276x139,
components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{A98F4ECE-EA6B-48DE-A18B-2880912C2311}.bin
|
PNG image data, 742 x 104, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{ABE4DB66-7708-4B46-81A5-E9C0ED9C8896}.bin
|
PNG image data, 563 x 211, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{AC3DBF29-7FF0-488E-A552-F5E6A8CF8BC2}
|
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{ACDA4D62-1241-4A1D-AFD3-A36F265DC672}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:06:24], progressive, precision 8, 38x792, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{ADD3583C-323F-41EB-8402-41B73C38EC7E}.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{AE62CF73-C1A1-46C5-839A-65980C1B6435}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{AFCD8FE3-723C-459A-B7E2-4E98E7A83E64}
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{B0B1B803-7856-4903-BFEE-0DACB17A3B06}.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{B1803F15-D796-480E-9345-4A3CB6686841}.bin
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{B33F22E0-3F92-462A-95CA-7E764A7E2421}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{B87808EB-60A6-4417-8125-374F3ACDDDA3}.bin
|
PNG image data, 123 x 103, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{B89A9B88-CBE9-4A8B-9328-F551319460C7}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{BC1FA520-422A-4D4D-9331-3B7B9E4A1558}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{BC27E805-FFA6-4BCE-9A17-F25BE1A42EC0}
|
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{BD8C0599-5A19-415E-8923-E50FB1D563BD}.bin
|
PNG image data, 59 x 61, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{BE386717-B2DC-4380-B65D-E9FBD2323663}.bin
|
PNG image data, 749 x 126, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{BE481A6E-5BF9-4613-AF27-1C3A5EF64E14}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:18:09], progressive, precision 8, 164x641, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{BEDABE1F-88CD-466E-B44D-680AF869E098}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{BF868DB0-31F4-404E-BF9D-D99939EAD319}
|
PNG image data, 85 x 470, 8-bit colormap, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{BF95B410-79B6-416E-9E73-9F291EAE25C6}.bin
|
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{BFD6D50B-949E-4399-AE1A-7B269005D011}.bin
|
PNG image data, 213 x 85, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{C121157D-F4DF-4DB0-96D2-A400B48B1614}.bin
|
PNG image data, 185 x 76, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{C141A6F4-ACBD-4073-BCDA-20B29531E5FE}
|
Windows Enhanced Metafile (EMF) image data version 0x10000
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{C156C2BA-EC12-4B08-930E-C17AC1A4F81E}
|
PNG image data, 167 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{C32DE9D4-8F55-4DE6-8319-A0291246E97D}.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{C33E33C8-56F5-429B-B06E-3D5F4B4A2455}
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 357x69, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{C4564BC3-37B7-47BD-844A-7179BD5B4C60}.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{C5B63109-F099-460F-975B-A1E1EE78CA0D}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{C8A834DF-7478-4306-BDDF-38F6050ABF39}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{C92A1ACC-62AE-4076-BB88-FE9E0DD832AF}.bin
|
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{C932A57A-3379-471B-9114-363031DE9E73}.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{C94C3EED-A942-485D-A630-9B6CF4A5FEF5}
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{C952F0C2-B5DF-4E2F-A126-8D955EEE2735}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{CA87DE62-3925-40ED-8CEE-9A5FF083834E}
|
PNG image data, 563 x 211, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{CB3D4F96-4C20-4930-BFC4-D097C058EFBF}.bin
|
PNG image data, 651 x 254, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{CBFC5560-5EE7-4BFA-B8BF-50F203EBC76A}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:09:29], progressive, precision 8, 609x675, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{CC16A537-8E32-4002-8759-CE6D4CFA8C02}.bin
|
PNG image data, 59 x 61, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{CC4546A4-9AC2-4159-86F1-3DFFA63261C9}.bin
|
PNG image data, 220 x 170, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{CC7B0BD4-E601-419B-B41C-DA8C80C2CF67}.bin
|
PNG image data, 651 x 254, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{CCF98A49-29DF-459F-AB64-37EF544EAEF2}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{CD5EA090-6F1A-4B5A-A090-930CB0D94F86}.bin
|
PNG image data, 123 x 103, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{CD9811A0-DB5C-4E4D-8C41-612C0DA16EF5}
|
PNG image data, 39 x 600, 8-bit colormap, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{CE0A83F2-3733-4612-88AF-E30477682DF8}
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 613x144, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{CF945CDA-9EF0-4315-810D-83C0A28DC3ED}.bin
|
PNG image data, 171 x 50, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{CFA18D0C-8E32-4AA6-92C4-BA8892BFEF35}
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{D0115B1B-59B7-4928-A6BC-194D649BA679}.bin
|
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{D036B7D5-1A9E-48B4-963B-7B95CD97A9EA}.bin
|
PNG image data, 164 x 89, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{D22C3A60-380D-4ED9-A729-29ED0E9B8CA5}
|
PNG image data, 40 x 617, 8-bit colormap, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{D37E640B-E397-4DEE-A38B-C1B724C6CD25}.bin
|
PNG image data, 749 x 126, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{D3BB3D05-1563-49AA-B30C-4E9377D1D432}
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{D40F4CF7-37EF-4384-AC50-61F2A9E0E1B9}.bin
|
PNG image data, 167 x 92, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{D484B603-47B7-4340-AB12-54A07652F48A}.bin
|
PNG image data, 452 x 277, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{D5CE1D8F-28C6-425A-8107-B4DA6E89E1DD}
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{D67797A2-079E-4F1D-ADF0-46F66CC14041}.bin
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{D8DAED23-0060-4082-9AC4-6942CDFFCD50}
|
PNG image data, 651 x 254, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{D90FEB28-A3E9-455F-AE4C-165EC389090F}
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{D9458B66-C0A6-4388-BC64-23EFAF161A3E}.bin
|
PNG image data, 220 x 170, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{D949B373-FD62-436F-85B1-14B00DC35F58}
|
PNG image data, 221 x 77, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{DBB636EB-B0CA-4061-AF9A-FA7250E9F311}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:10:32], progressive, precision 8, 594x773, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{DC6788C4-82D2-4DBF-98F2-151C010E9826}.bin
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{DE06E333-16B4-473F-9F9F-DEE2B381E8AD}.bin
|
PNG image data, 167 x 92, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{DE443F81-481A-4F98-BFC0-D21AB0A4D12A}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:05:55], progressive, precision 8, 612x618, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{DEC058F5-1D8B-4D0B-A042-477F69EADB81}.bin
|
PNG image data, 452 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{E0F8A780-D888-4A84-AB65-A1FB54940175}
|
Windows Enhanced Metafile (EMF) image data version 0x10000
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{E18618EB-DE43-4EFC-8DF0-F7D1D0B9F1DD}.bin
|
PNG image data, 749 x 126, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{E1AA262C-AD95-4EBE-A7ED-E0BE6AC52FBF}.bin
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{E1E97801-3538-4A14-B99A-AAC6F2B40894}
|
PNG image data, 185 x 76, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{E21D737D-3A18-43C0-A662-63DD1A56919A}.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{E2BB813E-1016-4987-8874-7C27E6F07A7C}
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 105x441,
components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{E2D3AE7D-05A5-458D-98BC-A4F909290E08}.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{E402FAC2-89E1-4EF9-9008-4E7B422DA86D}.bin
|
PNG image data, 162 x 89, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{E63977C0-4E75-465D-9962-44C69531F536}
|
PNG image data, 171 x 552, 8-bit colormap, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{E6498699-DE1A-4D2C-832C-49E5212C405A}
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 14x341, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{E8F4F66D-D5C9-4670-8A30-D3331F2E7336}.bin
|
PNG image data, 213 x 85, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{E99FDC2C-3A79-47A1-81D4-FA20DC4B64C2}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:11:38], progressive, precision 8, 577x757, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{E9CD9E38-3552-46D6-8403-248FBA09693C}
|
PNG image data, 452 x 277, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{E9D48CBE-44FE-4D23-B9F2-2C12B17886AD}.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{EA147BA0-AC2D-40DF-93AA-443CA29376C3}
|
PNG image data, 563 x 211, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{EB56D2AB-4B96-43CA-8530-9AE6EE973451}
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 728x77, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{EBE99D40-57B7-43CE-AC67-917EBE5BFFB5}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:05:55], progressive, precision 8, 612x618, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{ECCABA22-7976-493F-AC7A-F5EF21003246}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:18:09], progressive, precision 8, 164x641, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{ECDD561E-CA23-43AA-86BF-2F3F69D92CD5}
