IOC Report
-11-2021.doc

loading gif

Files

File Path
Type
Category
Malicious
-11-2021.doc
Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, Code page: 1251, Title: , Author: main, Template: Normal.dotm, Last Saved By: Windows, Revision Number: 121, Name of Creating Application: Microsoft Office Word, Total Editing Time: 2d+04:22:00, Last Printed: Thu Jun 1 10:53:00 2017, Create Time/Date: Mon Jun 28 20:02:00 2021, Last Saved Time/Date: Thu May 23 11:17:00 2024, Number of Pages: 123, Number of Words: 40334, Number of Characters: 229904, Security: 0
initial sample
C:\Program Files (x86)\Microsoft Office\root\vfs\Common AppData\Microsoft\OFFICE\Heartbeat\HeartbeatCache.xml
XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\FontCache\4\Catalog\ListAll.Json
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\FontCache\4\PreviewFont\flat_officeFontsPreview_4_40.ttf
TrueType Font data, 10 tables, 1st "OS/2", 7 names, Microsoft, language 0x409, \251 2018 Microsoft Corporation. All Rights Reserved.msofp_4_40RegularVersion 4.40;O365
dropped
C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\089d66ba04a8cec4bdc5267f42f39cf84278bb67.tbres
data
dropped
C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\5475cb191e478c39370a215b2da98a37e9dc813d.tbres
data
dropped
C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\56a61aeb75d8f5be186c26607f4bb213abe7c5ec.tbres
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRF{74AAA1F5-4011-455A-97B9-28E2B941147E}.tmp
Composite Document File V2 Document, Cannot read section info
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{09637513-8D0F-433C-B751-C74A04E31A44}.tmp
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{0C84ACB8-83A7-4D03-A0EE-0B9962C3BCE2}.tmp
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{200E1F38-5713-4579-8BDD-9E90D488ECF2}.tmp
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{25485C4C-346E-420D-85B2-28D2CA88FDFD}.tmp
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{294FFA66-2A97-42E9-8C51-15B8B8A2402D}.tmp
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{36A2EE8F-E8EF-4EAB-84B7-C2798B2A1E73}.tmp
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{3D2CBE10-63E1-4191-B701-4DAF0395C238}.tmp
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{3DBD9A2D-1B0C-42D8-80A1-57BB267F7E0D}.tmp
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{43F5800B-13D0-4759-88B5-4C83E97A7970}.tmp
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{48873AAD-67BB-4994-856B-FACEB79C4941}.tmp
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{4A845DA9-4D52-4B05-B6B6-341DC7C3671D}.tmp
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{623C1887-5822-405D-BB81-50851F07ADF2}.tmp
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{741D7112-BF33-47CE-80F2-5086802B8D1D}.tmp
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{7BEAF1E9-821E-4F16-AF3F-E04A192834FA}.tmp
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{82180269-D958-4155-A211-577F93BDF4D4}.tmp
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{8C62E535-4836-4A20-BB12-B48B76B19FF0}.tmp
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{8D2D65B1-2086-4791-831E-B432E17AE183}.tmp
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{9561E733-BEA9-4F9E-B29B-B6B7DFEB241A}.tmp
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{9A596019-07CB-4831-B0B2-FB57B56605A4}.tmp
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{9C749795-B4EF-49CE-A495-B4C9A81C9B20}.tmp
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{AEA8B45D-0E06-4C2E-819E-B0F965735426}.tmp
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{B2330C22-E515-4A38-9F42-F5726BAA7C90}.tmp
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{C1466FED-7D03-4276-BB01-657A9EC66158}.tmp
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{D6CD44DD-39C7-47F4-B146-4661D0E05B04}.tmp
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{DF35C8CC-1705-4393-A333-30B7C7154A73}.tmp
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{E167DBA1-7448-4B1C-ABBE-6A07AD8A1EC1}.tmp
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{E517ED3D-77F7-4EE6-AB58-8A7C80F5D6A3}.tmp
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{E723E49A-F6FF-4DA2-95DA-BD6B28A03BAA}.tmp
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{F715005A-B6B6-4E5E-94C7-0521E7D39859}.tmp
data
dropped
C:\Users\user\AppData\Local\Temp\Diagnostics\WINWORD\App1728132614098391400_CA661763-6CC7-4802-923D-23258490E412.log
ASCII text, with very long lines (12445), with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\TCD7503.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD7503.tmp\gostname.xsl
