IOC Report
PREMIERE_ policy brief_final (2)_MCA.docx.doc

loading gif

Files

File Path
Type
Category
Malicious
PREMIERE_ policy brief_final (2)_MCA.docx.doc
Microsoft Word 2007+
initial sample
C:\Program Files (x86)\Microsoft Office\root\vfs\Common AppData\Microsoft\OFFICE\Heartbeat\HeartbeatCache.xml
XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\FontCache\4\Catalog\ListAll.Json
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\FontCache\4\PreviewFont\flat_officeFontsPreview_4_40.ttf
TrueType Font data, 10 tables, 1st "OS/2", 7 names, Microsoft, language 0x409, \251 2018 Microsoft Corporation. All Rights Reserved.msofp_4_40RegularVersion 4.40;O365
dropped
C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\089d66ba04a8cec4bdc5267f42f39cf84278bb67.tbres
data
dropped
C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\56a61aeb75d8f5be186c26607f4bb213abe7c5ec.tbres
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\1BE575B9.png
PNG image data, 253 x 82, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\405A992F.jpg
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\53398164.jpg
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 230x73, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\569FB066.png
PNG image data, 81 x 80, 8-bit/color RGBA, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\E90AD698.jpg
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 184x184, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRF{8A583CCD-438F-45C3-853A-040A1B388B32}.tmp
Composite Document File V2 Document, Cannot read section info
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{040C2F5A-F29B-4EA0-85B0-3493EADCCAA1}.tmp
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{1436A68B-DA86-499D-BA21-B77B8041B267}.tmp
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{281DD744-E243-48DB-B86B-7C30C9C14145}.tmp
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{2EBD5A7E-B57C-49BE-870F-C8614FD916C1}.tmp
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{414F3260-7F0C-424F-AB71-9456C3F4C6E8}.tmp
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{43A4B480-A94B-4B60-9FAB-74D1BA1A20B9}.tmp
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{5A6C2BC6-F108-448E-A95C-11C712F8DB70}.tmp
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{87909DA3-0861-4525-8B45-5B291B14DA6C}.tmp
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{A206892F-5AC3-41C2-B361-F1E260364357}.tmp
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{B7D34193-D15A-4DAF-A87C-D5EC03B51B50}.tmp
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{BF9F969B-4F9B-4359-B622-E4371BECAEE7}.tmp
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{E718DCEB-7EA5-46BF-A8B3-B125BB7133BF}.tmp
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{F167A147-CB72-4BAF-AFEB-DB6406A27271}.tmp
data
dropped
C:\Users\user\AppData\Local\Temp\Diagnostics\WINWORD\App1727450945378023000_76EC6AE8-0C50-43AC-AB8C-7DB8B9AB103E.log
ASCII text, with very long lines (13998), with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\TCD1E44.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD1E44.tmp\Text Sidebar (Annual Report Red and Black design).docx
Microsoft Word 2007+
dropped
C:\Users\user\AppData\Local\Temp\TCD1E45.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD1E45.tmp\gostname.xsl
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\TCD1E46.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD1E46.tmp\iso690nmerical.xsl
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\TCD1E57.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD1E57.tmp\Equations.dotx
Microsoft Word 2007+
dropped
C:\Users\user\AppData\Local\Temp\TCD1E6C.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD1E6C.tmp\mlaseventheditionofficeonline.xsl
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\TCD1EA8.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD1EA8.tmp\architecture.glox
Microsoft OOXML
dropped
C:\Users\user\AppData\Local\Temp\TCD1EA9.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD1EA9.tmp\PictureFrame.glox
Microsoft OOXML
dropped
C:\Users\user\AppData\Local\Temp\TCD1EBA.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD1EBA.tmp\InterconnectedBlockProcess.glox
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
C:\Users\user\AppData\Local\Temp\TCD1EBB.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD1EBB.tmp\TabList.glox
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
C:\Users\user\AppData\Local\Temp\TCD1ECC.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD1ECC.tmp\harvardanglia2008officeonline.xsl
XML 1.0 document, Unicode text, UTF-8 text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\TCD1ECD.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD1ECD.tmp\gosttitle.xsl
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\TCD1EF3.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD1EF3.tmp\TabbedArc.glox
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
C:\Users\user\AppData\Local\Temp\TCD1EF4.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD1EF4.tmp\HexagonRadial.glox
Microsoft OOXML
dropped
C:\Users\user\AppData\Local\Temp\TCD1F05.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD1F05.tmp\ieee2006officeonline.xsl
XML 1.0 document, Unicode text, UTF-8 text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\TCD1F44.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD1F44.tmp\turabian.xsl
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\TCD1FB5.tmp\Banded.thmx
Microsoft OOXML
dropped
C:\Users\user\AppData\Local\Temp\TCD1FB5.tmp\content.inf
Unicode text, UTF-16, little-endian text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\TCD1FB6.tmp\Dividend.thmx
Microsoft OOXML
dropped
C:\Users\user\AppData\Local\Temp\TCD1FB6.tmp\content.inf
Unicode text, UTF-16, little-endian text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\TCD1FD9.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD1FD9.tmp\Element design set.dotx
Microsoft Word 2007+
dropped
C:\Users\user\AppData\Local\Temp\TCD1FDA.tmp\Metropolitan.thmx
Microsoft OOXML
dropped
C:\Users\user\AppData\Local\Temp\TCD1FDA.tmp\content.inf
Unicode text, UTF-16, little-endian text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\TCD1FEA.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD1FEA.tmp\iso690.xsl
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\TCD202B.tmp\BracketList.glox
Microsoft OOXML
dropped
C:\Users\user\AppData\Local\Temp\TCD202B.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD202C.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD202C.tmp\ThemePictureAlternatingAccent.glox
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
C:\Users\user\AppData\Local\Temp\TCD202D.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD202D.tmp\ConvergingText.glox
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
C:\Users\user\AppData\Local\Temp\TCD203D.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD203D.tmp\chicago.xsl
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\TCD204F.tmp\CircleProcess.glox
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
C:\Users\user\AppData\Local\Temp\TCD204F.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD2050.tmp\Frame.thmx
Microsoft OOXML
dropped
C:\Users\user\AppData\Local\Temp\TCD2050.tmp\content.inf
Unicode text, UTF-16, little-endian text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\TCD2070.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD2070.tmp\ThemePictureGrid.glox
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
C:\Users\user\AppData\Local\Temp\TCD2071.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD2071.tmp\VaryingWidthList.glox
Microsoft OOXML
dropped
C:\Users\user\AppData\Local\Temp\TCD2082.tmp\APASixthEditionOfficeOnline.xsl
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\TCD2082.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD2083.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD2083.tmp\sist02.xsl
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\TCD20A3.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD20A3.tmp\ThemePictureAccent.glox
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
C:\Users\user\AppData\Local\Temp\TCD20A4.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD20A4.tmp\gb.xsl
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\TCD20D7.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD20D7.tmp\chevronaccent.glox
Microsoft OOXML
dropped
C:\Users\user\AppData\Local\Temp\TCD20D8.tmp\Parallax.thmx
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
C:\Users\user\AppData\Local\Temp\TCD20D8.tmp\content.inf
Unicode text, UTF-16, little-endian text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\TCD20E9.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD20E9.tmp\rings.glox
Microsoft OOXML
dropped
C:\Users\user\AppData\Local\Temp\TCD20F9.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD20F9.tmp\pictureorgchart.glox
Microsoft OOXML
dropped
C:\Users\user\AppData\Local\Temp\TCD210A.tmp\Wood_Type.thmx
Microsoft OOXML
dropped
C:\Users\user\AppData\Local\Temp\TCD210A.tmp\content.inf
Unicode text, UTF-16, little-endian text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\TCD2149.tmp\View.thmx
Microsoft OOXML
dropped
C:\Users\user\AppData\Local\Temp\TCD2149.tmp\content.inf
Unicode text, UTF-16, little-endian text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\TCD216A.tmp\Parcel.thmx
Microsoft OOXML
dropped
C:\Users\user\AppData\Local\Temp\TCD216A.tmp\content.inf
Unicode text, UTF-16, little-endian text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\TCD219A.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD219A.tmp\RadialPictureList.glox
Microsoft OOXML
dropped
C:\Users\user\AppData\Local\Temp\TCD21F9.tmp\Berlin.thmx
Microsoft OOXML
dropped
C:\Users\user\AppData\Local\Temp\TCD21F9.tmp\content.inf
Unicode text, UTF-16, little-endian text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\TCD223A.tmp\Quotable.thmx
Microsoft OOXML
dropped
C:\Users\user\AppData\Local\Temp\TCD223A.tmp\content.inf
Unicode text, UTF-16, little-endian text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\TCD22BA.tmp\Savon.thmx
Microsoft OOXML
dropped
C:\Users\user\AppData\Local\Temp\TCD22BA.tmp\content.inf
Unicode text, UTF-16, little-endian text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\TCD22EA.tmp\Gallery.thmx
Microsoft OOXML
dropped
C:\Users\user\AppData\Local\Temp\TCD22EA.tmp\content.inf