|
PNG image data, 60 x 336, 4-bit colormap, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{ED5FA46E-225C-40E3-935F-2B3DFD583005}
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 70x626, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{F01D70D9-CC38-4345-9E56-F3141A7CEDFC}
|
PNG image data, 230 x 68, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{F074BE1C-F955-450C-A1F9-ED5AB429A4B0}
|
PNG image data, 59 x 61, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{F0A1EC0C-C4A9-477E-9DC6-8830FA55851F}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2004:03:04 13:27:10], progressive, precision 8, 102x792, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{F2B4735E-FE6B-4FC3-8E5D-693BD15F4969}
|
PNG image data, 171 x 50, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{F3262E1F-F84F-49F3-828F-68A5C79D9EF2}.bin
|
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{F3FC263F-7735-4F40-A281-3D567B4ED2CC}.bin
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{F56A2176-2CC0-4E91-865A-E6E78222FD95}
|
PNG image data, 189 x 305, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{F6F2085E-CEA4-4E62-8DE2-276B78097D84}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:12:29], progressive, precision 8, 598x766, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{F7C80B4C-81C3-47AC-884A-0F8919BD727B}
|
PNG image data, 453 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{F827F945-7E19-4FD0-B2C9-F704C4545DCE}
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 612x792, components
3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{F872AB7B-A587-461D-AB73-8483DA1796C7}.bin
|
PNG image data, 163 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{F979E05F-1C40-4BF1-A082-1783644C3992}.bin
|
PNG image data, 651 x 254, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{FA6276DF-A13E-42C7-8778-AD82145E316E}
|
Windows Enhanced Metafile (EMF) image data version 0x10000
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{FA7FE51E-7AC7-42D4-ABB4-4AFBFB67CCD9}
|
PNG image data, 50 x 556, 8-bit colormap, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{FB6CABB9-AE24-4B1B-A8E5-51CD98AD3C0A}
|
PNG image data, 220 x 170, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{FB9B6D35-7B85-48F1-A43A-43CBFF7AC372}
|
PNG image data, 165 x 131, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{FD0E615A-3BB8-4EE9-9860-80C2B05BED86}
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
CS Windows, datetime=2004:03:12 11:15:20], progressive, precision 8, 604x784, components 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{FE2E8586-95AD-46EB-8863-449987E656FF}.bin
|
PNG image data, 454 x 278, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\{FFB0830D-8DF5-44C2-8212-1343D78742E2}
|
PNG image data, 46 x 49, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Templates\Open Notebook.onetoc2
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\36a44befa49650d0.customDestinations-ms (copy)
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5QS7RN3FVDXNQTVRN9N3.temp
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Send to OneNote.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Description string, Has Relative path, Has command
line arguments, Archive, ctime=Tue Jun 30 15:57:16 2015, mtime=Mon Mar 20 19:33:44 2023, atime=Tue Jun 30 15:57:16 2015, length=157872,
window=hide
|
dropped
|
||
|
C:\Users\user\Documents\OneNote Notebooks\My Notebook\Open Notebook.onetoc2
|
data
|
dropped
|
||
|
C:\Users\user\Documents\OneNote Notebooks\My Notebook\Quick Notes.one
|
data
|
dropped
|
There are 686 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\ONENOTE.EXE
|
C:\Program Files (x86)\Microsoft Office\Office16\ONENOTE.EXE" "C:\Users\user\Desktop\malware.one
|
|
|
|
C:\Windows\SysWOW64\wscript.exe
|
C:\Windows\System32\WScript.exe "C:\Users\user\AppData\Local\Temp\click.wsf"
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
C:\Windows\System32\regsvr32.exe" "C:\Users\user\AppData\Local\Temp\rad66B18.tmp.dll
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
"C:\Users\user\AppData\Local\Temp\rad66B18.tmp.dll"
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
C:\Windows\system32\regsvr32.exe "C:\Windows\system32\JMgyzwrCUAZpIA\OfEg.dll"
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\ONENOTEM.EXE
|
/tsr
|
||
|
C:\Program Files (x86)\Microsoft Office\Office16\ONENOTEM.EXE
|
"C:\Program Files (x86)\Microsoft Office\Office16\ONENOTEM.EXE" /tsr
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://218.38.121.17:443/tcbvserkm/kigv/rbwmds/
|
unknown
|
|
|
|
https://218.38.121.17/tcbvserkm/kigv/rbwmds/
|
unknown
|
|
|
|
https://115.178.55.22:80/tcbvserkm/kigv/rbwmds/0
|
unknown
|
|
|
|
https://olgaperezporro.com/js/ExGBiCZdkkw0GBAuHNZ/
|
40.115.116.248
|
|
|
|
http://staging-demo.com/public_html/wTG/
|
unknown
|
|
|
|
https://115.178.55.22:80/tcbvserkm/kigv/rbwmds/rw
|
unknown
|
|
|
|
http://semedacara.com.br/ava/ahhz/
|
unknown
|
|
|
|
http://malli.su:80/img/PXN5J/
|
unknown
|
|
|
|
https://138.197.14.67:8080/tcbvserkm/kigv/rbwmds/
|
unknown
|
|
|
|
https://218.38.121.17/tcbvserkm/kigv/rbwmds/T(
|
unknown
|
|
|
|
https://4fly.su:443/search/OfGA/wM
|
unknown
|
|
|
|
https://thailandcan.org/assets/ulRa/P
|
unknown
|
|
|
|
https://olgaperezporro.com/js/ExGBiCZdkkw0GBAuHNZ/vM
|
unknown
|
|
|
|
https://218.38.121.17/tcbvserkm/kigv/rbwmds/wn
|
unknown
|
|
|
|
https://olgaperezporro.com/js/ExGBiCZdkkw0GBAuHNZ/6
|
unknown
|
|
|
|
https://olgaperezporro.com/js/ExGBiCZdkkw0GBAuHNZ/esqu
|
unknown
|
|
|
|
https://138.197.14.67:8080/tcbvserkm/kigv/rbwmds/a
|
unknown
|
|
|
|
http://staging-demo.com/public_html/wTG/xM
|
unknown
|
|
|
|
http://semedacara.com.br/ava/ahhz/yM
|
unknown
|
|
|
|
https://kts.group/35ccbf2003/jKgk8/
|
31.31.196.93
|
|
|
|
http://malli.su:80/img/PXN5J/tM
|
unknown
|
|
|
|
https://193.194.92.175/
|
unknown
|
||
|
http://uk-eurodom.co
|
unknown
|
||
|
http://hypernite.5v.pl/vendor/hvlVMsI9jGafBBTa/
|
unknown
|
||
|
https://115.178.55.22:80/
|
unknown
|
||
|
http://1it.fit
|
unknown
|
||
|
https://115.178.55.22:80/tcbvserkm/kigv/rbwmds/
|
unknown
|
||
|
https://93.84.115.205:7080/T
|
unknown
|
||
|
https://olgaperezporro.com/
|
unknown
|
||
|
https://115.178.55.22:80/l
|
unknown
|
||
|
http://uk-eurodom.com/bitrix/9HrzPY66D1F/
|
unknown
|
||
|
https://olgaperezporro.com
|
unknown
|
||
|
http://efirma.sg
|
unknown
|
||
|
http://www.polarkh-crewing.com/aboutu
|
unknown
|
||
|
https://198.38.121.17/
|
unknown
|
||
|
http://malli.s4
|
unknown
|
||
|
https://kts.group/35ccbf2003/jKgk8/uM
|
unknown
|
||
|
https://4fly.su:443/search/OfGA/
|
unknown
|
||
|
http://1it.fit/site_vp/4PwK3s6Bf9K7TEA/
|
unknown
|
||
|
http://efirma.sglwebs.com/img/2mmLuv7SxhhYFRVn/8
|
unknown
|
||
|
https://4fly.su:443/search/OfGA/ata
|
unknown
|
||
|
https://kts.group
|
unknown
|
||
|
http://staging-demo.com/public_html/wT
|
unknown
|
||
|
http://hypernite.5v.pl/vendor/hvlVMsI9jGafBBTa/zM
|
unknown
|
||
|
http://efirma.sglwebs.com/img/2mmLuv
|
unknown
|
||
|
https://thailandcan.org/assets/ulRa/
|
unknown
|
||
|
https://218.38.121.17/
|
unknown
|
||
|
http://hypernite.5v.pl/vendo
|
unknown
|
||
|
http://uk-eurodom.com/bitrix/9HrzPY66D1F/24Q
|
unknown
|
||
|
http://semedacara.com.br/ava/a
|
unknown
|
||
|
https://138.197.14.67:8080/
|
unknown
|
||
|
http://hypernite.5v.pl/vendor/hvlVMsI9jGafBBTa/cw1122
|
unknown
|
||
|
http://1it.fit/site_vp/4PwK3s6Bf9K7TEA/EC24%
|
unknown
|
||
|
http://efirma.sglwebs.com/img/2mmLuv7SxhhYFRVn/
|
unknown
|
There are 44 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
malli.su
|
195.2.88.86
|
|
|
|
kts.group
|
31.31.196.93
|
|
|
|
olgaperezporro.com
|
40.115.116.248
|
|
|
|
c-0001.c-msedge.net
|
13.107.4.50
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
193.194.92.175
|
unknown
|
Algeria
|
|
|
|
93.84.115.205
|
unknown
|
Belarus
|
|
|
|
174.138.33.49
|
unknown
|
United States
|
|
|
|
160.16.143.191
|
unknown
|
Japan
|
|
|
|
103.41.204.169
|
unknown
|
Indonesia
|
|
|
|
85.214.67.203
|
unknown
|
Germany
|
|
|
|
83.229.80.93
|
unknown
|
United Kingdom
|
|
|
|
85.25.120.45
|
unknown
|
Germany
|
|
|
|
198.199.70.22
|
unknown
|
United States
|
|
|
|
159.65.135.222
|
unknown
|
United States
|
|
|
|
93.104.209.107
|
unknown
|
Germany
|
|
|
|
186.250.48.5
|
unknown
|
Brazil
|
|
|
|
209.239.112.82
|
unknown
|
United States
|
|
|
|
175.126.176.79
|
unknown
|
Korea Republic of
|
|
|
|
37.59.103.148
|
unknown
|
France
|
|
|
|
138.197.14.67
|
unknown
|
United States
|
|
|
|
139.196.72.155
|
unknown
|
China
|
|
|
|
128.199.242.164
|
unknown
|
United Kingdom
|
|
|
|
115.178.55.22
|
unknown
|
Indonesia
|
|
|
|
178.238.225.252
|
unknown
|
Germany
|
|
|
|
128.199.217.206
|
unknown
|
United Kingdom
|
|
|
|
46.101.98.60
|
unknown
|
Netherlands
|
|
|
|
82.98.180.154
|
unknown
|
Spain
|
|
|
|
114.79.130.68
|
unknown
|
India
|
|
|
|
195.2.88.86
|
malli.su
|
Russian Federation
|
|
|
|
103.224.241.74
|
unknown
|
India
|
|
|
|
31.31.196.93
|
kts.group
|
Russian Federation
|
|
|
|
202.28.34.99
|
unknown
|
Thailand
|
|
|
|
87.106.97.83
|
unknown
|
Germany
|
|
|
|
103.254.12.236
|
unknown
|
Viet Nam
|
|
|
|
103.85.95.4
|
unknown
|
Indonesia
|
|
|
|
40.115.116.248
|
olgaperezporro.com
|
United States
|
|
|
|
54.37.228.122
|
unknown
|
France
|
|
|
|
218.38.121.17
|
unknown
|
Korea Republic of
|
|
|
|
185.148.169.10
|
unknown
|
Germany
|
|
|
|
195.77.239.39
|
unknown
|
Spain
|
|
|
|
78.47.204.80
|
unknown
|
Germany
|
|
|
|
139.59.80.108
|
unknown
|
Singapore
|
|
|
|
37.44.244.177
|
unknown
|
Germany
|
|
|
|
178.62.112.199
|
unknown
|
European Union
|
|
|
|
104.244.79.94
|
unknown
|
United States
|
|
|
|
62.171.178.147
|
unknown
|
United Kingdom
|
|
|
|
64.227.55.231
|
unknown
|
United States
|
|
There are 33 hidden IPs, click here to show them.