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\TCD7504.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD7504.tmp\ConvergingText.glox
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
C:\Users\user\AppData\Local\Temp\TCD7505.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD7505.tmp\ieee2006officeonline.xsl
XML 1.0 document, Unicode text, UTF-8 text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\TCD7507.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD7507.tmp\gosttitle.xsl
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\TCD7508.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD7508.tmp\Equations.dotx
Microsoft Word 2007+
dropped
C:\Users\user\AppData\Local\Temp\TCD7519.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD7519.tmp\architecture.glox
Microsoft OOXML
dropped
C:\Users\user\AppData\Local\Temp\TCD751A.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD751A.tmp\harvardanglia2008officeonline.xsl
XML 1.0 document, Unicode text, UTF-8 text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\TCD752B.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD752B.tmp\chevronaccent.glox
Microsoft OOXML
dropped
C:\Users\user\AppData\Local\Temp\TCD753B.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD753B.tmp\turabian.xsl
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\TCD753C.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD753C.tmp\gb.xsl
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\TCD754D.tmp\BracketList.glox
Microsoft OOXML
dropped
C:\Users\user\AppData\Local\Temp\TCD754D.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD754E.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD754E.tmp\iso690.xsl
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\TCD755F.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD755F.tmp\Text Sidebar (Annual Report Red and Black design).docx
Microsoft Word 2007+
dropped
C:\Users\user\AppData\Local\Temp\TCD756F.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD756F.tmp\iso690nmerical.xsl
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\TCD7570.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD7570.tmp\chicago.xsl
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\TCD7581.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD7581.tmp\mlaseventheditionofficeonline.xsl
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\TCD75A2.tmp\APASixthEditionOfficeOnline.xsl
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\TCD75A2.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD75D2.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD75D2.tmp\sist02.xsl
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\TCD7602.tmp\CircleProcess.glox
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
C:\Users\user\AppData\Local\Temp\TCD7602.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD7656.tmp\Banded.thmx
Microsoft OOXML
dropped
C:\Users\user\AppData\Local\Temp\TCD7656.tmp\content.inf
Unicode text, UTF-16, little-endian text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\TCD7667.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD7667.tmp\pictureorgchart.glox
Microsoft OOXML
dropped
C:\Users\user\AppData\Local\Temp\TCD7668.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD7668.tmp\PictureFrame.glox
Microsoft OOXML
dropped
C:\Users\user\AppData\Local\Temp\TCD7678.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD7678.tmp\HexagonRadial.glox
Microsoft OOXML
dropped
C:\Users\user\AppData\Local\Temp\TCD7679.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD7679.tmp\InterconnectedBlockProcess.glox
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
C:\Users\user\AppData\Local\Temp\TCD775A.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD775A.tmp\TabList.glox
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
C:\Users\user\AppData\Local\Temp\TCD775B.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD775B.tmp\ThemePictureAccent.glox
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
C:\Users\user\AppData\Local\Temp\TCD776D.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD776D.tmp\ThemePictureAlternatingAccent.glox
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
C:\Users\user\AppData\Local\Temp\TCD776F.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD776F.tmp\RadialPictureList.glox
Microsoft OOXML
dropped
C:\Users\user\AppData\Local\Temp\TCD777F.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD777F.tmp\VaryingWidthList.glox
Microsoft OOXML
dropped
C:\Users\user\AppData\Local\Temp\TCD7790.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD7790.tmp\ThemePictureGrid.glox
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