Unicode text, UTF-16, little-endian text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\TCD233A.tmp\Circuit.thmx
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
C:\Users\user\AppData\Local\Temp\TCD233A.tmp\content.inf
Unicode text, UTF-16, little-endian text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\TCD2501.tmp\Droplet.thmx
Microsoft OOXML
dropped
C:\Users\user\AppData\Local\Temp\TCD2501.tmp\content.inf
Unicode text, UTF-16, little-endian text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\TCD2571.tmp\Damask.thmx
Microsoft OOXML
dropped
C:\Users\user\AppData\Local\Temp\TCD2571.tmp\content.inf
Unicode text, UTF-16, little-endian text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\TCD2582.tmp\Slate.thmx
Microsoft OOXML
dropped
C:\Users\user\AppData\Local\Temp\TCD2582.tmp\content.inf
Unicode text, UTF-16, little-endian text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\TCD267E.tmp\Mesh.thmx
Microsoft OOXML
dropped
C:\Users\user\AppData\Local\Temp\TCD267E.tmp\content.inf
Unicode text, UTF-16, little-endian text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\TCD274B.tmp\Main_Event.thmx
Microsoft OOXML
dropped
C:\Users\user\AppData\Local\Temp\TCD274B.tmp\content.inf
Unicode text, UTF-16, little-endian text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\TCD2971.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD2971.tmp\Insight design set.dotx
Microsoft Word 2007+
dropped
C:\Users\user\AppData\Local\Temp\TCD2982.tmp\Vapor_Trail.thmx
Microsoft OOXML
dropped
C:\Users\user\AppData\Local\Temp\TCD2982.tmp\content.inf
Unicode text, UTF-16, little-endian text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\cab1DEE.tmp
Microsoft Cabinet archive data, many, 15461 bytes, 2 files, at 0x4c "gostname.xsl", iFolder 0x1 "Content.inf", 2 cffolders, flags 0x4, number 1, extra bytes 20 in head, 8 datablocks, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab1DEF.tmp
Microsoft Cabinet archive data, many, 27509 bytes, 2 files, at 0x4c "Equations.dotx", iFolder 0x1 "Content.inf", 2 cffolders, flags 0x4, number 1, extra bytes 20 in head, 2 datablocks, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab1DF0.tmp
Microsoft Cabinet archive data, many, 15691 bytes, 2 files, at 0x4c "gb.xsl", iFolder 0x1 "Content.inf", 2 cffolders, flags 0x4, number 1, extra bytes 20 in head, 9 datablocks, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab1E01.tmp
Microsoft Cabinet archive data, many, 30269 bytes, 2 files, at 0x4c "Text Sidebar (Annual Report Red and Black design).docx", iFolder 0x1 "Content.inf", 2 cffolders, flags 0x4, number 1, extra bytes 20 in head, 2 datablocks, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab1E02.tmp
Microsoft Cabinet archive data, many, 19375 bytes, 2 files, at 0x4c "turabian.xsl", iFolder 0x1 "Content.inf", 2 cffolders, flags 0x4, number 1, extra bytes 20 in head, 11 datablocks, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab1E12.tmp
Microsoft Cabinet archive data, many, 14864 bytes, 2 files, at 0x4c "mlaseventheditionofficeonline.xsl", iFolder 0x1 "Content.inf", 2 cffolders, flags 0x4, number 1, extra bytes 20 in head, 8 datablocks, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab1E13.tmp
Microsoft Cabinet archive data, many, 14813 bytes, 2 files, at 0x4c "iso690nmerical.xsl", iFolder 0x1 "Content.inf", 2 cffolders, flags 0x4, number 1, extra bytes 20 in head, 7 datablocks, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab1E43.tmp
Microsoft Cabinet archive data, many, 16689 bytes, 2 files, at 0x4c "iso690.xsl", iFolder 0x1 "Content.inf", 2 cffolders, flags 0x4, number 1, extra bytes 20 in head, 9 datablocks, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab1E68.tmp
Microsoft Cabinet archive data, many, 4410 bytes, 2 files, at 0x44 "PictureFrame.glox" "Content.inf", flags 0x4, number 1, extra bytes 20 in head, 1 datablock, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab1E69.tmp
Microsoft Cabinet archive data, many, 10800 bytes, 2 files, at 0x44 "ConvergingText.glox" "Content.inf", flags 0x4, number 1, extra bytes 20 in head, 1 datablock, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab1E6A.tmp
Microsoft Cabinet archive data, many, 5731 bytes, 2 files, at 0x44 "ThemePictureAlternatingAccent.glox" "Content.inf", flags 0x4, number 1, extra bytes 20 in head, 1 datablock, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab1E6B.tmp
Microsoft Cabinet archive data, many, 14939 bytes, 2 files, at 0x44 "CircleProcess.glox" "Content.inf", flags 0x4, number 1, extra bytes 20 in head, 1 datablock, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab1E7C.tmp
Microsoft Cabinet archive data, many, 17466 bytes, 2 files, at 0x4c "chicago.xsl", iFolder 0x1 "Content.inf", 2 cffolders, flags 0x4, number 1, extra bytes 20 in head, 10 datablocks, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab1E7D.tmp
Microsoft Cabinet archive data, many, 6450 bytes, 2 files, at 0x44 "ThemePictureAccent.glox" "Content.inf", flags 0x4, number 1, extra bytes 20 in head, 1 datablock, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab1E7E.tmp
Microsoft Cabinet archive data, many, 3144 bytes, 2 files, at 0x44 "VaryingWidthList.glox" "Content.inf", flags 0x4, number 1, extra bytes 20 in head, 1 datablock, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab1E7F.tmp
Microsoft Cabinet archive data, many, 6196 bytes, 2 files, at 0x44 "ThemePictureGrid.glox" "Content.inf", flags 0x4, number 1, extra bytes 20 in head, 1 datablock, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab1E80.tmp
Microsoft Cabinet archive data, many, 9170 bytes, 2 files, at 0x44 "InterconnectedBlockProcess.glox" "Content.inf", flags 0x4, number 1, extra bytes 20 in head, 1 datablock, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab1E81.tmp
Microsoft Cabinet archive data, many, 4967 bytes, 2 files, at 0x44 "TabList.glox" "Content.inf", flags 0x4, number 1, extra bytes 20 in head, 1 datablock, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab1E82.tmp
Microsoft Cabinet archive data, many, 3749 bytes, 2 files, at 0x44 "TabbedArc.glox" "Content.inf", flags 0x4, number 1, extra bytes 20 in head, 1 datablock, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab1E83.tmp
Microsoft Cabinet archive data, many, 15418 bytes, 2 files, at 0x4c "harvardanglia2008officeonline.xsl", iFolder 0x1 "Content.inf", 2 cffolders, flags 0x4, number 1, extra bytes 20 in head, 9 datablocks, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab1E84.tmp
Microsoft Cabinet archive data, many, 5864 bytes, 2 files, at 0x44 "architecture.glox" "Content.inf", flags 0x4, number 1, extra bytes 20 in head, 1 datablock, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab1E95.tmp
Microsoft Cabinet archive data, many, 4091 bytes, 2 files, at 0x44 "BracketList.glox" "Content.inf", flags 0x4, number 1, extra bytes 20 in head, 1 datablock, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab1E96.tmp
Microsoft Cabinet archive data, many, 7453 bytes, 2 files, at 0x44 "pictureorgchart.glox" "Content.inf", flags 0x4, number 1, extra bytes 20 in head, 1 datablock, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab1E97.tmp
Microsoft Cabinet archive data, many, 15338 bytes, 2 files, at 0x4c "gosttitle.xsl", iFolder 0x1 "Content.inf", 2 cffolders, flags 0x4, number 1, extra bytes 20 in head, 8 datablocks, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab1E98.tmp
Microsoft Cabinet archive data, many, 5647 bytes, 2 files, at 0x44 "RadialPictureList.glox" "Content.inf", flags 0x4, number 1, extra bytes 20 in head, 1 datablock, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab1ECE.tmp
Microsoft Cabinet archive data, many, 6005 bytes, 2 files, at 0x44 "HexagonRadial.glox" "Content.inf", flags 0x4, number 1, extra bytes 20 in head, 1 datablock, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab1ECF.tmp
Microsoft Cabinet archive data, many, 4313 bytes, 2 files, at 0x44 "chevronaccent.glox" "Content.inf", flags 0x4, number 1, extra bytes 20 in head, 1 datablock, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab1ED0.tmp
Microsoft Cabinet archive data, many, 12767 bytes, 2 files, at 0x4c "ieee2006officeonline.xsl", iFolder 0x1 "Content.inf", 2 cffolders, flags 0x4, number 1, extra bytes 20 in head, 9 datablocks, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab1ED1.tmp
Microsoft Cabinet archive data, many, 15327 bytes, 2 files, at 0x4c "sist02.xsl", iFolder 0x1 "Content.inf", 2 cffolders, flags 0x4, number 1, extra bytes 20 in head, 8 datablocks, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab1EE1.tmp
Microsoft Cabinet archive data, many, 5213 bytes, 2 files, at 0x44 "rings.glox" "Content.inf", flags 0x4, number 1, extra bytes 20 in head, 1 datablock, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab1EE2.tmp
Microsoft Cabinet archive data, many, 18672 bytes, 2 files, at 0x4c "APASixthEditionOfficeOnline.xsl", iFolder 0x1 "Content.inf", 2 cffolders, flags 0x4, number 1, extra bytes 20 in head, 11 datablocks, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab1F84.tmp
Microsoft Cabinet archive data, many, 291188 bytes, 2 files, at 0x44 +A "Banded.thmx" +A "content.inf", flags 0x4, ID 56338, number 1, extra bytes 20 in head, 18 datablocks, 0x1503 compression
dropped
C:\Users\user\AppData\Local\Temp\cab1F85.tmp
Microsoft Cabinet archive data, many, 259074 bytes, 2 files, at 0x44 +A "content.inf" +A "Dividend.thmx", flags 0x4, ID 58359, number 1, extra bytes 20 in head, 18 datablocks, 0x1503 compression
dropped
C:\Users\user\AppData\Local\Temp\cab1FA5.tmp
Microsoft Cabinet archive data, many, 26644 bytes, 2 files, at 0x4c "Element design set.dotx", iFolder 0x1 "Content.inf", 2 cffolders, flags 0x4, number 1, extra bytes 20 in head, 2 datablocks, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab1FB7.tmp
Microsoft Cabinet archive data, many, 243642 bytes, 2 files, at 0x44 +A "content.inf" +A "Metropolitan.thmx", flags 0x4, ID 19054, number 1, extra bytes 20 in head, 24 datablocks, 0x1503 compression
dropped
C:\Users\user\AppData\Local\Temp\cab1FB8.tmp
Microsoft Cabinet archive data, many, 279287 bytes, 2 files, at 0x44 +A "Basis.thmx" +A "content.inf", flags 0x4, ID 55632, number 1, extra bytes 20 in head, 18 datablocks, 0x1503 compression
dropped
C:\Users\user\AppData\Local\Temp\cab201A.tmp