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\Resiliency\StartupItems
|
/c&
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\Resiliency\StartupItems
|
0c&
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\Word\Addins\OneNote.WordAddinTakeNotesButton
|
FriendlyName
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\Word\Addins\OneNote.WordAddinTakeNotesButton
|
Description
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\Word\Addins\OneNote.WordAddinTakeNotesButton
|
LoadBehavior
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\Word\Addins\OneNote.WordAddinTakeNotesButton
|
CommandLineSafe
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\PowerPoint\Addins\OneNote.PowerPointAddinTakeNotesButton
|
FriendlyName
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\PowerPoint\Addins\OneNote.PowerPointAddinTakeNotesButton
|
Description
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\PowerPoint\Addins\OneNote.PowerPointAddinTakeNotesButton
|
LoadBehavior
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\PowerPoint\Addins\OneNote.PowerPointAddinTakeNotesButton
|
CommandLineSafe
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\General
|
LastMyDocumentsPathUsed
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\General
|
ProgressWindowPosLeft
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\General
|
ProgressWindowPosTop
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\General
|
ConsecutiveBootCrashes
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\General
|
ConsecutiveEarlyCrashes
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\Options\Save
|
BackupFilenamePostfixStartSP1
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\Options\Save
|
BackupFilenamePostfixEndSP1
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\Options\Save
|
BackupFilenamePostfixEndRerepairSP1
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote
|
FirstBootStatus
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\Options
|
WatsonLoggingUserId
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache
|
RemoteClearDate
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3
|
Last
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
|
FilePath
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
|
StartDate
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
|
EndDate
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
|
Properties
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
|
Url
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache
|
LastClean
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
DisableWinHttpCertAuth
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
DisableIsOwnerRegex
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
DisableSessionAwareHttpClose
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
DisableADALForExtendedApps
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
DisableADALSetSilentAuth
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
msoridDisableGuestCredProvider
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
msoridDisableOstringReplace
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\OpenNotebooks
|
1
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\000061091A0090400000000000F01FEC\Usage
|
OneNoteNonBootFilesIntl_1033
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\OpenNotebooks
|
1
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\OpenNotebooks
|
2
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\General
|
LastCacheFclRepairSuccessTime
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\General
|
LastAppliedNotebookColor
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\OpenNotebooks
|
1
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\Resiliency
|
RepairQuickNotesOnBoot
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\General
|
LastNotebookHierarchySQMUpdate
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\FavoritePens
|
Data
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\Place MRU\Change
|
ChangeId
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\RecentNotebooks\Change
|
ChangeId
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\General
|
OneNoteProtocolShouldPrompt
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\Options\Paths
|
UnfiledNotesSection
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\Options\ClientTelemetry
|
LastDataCollectionTimeAfterBoot
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109110000000000000000F01FEC\Usage
|
OneNoteFiles
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109110000000000000000F01FEC\Usage
|
ProductFiles
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
|
en-US
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
|
en-US
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{F2A7EE29-8BF6-4a6d-83F1-098E366C709C}\1.0
|
NULL
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{F2A7EE29-8BF6-4a6d-83F1-098E366C709C}\1.0\0\win32
|
NULL
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{0EA692EE-BB50-4E3C-AEF0-356D91732725}\1.1
|
NULL
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{0EA692EE-BB50-4E3C-AEF0-356D91732725}\1.1\0\win32
|
NULL
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{1D12BD3F-89B6-4077-AA2C-C9DC2BCA42F9}\TypeLib
|
Version
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1D12BD3F-89B6-4077-AA2C-C9DC2BCA42F9}\TypeLib
|
Version
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{627EA7B4-95B5-4980-84C1-9D20DA4460B1}\TypeLib
|
Version
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{627EA7B4-95B5-4980-84C1-9D20DA4460B1}\TypeLib
|
Version
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{452AC71A-B655-4967-A208-A4CC39DD7949}\TypeLib
|
Version
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{452AC71A-B655-4967-A208-A4CC39DD7949}\TypeLib
|
Version
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{6D4B9C3E-CC05-493F-85E2-43D1006DF96A}\TypeLib
|
Version
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6D4B9C3E-CC05-493F-85E2-43D1006DF96A}\TypeLib
|
Version
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{8E8304B8-CBD1-44F8-B0E8-89C625B2002E}\TypeLib
|
Version
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{8E8304B8-CBD1-44F8-B0E8-89C625B2002E}\TypeLib
|
Version
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{E2E1511D-502D-4BD0-8B3A-8A89A05CDCAE}\ProxyStubClsid32
|
NULL
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{E2E1511D-502D-4BD0-8B3A-8A89A05CDCAE}\TypeLib
|
Version
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E2E1511D-502D-4BD0-8B3A-8A89A05CDCAE}\ProxyStubClsid32
|
NULL
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E2E1511D-502D-4BD0-8B3A-8A89A05CDCAE}\TypeLib
|
Version
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote
|
FirstBootStatus
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\General
|
LastAppliedNotebookColor
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote
|
FirstBootStatus
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109110000000000000000F01FEC\Usage
|
ProductFiles
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Roaming
|
RoamingConfigurableSettings
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Roaming
|
RoamingLastSyncTime
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Roaming
|
RoamingLastWriteTime
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote
|
FirstBootStatus
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog
|
CacheReady
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog
|
LastRequest
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog
|
CacheReady
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog
|
LastUpdate
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog
|
NextUpdate
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\General
|
LastAppliedNotebookColor
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\000061091A0090400000000000F01FEC\Usage
|
OneNoteNonBootFilesIntl_1033
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\General
|
LastAppliedNotebookColor
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\General
|
LastAppliedNotebookColor
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\000061091A0090400000000000F01FEC\Usage
|
OneNoteFilesIntl_1033
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109110000000000000000F01FEC\Usage
|
OneNoteFiles
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\000061091A0090400000000000F01FEC\Usage
|
OneNoteFilesIntl_1033
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109110000000000000000F01FEC\Usage
|
OneNoteFiles
|
There are 83 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
6EA000
|
heap
|
page read and write
|
|
|
|
2030000
|
direct allocation
|
page execute and read and write
|
|
|
|
2061000
|
direct allocation
|
page execute read
|
|
|
|
2601000
|
direct allocation
|
page execute read
|
|
|
|
E00000
|
direct allocation
|
page execute and read and write
|
|
|
|
58EE000
|
heap
|
page read and write
|
||
|
2636E213000
|
heap
|
page read and write
|
||
|
5359000
|
heap
|
page read and write
|
||
|
26B35848000
|
heap
|
page read and write
|
||
|
55AA000
|
heap
|
page read and write
|
||
|
20E5AE02000