C:\Users\user\AppData\Local\Temp\TCD7791.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD7791.tmp\TabbedArc.glox
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
C:\Users\user\AppData\Local\Temp\TCD77C4.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD77C4.tmp\rings.glox
Microsoft OOXML
dropped
C:\Users\user\AppData\Local\Temp\TCD77D4.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD77D4.tmp\Element design set.dotx
Microsoft Word 2007+
dropped
C:\Users\user\AppData\Local\Temp\TCD77F5.tmp\Wood_Type.thmx
Microsoft OOXML
dropped
C:\Users\user\AppData\Local\Temp\TCD77F5.tmp\content.inf
Unicode text, UTF-16, little-endian text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\TCD7875.tmp\View.thmx
Microsoft OOXML
dropped
C:\Users\user\AppData\Local\Temp\TCD7875.tmp\content.inf
Unicode text, UTF-16, little-endian text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\TCD78D6.tmp\Dividend.thmx
Microsoft OOXML
dropped
C:\Users\user\AppData\Local\Temp\TCD78D6.tmp\content.inf
Unicode text, UTF-16, little-endian text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\TCD78E7.tmp\Frame.thmx
Microsoft OOXML
dropped
C:\Users\user\AppData\Local\Temp\TCD78E7.tmp\content.inf
Unicode text, UTF-16, little-endian text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\TCD7926.tmp\Metropolitan.thmx
Microsoft OOXML
dropped
C:\Users\user\AppData\Local\Temp\TCD7926.tmp\content.inf
Unicode text, UTF-16, little-endian text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\TCD7967.tmp\Basis.thmx
Microsoft OOXML
dropped
C:\Users\user\AppData\Local\Temp\TCD7967.tmp\content.inf
Unicode text, UTF-16, little-endian text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\TCD7968.tmp\Parallax.thmx
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
C:\Users\user\AppData\Local\Temp\TCD7968.tmp\content.inf
Unicode text, UTF-16, little-endian text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\TCD79A9.tmp\Parcel.thmx
Microsoft OOXML
dropped
C:\Users\user\AppData\Local\Temp\TCD79A9.tmp\content.inf
Unicode text, UTF-16, little-endian text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\TCD79CA.tmp\Quotable.thmx
Microsoft OOXML
dropped
C:\Users\user\AppData\Local\Temp\TCD79CA.tmp\content.inf
Unicode text, UTF-16, little-endian text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\TCD7A29.tmp\Berlin.thmx
Microsoft OOXML
dropped
C:\Users\user\AppData\Local\Temp\TCD7A29.tmp\content.inf
Unicode text, UTF-16, little-endian text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\TCD7B17.tmp\Savon.thmx
Microsoft OOXML
dropped
C:\Users\user\AppData\Local\Temp\TCD7B17.tmp\content.inf
Unicode text, UTF-16, little-endian text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\TCD7B47.tmp\Gallery.thmx
Microsoft OOXML
dropped
C:\Users\user\AppData\Local\Temp\TCD7B47.tmp\content.inf
Unicode text, UTF-16, little-endian text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\TCD7BC7.tmp\Circuit.thmx
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
C:\Users\user\AppData\Local\Temp\TCD7BC7.tmp\content.inf
Unicode text, UTF-16, little-endian text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\TCD7C06.tmp\Droplet.thmx
Microsoft OOXML
dropped
C:\Users\user\AppData\Local\Temp\TCD7C06.tmp\content.inf
Unicode text, UTF-16, little-endian text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\TCD7D31.tmp\Slate.thmx
Microsoft OOXML
dropped
C:\Users\user\AppData\Local\Temp\TCD7D31.tmp\content.inf
Unicode text, UTF-16, little-endian text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\TCD7DEF.tmp\Damask.thmx
Microsoft OOXML
dropped
C:\Users\user\AppData\Local\Temp\TCD7DEF.tmp\content.inf
Unicode text, UTF-16, little-endian text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\TCD7F69.tmp\Mesh.thmx
Microsoft OOXML
dropped
C:\Users\user\AppData\Local\Temp\TCD7F69.tmp\content.inf
Unicode text, UTF-16, little-endian text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\TCD7F98.tmp\Main_Event.thmx
Microsoft OOXML
dropped
C:\Users\user\AppData\Local\Temp\TCD7F98.tmp\content.inf
Unicode text, UTF-16, little-endian text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\TCD816F.tmp\Content.inf
data
dropped
C:\Users\user\AppData\Local\Temp\TCD816F.tmp\Insight design set.dotx
Microsoft Word 2007+
dropped
C:\Users\user\AppData\Local\Temp\TCD81EE.tmp\Vapor_Trail.thmx
Microsoft OOXML
dropped
C:\Users\user\AppData\Local\Temp\TCD81EE.tmp\content.inf
Unicode text, UTF-16, little-endian text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\Word8.0\MSForms.exd
data
dropped
C:\Users\user\AppData\Local\Temp\cab7495.tmp