Microsoft Cabinet archive data, many, 252241 bytes, 2 files, at 0x44 +A "content.inf" +A "Frame.thmx", flags 0x4, ID 34169, number 1, extra bytes 20 in head, 16 datablocks, 0x1503 compression
dropped
C:\Users\user\AppData\Local\Temp\cab204E.tmp
Microsoft Cabinet archive data, many, 704319 bytes, 2 files, at 0x44 +A "content.inf" +A "Wood_Type.thmx", flags 0x4, ID 5778, number 1, extra bytes 20 in head, 51 datablocks, 0x1503 compression
dropped
C:\Users\user\AppData\Local\Temp\cab20B5.tmp
Microsoft Cabinet archive data, many, 214772 bytes, 2 files, at 0x44 +A "content.inf" +A "Parcel.thmx", flags 0x4, ID 26500, number 1, extra bytes 20 in head, 19 datablocks, 0x1503 compression
dropped
C:\Users\user\AppData\Local\Temp\cab20B6.tmp
Microsoft Cabinet archive data, many, 533290 bytes, 2 files, at 0x44 +A "content.inf" +A "Parallax.thmx", flags 0x4, ID 64081, number 1, extra bytes 20 in head, 29 datablocks, 0x1503 compression
dropped
C:\Users\user\AppData\Local\Temp\cab20B7.tmp
Microsoft Cabinet archive data, many, 206792 bytes, 2 files, at 0x44 +A "content.inf" +A "View.thmx", flags 0x4, ID 33885, number 1, extra bytes 20 in head, 15 datablocks, 0x1503 compression
dropped
C:\Users\user\AppData\Local\Temp\cab21C9.tmp
Microsoft Cabinet archive data, many, 682092 bytes, 2 files, at 0x44 +A "Berlin.thmx" +A "content.inf", flags 0x4, ID 46672, number 1, extra bytes 20 in head, 30 datablocks, 0x1503 compression
dropped
C:\Users\user\AppData\Local\Temp\cab220A.tmp
Microsoft Cabinet archive data, many, 624532 bytes, 2 files, at 0x44 +A "content.inf" +A "Quotable.thmx", flags 0x4, ID 13510, number 1, extra bytes 20 in head, 30 datablocks, 0x1503 compression
dropped
C:\Users\user\AppData\Local\Temp\cab2279.tmp
Microsoft Cabinet archive data, many, 1049713 bytes, 2 files, at 0x44 +A "content.inf" +A "Savon.thmx", flags 0x4, ID 60609, number 1, extra bytes 20 in head, 37 datablocks, 0x1503 compression
dropped
C:\Users\user\AppData\Local\Temp\cab229A.tmp
Microsoft Cabinet archive data, many, 937309 bytes, 2 files, at 0x44 +A "content.inf" +A "Gallery.thmx", flags 0x4, ID 44349, number 1, extra bytes 20 in head, 34 datablocks, 0x1503 compression
dropped
C:\Users\user\AppData\Local\Temp\cab22EB.tmp
Microsoft Cabinet archive data, many, 1081343 bytes, 2 files, at 0x44 +A "Circuit.thmx" +A "content.inf", flags 0x4, ID 11309, number 1, extra bytes 20 in head, 45 datablocks, 0x1503 compression
dropped
C:\Users\user\AppData\Local\Temp\cab24D1.tmp
Microsoft Cabinet archive data, many, 1291243 bytes, 2 files, at 0x44 +A "content.inf" +A "Droplet.thmx", flags 0x4, ID 47417, number 1, extra bytes 20 in head, 54 datablocks, 0x1503 compression
dropped
C:\Users\user\AppData\Local\Temp\cab2521.tmp
Microsoft Cabinet archive data, many, 1865728 bytes, 2 files, at 0x44 +A "content.inf" +A "Damask.thmx", flags 0x4, ID 63852, number 1, extra bytes 20 in head, 68 datablocks, 0x1503 compression
dropped
C:\Users\user\AppData\Local\Temp\cab2532.tmp
Microsoft Cabinet archive data, many, 1750009 bytes, 2 files, at 0x44 +A "content.inf" +A "Slate.thmx", flags 0x4, ID 28969, number 1, extra bytes 20 in head, 72 datablocks, 0x1503 compression
dropped
C:\Users\user\AppData\Local\Temp\cab25F0.tmp
Microsoft Cabinet archive data, many, 2573508 bytes, 2 files, at 0x44 +A "content.inf" +A "Mesh.thmx", flags 0x4, ID 62129, number 1, extra bytes 20 in head, 94 datablocks, 0x1503 compression
dropped
C:\Users\user\AppData\Local\Temp\cab26EC.tmp
Microsoft Cabinet archive data, many, 2511552 bytes, 2 files, at 0x44 +A "content.inf" +A "Main_Event.thmx", flags 0x4, ID 59889, number 1, extra bytes 20 in head, 90 datablocks, 0x1503 compression
dropped
C:\Users\user\AppData\Local\Temp\cab2911.tmp
Microsoft Cabinet archive data, many, 3400898 bytes, 2 files, at 0x4c "Insight design set.dotx", iFolder 0x1 "Content.inf", 2 cffolders, flags 0x4, number 1, extra bytes 20 in head, 106 datablocks, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab2931.tmp
Microsoft Cabinet archive data, many, 3239239 bytes, 2 files, at 0x44 +A "content.inf" +A "Vapor_Trail.thmx", flags 0x4, ID 19811, number 1, extra bytes 20 in head, 111 datablocks, 0x1503 compression
dropped
C:\Users\user\AppData\Local\Temp\msoE4AD.tmp
GIF image data, version 89a, 15 x 15
dropped
C:\Users\user\AppData\Roaming\Microsoft\Office\MSO3072.acl
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\PREMIERE_ policy brief_final (2)_MCA.docx.LNK
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Oct 4 11:02:43 2023, mtime=Fri Sep 27 14:29:09 2024, atime=Fri Sep 27 14:29:03 2024, length=4190855, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Templates.LNK
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Directory, ctime=Fri Sep 27 14:29:05 2024, mtime=Fri Sep 27 14:30:27 2024, atime=Fri Sep 27 14:30:27 2024, length=0, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat
Generic INItialization configuration [folders]
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03090430[[fn=Banded]].thmx (copy)
Microsoft OOXML
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03090434[[fn=Wood Type]].thmx (copy)
Microsoft OOXML
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03457464[[fn=Dividend]].thmx (copy)
Microsoft OOXML
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03457475[[fn=Frame]].thmx (copy)
Microsoft OOXML
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03457485[[fn=Mesh]].thmx (copy)
Microsoft OOXML
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03457491[[fn=Metropolitan]].thmx (copy)
Microsoft OOXML
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03457496[[fn=Parallax]].thmx (copy)
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03457503[[fn=Quotable]].thmx (copy)
Microsoft OOXML
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03457510[[fn=Savon]].thmx (copy)
Microsoft OOXML
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03457515[[fn=View]].thmx (copy)
Microsoft OOXML
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM04033917[[fn=Berlin]].thmx (copy)
Microsoft OOXML
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM04033919[[fn=Circuit]].thmx (copy)
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM04033921[[fn=Damask]].thmx (copy)
Microsoft OOXML
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM04033925[[fn=Droplet]].thmx (copy)
Microsoft OOXML
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM04033927[[fn=Main Event]].thmx (copy)
Microsoft OOXML
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM04033929[[fn=Slate]].thmx (copy)
Microsoft OOXML
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM04033937[[fn=Vapor Trail]].thmx (copy)
Microsoft OOXML
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM10001114[[fn=Gallery]].thmx (copy)
Microsoft OOXML
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM10001115[[fn=Parcel]].thmx (copy)
Microsoft OOXML
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328884[[fn=architecture]].glox (copy)
Microsoft OOXML
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328893[[fn=BracketList]].glox (copy)
Microsoft OOXML
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328905[[fn=Chevron Accent]].glox (copy)
Microsoft OOXML
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328908[[fn=Circle Process]].glox (copy)
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328916[[fn=Converging Text]].glox (copy)
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328919[[fn=Hexagon Radial]].glox (copy)
Microsoft OOXML
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328925[[fn=Interconnected Block Process]].glox (copy)
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328932[[fn=Picture Frame]].glox (copy)
Microsoft OOXML
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328935[[fn=Picture Organization Chart]].glox (copy)
Microsoft OOXML
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328940[[fn=Radial Picture List]].glox (copy)
Microsoft OOXML
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328951[[fn=Tabbed Arc]].glox (copy)
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328972[[fn=Tab List]].glox (copy)
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328975[[fn=Theme Picture Accent]].glox (copy)
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328983[[fn=Theme Picture Alternating Accent]].glox (copy)
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328986[[fn=Theme Picture Grid]].glox (copy)
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328990[[fn=Varying Width List]].glox (copy)
Microsoft OOXML
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328998[[fn=Rings]].glox (copy)
Microsoft OOXML
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Bibliography Styles\TM02851216[[fn=apasixtheditionofficeonline]].xsl (copy)
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Bibliography Styles\TM02851217[[fn=chicago]].xsl (copy)
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Bibliography Styles\TM02851218[[fn=gb]].xsl (copy)
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Bibliography Styles\TM02851219[[fn=gostname]].xsl (copy)
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Bibliography Styles\TM02851220[[fn=gosttitle]].xsl (copy)
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Bibliography Styles\TM02851221[[fn=harvardanglia2008officeonline]].xsl (copy)
XML 1.0 document, Unicode text, UTF-8 text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Bibliography Styles\TM02851222[[fn=ieee2006officeonline]].xsl (copy)
XML 1.0 document, Unicode text, UTF-8 text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Bibliography Styles\TM02851223[[fn=iso690]].xsl (copy)
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Bibliography Styles\TM02851224[[fn=iso690nmerical]].xsl (copy)
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Bibliography Styles\TM02851225[[fn=mlaseventheditionofficeonline]].xsl (copy)
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Bibliography Styles\TM02851226[[fn=turabian]].xsl (copy)
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Bibliography Styles\TM02851227[[fn=sist02]].xsl (copy)
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Building Blocks\1033\TM01840907[[fn=Equations]].dotx (copy)
Microsoft Word 2007+
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Building Blocks\1033\TM02835233[[fn=Text Sidebar (Annual Report Red and Black design)]].docx (copy)
Microsoft Word 2007+
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Building Blocks\1033\TM03998158[[fn=Element]].dotx (copy)