|
heap
|
page read and write
|
||
|
67D0000
|
heap
|
page read and write
|
||
|
57EE000
|
heap
|
page read and write
|
||
|
54C7000
|
heap
|
page read and write
|
||
|
5A73000
|
heap
|
page read and write
|
||
|
17A6CE51000
|
heap
|
page read and write
|
||
|
644D000
|
stack
|
page read and write
|
||
|
58C8000
|
heap
|
page read and write
|
||
|
2DFA000
|
heap
|
page read and write
|
||
|
263CE3C9000
|
heap
|
page read and write
|
||
|
2D88000
|
heap
|
page read and write
|
||
|
624F87F000
|
stack
|
page read and write
|
||
|
5A1F000
|
heap
|
page read and write
|
||
|
58FA000
|
heap
|
page read and write
|
||
|
263CE178000
|
heap
|
page read and write
|
||
|
1B615700000
|
heap
|
page read and write
|
||
|
561F000
|
heap
|
page read and write
|
||
|
5541000
|
heap
|
page read and write
|
||
|
2D3F000
|
heap
|
page read and write
|
||
|
180060000
|
unkown
|
page readonly
|
||
|
6AA0000
|
heap
|
page read and write
|
||
|
579E000
|
heap
|
page read and write
|
||
|
18005D000
|
unkown
|
page read and write
|
||
|
67DD000
|
heap
|
page read and write
|
||
|
26CC000
|
stack
|
page read and write
|
||
|
200000
|
heap
|
page read and write
|
||
|
1B615829000
|
heap
|
page read and write
|
||
|
5A02000
|
heap
|
page read and write
|
||
|
4FBC000
|
heap
|
page read and write
|
||
|
4FCE000
|
heap
|
page read and write
|
||
|
29BD9F54000
|
heap
|
page read and write
|
||
|
5481000
|
heap
|
page read and write
|
||
|
52BE000
|
heap
|
page read and write
|
||
|
582D000
|
heap
|
page read and write
|
||
|
180060000
|
unkown
|
page readonly
|
||
|
2A59000
|
heap
|
page read and write
|
||
|
5904000
|
heap
|
page read and write
|
||
|
4FAF000
|
heap
|
page read and write
|
||
|
3328000
|
heap
|
page read and write
|
||
|
5345000
|
heap
|
page read and write
|
||
|
870000
|
trusted library allocation
|
page read and write
|
||
|
5430000
|
heap
|
page read and write
|
||
|
5917000
|
heap
|
page read and write
|
||
|
5534000
|
heap
|
page read and write
|
||
|
263CECC0000
|
trusted library allocation
|
page read and write
|
||
|
4FBB000
|
heap
|
page read and write
|
||
|
57AF000
|
heap
|
page read and write
|
||
|
566D000
|
heap
|
page read and write
|
||
|
6904000
|
heap
|
page read and write
|
||
|
2D4E000
|
heap
|
page read and write
|
||
|
26F0000
|
heap
|
page read and write
|
||
|
5783000
|
heap
|
page read and write
|
||
|
C30000
|
heap
|
page read and write
|
||
|
576D000
|
heap
|
page read and write
|
||
|
56CF000
|
heap
|
page read and write
|
||
|
5781000
|
heap
|
page read and write
|
||
|
4FBC000
|
heap
|
page read and write
|
||
|
28EC000
|
heap
|
page read and write
|
||
|
1B61585B000
|
heap
|
page read and write
|
||
|
54B3000
|
heap
|
page read and write
|
||
|
4FB8000
|
heap
|
page read and write
|
||
|
28C3000
|
heap
|
page read and write
|
||
|
5779000
|
heap
|
page read and write
|
||
|
5359000
|
heap
|
page read and write
|
||
|
1B5249A0000
|
heap
|
page read and write
|
||
|
20734BA0000
|
heap
|
page read and write
|
||
|
2DB5000
|
heap
|
page read and write
|
||
|
502A000
|
heap
|
page read and write
|
||
|
59FE000
|
heap
|
page read and write
|
||
|
53BD000
|
heap
|
page read and write
|
||
|
A45197F000
|
stack
|
page read and write
|
||
|
56B9000
|
heap
|
page read and write
|
||
|
332B000
|
heap
|
page read and write
|
||
|
28A1000
|
heap
|
page read and write
|
||
|
1B615876000
|
heap
|
page read and write
|
||
|
2D70000
|
heap
|
page read and write
|
||
|
563F000
|
heap
|
page read and write
|
||
|
6C7D000
|
stack
|
page read and write
|
||
|
28EC000
|
heap
|
page read and write
|
||
|
5558000
|
heap
|
page read and write
|
||
|
589B000
|
heap
|
page read and write
|
||
|
2650000
|
heap
|
page read and write
|
||
|
20E5AE00000
|
heap
|
page read and write
|
||
|
2895000
|
heap
|
page read and write
|
||
|
5A64000
|
heap
|
page read and write
|
||
|
2DB5000
|
heap
|
page read and write
|
||
|
545A000
|
heap
|
page read and write
|
||
|
2D32000
|
heap
|
page read and write
|
||
|
26B35859000
|
heap
|
page read and write
|
||
|
20734E3D000
|
heap
|
page read and write
|
||
|
29BD9F8F000
|
heap
|
page read and write
|
||
|
2898000
|
heap
|
page read and write
|
||
|
20734F18000
|
heap
|
page read and write
|
||
|
20D447B000
|
stack
|
page read and write
|
||
|
3324000
|
heap
|
page read and write
|
||
|
2CBF000
|
stack
|
page read and write
|
||
|
4F4D000
|
heap
|
page read and write
|
||
|
59F4000
|
heap
|
page read and write
|
||
|
4F4F000
|
heap
|
page read and write
|
||
|
2DA5000
|
heap
|
page read and write
|
||
|
4F4F000
|
heap
|
page read and write
|
||
|
564F000
|
heap
|
page read and write
|
||
|
2D65000
|
heap
|
page read and write
|
||
|
C97000
|
heap
|
page read and write
|
||
|
5502000
|
heap
|
page read and write
|
||
|
2DFB000
|
heap
|
page read and write
|
||
|
59A5000
|
heap
|
page read and write
|
||
|
289C000
|
heap
|
page read and write
|
||
|
5502000
|
heap
|
page read and write
|
||
|
BD7C39B000
|
stack
|
page read and write
|
||
|
54BF000
|
heap
|
page read and write
|
||
|
59BB000
|
heap
|
page read and write
|
||
|
58D1000
|
heap
|
page read and write
|
||
|
4FD0000
|
heap
|
page read and write
|
||
|
26B357E0000
|
trusted library allocation
|
page read and write
|
||
|
54D6000
|
heap
|
page read and write
|
||
|
8C75AFF000
|
stack
|
page read and write
|
||
|
5518000
|
heap
|
page read and write
|
||
|
28EF000
|
heap
|
page read and write
|
||
|
59A7000
|
heap
|
page read and write
|
||
|
E55000
|
heap
|
page read and write
|
||
|
2892000
|
heap
|
page read and write
|
||
|
59D6000
|
heap
|
page read and write
|
||
|
2887000
|
heap
|
page read and write
|
||
|
17A6CD70000
|
heap
|
page read and write
|
||
|
5794000
|
heap
|
page read and write
|
||
|
54D6000
|
heap
|
page read and write
|
||
|
59F4000
|
heap
|
page read and write
|
||
|
26B35841000
|
heap
|
page read and write
|
||
|
569B000
|
heap
|
page read and write
|
||
|
4A2E000
|
stack
|
page read and write
|
||
|
1B525300000
|
heap
|
page read and write
|
||
|
5498000
|
heap
|
page read and write
|
||
|
7618F1B000
|
stack
|
page read and write
|
||
|
2857000
|
stack
|
page read and write
|
||
|
5993000
|
heap
|
page read and write
|
||
|
56D8000
|
heap
|
page read and write
|
||
|
534B000
|
heap
|
page read and write
|
||
|
5836000
|
heap
|
page read and write
|
||
|
20734B90000
|
heap
|
page read and write
|
||
|
56E6000
|
heap
|
page read and write
|
||
|
545A000
|
heap
|
page read and write
|
||
|
4FB8000
|
heap
|
page read and write
|
||
|
263CE1BE000
|
heap
|
page read and write
|
||
|
20734F00000
|
heap
|
page read and write
|
||
|
27DC000
|
stack
|
page read and write
|
||
|
4F49000
|
heap
|
page read and write
|
||
|
5577000
|
heap
|
page read and write
|
||
|
263CEF30000
|
trusted library allocation
|
page read and write
|
||
|
5994000
|
heap
|
page read and write
|
||
|
2DF6000
|
heap
|
page read and write
|
||
|
575C000
|
heap
|
page read and write
|
||
|
2DF1000
|
heap
|
page read and write
|
||
|
5359000
|
heap
|
page read and write
|
||
|
2DBB000
|
heap
|
page read and write
|
||
|
7C3000
|
heap
|
page read and write
|
||
|
26B35874000
|
heap
|
page read and write
|
||
|
56C7000
|
heap
|
page read and write
|
||
|
5755000
|
heap
|
page read and write
|
||
|
531E000
|
heap
|
page read and write
|
||
|
76194FD000
|
stack
|
page read and write
|
||
|
5835000
|
heap
|
page read and write
|
||
|
95B000
|
stack
|
page read and write
|
||
|
53EA000
|
heap
|
page read and write
|
||
|
58FB000
|
heap
|
page read and write
|
||
|
2DD3000
|
heap
|
page read and write
|
||
|
57AE000
|
heap
|
page read and write
|
||
|
29BD9652000
|
heap
|
page read and write
|
||
|
3328000
|
heap
|
page read and write
|
||
|
67D2000
|
heap
|
page read and write
|
||
|
2A31000
|
heap
|
page read and write
|
||
|
59B9000
|
heap
|
page read and write
|
||
|
26B35876000
|
heap
|
page read and write
|
||
|
5ACC000
|
heap
|
page read and write
|
||
|
634D000
|
stack
|
page read and write
|
||
|
54EC000
|
heap
|
page read and write
|
||
|
288A000
|
heap
|
page read and write
|
||
|
1B524CBD000
|
heap
|
page read and write
|
||
|
59A8000
|
heap
|
page read and write
|
||
|
29BD9691000
|
heap
|
page read and write
|
||
|
4FD2000
|
heap
|
page read and write
|
||
|
56E6000
|
heap
|
page read and write
|
||
|
26B35867000
|
heap
|
page read and write
|
||
|
59A6000
|
heap
|
page read and write
|
||
|
5A12000
|
heap
|
page read and write
|
||
|
56B1000
|
heap
|
page read and write
|
||
|
20E5ACC0000
|
heap
|
page read and write
|
||
|
2D5E000
|
heap
|
page read and write
|
||
|
5A12000
|
heap
|
page read and write
|
||
|
3320000
|
heap
|
page read and write
|
||
|
20734D00000
|
trusted library allocation
|
page read and write
|
||
|
26B35844000
|
heap
|
page read and write
|
||
|
65C0000
|
remote allocation
|
page read and write
|
||
|
4F4F000
|
heap
|
page read and write
|
||
|
17A6CE02000
|
heap
|
page read and write
|
||
|
4FB7000
|
heap
|
page read and write
|
||
|
59F6000
|
heap
|
page read and write
|
||
|
2E25000
|
heap
|
page read and write
|
||
|
20734E02000
|
heap
|
page read and write
|
||
|
5502000
|
heap
|
page read and write
|
||
|
5919000
|
heap
|
page read and write
|
||
|
17A6CE00000
|
heap
|
page read and write
|
||
|
28C3000
|
heap
|
page read and write
|
||
|
1B615790000
|
trusted library allocation
|
page read and write
|
||
|
26DE000
|
stack
|
page read and write
|
||
|
5948000
|
heap
|
page read and write
|
||
|
E50000
|
heap
|
page read and write
|
||
|
29BD967F000
|
heap
|
page read and write
|
||
|
5612000
|
heap
|
page read and write
|
||
|
775000
|
heap
|
page read and write
|
||
|
2DC3000
|
heap
|
page read and write
|
||
|
4FD8000
|
heap
|
page read and write
|
||
|
20D487E000
|
stack
|
page read and write
|
||
|
840000
|
direct allocation
|
page execute and read and write
|
||
|
2629000
|
direct allocation
|
page readonly
|
||
|
1B525202000
|
heap
|
page read and write
|
||
|
2860000
|
trusted library allocation
|
page read and write
|
||
|
20E5AE29000
|
heap
|
page read and write
|
||
|
58AD000
|
heap
|
page read and write
|
||
|
57AF000
|
heap
|
page read and write
|
||
|
535F000
|
heap
|
page read and write
|
||
|
18004A000
|
unkown
|
page readonly
|
||
|
20D477E000
|
stack
|
page read and write
|
||
|
5481000
|
heap
|
page read and write
|
||
|
2A57000
|
heap
|
page read and write
|
||
|
53F6000
|
heap
|
page read and write
|
||
|
5602000
|
heap
|
page read and write
|
||
|
5852000
|
heap
|
page read and write
|
||
|
5637000
|
heap
|
page read and write
|
||
|
4FC0000
|
heap
|
page read and write
|
||
|
26B35858000
|
heap
|
page read and write
|
||
|
2D00000
|
heap
|
page read and write
|
||
|
58D1000
|
heap
|
page read and write
|
||
|
569B000
|
heap
|
page read and write
|
||
|
5502000
|
heap
|
page read and write
|
||
|
2D97000
|
heap
|
page read and write
|
||
|
5880000
|
heap
|
page read and write
|
||
|
8B02D7E000
|
stack
|
page read and write
|
||
|
58A4000
|
heap
|
page read and write
|
||
|
C10000
|
heap
|
page readonly
|
||
|
20734DD0000
|
remote allocation
|
page read and write
|
||
|
55A3000
|
heap
|
page read and write
|
||
|
299C000
|
stack
|
page read and write
|
||
|
26B3585F000
|
heap
|
page read and write
|
||
|
5539000
|
heap
|
page read and write
|
||
|
55F3000
|
heap
|
page read and write
|
||
|
5947000
|
heap
|
page read and write
|
||
|
20E5AF02000
|
heap
|
page read and write
|
||
|
28B2000
|
heap
|
page read and write
|
||
|
280F000
|
stack
|
page read and write
|
||
|
54AB000
|
heap
|
page read and write
|
||
|
26C000
|
stack
|
page read and write
|
||
|
5599000
|
heap
|
page read and write
|
||
|
4FB4000
|
heap
|
page read and write
|
||
|
29BD97E5000
|
heap
|
page read and write
|
||
|
303F000
|
stack
|
page read and write
|
||
|
648E000
|
stack
|
page read and write
|
||
|
26B35846000
|
heap
|
page read and write
|
||
|
264C000
|
stack
|
page read and write
|
||
|
55DB000
|
heap
|
page read and write
|
||
|
263CE1B9000
|
heap
|
page read and write
|
||
|
F0535FE000
|
stack
|
page read and write
|
||
|
2D91000
|
heap
|
page read and write
|
||
|
29BD9F22000
|
heap
|
page read and write
|
||
|
29BDA023000
|
heap
|
page read and write
|
||
|
17A6CDD0000
|
remote allocation
|
page read and write
|
||
|
A451B7B000
|
stack
|
page read and write
|
||
|
20734D90000
|
trusted library allocation
|
page read and write
|
||
|
5874000
|
heap
|
page read and write
|
||
|
2880000
|
heap
|
page read and write
|
||
|
541D000
|
heap
|
page read and write
|
||
|
20734F02000
|
heap
|
page read and write
|
||
|
20734E49000
|
heap
|
page read and write
|
||
|
57EF000
|
heap
|
page read and write
|
||
|
729B37B000
|
stack
|
page read and write
|
||
|
1B524A00000
|
heap
|
page read and write
|
||
|
17A6CE4B000
|
heap
|
page read and write
|
||
|
73C000
|
heap
|
page read and write
|
||
|
5714000
|
heap
|
page read and write
|
||
|
26B35862000
|
heap
|
page read and write
|
||
|
5779000
|
heap
|
page read and write
|
||
|
6867000
|
heap
|
page read and write
|
||
|
263CEEE0000
|
unclassified section
|
page read and write
|
||
|
5989000
|
heap
|
page read and write
|
||
|
54EC000
|
heap
|
page read and write
|
||
|
4FCC000
|
heap
|
page read and write
|
||
|
4FD2000
|
heap
|
page read and write
|
||
|
26B35863000
|
heap
|
page read and write
|
||
|
59DE000
|
heap
|
page read and write
|
||
|
578C000
|
heap
|
page read and write
|
||
|
29BD9450000
|
heap
|
page read and write
|
||
|
1B616002000
|
trusted library allocation
|
page read and write
|
||
|
1B6156F0000
|
heap
|
page read and write
|
||
|
5947000
|
heap
|
page read and write
|
||
|
9B0000
|
heap
|
page read and write
|
||
|
551F000
|
heap
|
page read and write
|
||
|
20E5AC60000
|
heap
|
page read and write
|
||
|
26F0000
|
remote allocation
|
page read and write
|
||
|
583F000
|
heap
|
page read and write
|
||
|
555F000
|
heap
|
page read and write
|
||
|
2636E200000
|
heap
|
page read and write
|
||
|
75C000
|
heap
|
page read and write
|
||
|
586B000
|
heap
|
page read and write
|
||
|
734000
|
heap
|
page read and write
|
||
|
55A9000
|
heap
|
page read and write
|
||
|
4FB7000
|
heap
|
page read and write
|
||
|
262A000
|
direct allocation
|
page read and write
|
||
|
2D95000
|
heap
|
page read and write
|
||
|
2DAB000
|
heap
|
page read and write
|
||
|
5764000
|
heap
|
page read and write
|
||
|
5778000
|
heap
|
page read and write
|
||
|
2290000
|
trusted library allocation
|
page read and write
|
||
|
5481000
|
heap
|
page read and write
|
||
|
2D66000
|
heap
|
page read and write
|
||
|
4FCA000
|
heap
|
page read and write
|
||
|
6860000
|
heap
|
page read and write
|
||
|
5333000
|
heap
|
page read and write
|
||
|
59E8000
|
heap
|
page read and write
|
||
|
737000
|
heap
|
page read and write
|
||
|
573B000
|
heap
|
page read and write
|
||
|
624F57E000
|
stack
|
page read and write
|
||
|
5683000
|
heap
|
page read and write
|
||
|
53E3000
|
heap
|
page read and write
|
||
|
5431000
|
heap
|
page read and write
|
||
|
29BDA013000
|
heap
|
page read and write
|
||
|
57DD000
|
heap
|
page read and write
|
||
|
593C000
|
heap
|
page read and write
|
||
|
29BD9F22000
|
heap
|
page read and write
|
||
|
4FAC000
|
heap
|
page read and write
|
||
|
587E000
|
heap
|
page read and write
|
||
|
5976000
|
heap
|
page read and write
|
||
|
5959000
|
heap
|
page read and write
|
||
|
A4516FB000
|
stack
|
page read and write
|
||
|
263CE360000
|
trusted library allocation
|
page read and write
|
||
|
F053C7B000
|
stack
|
page read and write
|
||
|
4FEF000
|
heap
|
page read and write
|
||
|
2AA1000
|
heap
|
page read and write
|
||
|
5876000
|
heap
|
page read and write
|
||
|
579C000
|
heap
|
page read and write
|
||
|
729B8FF000
|
stack
|
page read and write
|
||
|
5509000
|
heap
|
page read and write
|
||
|
2636EA02000
|
trusted library allocation
|
page read and write
|
||
|
263CE3C5000
|
heap
|
page read and write
|
||
|
885000
|
heap
|
page read and write
|
||
|
17A6CE29000
|
heap
|
page read and write
|
||
|
624F07A000
|
stack
|
page read and write
|
||
|
4F48000
|
heap
|
page read and write
|
||
|
5A02000
|
heap
|
page read and write
|
||
|
29BDA030000
|
heap
|
page read and write
|
||
|
5915000
|
heap
|
page read and write
|
||
|
17A6CE13000
|
heap
|
page read and write
|
||
|
29BD9F43000
|
heap
|
page read and write
|
||
|
513F000
|
stack
|
page read and write
|
||
|
5423000
|
heap
|
page read and write
|
||
|
5771000
|
heap
|
page read and write
|
||
|
53A3000
|
heap
|
page read and write
|
||
|
59C4000
|
heap
|
page read and write
|
||
|
2A10000
|
heap
|
page read and write
|
||
|
4FD7000
|
heap
|
page read and write
|
||
|
20E5AE53000
|
heap
|
page read and write
|
||
|
1B615760000
|
heap
|
page read and write
|
||
|
5437000
|
heap
|
page read and write
|
||
|
4F41000
|
heap
|
page read and write
|
||
|
263CE0F0000
|
heap
|
page read and write
|
||
|
2D82000
|
heap
|
page read and write
|
||
|
20734E5A000
|
heap
|
page read and write
|
||
|
A4512CB000
|
stack
|
page read and write
|
||
|
557E000
|
heap
|
page read and write
|
||
|
26B35879000
|
heap
|
page read and write
|
||
|
4FCF000
|
heap
|
page read and write
|
||
|
5300000
|
heap
|
page read and write
|
||
|
8B028DC000
|
stack
|
page read and write
|
||
|
26B35902000
|
heap
|
page read and write
|
||
|
592B000
|
heap
|
page read and write
|
||
|
52D0000
|
heap
|
page read and write
|
||
|
22EB000
|
stack
|
page read and write
|
||
|
990000
|
heap
|
page read and write
|
||
|
17A6CE40000
|
heap
|
page read and write
|
||
|
577A000
|
heap
|
page read and write
|
||
|
56A9000
|
heap
|
page read and write
|
||
|
F05319B000
|
stack
|
page read and write
|
||
|
2636E300000
|
heap
|
page read and write
|
||
|
55B1000
|
heap
|
page read and write
|
||
|
20734E59000
|
heap
|
page read and write
|
||
|
53A3000
|
heap
|
page read and write
|
||
|
180001000
|
unkown
|
page execute read
|
||
|
5957000
|
heap
|
page read and write
|
||
|
26B35882000
|
heap
|
page read and write
|
||
|
620D000
|
stack
|
page read and write
|
||
|
595A000
|
heap
|
page read and write
|
||
|
26B35829000
|
heap
|
page read and write
|
||
|
263CE1BE000
|
heap
|
page read and write
|
||
|
5947000
|
heap
|
page read and write
|
||
|
1B525332000
|
heap
|
page read and write
|
||
|
72D000
|
heap
|
page read and write
|
||
|
5397000
|
heap
|
page read and write
|
||
|
5372000
|
heap
|
page read and write
|
||
|
4FE3000
|
heap
|
page read and write
|
||
|
582D000
|
heap
|
page read and write
|
||
|
A451E7D000
|
stack
|