Microsoft Word 2007+
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Building Blocks\1033\TM03998159[[fn=Insight]].dotx (copy)
Microsoft Word 2007+
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\Normal.dotm (copy)
Microsoft Word 2007+
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\~WRD0002.tmp
Microsoft Word 2007+
dropped
C:\Users\user\AppData\Roaming\Microsoft\UProof\ExcludeDictionaryEN0809.lex
Unicode text, UTF-16, little-endian text, with no line terminators
dropped
C:\Users\user\Desktop\PREMIERE_ policy brief_final (2)_MCA.docx.doc (copy)
Microsoft Word 2007+
dropped
C:\Users\user\Desktop\~$EMIERE_ policy brief_final (2)_MCA.docx.doc
data
dropped
C:\Users\user\Desktop\~WRD0000.tmp
Microsoft Word 2007+
dropped
C:\Users\user\Desktop\~WRD0000.tmp:Zone.Identifier
ASCII text, with CRLF line terminators
dropped
Chrome Cache Entry: 473
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 600x400, components 3
downloaded
Chrome Cache Entry: 474
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 475
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 476
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 600x400, components 3
dropped
Chrome Cache Entry: 477
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 991x756, components 3
dropped
Chrome Cache Entry: 478
ASCII text, with very long lines (1127)
dropped
Chrome Cache Entry: 479
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 600x400, components 3
downloaded
Chrome Cache Entry: 480
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 600x400, components 3
downloaded
Chrome Cache Entry: 481
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 120x170, components 3
dropped
Chrome Cache Entry: 482
ASCII text, with very long lines (58823)
dropped
Chrome Cache Entry: 483
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 600x400, components 3
dropped
Chrome Cache Entry: 484
RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x480, Scaling: [none]x[none], YUV color, decoders should clamp
dropped
Chrome Cache Entry: 485
ASCII text
downloaded
Chrome Cache Entry: 486
HTML document, ASCII text, with very long lines (12383)
dropped
Chrome Cache Entry: 487
GIF image data, version 89a, 1 x 1
downloaded
Chrome Cache Entry: 488
JSON data
downloaded
Chrome Cache Entry: 489
JSON data
downloaded
Chrome Cache Entry: 490
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 491
ASCII text, with very long lines (58823)
dropped
Chrome Cache Entry: 492
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 600x400, components 3
dropped
Chrome Cache Entry: 493
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 120x170, components 3
downloaded
Chrome Cache Entry: 494
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 600x400, components 3
downloaded
Chrome Cache Entry: 495
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 120x170, components 3
dropped
Chrome Cache Entry: 496
HTML document, Unicode text, UTF-8 text, with very long lines (565)
downloaded
Chrome Cache Entry: 497
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 600x400, components 3
downloaded
Chrome Cache Entry: 498
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 600x400, components 3
downloaded
Chrome Cache Entry: 499
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 500
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 600x400, components 3
downloaded
Chrome Cache Entry: 501
ASCII text, with very long lines (35005)
downloaded
Chrome Cache Entry: 502
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 600x400, components 3
dropped
Chrome Cache Entry: 503
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 600x400, components 3
dropped
Chrome Cache Entry: 504
ASCII text, with very long lines (399)
downloaded
Chrome Cache Entry: 505
ASCII text, with very long lines (1127)
downloaded
Chrome Cache Entry: 506
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 600x400, components 3
downloaded
Chrome Cache Entry: 507
ASCII text, with very long lines (65362)
dropped
Chrome Cache Entry: 508
ASCII text, with very long lines (1127)
downloaded
Chrome Cache Entry: 509
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 510
troff or preprocessor input, ASCII text, with very long lines (1511)
downloaded
Chrome Cache Entry: 511
ASCII text
downloaded
Chrome Cache Entry: 512
HTML document, Unicode text, UTF-8 text, with very long lines (2254)
downloaded
Chrome Cache Entry: 513
Unicode text, UTF-8 text, with very long lines (1916)
dropped
Chrome Cache Entry: 514
ASCII text, with very long lines (65362)
downloaded
Chrome Cache Entry: 515
JSON data
downloaded
Chrome Cache Entry: 516
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 600x400, components 3
dropped
Chrome Cache Entry: 517
HTML document, ASCII text, with very long lines (12383)
downloaded
Chrome Cache Entry: 518
GIF image data, version 89a, 1 x 1
dropped
Chrome Cache Entry: 519
ASCII text
dropped
Chrome Cache Entry: 520
ASCII text
dropped
Chrome Cache Entry: 521
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 600x400, components 3
dropped
Chrome Cache Entry: 522
Unicode text, UTF-8 text, with very long lines (65439)
downloaded
Chrome Cache Entry: 523
assembler source, ASCII text, with very long lines (1511)
downloaded
Chrome Cache Entry: 524
ASCII text, with very long lines (65362)
dropped
Chrome Cache Entry: 525
ASCII text, with very long lines (35005)
downloaded
Chrome Cache Entry: 526
ASCII text, with very long lines (1127)
dropped
Chrome Cache Entry: 527
Unicode text, UTF-8 text, with very long lines (41812)
downloaded
Chrome Cache Entry: 528
ASCII text, with very long lines (1210)
dropped
Chrome Cache Entry: 529
Unicode text, UTF-8 text, with very long lines (65439)
downloaded
Chrome Cache Entry: 530
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 531
ASCII text, with very long lines (65362)
downloaded
Chrome Cache Entry: 532
ASCII text, with very long lines (65362)
dropped
Chrome Cache Entry: 533
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 534
ASCII text, with very long lines (1127)
downloaded
Chrome Cache Entry: 535
Unicode text, UTF-8 text, with very long lines (41812)
downloaded
Chrome Cache Entry: 536
Unicode text, UTF-8 text, with very long lines (41812)
downloaded
Chrome Cache Entry: 537
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 538
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 539
ASCII text, with very long lines (399)
downloaded
Chrome Cache Entry: 540
GIF image data, version 89a, 1 x 1
downloaded
Chrome Cache Entry: 541
ASCII text, with very long lines (35005)
downloaded
Chrome Cache Entry: 542
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 543
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 120x170, components 3
downloaded
Chrome Cache Entry: 544
GIF image data, version 89a, 1 x 1
downloaded
Chrome Cache Entry: 545
ASCII text, with very long lines (58823)
downloaded
Chrome Cache Entry: 546
RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x480, Scaling: [none]x[none], YUV color, decoders should clamp
downloaded
Chrome Cache Entry: 547
ASCII text, with CRLF line terminators
downloaded
Chrome Cache Entry: 548
Unicode text, UTF-8 text, with very long lines (65439)
downloaded
Chrome Cache Entry: 549
ASCII text, with very long lines (58823)
downloaded
Chrome Cache Entry: 550
ASCII text
downloaded
Chrome Cache Entry: 551
troff or preprocessor input, ASCII text, with very long lines (1511)
downloaded
Chrome Cache Entry: 552
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 600x400, components 3
downloaded
Chrome Cache Entry: 553
ASCII text, with very long lines (35005)
downloaded
Chrome Cache Entry: 554
Unicode text, UTF-8 text, with very long lines (65439)
downloaded
Chrome Cache Entry: 555
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 600x400, components 3
dropped
Chrome Cache Entry: 556
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 600x400, components 3
dropped
Chrome Cache Entry: 557
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 558
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 600x400, components 3
downloaded
Chrome Cache Entry: 559
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 600x400, components 3
downloaded
Chrome Cache Entry: 560
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 561
MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
dropped
Chrome Cache Entry: 562
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 563
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 600x400, components 3
downloaded
Chrome Cache Entry: 564
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 565
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 600x400, components 3
downloaded
Chrome Cache Entry: 566
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 567
troff or preprocessor input, ASCII text, with very long lines (1511)
downloaded
Chrome Cache Entry: 568
ASCII text, with very long lines (399)
downloaded
Chrome Cache Entry: 569
ASCII text, with very long lines (4028)
dropped
Chrome Cache Entry: 570
GIF image data, version 89a, 1 x 1
downloaded
Chrome Cache Entry: 571
GIF image data, version 89a, 1 x 1
dropped
Chrome Cache Entry: 572
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 120x170, components 3
downloaded
Chrome Cache Entry: 573
ASCII text, with very long lines (58823)
downloaded
Chrome Cache Entry: 574
ASCII text, with very long lines (1004), with no line terminators
downloaded
Chrome Cache Entry: 575
ASCII text, with very long lines (65362)
downloaded
Chrome Cache Entry: 576
ASCII text, with very long lines (58823)
downloaded
Chrome Cache Entry: 577
MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
downloaded
Chrome Cache Entry: 578
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 120x170, components 3
dropped
Chrome Cache Entry: 579
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 600x400, components 3
dropped
Chrome Cache Entry: 580
GIF image data, version 89a, 1 x 1
dropped
Chrome Cache Entry: 581
GIF image data, version 89a, 1 x 1
dropped
Chrome Cache Entry: 582
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 600x400, components 3
dropped
Chrome Cache Entry: 583
JSON data
dropped
Chrome Cache Entry: 584
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 600x400, components 3
dropped
Chrome Cache Entry: 585
PNG image data, 600 x 400, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 586
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 600x400, components 3
dropped
Chrome Cache Entry: 587
ASCII text, with very long lines (399)
downloaded
Chrome Cache Entry: 588
ASCII text, with very long lines (41072)
downloaded
Chrome Cache Entry: 589
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 600x400, components 3
downloaded
Chrome Cache Entry: 590
ASCII text, with very long lines (35005)
downloaded
Chrome Cache Entry: 591
troff or preprocessor input, ASCII text, with very long lines (1511)
downloaded
Chrome Cache Entry: 592
Unicode text, UTF-8 text, with very long lines (65439)
downloaded
Chrome Cache Entry: 593
ASCII text, with very long lines (65362)
downloaded
Chrome Cache Entry: 594
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 3840x348, components 3
downloaded
Chrome Cache Entry: 595
ASCII text, with very long lines (4028)
downloaded
Chrome Cache Entry: 596
JSON data
downloaded
Chrome Cache Entry: 597
JSON data
downloaded
Chrome Cache Entry: 598
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 599
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 600x400, components 3
downloaded
Chrome Cache Entry: 600
ASCII text, with very long lines (65362)
downloaded
Chrome Cache Entry: 601
ASCII text, with very long lines (58823)
downloaded
Chrome Cache Entry: 602
RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x480, Scaling: [none]x[none], YUV color, decoders should clamp
dropped
Chrome Cache Entry: 603
ASCII text, with very long lines (399)
downloaded
Chrome Cache Entry: 604
PNG image data, 600 x 400, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 605
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 120x170, components 3
downloaded
Chrome Cache Entry: 606
ASCII text, with very long lines (3276), with no line terminators
downloaded
Chrome Cache Entry: 607
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 600x400, components 3
downloaded
Chrome Cache Entry: 608
HTML document, ASCII text, with very long lines (3396)
dropped
Chrome Cache Entry: 609
GIF image data, version 89a, 1 x 1
dropped
Chrome Cache Entry: 610
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 600x400, components 3
dropped
Chrome Cache Entry: 611
JSON data
downloaded
Chrome Cache Entry: 612
ASCII text, with CRLF line terminators
dropped
Chrome Cache Entry: 613
Unicode text, UTF-8 text
downloaded
Chrome Cache Entry: 614
ASCII text
downloaded
Chrome Cache Entry: 615
ASCII text, with very long lines (399)
downloaded
Chrome Cache Entry: 616
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 600x400, components 3
dropped
Chrome Cache Entry: 617
ASCII text, with very long lines (65362)
downloaded
Chrome Cache Entry: 618
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 600x400, components 3
downloaded
Chrome Cache Entry: 619
RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x480, Scaling: [none]x[none], YUV color, decoders should clamp
downloaded
Chrome Cache Entry: 620
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 621
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 622
ASCII text, with very long lines (3396)
downloaded
Chrome Cache Entry: 623
data
downloaded
Chrome Cache Entry: 624
GIF image data, version 89a, 1 x 1
dropped
Chrome Cache Entry: 625
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 600x400, components 3
downloaded
Chrome Cache Entry: 626
Unicode text, UTF-8 text, with very long lines (41812)
downloaded
Chrome Cache Entry: 627
HTML document, Unicode text, UTF-8 text, with very long lines (5523)
downloaded
Chrome Cache Entry: 628
Unicode text, UTF-8 text, with very long lines (41812)
downloaded
Chrome Cache Entry: 629
ASCII text, with very long lines (1210)
downloaded
Chrome Cache Entry: 630
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 600x400, components 3
downloaded
Chrome Cache Entry: 631
ASCII text
dropped
Chrome Cache Entry: 632
Unicode text, UTF-8 text, with very long lines (24694)
dropped
Chrome Cache Entry: 633
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 600x400, components 3
downloaded
Chrome Cache Entry: 634
RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x480, Scaling: [none]x[none], YUV color, decoders should clamp
downloaded
Chrome Cache Entry: 635
GIF image data, version 89a, 1 x 1
downloaded
Chrome Cache Entry: 636
JSON data
dropped
Chrome Cache Entry: 637
GIF image data, version 89a, 1 x 1
downloaded
Chrome Cache Entry: 638
RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x480, Scaling: [none]x[none], YUV color, decoders should clamp
dropped
Chrome Cache Entry: 639
Unicode text, UTF-8 text, with very long lines (2062)
downloaded
Chrome Cache Entry: 640
Unicode text, UTF-8 text, with very long lines (2062)
dropped
Chrome Cache Entry: 641
HTML document, Unicode text, UTF-8 text, with very long lines (2550)
downloaded
Chrome Cache Entry: 642
Unicode text, UTF-8 text
dropped
Chrome Cache Entry: 643
HTML document, ASCII text, with very long lines (17697)
downloaded
Chrome Cache Entry: 644
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 600x400, components 3
downloaded
Chrome Cache Entry: 645
Unicode text, UTF-8 text, with very long lines (41812)
downloaded
Chrome Cache Entry: 646
Unicode text, UTF-8 text, with very long lines (65439)
downloaded
Chrome Cache Entry: 647
ASCII text, with very long lines (4160), with no line terminators
downloaded
Chrome Cache Entry: 648
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 120x170, components 3
dropped
Chrome Cache Entry: 649
HTML document, Unicode text, UTF-8 text, with very long lines (1174)
downloaded
Chrome Cache Entry: 650
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 600x400, components 3
dropped
Chrome Cache Entry: 651
ASCII text, with very long lines (4613)
downloaded
Chrome Cache Entry: 652
ASCII text, with very long lines (1080), with no line terminators
downloaded
Chrome Cache Entry: 653
Unicode text, UTF-8 text
dropped
Chrome Cache Entry: 654
PNG image data, 27 x 27, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 655
GIF image data, version 89a, 1 x 1
downloaded
Chrome Cache Entry: 656
Unicode text, UTF-8 text, with very long lines (41812)
downloaded
Chrome Cache Entry: 657
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 600x400, components 3
dropped
Chrome Cache Entry: 658
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 659
ASCII text, with very long lines (65362)
dropped
Chrome Cache Entry: 660
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 661
RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x480, Scaling: [none]x[none], YUV color, decoders should clamp
dropped
Chrome Cache Entry: 662
ASCII text, with very long lines (41072)
dropped
Chrome Cache Entry: 663
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 120x170, components 3
dropped
Chrome Cache Entry: 664
ASCII text, with very long lines (58823)
downloaded
Chrome Cache Entry: 665
GIF image data, version 89a, 16 x 16
dropped
Chrome Cache Entry: 666
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 667
ASCII text, with very long lines (65362)
downloaded
Chrome Cache Entry: 668
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 669
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 120x170, components 3
dropped
Chrome Cache Entry: 670
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 600x400, components 3
dropped
Chrome Cache Entry: 671
GIF image data, version 89a, 1 x 1
dropped
Chrome Cache Entry: 672
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 673
ASCII text, with very long lines (35005)
downloaded
Chrome Cache Entry: 674
ASCII text, with very long lines (4613)
dropped
Chrome Cache Entry: 675
ASCII text
downloaded
Chrome Cache Entry: 676
GIF image data, version 89a, 1 x 1
dropped
Chrome Cache Entry: 677
RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x480, Scaling: [none]x[none], YUV color, decoders should clamp
downloaded
Chrome Cache Entry: 678
MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
downloaded
Chrome Cache Entry: 679
ASCII text
downloaded
Chrome Cache Entry: 680
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 991x756, components 3
downloaded
Chrome Cache Entry: 681
JSON data
dropped
Chrome Cache Entry: 682
ASCII text, with very long lines (3396)
dropped
Chrome Cache Entry: 683
PNG image data, 600 x 400, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 684
JSON data
dropped
Chrome Cache Entry: 685
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 600x400, components 3
dropped
Chrome Cache Entry: 686
Unicode text, UTF-8 text, with very long lines (24694)
downloaded
Chrome Cache Entry: 687
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 688
HTML document, Unicode text, UTF-8 text, with very long lines (661)
downloaded
Chrome Cache Entry: 689
ASCII text, with very long lines (399)
downloaded
Chrome Cache Entry: 690
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 120x170, components 3
downloaded
Chrome Cache Entry: 691
HTML document, ASCII text, with very long lines (3396)
downloaded
Chrome Cache Entry: 692
GIF image data, version 89a, 16 x 16
downloaded
Chrome Cache Entry: 693
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 694
RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x480, Scaling: [none]x[none], YUV color, decoders should clamp
dropped
Chrome Cache Entry: 695
RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x480, Scaling: [none]x[none], YUV color, decoders should clamp
dropped
Chrome Cache Entry: 696
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 120x170, components 3
downloaded
Chrome Cache Entry: 697
ASCII text, with very long lines (58823)
dropped
Chrome Cache Entry: 698
GIF image data, version 89a, 1 x 1
dropped
Chrome Cache Entry: 699
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 600x400, components 3
dropped
Chrome Cache Entry: 700
ASCII text, with very long lines (58823)
dropped
Chrome Cache Entry: 701
data
dropped
Chrome Cache Entry: 702
JSON data
dropped
Chrome Cache Entry: 703
ASCII text
downloaded
Chrome Cache Entry: 704
GIF image data, version 89a, 1 x 1
downloaded
Chrome Cache Entry: 705
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 600x400, components 3
dropped
Chrome Cache Entry: 706
Unicode text, UTF-8 text, with very long lines (1916)
downloaded
Chrome Cache Entry: 707
HTML document, Unicode text, UTF-8 text, with very long lines (2256)
downloaded
Chrome Cache Entry: 708
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 600x400, components 3
downloaded
Chrome Cache Entry: 709
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 600x400, components 3