page read and write
|
||
|
BD7C9FE000
|
stack
|
page read and write
|
||
|
26B3585C000
|
heap
|
page read and write
|
||
|
574B000
|
heap
|
page read and write
|
||
|
558C000
|
heap
|
page read and write
|
||
|
76192F9000
|
stack
|
page read and write
|
||
|
20E5AC70000
|
heap
|
page read and write
|
||
|
5683000
|
heap
|
page read and write
|
||
|
C3B000
|
heap
|
page read and write
|
||
|
59CD000
|
heap
|
page read and write
|
||
|
2DFB000
|
heap
|
page read and write
|
||
|
20E5AE40000
|
heap
|
page read and write
|
||
|
26F0000
|
remote allocation
|
page read and write
|
||
|
52B8000
|
heap
|
page read and write
|
||
|
2892000
|
heap
|
page read and write
|
||
|
55C6000
|
heap
|
page read and write
|
||
|
565D000
|
heap
|
page read and write
|
||
|
180000000
|
unkown
|
page readonly
|
||
|
2810000
|
heap
|
page read and write
|
||
|
4F8D000
|
heap
|
page read and write
|
||
|
5409000
|
heap
|
page read and write
|
||
|
3324000
|
heap
|
page read and write
|
||
|
4FBA000
|
heap
|
page read and write
|
||
|
29BD95C0000
|
trusted library allocation
|
page read and write
|
||
|
1B524C00000
|
heap
|
page read and write
|
||
|
800000
|
heap
|
page read and write
|
||
|
5498000
|
heap
|
page read and write
|
||
|
20E5AE47000
|
heap
|
page read and write
|
||
|
26B35860000
|
heap
|
page read and write
|
||
|
65C0000
|
remote allocation
|
page read and write
|
||
|
762000
|
heap
|
page read and write
|
||
|
59A8000
|
heap
|
page read and write
|
||
|
2DB7000
|
heap
|
page read and write
|
||
|
4FE8000
|
heap
|
page read and write
|
||
|
332E000
|
heap
|
page read and write
|
||
|
5A12000
|
heap
|
page read and write
|
||
|
20734E82000
|
heap
|
page read and write
|
||
|
262B000
|
direct allocation
|
page readonly
|
||
|
20D49FE000
|
stack
|
page read and write
|
||
|
5899000
|
heap
|
page read and write
|
||
|
332E000
|
heap
|
page read and write
|
||
|
2D67000
|
heap
|
page read and write
|
||
|
55BE000
|
heap
|
page read and write
|
||
|
7E0000
|
heap
|
page read and write
|
||
|
5981000
|
heap
|
page read and write
|
||
|
275F000
|
stack
|
page read and write
|
||
|
1B615840000
|
heap
|
page read and write
|
||
|
56FC000
|
heap
|
page read and write
|
||
|
4F4E000
|
heap
|
page read and write
|
||
|
57CC000
|
heap
|
page read and write
|
||
|
26B3583B000
|
heap
|
page read and write
|
||
|
5391000
|
heap
|
page read and write
|
||
|
F053879000
|
stack
|
page read and write
|
||
|
29BD963C000
|
heap
|
page read and write
|
||
|
F053A7A000
|
stack
|
page read and write
|
||
|
208A000
|
direct allocation
|
page read and write
|
||
|
26B35842000
|
heap
|
page read and write
|
||
|
56CF000
|
heap
|
page read and write
|
||
|
4F43000
|
heap
|
page read and write
|
||
|
563E000
|
heap
|
page read and write
|
||
|
57F1000
|
heap
|
page read and write
|
||
|
220C000
|
stack
|
page read and write
|
||
|
17A6CDD0000
|
remote allocation
|
page read and write
|
||
|
57DF000
|
heap
|
page read and write
|
||
|
558D000
|
heap
|
page read and write
|
||
|
576E000
|
heap
|
page read and write
|
||
|
28EF000
|
heap
|
page read and write
|
||
|
53C3000
|
heap
|
page read and write
|
||
|
3328000
|
heap
|
page read and write
|
||
|
5609000
|
heap
|
page read and write
|
||
|
20E5AE3B000
|
heap
|
page read and write
|
||
|
28A2000
|
heap
|
page read and write
|
||
|
5753000
|
heap
|
page read and write
|
||
|
4F4F000
|
heap
|
page read and write
|
||
|
29BD9629000
|
heap
|
page read and write
|
||
|
66CE000
|
stack
|
page read and write
|
||
|
5846000
|
heap
|
page read and write
|
||
|
2E20000
|
heap
|
page read and write
|
||
|
5627000
|
heap
|
page read and write
|
||
|
2D5B000
|
heap
|
page read and write
|
||
|
57B0000
|
heap
|
page read and write
|
||
|
2C3E000
|
stack
|
page read and write
|
||
|
5444000
|
heap
|
page read and write
|
||
|
5874000
|
heap
|
page read and write
|
||
|
2DCE000
|
heap
|
page read and write
|
||
|
28B4000
|
heap
|
page read and write
|
||
|
2D6F000
|
heap
|
page read and write
|
||
|
850000
|
heap
|
page read and write
|
||
|
26B3584E000
|
heap
|
page read and write
|
||
|
2636E222000
|
heap
|
page read and write
|
||
|
52EC000
|
heap
|
page read and write
|
||
|
2CFA000
|
stack
|
page read and write
|
||
|
56A3000
|
heap
|
page read and write
|
||
|
788000
|
heap
|
page read and write
|
||
|
F05397F000
|
stack
|
page read and write
|
||
|
4FDB000
|
heap
|
page read and write
|
||
|
5A12000
|
heap
|
page read and write
|
||
|
26B3587A000
|
heap
|
page read and write
|
||
|
59AC000
|
heap
|
page read and write
|
||
|
55EB000
|
heap
|
page read and write
|
||
|
5922000
|
heap
|
page read and write
|
||
|
F05357F000
|
stack
|
page read and write
|
||
|
A451AFE000
|
stack
|
page read and write
|
||
|
57EE000
|
heap
|
page read and write
|
||
|
20734E4A000
|
heap
|
page read and write
|
||
|
4FEF000
|
heap
|
page read and write
|
||
|
26B35873000
|
heap
|
page read and write
|
||
|
4FC0000
|
heap
|
page read and write
|
||
|
2837000
|
heap
|
page read and write
|
||
|
584F000
|
heap
|
page read and write
|
||
|
77A000
|
heap
|
page read and write
|
||
|
20D46FC000
|
stack
|
page read and write
|
||
|
52CB000
|
heap
|
page read and write
|
||
|
5976000
|
heap
|
page read and write
|
||
|
7619479000
|
stack
|
page read and write
|
||
|
26B3585E000
|
heap
|
page read and write
|
||
|
1B524CE2000
|
heap
|
page read and write
|
||
|
1B524C3E000
|
heap
|
page read and write
|
||
|
2636E070000
|
heap
|
page read and write
|
||
|
5558000
|
heap
|
page read and write
|
||
|
20E5AE44000
|
heap
|
page read and write
|
||
|
307E000
|
stack
|
page read and write
|
||
|
5410000
|
heap
|
page read and write
|
||
|
5A02000
|
heap
|
page read and write
|
||
|
558C000
|
heap
|
page read and write
|
||
|
5A64000
|
heap
|
page read and write
|
||
|
58ED000
|
heap
|
page read and write
|
||
|
26B3586B000
|
heap
|
page read and write
|
||
|
58A2000
|
heap
|
page read and write
|
||
|
29BD9F02000
|
heap
|
page read and write
|
||
|
586D000
|
heap
|
page read and write
|
||
|
564F000
|
heap
|
page read and write
|
||
|
20734E8B000
|
heap
|
page read and write
|
||
|
3326000
|
heap
|
page read and write
|
||
|
26B35845000
|
heap
|
page read and write
|
||
|
180000000
|
unkown
|
page readonly
|
||
|
4FD3000
|
heap
|
page read and write
|
||
|
5384000
|
heap
|
page read and write
|
||
|
4FC1000
|
heap
|
page read and write
|
||
|
29BD9FAD000
|
heap
|
page read and write
|
||
|
65C0000
|
remote allocation
|
page read and write
|
||
|
26B3583D000
|
heap
|
page read and write
|
||
|
2636E000000
|
heap
|
page read and write
|
||
|
29BD95E0000
|
trusted library allocation
|
page read and write
|
||
|
26B35832000
|
heap
|
page read and write
|
||
|
263CE3D0000
|
trusted library allocation
|
page read and write
|
||
|
5823000
|
heap
|
page read and write
|
||
|
2887000
|
heap
|
page read and write
|
||
|
729BBFC000
|
stack
|
page read and write
|
||
|
2D35000
|
heap
|
page read and write
|
||
|
59AC000
|
heap
|
page read and write
|
||
|
573C000
|
heap
|
page read and write
|
||
|
2DA7000
|
heap
|
page read and write
|
||
|
54EC000
|
heap
|
page read and write
|
||
|
2D37000
|
heap
|
page read and write
|
||
|
26B35825000
|
heap
|
page read and write
|
||
|
4FE0000
|
heap
|
page read and write
|
||
|
5869000
|
heap
|
page read and write
|
||
|
531F000
|
heap
|
page read and write
|
||
|
8B0295E000
|
stack
|
page read and write
|
||
|
54EC000
|
heap
|
page read and write
|
||
|
29BD9643000
|
heap
|
page read and write
|
||
|
58D2000
|
heap
|
page read and write
|
||
|
2930000
|
heap
|
page read and write
|
||
|
52FA000
|
heap
|
page read and write
|
||
|
4F40000
|
heap
|
page read and write
|
||
|
58F0000
|
heap
|
page read and write
|
||
|
A45187F000
|
stack
|
page read and write
|
||
|
55EB000
|
heap
|
page read and write
|
||
|
8C759FE000
|
stack
|
page read and write
|
||
|
502B000
|
heap
|
page read and write
|
||
|
4FD4000
|
heap
|
page read and write
|
||
|
5887000
|
heap
|
page read and write
|
||
|
5947000
|
heap
|
page read and write
|
||
|
18005D000
|
unkown
|
page read and write
|
||
|
4FBC000
|
heap
|
page read and write
|
||
|
5541000
|
heap
|
page read and write
|
||
|
5861000
|
heap
|
page read and write
|
||
|
5A5E000
|
heap
|
page read and write
|
||
|
624F97F000
|
stack
|
page read and write
|
||
|
20D4C7F000
|
stack
|
page read and write
|
||
|
26B3587D000
|
heap
|
page read and write
|
||
|
569B000
|
heap
|
page read and write
|
||
|
56FC000
|
heap
|
page read and write
|
||
|
20734E5A000
|
heap
|
page read and write
|
||
|
2DFA000
|
heap
|
page read and write
|
||
|
5705000
|
heap
|
page read and write
|
||
|
583F000
|
heap
|
page read and write
|
||
|
2D38000
|
heap
|
page read and write
|
||
|
589A000
|
heap
|
page read and write
|
||
|
29BD9691000
|
heap
|
page read and write
|
||
|
5891000
|
heap
|
page read and write
|
||
|
541D000
|
heap
|
page read and write
|
||
|
17A6CDA0000
|
trusted library allocation
|
page read and write
|
||
|
2DB5000
|
heap
|
page read and write
|
||
|
5312000
|
heap
|
page read and write
|
||
|
289C000
|
heap
|
page read and write
|
||
|
5947000
|
heap
|
page read and write
|
||
|
2A81000
|
heap
|
page read and write
|
||
|
59FF000
|
heap
|
page read and write
|
||
|
2636E27B000
|
heap
|