downloaded
Chrome Cache Entry: 710
ASCII text
downloaded
Chrome Cache Entry: 711
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 3840x348, components 3
dropped
Chrome Cache Entry: 712
HTML document, ASCII text, with very long lines (17697)
dropped
Chrome Cache Entry: 713
PNG image data, 600 x 400, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 714
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 600x400, components 3
dropped
Chrome Cache Entry: 715
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 716
ASCII text, with very long lines (65362)
dropped
Chrome Cache Entry: 717
GIF image data, version 89a, 1 x 1
dropped
Chrome Cache Entry: 718
ASCII text, with very long lines (58823)
downloaded
Chrome Cache Entry: 719
JSON data
dropped
Chrome Cache Entry: 720
ASCII text
downloaded
Chrome Cache Entry: 721
GIF image data, version 89a, 1 x 1
downloaded
Chrome Cache Entry: 722
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 600x400, components 3
dropped
Chrome Cache Entry: 723
RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x480, Scaling: [none]x[none], YUV color, decoders should clamp
downloaded
Chrome Cache Entry: 724
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 600x400, components 3
downloaded
Chrome Cache Entry: 725
MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
dropped
Chrome Cache Entry: 726
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 727
RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x480, Scaling: [none]x[none], YUV color, decoders should clamp
dropped
Chrome Cache Entry: 728
troff or preprocessor input, ASCII text, with very long lines (1511)
downloaded
Chrome Cache Entry: 729
RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x480, Scaling: [none]x[none], YUV color, decoders should clamp
downloaded
Chrome Cache Entry: 730
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 731
ASCII text, with very long lines (3017), with no line terminators
downloaded
Chrome Cache Entry: 732
ASCII text, with very long lines (2252), with no line terminators
downloaded
Chrome Cache Entry: 733
ASCII text, with very long lines (1127)
dropped
Chrome Cache Entry: 734
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 120x170, components 3
downloaded
Chrome Cache Entry: 735
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 120x170, components 3
dropped
Chrome Cache Entry: 736
ASCII text, with very long lines (58823)
dropped
Chrome Cache Entry: 737
HTML document, Unicode text, UTF-8 text
dropped
Chrome Cache Entry: 738
Unicode text, UTF-8 text, with very long lines (65439)
downloaded
Chrome Cache Entry: 739
GIF image data, version 89a, 1 x 1
downloaded
Chrome Cache Entry: 740
Unicode text, UTF-8 text
downloaded
Chrome Cache Entry: 741
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 600x400, components 3
dropped
Chrome Cache Entry: 742
ASCII text, with very long lines (35005)
downloaded
Chrome Cache Entry: 743
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 744
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 600x400, components 3
downloaded
Chrome Cache Entry: 745
PNG image data, 27 x 27, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 746
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 600x400, components 3
dropped
Chrome Cache Entry: 747
troff or preprocessor input, ASCII text, with very long lines (1511)
downloaded
Chrome Cache Entry: 748
RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x480, Scaling: [none]x[none], YUV color, decoders should clamp
downloaded
There are 514 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
"C:\Program Files (x86)\Microsoft Office\Root\Office16\WINWORD.EXE" /Automation -Embedding
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2168 --field-trial-handle=1916,i,12741538260049677063,15038969521050779369,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://research-and-innovation.ec.europa.eu/research-area/social-sciences-and-humanities/cultural-heritage-and-cultural-and-creative-industries-ccis/cultural-heritage-cloud_en"

URLs

Name
IP
Malicious
https://ec.europa.eu/eusurvey/home/privacystatement?language=bg
unknown
https://webtools.europa.eu/js/webtools.globan.js?t=1727343033
13.35.58.4
https://research-and-innovation.ec.europa.eu/sites/default/files/js/js_5AfpVbycXhpWCXmNSnfhLDGYChmJuQ_SpILpbVXzSA8.js?scope=footer&delta=0&language=en&theme=ewcms_theme&include=eJxtkFtuxDAIRTeUTpZkEYcmSBgswJ569406mYki9Q_uuTwV0xOXUGWfV2sV-PHOv7yABSusaJNiih0LzllLVUGJxLQY2EiYJx8eWOYFHC8n_gSaACfv26VWI4kJn7n4qXwT8po-bsoqN_6K4WAjKPs_LEbVzaDu44SlcRCTbA349BTIO8mxhYE4Q5BKEj2O6HjvmJM36zimCgZ_XT-fuZRHk9oWJt9xvZWTVNgwCXTaXkMMi3bgX7x9kE8
18.66.147.18
https://research-and-innovation.ec.europa.eu/sites/default/files/css/css_MDZozTzXWZ-SLixN3AH65EjTe-uDVpnQ16dK-xSUQdo.css?delta=4&language=en&theme=ewcms_theme&include=eJxtkFtuxDAIRTeUTpZkEYcmSBgswJ569406mYki9Q_uuTwV0xOXUGWfV2sV-PHOv7yABSusaJNiih0LzllLVUGJxLQY2EiYJx8eWOYFHC8n_gSaACfv26VWI4kJn7n4qXwT8po-bsoqN_6K4WAjKPs_LEbVzaDu44SlcRCTbA349BTIO8mxhYE4Q5BKEj2O6HjvmJM36zimCgZ_XT-fuZRHk9oWJt9xvZWTVNgwCXTaXkMMi3bgX7x9kE8
18.66.147.18
https://commission.europa.eu/energy-climate-change-environment_en
unknown
https://commission.europa.eu/privacy-policy_en
unknown
https://projects.research-and-innovation.ec.europa.eu/en/horizon-magazine
unknown
https://ec.europa.eu/eusurvey/resources/js/Chart.min.js?version=bc66c209c78fdbc5b00c1813c8afebcc472dd037
147.67.34.30
https://research-and-innovation.ec.europa.eu/research-area/social-sciences-and-humanities_en
https://commission.europa.eu/sites/default/files/styles/oe_theme_ratio_3_2_medium/avportal/P-063771/00-25.jpg?itok=tk0U8dZr
143.204.215.38
https://ec.europa.eu/eusurvey/runner/ec_online_survey?surveylanguage=nl
unknown
https://ec.europa.eu/wel/surveys/wr_survey03/data/invitation_settings/audience_survey/eurobarometer_
unknown
https://amassproject.weebly.com/uploads/1/3/2/4/132499556/amass_white_paper_final.pdf
unknown
https://research-and-innovation.ec.europa.eu/sites/default/files/styles/oe_theme_ratio_3_2_medium/public/2024-04/ec_rtd_hrp-event-banner.jpg?h=252f27fa&itok=YBD7VJf_
18.66.147.80
https://ec.europa.eu/eusurvey/resources/images/ajax-loader.gif
147.67.34.30
https://ec.europa.eu/stories/stronger-europe
unknown
https://ec.europa.eu/wel/surveys/wr_survey03/data/invitation_settings/audience_survey/ec_press_corne
unknown
https://webtools.europa.eu/images/hourglass.gif?t=1727343033);padding-left:80px;justify-content:flex
unknown
https://ec.europa.eu/eusurvey/resources/js/fileuploader.js?version=bc66c209c78fdbc5b00c1813c8afebcc472dd037
147.67.34.30
https://ec.europa.eu/eusurvey/runner/ec_online_survey?surveylanguage=mt
unknown
https://research-and-innovation.ec.europa.eu/sites/default/files/css/css_czxwRUuU1CZLBZLWste81hzvJkgwK1zfppKmXDp2AhM.css?delta=1&language=en&theme=ewcms_theme&include=eJxtkFtuxDAIRTeUTpZkEYcmSBgswJ569406mYki9Q_uuTwV0xOXUGWfV2sV-PHOv7yABSusaJNiih0LzllLVUGJxLQY2EiYJx8eWOYFHC8n_gSaACfv26VWI4kJn7n4qXwT8po-bsoqN_6K4WAjKPs_LEbVzaDu44SlcRCTbA349BTIO8mxhYE4Q5BKEj2O6HjvmJM36zimCgZ_XT-fuZRHk9oWJt9xvZWTVNgwCXTaXkMMi3bgX7x9kE8
18.66.147.18
https://webanalytics.europa.eu/ppms.php?action_name=Social%20sciences%20research%20and%20innovation&idsite=4705692c-5e23-41fe-ba51-2631bd579b2b&rec=1&r=845162&h=11&m=30&s=47&url=https%3A%2F%2Fresearch-and-innovation.ec.europa.eu%2Fresearch-area%2Fsocial-sciences-and-humanities_en&_id=84b495eb4429e35c&_idts=1727450990&_idvc=1&_idn=0&_viewts=1727450990&send_image=1&pdf=1&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&cookie=1&res=1280x1024&dimension1=en&dimension3=Landing%20Page&dimension4=cultural-heritage%20democracy%20gender-equality%20history-of-Europe%20migration%20social-inequality%20social-sciences&dimension5=Directorate-General-for-Research-and-Innovation&dimension6=Social%20sciences%20and%20humanities&dimension7=2a3f920b-88f2-48fd-a9a1-1d4de641aa6a&dimension8=EC%20-%20STANDARDISED&dimension9=cultural-heritage%20cultural-policy%20deepening-of-the-European-Union%20democracy%20EU-studies%20European-integration%20gender-equality%20history-of-Europe%20migration%20migration-policy%20politics%20research%20rule-of-law%20scientific-research%20social-inequality%20social-policy%20social-problem%20social-rights%20social-sciences&gt_ms=477&pv_id=3fAueD
35.156.118.94
https://research-and-innovation.ec.europa.eu/sites/default/files/js/js_5AfpVbycXhpWCXmNSnfhLDGYChmJuQ_SpILpbVXzSA8.js?scope=footer&delta=0&language=en&theme=ewcms_theme&include=eJxtkFuOwzAIRTfkaZZkEYcmSBgswGm9-0YzaaNK84EE91zxUswPnEOVfVqsN-Dbu_7xChassKAlxRwbVpyK1qaCEplpNrCRsSQfHlinGRwvJz4DTYCz7-ulNiOJhI9S_VTuhLzkj5uKyhf_y-FgI6j4PyxG09WgbeOEtXMQk6wd-PRUKBvJsYWBOEOQShY9jtjxu2PJ3m3HkbxBPUImne_dCwSmBga_gz7PupRbl9ZnJt9weQFMkoiF
18.66.147.80
https://ec.europa.eu/eusurvey/home/privacystatement?language=de
unknown
https://research-and-innovation.ec.europa.eu/sites/default/files/styles/oe_theme_ratio_3_2_medium/public/2024-09/ec_rtd_celebrating-40-video-fair.jpg?h=10d202d3&itok=V7uU4h4d
18.66.147.80
https://ec.europa.eu/eusurvey/resources/js/math.js?version=bc66c209c78fdbc5b00c1813c8afebcc472dd037
147.67.34.30
https://ec.europa.eu/wel/surveys/wr_survey03/data/invitation_settings/agriculture/invitation_setting
unknown
https://ec.europa.eu/eusurvey/home/privacystatement?language=da
unknown
https://ec.europa.eu/eusurvey/resources/js/utf8.js?version=bc66c209c78fdbc5b00c1813c8afebcc472dd037
147.67.34.30
https://ec.europa.eu/eusurvey/resources/css/bootstrap.css?version=bc66c209c78fdbc5b00c1813c8afebcc472dd037
147.67.34.30
https://research-and-innovation.ec.europa.eu/sites/default/files/css/css_j2GZKlIVUIv_P-jsa0KBVm9xwOFXZEy6qM-2DuNFS4s.css?delta=5&language=en&theme=ewcms_theme&include=eJxtkOEOwjAIhF9oukdqWIcbCYUG6LRv76LTxcR_cN_lwqGY7jiFKvs4W6vA189-8QIWrDCjDYopViw4Zi1VBSUS02RgPWEevHtgGSdwPJ34CDQBTr4tp1qNJAa85-KHciPkOX3dlFV--HuGnfWg7H9Y9KqLQV37AUvjICZZGvDhKZBXkv0KA3GGIJUkupfY8DcxJ2-2YR8qGLxSv585lWuT2iYmX3F-AnBwgQs
18.66.147.80
https://ec.europa.eu/research-and-innovation/en/projects/success-stories/all/cultural-heritage
unknown
https://research-and-innovation.ec.europa.eu/sites/default/files/styles/oe_theme_large_4_1_banner/pu
unknown
https://research-and-innovation.ec.europa.eu/sites/default/files/css/css_czxwRUuU1CZLBZLWste81hzvJkgwK1zfppKmXDp2AhM.css?delta=1&language=en&theme=ewcms_theme&include=eJxtkOEOwjAIhF9oukdqWIcbCYUG6LRv76LTxcR_cN_lwqGY7jiFKvs4W6vA189-8QIWrDCjDYopViw4Zi1VBSUS02RgPWEevHtgGSdwPJ34CDQBTr4tp1qNJAa85-KHciPkOX3dlFV--HuGnfWg7H9Y9KqLQV37AUvjICZZGvDhKZBXkv0KA3GGIJUkupfY8DcxJ2-2YR8qGLxSv585lWuT2iYmX3F-AnBwgQs
18.66.147.80
https://ec.europa.eu/eusurvey/runner/ec_online_survey?surveylanguage=pt
unknown
https://ec.europa.eu/wel/surveys/wr_survey03/data/invitation_settings/audience_survey/ec_representat
unknown
https://commission.europa.eu/sites/default/files/styles/oe_theme_full_width_banner_4_1/public/2024-0
unknown
https://research-and-innovation.ec.europa.eu/sites/default/files/styles/oe_theme_small_4_1_banner/pu
unknown
https://webanalytics.europa.eu/ppms.php?action_name=Research%20by%20area%20-%20European%20Commission&idsite=4705692c-5e23-41fe-ba51-2631bd579b2b&rec=1&r=218245&h=11&m=30&s=54&url=https%3A%2F%2Fresearch-and-innovation.ec.europa.eu%2Fresearch-area_en&_id=84b495eb4429e35c&_idts=1727450990&_idvc=1&_idn=0&_viewts=1727450990&send_image=1&pdf=1&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&cookie=1&res=1280x1024&dimension1=en&dimension3=Landing%20Page&dimension4=scientific-research&dimension5=Directorate-General-for-Research-and-Innovation&dimension6=Research%20by%20area&dimension7=004d857e-6efa-469a-800e-8c74f3c6f9bf&dimension8=EC%20-%20STANDARDISED&dimension9=research%20scientific-research&gt_ms=418&t_ss=18&t_fs=3&t_ds=17&t_cs=17&t_ce=774&t_qs=774&t_as=1102&t_ae=1192&t_dl=1106&t_di=3957&t_ls=3959&t_le=3959&t_dc=3970&t_ee=3970&pv_id=mbkGVB
3.123.174.215
https://research-and-innovation.ec.europa.eu/sites/default/files/styles/oe_theme_small_no_crop/public/2023-04/ec_rtd_cultural-cloud-factsheet.jpg?itok=nztOga7F
18.66.147.18
https://ec.europa.eu/eusurvey/runner/ec_online_survey?surveylanguage=pl
unknown
https://ec.europa.eu/eusurvey/resources/js/d3.layout.cloud.min.js?version=bc66c209c78fdbc5b00c1813c8afebcc472dd037
147.67.34.30
https://ec.europa.eu/wel/surveys/wr_survey03/data/invitation_settings/ec_online_survey/01/css/main.c
unknown
https://research-and-innovation.ec.europa.eu/sites/default/files/js/js_RWBtasGopgFyGnmziENJDkbSZPjK_TItmuwwoeQd_J4.js?scope=footer&delta=2&language=en&theme=ewcms_theme&include=eJxtkOEOwjAIhF9oukdqWIcbCYUG6LRv76LTxcR_cN_lwqGY7jiFKvs4W6vA189-8QIWrDCjDYopViw4Zi1VBSUS02RgPWEevHtgGSdwPJ34CDQBTr4tp1qNJAa85-KHciPkOX3dlFV--HuGnfWg7H9Y9KqLQV37AUvjICZZGvDhKZBXkv0KA3GGIJUkupfY8DcxJ2-2YR8qGLxSv585lWuT2iYmX3F-AnBwgQs
18.66.147.80
https://ec.europa.eu/eusurvey/home/privacystatement?language=cs
unknown
https://commission.europa.eu/jobs-european-commission_en
unknown
https://research-and-innovation.ec.europa.eu/sites/default/files/css/css_9y6PmwOn7R7WKxODZ8L6H18ywjSGrRjWVdJp0cbnfsg.css?delta=3&language=en&theme=ewcms_theme&include=eJxtkFuOwzAIRTfkaZZkEYcmSBgswGm9-0YzaaNK84EE91zxUswPnEOVfVqsN-Dbu_7xChassKAlxRwbVpyK1qaCEplpNrCRsSQfHlinGRwvJz4DTYCz7-ulNiOJhI9S_VTuhLzkj5uKyhf_y-FgI6j4PyxG09WgbeOEtXMQk6wd-PRUKBvJsYWBOEOQShY9jtjxu2PJ3m3HkbxBPUImne_dCwSmBga_gz7PupRbl9ZnJt9weQFMkoiF
18.66.147.80
https://webtools.europa.eu/rest/requests/files?type=xml&urlToRequest=https%3A%2F%2Fwebtools.europa.eu%2Fimages%2Fwebtools.icons-ec.svg%3Ft%3D1727343033&ref=aHR0cHM6Ly9jb21taXNzaW9uLmV1cm9wYS5ldQ==
13.35.58.72
https://research-and-innovation.ec.europa.eu/sites/default/files/styles/oe_theme_ratio_3_2_medium/public/2023-11/ec_rtd_cloud-webinar-23-event.jpg?itok=bQuml9sm
18.66.147.18
https://research-and-innovation.ec.europa.eu/sites/default/files/css/css_F98ZHWgzkTm-nBsmblGwgHoGYT2oTIgUbCMaUHb56bE.css?delta=0&language=en&theme=ewcms_theme&include=eJxtkFuOwzAIRTfkaZZkEYcmSBgswGm9-0YzaaNK84EE91zxUswPnEOVfVqsN-Dbu_7xChassKAlxRwbVpyK1qaCEplpNrCRsSQfHlinGRwvJz4DTYCz7-ulNiOJhI9S_VTuhLzkj5uKyhf_y-FgI6j4PyxG09WgbeOEtXMQk6wd-PRUKBvJsYWBOEOQShY9jtjxu2PJ3m3HkbxBPUImne_dCwSmBga_gz7PupRbl9ZnJt9weQFMkoiF
18.66.147.80
https://research-and-innovation.ec.europa.eu/sites/default/files/css/css_9y6PmwOn7R7WKxODZ8L6H18ywjSGrRjWVdJp0cbnfsg.css?delta=3&language=en&theme=ewcms_theme&include=eJxtUNGOwzAI-6Fc-0kRTVmLlEAEpFv-ftmut2rSPSCBbSHbgvGOi4tkm1dtFfL0d_9YAfUssKIGweg7FpyTlCqM7DHToqA9YgrWzbHMCxheSnw4KkOOdmwXWpXYA95TsRO5EeY1ftSUhL_43x0G152S_cN5r7Ip1L2fZGnZKRNvDfKpKZB24uFCgS2Dk3BkGSEO_P6YojU9sIcKCu-vn2YuZGpc25LJdlyDVShjeJbl1iyBY2gUK_grkY3G2Ee6yHBM5z5svU7a3j6eiEqbOw
18.66.147.80
https://commission.europa.eu/legal-notice/vulnerability-disclosure-policy_en
unknown
https://commission.europa.eu/sites/default/files/styles/oe_theme_full_width_banner_4_1/public/2024-07/President_carousel.png.webp?h=2ed0bb2e&itok=NBmvl_oj
143.204.215.38
https://ec.europa.eu/eusurvey/resources/images/favicon5.ico
147.67.34.30
https://ec.europa.eu/wel/surveys/wr_survey03/data/invitation_settings/eacea/invitation_settings.js
unknown
https://ec.europa.eu/eusurvey/home/privacystatement?language=fi
unknown
https://commission.europa.eu/sites/default/files/styles/oe_theme_ratio_3_2_medium/avportal/P-061606/00-43.jpg?itok=IUTwDMJH
143.204.215.38
https://ec.europa.eu/wel/surveys/wr_survey03/data/invitation_settings/audience_survey/nextgeneration
unknown
https://ec.europa.eu/search/
unknown
https://research-and-innovation.ec.europa.eu/sites/default/files/styles/oe_theme_small_no_crop/public/2024-04/ec_rtd_cordis-results-cultural-tourism.jpg?itok=DOY61joZ
18.66.147.18
https://research-and-innovation.ec.europa.eu/sites/default/files/styles/oe_theme_ratio_3_2_medium/public/2024-09/amazon-week-2024.jpg?h=252f27fa&itok=gYVzT5x8
18.66.147.80
https://ec.europa.eu/eusurvey/resources/css/jquery-ui.structure.min.css?version=bc66c209c78fdbc5b00c1813c8afebcc472dd037
147.67.34.30
https://raw.githubusercontent.com/jquery/jquery/3.7.1/LICENSE.txt
unknown
https://ec.europa.eu/eusurvey/resources/js/d3.v3.min.js?version=bc66c209c78fdbc5b00c1813c8afebcc472dd037
147.67.34.30
https://ec.europa.eu/eusurvey/home/privacystatement?language=fr
unknown
https://ec.europa.eu/wel/surveys/wr_survey03/data/invitation_settings/audience_survey/european_commi
unknown
https://webtools.europa.eu/css/webtools.etrans.css?t=1727343033
13.35.58.4
https://commission.europa.eu/sites/default/files/styles/oe_theme_small_4_1_banner/public/2024-05/Dis
unknown
https://ec.europa.eu/eusurvey/home/privacystatement?language=el
unknown
https://ec.europa.eu/eusurvey/resources/images/nav_plain_grey.png
147.67.34.30
https://wayback.archive-it.org/12090/20210309142203/https://ec.europa.eu/programmes/horizon2020/en/a
unknown
https://ec.europa.eu/eusurvey/resources/images/check.png
147.67.34.30
https://ec.europa.eu/wel/surveys/wr_survey03/data/invitation_settings/ec_online_survey/01/invitation
unknown
https://commission.europa.eu/sites/default/files/styles/oe_theme_large_4_1_banner/public/2024-09/Str
unknown
https://easnconference.eu/
unknown
https://ec.europa.eu/wel/surveys/wr_survey03/data/invitation_settings/health/invitation_settings.js
unknown
https://research-and-innovation.ec.europa.eu/index_sv
unknown
https://commission.europa.eu/sites/default/files/styles/oe_theme_medium_no_crop/public/2024-04/image%20%289%29.jpg?itok=29bOEFs2
143.204.215.38
https://ec.europa.eu/eusurvey/runner/ec_online_survey?surveylanguage=it
unknown
https://commission.europa.eu/food-farming-fisheries_en
unknown
https://ec.europa.eu/eusurvey/home/privacystatement?language=et
unknown
https://ec.europa.eu/eusurvey/home/privacystatement?language=es
unknown
https://ec.europa.eu/eusurvey/home/privacystatement?language=en
unknown
https://commission.europa.eu/law_en
unknown
https://research-and-innovation.ec.europa.eu/sites/default/files/css/css_czxwRUuU1CZLBZLWste81hzvJkgwK1zfppKmXDp2AhM.css?delta=1&language=en&theme=ewcms_theme&include=eJxtUdGOhDAI_CFv_aQGK1tJKDRA3fPvz5zuGpN9IIGZCZkBxfTCKVTZx9l6A3685x-vYMEKM9qgmGLBimPW2lRQIjFNBrYlzINvHljHCRwvJf4GmgAnX8uFNiOJAV-5-ok8CXlOHzVllRt_9LBzW1D2L1xsTYtBW7aTrJ2DmKR04FNTIS8kuwsDcYYglSS6h1jxvjEn77biNjQw-N_6ucyFPLq0PjH5gvPgDepeMur07J4h8IIgnMo9D0mDgklgpXL4MKy6Ah-qd6b9BUHtDwtAphA
18.66.147.18
https://research-and-innovation.ec.europa.eu/index_sl
unknown
https://research-and-innovation.ec.europa.eu/index_sk
unknown
https://youtu.be/UlLi-y3rFcw
unknown
https://ec.europa.eu/wel/surveys/wr_survey03/data/invitation_settings/economy-finance/01/invitation_
unknown
https://commission.europa.eu/themes/contrib/oe_theme/dist/ec/images/logo/negative/logo-ec--en.svg
143.204.215.38
https://commission.europa.eu/sites/default/files/styles/oe_theme_medium_4_1_banner/public/2024-04/St
unknown
https://research-and-innovation.ec.europa.eu/index_ro
unknown
https://ec.europa.eu/eusurvey/resources/js/jquery.ui.touch-punch.min.js?version=bc66c209c78fdbc5b00c1813c8afebcc472dd037
147.67.34.30
https://research-and-innovation.ec.europa.eu/profiles/contrib/ewcms/modules/ewcms_seo/assets/images/
unknown
https://ec.europa.eu/eusurvey/home/privacystatement?language=hu
unknown
https://ec.europa.eu/eusurvey/runner/ec_online_survey?surveylanguage=lv
unknown
https://ec.europa.eu/eusurvey/resources/images/logo_Eusurvey-small-white.png
147.67.34.30
https://ec.europa.eu/eusurvey/runner/ec_online_survey?surveylanguage=lt
unknown
https://webtools.europa.eu/rest/requests/files?type=xml&urlToRequest=https%3A%2F%2Fwebtools.europa.eu%2Fimages%2Fwebtools.icons-ec.svg%3Ft%3D1727343033&ref=aHR0cHM6Ly9yZXNlYXJjaC1hbmQtaW5ub3ZhdGlvbi5lYy5ldXJvcGEuZXU=
13.35.58.4
https://ec.europa.eu/eusurvey/home/privacystatement?language=hr
unknown
There are 90 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
webanalytics-291277692.eu-central-1.elb.amazonaws.com
35.156.118.94
europa.eu
147.67.34.45
d24zxs9lh8zf8d.cloudfront.net
18.66.147.18
d2xqr2nqz3178h.cloudfront.net
13.35.58.4
www.google.com
142.250.185.132
ec.europa.eu
147.67.210.30
d3pfwaxxfgo1jb.cloudfront.net
143.204.215.38
webanalytics.europa.eu
unknown
commission.europa.eu
unknown
webtools.europa.eu
unknown
research-and-innovation.ec.europa.eu
unknown
There are 1 hidden domains, click here to show them.

IPs

IP
Domain
Country
Malicious
143.204.215.38
d3pfwaxxfgo1jb.cloudfront.net
United States
18.66.147.80
unknown
United States
192.168.2.4
unknown
unknown
18.66.147.18
d24zxs9lh8zf8d.cloudfront.net
United States
13.35.58.21
unknown
United States
147.67.34.45
europa.eu
Luxembourg
18.66.147.71
unknown
United States
35.156.118.94
webanalytics-291277692.eu-central-1.elb.amazonaws.com
United States
147.67.210.30
ec.europa.eu
Luxembourg
3.123.174.215
unknown
United States
142.250.185.132
www.google.com
United States
147.67.34.30
unknown
Luxembourg
239.255.255.250
unknown
Reserved
143.204.215.80
unknown
United States
13.35.58.72
unknown
United States
13.35.58.4
d2xqr2nqz3178h.cloudfront.net
United States
There are 6 hidden IPs, click here to show them.