page read and write
|
||
|
4FCA000
|
heap
|
page read and write
|
||
|
2895000
|
heap
|
page read and write
|
||
|
2F3D000
|
stack
|
page read and write
|
||
|
53A9000
|
heap
|
page read and write
|
||
|
53D7000
|
heap
|
page read and write
|
||
|
2D3E000
|
heap
|
page read and write
|
||
|
4FB4000
|
heap
|
page read and write
|
||
|
2820000
|
heap
|
page read and write
|
||
|
20D4AFD000
|
stack
|
page read and write
|
||
|
2636E302000
|
heap
|
page read and write
|
||
|
53B1000
|
heap
|
page read and write
|
||
|
29BD9613000
|
heap
|
page read and write
|
||
|
20734D50000
|
trusted library allocation
|
page read and write
|
||
|
729BEFF000
|
stack
|
page read and write
|
||
|
2636E268000
|
heap
|
page read and write
|
||
|
2636E313000
|
heap
|
page read and write
|
||
|
59B1000
|
heap
|
page read and write
|
||
|
20734DD0000
|
remote allocation
|
page read and write
|
||
|
332A000
|
heap
|
page read and write
|
||
|
58BC000
|
heap
|
page read and write
|
||
|
2811000
|
heap
|
page read and write
|
||
|
1B524C13000
|
heap
|
page read and write
|
||
|
58DD000
|
heap
|
page read and write
|
||
|
1B615813000
|
heap
|
page read and write
|
||
|
29BD9F08000
|
heap
|
page read and write
|
||
|
52DA000
|
heap
|
page read and write
|
||
|
332E000
|
heap
|
page read and write
|
||
|
57EE000
|
heap
|
page read and write
|
||
|
67D1000
|
heap
|
page read and write
|
||
|
53C8000
|
heap
|
page read and write
|
||
|
26B35750000
|
heap
|
page read and write
|
||
|
25D0000
|
trusted library allocation
|
page read and write
|
||
|
729BDFE000
|
stack
|
page read and write
|
||
|
C00000
|
direct allocation
|
page execute and read and write
|
||
|
59C4000
|
heap
|
page read and write
|
||
|
5498000
|
heap
|
page read and write
|
||
|
29BD9713000
|
heap
|
page read and write
|
||
|
624F77E000
|
stack
|
page read and write
|
||
|
29BDA000000
|
heap
|
page read and write
|
||
|
564F000
|
heap
|
page read and write
|
||
|
8C758FA000
|
stack
|
page read and write
|
||
|
53D0000
|
heap
|
page read and write
|
||
|
58D1000
|
heap
|
page read and write
|
||
|
2636E240000
|
heap
|
page read and write
|
||
|
729000
|
heap
|
page read and write
|
||
|
332E000
|
heap
|
page read and write
|
||
|
56FC000
|
heap
|
page read and write
|
||
|
263CE350000
|
trusted library allocation
|
page read and write
|
||
|
3326000
|
heap
|
page read and write
|
||
|
5904000
|
heap
|
page read and write
|
||
|
4FCC000
|
heap
|
page read and write
|
||
|
332E000
|
heap
|
page read and write
|
||
|
4FBD000
|
heap
|
page read and write
|
||
|
1B615800000
|
heap
|
page read and write
|
||
|
5947000
|
heap
|
page read and write
|
||
|
29BD9676000
|
heap
|
page read and write
|
||
|
20734F13000
|
heap
|
page read and write
|
||
|
582D000
|
heap
|
page read and write
|
||
|
17A6D602000
|
trusted library allocation
|
page read and write
|
||
|
761957E000
|
stack
|
page read and write
|
||
|
29BD968B000
|
heap
|
page read and write
|
||
|
26B35861000
|
heap
|
page read and write
|
||
|
5333000
|
heap
|
page read and write
|
||
|
582D000
|
heap
|
page read and write
|
||
|
1B615860000
|
heap
|
page read and write
|
||
|
2E00000
|
heap
|
page read and write
|
||
|
263CE1BE000
|
heap
|
page read and write
|
||
|
332E000
|
heap
|
page read and write
|
||
|
5A64000
|
heap
|
page read and write
|
||
|
59F8000
|
heap
|
page read and write
|
||
|
52E6000
|
heap
|
page read and write
|
||
|
57D4000
|
heap
|
page read and write
|
||
|
53B0000
|
heap
|
page read and write
|
||
|
2D3E000
|
heap
|
page read and write
|
||
|
59FF000
|
heap
|
page read and write
|
||
|
5524000
|
heap
|
page read and write
|
||
|
1B615869000
|
heap
|
page read and write
|
||
|
8B0307E000
|
stack
|
page read and write
|
||
|
5A02000
|
heap
|
page read and write
|
||
|
59AC000
|
heap
|
page read and write
|
||
|
624F47D000
|
stack
|
page read and write
|
||
|
531E000
|
heap
|
page read and write
|
||
|
55A3000
|
heap
|
page read and write
|
||
|
530C000
|
heap
|
page read and write
|
||
|
4F8D000
|
heap
|
page read and write
|
||
|
5754000
|
heap
|
page read and write
|
||
|
29BD9460000
|
heap
|
page read and write
|
||
|
2880000
|
heap
|
page read and write
|
||
|
8B029DE000
|
stack
|
page read and write
|
||
|
26B35857000
|
heap
|
page read and write
|
||
|
263CE170000
|
heap
|
page read and write
|
||
|
1B615902000
|
heap
|
page read and write
|
||
|
2D66000
|
heap
|
page read and write
|
||
|
1B61586A000
|
heap
|
page read and write
|
||
|
537E000
|
heap
|
page read and write
|
||
|
587E000
|
heap
|
page read and write
|
||
|
55B0000
|
heap
|
page read and write
|
||
|
4FC8000
|
heap
|
page read and write
|
||
|
20E5AE2F000
|
heap
|
page read and write
|
||
|
4FEF000
|
heap
|
page read and write
|
||
|
5474000
|
heap
|
page read and write
|
||
|
5359000
|
heap
|
page read and write
|
||
|
1B524C29000
|
heap
|
page read and write
|
||
|
2DA6000
|
heap
|
page read and write
|
||
|
4FAC000
|
heap
|
page read and write
|
||
|
729B9FE000
|
stack
|
page read and write
|
||
|
29BD9FBA000
|
heap
|
page read and write
|
||
|
263CEF00000
|
trusted library allocation
|
page read and write
|
||
|
58C7000
|
heap
|
page read and write
|
||
|
1B615802000
|
heap
|
page read and write
|
||
|
1B615870000
|
heap
|
page read and write
|
||
|
761937D000
|
stack
|
page read and write
|
||
|
263CE110000
|
heap
|
page read and write
|
||
|
20E5AE13000
|
heap
|
page read and write
|
||
|
2060000
|
direct allocation
|
page read and write
|
||
|
20734D20000
|
trusted library allocation
|
page read and write
|
||
|
5333000
|
heap
|
page read and write
|
||
|
3CB000
|
stack
|
page read and write
|
||
|
2636E202000
|
heap
|
page read and write
|
||
|
2DF1000
|
heap
|
page read and write
|
||
|
287E000
|
heap
|
page read and write
|
||
|
536B000
|
heap
|
page read and write
|
||
|
55EB000
|
heap
|
page read and write
|
||
|
5935000
|
heap
|
page read and write
|
||
|
59FF000
|
heap
|
page read and write
|
||
|
7618F9E000
|
stack
|
page read and write
|
||
|
58AB000
|
heap
|
page read and write
|
||
|
2D6F000
|
heap
|
page read and write
|
||
|
2898000
|
heap
|
page read and write
|
||
|
5549000
|
heap
|
page read and write
|
||
|
52CB000
|
heap
|
page read and write
|
||
|
4FAC000
|
heap
|
page read and write
|
||
|
C20000
|
trusted library allocation
|
page read and write
|
||
|
57E7000
|
heap
|
page read and write
|
||
|
29BDA027000
|
heap
|
page read and write
|
||
|
1B61583D000
|
heap
|
page read and write
|
||
|
28A3000
|
heap
|
page read and write
|
||
|
29BD9F6C000
|
heap
|
page read and write
|
||
|
568B000
|
heap
|
page read and write
|
||
|
263CDFC0000
|
trusted library allocation
|
page read and write
|
||
|
29BD9600000
|
heap
|
page read and write
|
||
|
26B36002000
|
trusted library allocation
|
page read and write
|
||
|
2636E228000
|
heap
|
page read and write
|
||
|
26B35864000
|
heap
|
page read and write
|
||
|
17A6CD00000
|
heap
|
page read and write
|
||
|
5861000
|
heap
|
page read and write
|
||
|
2887000
|
heap
|
page read and write
|
||
|
2DA6000
|
heap
|
page read and write
|
||
|
2A57000
|
heap
|
page read and write
|
||
|
5B15000
|
heap
|
page read and write
|
||
|
55AB000
|
heap
|
page read and write
|
||
|
26B3587C000
|
heap
|
page read and write
|
||
|
29BD967D000
|
heap
|
page read and write
|
||
|
1B524C6E000
|
heap
|
page read and write
|
||
|
761927F000
|
stack
|
page read and write
|
||
|
5518000
|
heap
|
page read and write
|
||
|
5AFF000
|
heap
|
page read and write
|
||
|
5518000
|
heap
|
page read and write
|
||
|
4FEF000
|
heap
|
page read and write
|
||
|
4FB7000
|
heap
|
page read and write
|
||
|
5824000
|
heap
|
page read and write
|
||
|
599B000
|
heap
|
page read and write
|
||
|
A4519FC000
|
stack
|
page read and write
|
||
|
729B77C000
|
stack
|
page read and write
|
||
|
59B0000
|
heap
|
page read and write
|
||
|
624F67F000
|
stack
|
page read and write
|
||
|
630D000
|
stack
|
page read and write
|
||
|
5483000
|
heap
|
page read and write
|
||
|
57CA000
|
heap
|
page read and write
|
||
|
4F4F000
|
heap
|
page read and write
|
||
|
8B02F7F000
|
stack
|
page read and write
|
||
|
26B35800000
|
heap
|
page read and write
|
||
|
624EE7B000
|
stack
|
page read and write
|
||
|
54F3000
|
heap
|
page read and write
|
||
|
A451C7D000
|
stack
|
page read and write
|
||
|
76193FE000
|
stack
|
page read and write
|
||
|
5A20000
|
heap
|
page read and write
|
||
|
5637000
|
heap
|
page read and write
|
||
|
F0536FF000
|
stack
|
page read and write
|
||
|
2D97000
|
heap
|
page read and write
|
||
|
2D6F000
|
heap
|
page read and write
|
||
|
4FCF000
|
heap
|
page read and write
|
||
|
1B524D13000
|
heap
|
page read and write
|
||
|
26B0000
|
heap
|
page read and write
|
||
|
3329000
|
heap
|
page read and write
|
||
|
4A30000
|
heap
|
page read and write
|
||
|
57C2000
|
heap
|
page read and write
|
||
|
2D37000
|
heap
|
page read and write
|
||
|
20E5ADC0000
|
trusted library allocation
|
page read and write
|
||
|
26B35840000
|
heap
|
page read and write
|
||
|
277B000
|
stack
|
page read and write
|
||
|
2D86000
|
heap
|
page read and write
|
||
|
263CE1B6000
|
heap
|
page read and write
|
||
|
228B000
|
stack
|
page read and write
|
||
|
56EE000
|
heap
|
page read and write
|
||
|
2D3B000