Registry

Path
Value
Malicious
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\ClientTelemetry\Sampling
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7540
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Resiliency\StartupItems
jl
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Wizards
PageSize
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\MailSettings
Template
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Options
AutoRecoverySaveIntervalMetadata
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Experiment\word
Language
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Experiment\word
EcsRequestPending
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Experiment\word
SubscriptionCustomerLicenseInfo
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Options
ACUpdated
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Options
DefaultKerningLigatures
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\WEF
Word_RequireForceRefreshAtBoot
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Experiment\word
BuildNumber
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word
Expires
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
1
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
1.1
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
1.2
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
1.3
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
1.4
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
1.5
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
1.6
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
1.7
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
1.8
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
1.9
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
1.10
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
1.11
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
1.12
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
1.13
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
1.14
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
1.15
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
1.16
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
1.17
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
1.18
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
1.19
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
1.20
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
1.21
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
1.22
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
1.23
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
1.24
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
1.25
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
1.26
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
1.27
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
1.28
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
1.29
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
1.30
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
VersionId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word
ETag
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word
DeferredConfigs
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word
ConfigIds
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Resiliency\StartupItems
}{
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\Word\Text Converters\Import
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\Word\Text Converters\Import
Name
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\Word\Text Converters\Import
Path
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\Word\Text Converters\Import
Extensions
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109E60090400000000000F01FEC\Usage
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109E60090400000000000F01FEC\Usage
TCWP5FilesIntl_1033
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Security\FileBlock
FileTypeBlockList
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Security\FileBlock
OoxmlConverterBlockList
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109E60090400000000000F01FEC\Usage
TCWP6FilesIntl_1033
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Resiliency
PotentialDataLossInfo2
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ReviewCycle
ReviewToken
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Resiliency\DocumentRecovery\2E6BD
2E6BD
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F00000000000000000F01FEC\Usage
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F00000000000000000F01FEC\Usage
VBAFiles
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\ExdCache\Word8.0
MSForms
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\ExdCache\Word8.0
MSComctlLib
HKEY_CURRENT_USER\SOFTWARE\Microsoft\VBA\Forms3\Controls
EnableActiveXControlArchitetureIndependent
HKEY_CURRENT_USER\SOFTWARE\Microsoft\VBA\Forms3\Controls
EnableActiveXControlMSWebBrowserArchiteturePersistenceIssue
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Licensing\BootTimeSkuOverride
{30CAC893-3CA4-494C-A5E9-A99141352216}
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Licensing\CachedLicenseData
winword.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F10090400000000000F01FEC\Usage
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F10090400000000000F01FEC\Usage
SpellingAndGrammarFiles_1033
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F100C0400000000000F01FEC\Usage
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F100C0400000000000F01FEC\Usage
SpellingAndGrammarFiles_1036
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F100A0C00000000000F01FEC\Usage
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F100A0C00000000000F01FEC\Usage
SpellingAndGrammarFiles_3082
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word
WordName
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Roaming\Identities\Anonymous\Settings\1342\{00000000-0000-0000-0000-000000000000}
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Roaming\Identities\Anonymous\Settings\1342\{00000000-0000-0000-0000-000000000000}\PendingChanges
Data
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Draw
InkToolboxPensWordV2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\IdentityCRL\ClockData
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\IdentityCRL\ClockData
ClockTimeSeconds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\IdentityCRL\ClockData
TickCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocBibs\1033
TM02851216
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328884
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM03090430
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM03457444
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM04033917
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328893
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328905
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocBibs\1033
TM02851217
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328908
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM04033919
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328916
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM04033921
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM03457464
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM04033925
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocParts\1033
TM03998158
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocParts\1033
TM01840907
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM03457475
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM10001114
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocBibs\1033
TM02851218
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocBibs\1033
TM02851219
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocBibs\1033
TM02851220
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocBibs\1033
TM02851221
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328919
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocBibs\1033
TM02851222
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocParts\1033
TM03998159
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328925
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocBibs\1033
TM02851223
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocBibs\1033
TM02851224
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM04033927
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM03457485
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM03457491
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocBibs\1033
TM02851225
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM03457496
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM10001115
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328932
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328935
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM03457503
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328940
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328998
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM03457510
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocBibs\1033
TM02851227
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM04033929
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328972
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328951
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocParts\1033
TM02835233
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328975
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328983
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328986
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocBibs\1033
TM02851226
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM04033937
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328990
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM03457515
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM03090434
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Roaming
RoamingLastWriteTimeWord
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocBibs\1033
NextUpdate
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocBibs\1033
LastUpdate
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
NextUpdate
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
LastUpdate
HKEY_CURRENT_USER\SOFTWARE\Microsoft\IdentityCRL\Immersive\production\Property
0018801093D79FF7
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\ClientTelemetry\Volatile
MsaDevice
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocParts\1033
NextUpdate
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocParts\1033
LastUpdate
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
NextUpdate
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
LastUpdate
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Shared Tools\Panose
Courier New
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Shared Tools\Panose
Symbol
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Shared Tools\Panose
Times New Roman
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Shared Tools\Panose
Wingdings
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Shared Tools\Panose
Calibri
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Shared Tools\Panose
Calibri Light
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Shared Tools\Panose
Georgia
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Reading Locations\Document 0
File Path
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Reading Locations\Document 0
Datetime
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Reading Locations\Document 0
Position
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Roaming
RoamingLastSyncTimeWord
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Security\Trusted Documents
LastPurgeTime
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Data
Toolbars
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Toolbars\Settings
Microsoft Word
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Data
Settings
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Options
VisiForceField
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Options
IgnoreFilenamesEmailAliases
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Options
AutoSpell
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Options
NoContextSpell
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Options
InsPic
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Options
NavPaneAdvertised
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Options
SoundFeedback
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Options
BkgrndPag
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Options
ATUserAdded
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Options
AccentOnUpper
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Options
AppWindowPos
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Options
AppWindowPosKey
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Signals\Stats\Anonymous\Microsoft.Word.Document
ClicksData
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\GracefulExit\WINWORD\7540
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
en-CH
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
en-GB
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
en-CH
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
en-GB
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Internet
msoridShouldUseReauthRequestProxy
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common
SessionId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7540
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7540
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7540
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7540
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7540
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--syslcid=8192&build=16.0.16827&crev=3\0
FilePath
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--syslcid=8192&build=16.0.16827&crev=3\0
StartDate
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--syslcid=8192&build=16.0.16827&crev=3\0
EndDate
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Internet\WebServiceCache
LastClean
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs
LicenseCategoryInfo
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs
LicenseSKUInfo
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word
Expires
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7540
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7540
0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\Word\Text Converters\Import
Name
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\Word\Text Converters\Import
Path
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\Word\Text Converters\Import
Extensions
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\Word\Text Converters\Import
Name
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\Word\Text Converters\Import
Path
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\Word\Text Converters\Import
Extensions
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109E60090400000000000F01FEC\Usage
TCWP5FilesIntl_1033
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109E60090400000000000F01FEC\Usage
TCWP6FilesIntl_1033
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7540
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7540
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Resiliency
PotentialDataLossInfo2
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7540
0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F00000000000000000F01FEC\Usage
VBAFiles
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7540
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7540
0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F10090400000000000F01FEC\Usage
SpellingAndGrammarFiles_1033
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F10090400000000000F01FEC\Usage
SpellingAndGrammarFiles_1033
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F100C0400000000000F01FEC\Usage
SpellingAndGrammarFiles_1036
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F100C0400000000000F01FEC\Usage
SpellingAndGrammarFiles_1036
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F100A0C00000000000F01FEC\Usage
SpellingAndGrammarFiles_3082
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F100A0C00000000000F01FEC\Usage
SpellingAndGrammarFiles_3082
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Roaming\Identities\Anonymous\Settings\1342\{00000000-0000-0000-0000-000000000000}\PendingChanges
Data
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F10090400000000000F01FEC\Usage
SpellingAndGrammarFiles_1033
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F10090400000000000F01FEC\Usage
SpellingAndGrammarFiles_1033
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F10090400000000000F01FEC\Usage
SpellingAndGrammarFiles_1033
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F10090400000000000F01FEC\Usage
SpellingAndGrammarFiles_1033
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Roaming
RoamingConfigurableSettings
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Roaming
RoamingConfigurableSettings
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocParts\1033
TM02835233
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocBibs\1033
TM02851219
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328884
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocBibs\1033
TM02851225
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328951
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocBibs\1033
TM02851226
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocParts\1033
TM01840907
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM03457491
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM03457464
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocBibs\1033
TM02851223
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328972
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328925
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocBibs\1033
TM02851221
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocParts\1033
TM03998158
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM03090430
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328893
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328916
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocBibs\1033
TM02851217
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328908
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocBibs\1033
TM02851220
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocBibs\1033
TM02851222
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocBibs\1033
TM02851224
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328932
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocBibs\1033
TM02851227
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328919
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328905
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328998
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328935
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328983
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328986
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocBibs\1033
TM02851218
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocBibs\1033
TM02851216
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328975
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM03457496
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328990
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM03457475
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM03457515
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328940
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM03090434
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM10001115
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM04033917
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM03457503
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM03457510
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM10001114
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM04033919
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM04033925
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM04033921
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM04033929
HKEY_CURRENT_USER\SOFTWARE\Microsoft\IdentityCRL\Immersive\production\Token\{2B379600-B42B-4FE9-A59C-A312FB934935}
DeviceTicket
HKEY_CURRENT_USER\SOFTWARE\Microsoft\IdentityCRL\Immersive\production\Token\{2B379600-B42B-4FE9-A59C-A312FB934935}
DeviceId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM03457485
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM04033927
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocParts\1033
TM03998159
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM04033937
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7540
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Resiliency
PotentialDataLossInfo2
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7540
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Resiliency\DocumentRecovery\2E6BD
2E6BD
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Resiliency\DocumentRecovery\2E6BD
2E6BD
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Roaming
RoamingLastWriteTimeWord
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7540
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Resiliency
PotentialDataLossInfo2
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Reading Locations\Document 0
Position
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7540
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7540
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7540
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7540
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7540
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7540
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7540
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7540
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7540
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7540
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7540
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7540
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7540
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7540
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7540
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7540
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7540
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7540
0
There are 318 hidden registries, click here to show them.

DOM / HTML

URL
Malicious
https://research-and-innovation.ec.europa.eu/research-area/social-sciences-and-humanities/cultural-heritage-and-cultural-and-creative-industries-ccis/cultural-heritage-cloud_en
https://research-and-innovation.ec.europa.eu/research-area/social-sciences-and-humanities/cultural-heritage-and-cultural-and-creative-industries-ccis/cultural-heritage-cloud_en
https://research-and-innovation.ec.europa.eu/research-area/social-sciences-and-humanities/cultural-heritage-and-cultural-and-creative-industries-ccis/cultural-heritage-cloud_en
https://research-and-innovation.ec.europa.eu/research-area/social-sciences-and-humanities/cultural-heritage-and-cultural-and-creative-industries-ccis/cultural-heritage-cloud_en
https://research-and-innovation.ec.europa.eu/research-area/social-sciences-and-humanities/cultural-heritage-and-cultural-and-creative-industries-ccis_en
https://research-and-innovation.ec.europa.eu/research-area/social-sciences-and-humanities/cultural-heritage-and-cultural-and-creative-industries-ccis_en
https://research-and-innovation.ec.europa.eu/research-area/social-sciences-and-humanities_en
https://research-and-innovation.ec.europa.eu/research-area_en
https://research-and-innovation.ec.europa.eu/funding/funding-opportunities/funding-programmes-and-open-calls/horizon-europe_en
https://commission.europa.eu/index_en
https://commission.europa.eu/index_en
https://commission.europa.eu/index_en
https://research-and-innovation.ec.europa.eu/index_en
https://research-and-innovation.ec.europa.eu/index_en
https://ec.europa.eu/eusurvey/runner/CloudCommunity
https://ec.europa.eu/eusurvey/runner/CloudCommunity
https://research-and-innovation.ec.europa.eu/research-area/social-sciences-and-humanities/cultural-heritage-and-cultural-and-creative-industries-ccis/cultural-heritage-cloud_en#main-content
There are 7 hidden doms, click here to show them.