|
stack
|
page read and write
|
||
|
1B524CC6000
|
heap
|
page read and write
|
||
|
2600000
|
direct allocation
|
page read and write
|
||
|
2889000
|
heap
|
page read and write
|
||
|
17A6CF02000
|
heap
|
page read and write
|
||
|
2858000
|
heap
|
page read and write
|
||
|
2D5B000
|
heap
|
page read and write
|
||
|
58D1000
|
heap
|
page read and write
|
||
|
4F6F000
|
heap
|
page read and write
|
||
|
55A3000
|
heap
|
page read and write
|
||
|
5764000
|
heap
|
page read and write
|
||
|
29BD97B9000
|
heap
|
page read and write
|
||
|
544B000
|
heap
|
page read and write
|
||
|
57F8000
|
heap
|
page read and write
|
||
|
580B000
|
heap
|
page read and write
|
||
|
5A12000
|
heap
|
page read and write
|
||
|
20734C00000
|
heap
|
page read and write
|
||
|
1B615860000
|
heap
|
page read and write
|
||
|
5430000
|
heap
|
page read and write
|
||
|
5753000
|
heap
|
page read and write
|
||
|
29BDA002000
|
heap
|
page read and write
|
||
|
5921000
|
heap
|
page read and write
|
||
|
2838000
|
heap
|
page read and write
|
||
|
2089000
|
direct allocation
|
page readonly
|
||
|
59E9000
|
heap
|
page read and write
|
||
|
552C000
|
heap
|
page read and write
|
||
|
332D000
|
heap
|
page read and write
|
||
|
18004A000
|
unkown
|
page readonly
|
||
|
2887000
|
heap
|
page read and write
|
||
|
20734E85000
|
heap
|
page read and write
|
||
|
26B35813000
|
heap
|
page read and write
|
||
|
5A02000
|
heap
|
page read and write
|
||
|
5518000
|
heap
|
page read and write
|
||
|
2DDE000
|
heap
|
page read and write
|
||
|
2D7C000
|
heap
|
page read and write
|
||
|
4FBC000
|
heap
|
page read and write
|
||
|
BD7C8FB000
|
stack
|
page read and write
|
||
|
57C0000
|
heap
|
page read and write
|
||
|
29BD9E02000
|
heap
|
page read and write
|
||
|
5965000
|
heap
|
page read and write
|
||
|
8C753FB000
|
stack
|
page read and write
|
||
|
53FD000
|
heap
|
page read and write
|
||
|
67CE000
|
stack
|
page read and write
|
||
|
263CE180000
|
heap
|
page read and write
|
||
|
2D9B000
|
heap
|
page read and write
|
||
|
1B524990000
|
heap
|
page read and write
|
||
|
25D0000
|
trusted library allocation
|
page read and write
|
||
|
5945000
|
heap
|
page read and write
|
||
|
5432000
|
heap
|
page read and write
|
||
|
8A0000
|
heap
|
page read and write
|
||
|
68FA000
|
heap
|
page read and write
|
||
|
4FEF000
|
heap
|
page read and write
|
||
|
A451F7F000
|
stack
|
page read and write
|
||
|
5577000
|
heap
|
page read and write
|
||
|
56C0000
|
heap
|
page read and write
|
||
|
2A11000
|
heap
|
page read and write
|
||
|
573B000
|
heap
|
page read and write
|
||
|
580A000
|
heap
|
page read and write
|
||
|
26B3585A000
|
heap
|
page read and write
|
||
|
5733000
|
heap
|
page read and write
|
||
|
860000
|
heap
|
page readonly
|
||
|
F053B7E000
|
stack
|
page read and write
|
||
|
59AC000
|
heap
|
page read and write
|
||
|
1B615855000
|
heap
|
page read and write
|
||
|
2888000
|
heap
|
page read and write
|
||
|
29BD9685000
|
heap
|
page read and write
|
||
|
6E0000
|
heap
|
page read and write
|
||
|
2DA5000
|
heap
|
page read and write
|
||
|
20736802000
|
trusted library allocation
|
page read and write
|
||
|
52FA000
|
heap
|
page read and write
|
||
|
28C3000
|
heap
|
page read and write
|
||
|
57EF000
|
heap
|
page read and write
|
||
|
59EB000
|
heap
|
page read and write
|
||
|
58DE000
|
heap
|
page read and write
|
||
|
2636E170000
|
trusted library allocation
|
page read and write
|
||
|
A451D7E000
|
stack
|
page read and write
|
||
|
5594000
|
heap
|
page read and write
|
||
|
549F000
|
heap
|
page read and write
|
||
|
26B357B0000
|
heap
|
page read and write
|
||
|
548A000
|
heap
|
page read and write
|
||
|
2895000
|
heap
|
page read and write
|
||
|
29BD966F000
|
heap
|
page read and write
|
||
|
2636E254000
|
heap
|
page read and write
|
||
|
317E000
|
stack
|
page read and write
|
||
|
5359000
|
heap
|
page read and write
|
||
|
58BE000
|
heap
|
page read and write
|
||
|
880000
|
heap
|
page read and write
|
||
|
5290000
|
heap
|
page read and write
|
||
|
17A6CDD0000
|
remote allocation
|
page read and write
|
||
|
29BD9F00000
|
heap
|
page read and write
|
||
|
58C7000
|
heap
|
page read and write
|
||
|
49D0000
|
heap
|
page read and write
|
||
|
5461000
|
heap
|
page read and write
|
||
|
17A6CD10000
|
heap
|
page read and write
|
||
|
58E5000
|
heap
|
page read and write
|
||
|
58D4000
|
heap
|
page read and write
|
||
|
2D4F000
|
heap
|
page read and write
|
||
|
52B1000
|
heap
|
page read and write
|
||
|
23F0000
|
heap
|
page read and write
|
||
|
BD7CBFE000
|
stack
|
page read and write
|
||
|
4FAC000
|
heap
|
page read and write
|
||
|
57FA000
|
heap
|
page read and write
|
||
|
52D4000
|
heap
|
page read and write
|
||
|
546D000
|
heap
|
page read and write
|
||
|
20734E64000
|
heap
|
page read and write
|
||
|
597F000
|
heap
|
page read and write
|
||
|
BD7CAFE000
|
stack
|
page read and write
|
||
|
5325000
|
heap
|
page read and write
|
||
|
569B000
|
heap
|
page read and write
|
||
|
6867000
|
heap
|
page read and write
|
||
|
5637000
|
heap
|
page read and write
|
||
|
208B000
|
direct allocation
|
page readonly
|
||
|
20E5B602000
|
trusted library allocation
|
page read and write
|
||
|
729BCFC000
|
stack
|
page read and write
|
||
|
5A62000
|
heap
|
page read and write
|
||
|
592D000
|
heap
|
page read and write
|
||
|
2887000
|
heap
|
page read and write
|
||
|
263CE3C0000
|
heap
|
page read and write
|
||
|
28EF000
|
heap
|
page read and write
|
||
|
F0537FB000
|
stack
|
page read and write
|
||
|
20734E2A000
|
heap
|
page read and write
|
||
|
29BD9658000
|
heap
|
page read and write
|
||
|
5498000
|
heap
|
page read and write
|
||
|
289C000
|
heap
|
page read and write
|
||
|
2D07000
|
heap
|
page read and write
|
||
|
54DD000
|
heap
|
page read and write
|
||
|
52B0000
|
heap
|
page read and write
|
||
|
5333000
|
heap
|
page read and write
|
||
|
5498000
|
heap
|
page read and write
|
||
|
55D3000
|
heap
|
page read and write
|
||
|
287E000
|
heap
|
page read and write
|
||
|
2892000
|
heap
|
page read and write
|
||
|
574C000
|
heap
|
page read and write
|
||
|
2A0D000
|
stack
|
page read and write
|
||
|
2D78000
|
heap
|
page read and write
|
||
|
1B524D02000
|
heap
|
page read and write
|
||
|
20734E4A000
|
heap
|
page read and write
|
||
|
5963000
|
heap
|
page read and write
|
||
|
583F000
|
heap
|
page read and write
|
||
|
2DBD000
|
heap
|
page read and write
|
||
|
29BD9643000
|
heap
|
page read and write
|
||
|
263CEF10000
|
heap
|
page readonly
|
||
|
5657000
|
heap
|
page read and write
|
||
|
4FC3000
|
heap
|
page read and write
|
||
|
26F0000
|
remote allocation
|
page read and write
|
||
|
20734DD0000
|
remote allocation
|
page read and write
|
||
|
5518000
|
heap
|
page read and write
|
||
|
2D88000
|
heap
|
page read and write
|
||
|
263CEF80000
|
trusted library allocation
|
page read and write
|
||
|
263CDFB0000
|
heap
|
page read and write
|
||
|
729BAFE000
|
stack
|
page read and write
|
||
|
2636E010000
|
heap
|
page read and write
|
||
|
5665000
|
heap
|
page read and write
|
||
|
624F27C000
|
stack
|
page read and write
|
||
|
2898000
|
heap
|
page read and write
|
||
|
2DB5000
|
heap
|
page read and write
|
||
|
180001000
|
unkown
|
page execute read
|
||
|
5502000
|
heap
|
page read and write
|
||
|
658F000
|
stack
|
page read and write
|
||
|
3328000
|
heap
|
page read and write
|
||
|
624F17F000
|
stack
|
page read and write
|
||
|
7DE000
|
heap
|
page read and write
|
||
|
56CF000
|
heap
|
page read and write
|
||
|
5904000
|
heap
|
page read and write
|
||
|
20734E00000
|
heap
|
page read and write
|
||
|
5B0E000
|
heap
|
page read and write
|
||
|
4F4F000
|
heap
|
page read and write
|
||
|
1B524CCE000
|
heap
|
page read and write
|
||
|
1B524BD0000
|
trusted library allocation
|
page read and write
|
||
|
4FEF000
|
heap
|
page read and write
|
||
|
20E5AE3E000
|
heap
|
page read and write
|
||
|
1B524C8A000
|
heap
|
page read and write
|
||
|
5850000
|
heap
|
page read and write
|
||
|
2D2F000
|
heap
|
page read and write
|
||
|
1B615913000
|
heap
|
page read and write
|
||
|
263CEF20000
|
trusted library allocation
|
page read and write
|
||
|
582D000
|
heap
|
page read and write
|
||
|
5725000
|
heap
|
page read and write
|
||
|
310000
|
heap
|
page read and write
|
||
|
8B02E7E000
|
stack
|
page read and write
|
||
|
28B2000
|
heap
|
page read and write
|
||
|
4FBC000
|
heap
|
page read and write
|
||
|
6D7C000
|
stack
|
page read and write
|
||
|
570D000
|
heap
|
page read and write
|
||
|
4F45000
|
heap
|
page read and write
|
||
|
5812000
|
heap
|
page read and write
|
||
|
5765000
|
heap
|
page read and write
|
||
|
57AF000
|
heap
|
page read and write
|
||
|
5339000
|
heap
|
page read and write
|
||
|
29BD94C0000
|
heap
|
page read and write
|
||
|
29BD978E000
|
heap
|
page read and write
|
||
|
26B35740000
|
heap
|
page read and write
|
||
|
20D497D000
|
stack
|
page read and write
|
||
|
20734E13000
|
heap
|
page read and write
|
||
|
571C000
|
heap
|
page read and write
|
||
|
53B5000
|
heap
|
page read and write
|
||
|
263CECB0000
|
trusted library allocation
|
page read and write
|
There are 992 hidden memdumps, click here to show them.