Microsoft Cabinet archive data, many, 17466 bytes, 2 files, at 0x4c "chicago.xsl", iFolder 0x1 "Content.inf", 2 cffolders, flags 0x4, number 1, extra bytes 20 in head, 10 datablocks, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab74A5.tmp
Microsoft Cabinet archive data, many, 27509 bytes, 2 files, at 0x4c "Equations.dotx", iFolder 0x1 "Content.inf", 2 cffolders, flags 0x4, number 1, extra bytes 20 in head, 2 datablocks, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab74A6.tmp
Microsoft Cabinet archive data, many, 14864 bytes, 2 files, at 0x4c "mlaseventheditionofficeonline.xsl", iFolder 0x1 "Content.inf", 2 cffolders, flags 0x4, number 1, extra bytes 20 in head, 8 datablocks, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab74A7.tmp
Microsoft Cabinet archive data, many, 16689 bytes, 2 files, at 0x4c "iso690.xsl", iFolder 0x1 "Content.inf", 2 cffolders, flags 0x4, number 1, extra bytes 20 in head, 9 datablocks, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab74B8.tmp
Microsoft Cabinet archive data, many, 15418 bytes, 2 files, at 0x4c "harvardanglia2008officeonline.xsl", iFolder 0x1 "Content.inf", 2 cffolders, flags 0x4, number 1, extra bytes 20 in head, 9 datablocks, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab74B9.tmp
Microsoft Cabinet archive data, many, 4091 bytes, 2 files, at 0x44 "BracketList.glox" "Content.inf", flags 0x4, number 1, extra bytes 20 in head, 1 datablock, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab74BA.tmp
Microsoft Cabinet archive data, many, 12767 bytes, 2 files, at 0x4c "ieee2006officeonline.xsl", iFolder 0x1 "Content.inf", 2 cffolders, flags 0x4, number 1, extra bytes 20 in head, 9 datablocks, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab74BB.tmp
Microsoft Cabinet archive data, many, 30269 bytes, 2 files, at 0x4c "Text Sidebar (Annual Report Red and Black design).docx", iFolder 0x1 "Content.inf", 2 cffolders, flags 0x4, number 1, extra bytes 20 in head, 2 datablocks, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab74BC.tmp
Microsoft Cabinet archive data, many, 15461 bytes, 2 files, at 0x4c "gostname.xsl", iFolder 0x1 "Content.inf", 2 cffolders, flags 0x4, number 1, extra bytes 20 in head, 8 datablocks, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab74BD.tmp
Microsoft Cabinet archive data, many, 5864 bytes, 2 files, at 0x44 "architecture.glox" "Content.inf", flags 0x4, number 1, extra bytes 20 in head, 1 datablock, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab74BE.tmp
Microsoft Cabinet archive data, many, 15691 bytes, 2 files, at 0x4c "gb.xsl", iFolder 0x1 "Content.inf", 2 cffolders, flags 0x4, number 1, extra bytes 20 in head, 9 datablocks, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab74BF.tmp
Microsoft Cabinet archive data, many, 15338 bytes, 2 files, at 0x4c "gosttitle.xsl", iFolder 0x1 "Content.inf", 2 cffolders, flags 0x4, number 1, extra bytes 20 in head, 8 datablocks, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab74C0.tmp
Microsoft Cabinet archive data, many, 14813 bytes, 2 files, at 0x4c "iso690nmerical.xsl", iFolder 0x1 "Content.inf", 2 cffolders, flags 0x4, number 1, extra bytes 20 in head, 7 datablocks, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab74D1.tmp
Microsoft Cabinet archive data, many, 15327 bytes, 2 files, at 0x4c "sist02.xsl", iFolder 0x1 "Content.inf", 2 cffolders, flags 0x4, number 1, extra bytes 20 in head, 8 datablocks, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab74E1.tmp
Microsoft Cabinet archive data, many, 10800 bytes, 2 files, at 0x44 "ConvergingText.glox" "Content.inf", flags 0x4, number 1, extra bytes 20 in head, 1 datablock, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab74E2.tmp
Microsoft Cabinet archive data, many, 19375 bytes, 2 files, at 0x4c "turabian.xsl", iFolder 0x1 "Content.inf", 2 cffolders, flags 0x4, number 1, extra bytes 20 in head, 11 datablocks, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab74E3.tmp
Microsoft Cabinet archive data, many, 4313 bytes, 2 files, at 0x44 "chevronaccent.glox" "Content.inf", flags 0x4, number 1, extra bytes 20 in head, 1 datablock, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab7506.tmp
Microsoft Cabinet archive data, many, 14939 bytes, 2 files, at 0x44 "CircleProcess.glox" "Content.inf", flags 0x4, number 1, extra bytes 20 in head, 1 datablock, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab7582.tmp
Microsoft Cabinet archive data, many, 18672 bytes, 2 files, at 0x4c "APASixthEditionOfficeOnline.xsl", iFolder 0x1 "Content.inf", 2 cffolders, flags 0x4, number 1, extra bytes 20 in head, 11 datablocks, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab7622.tmp
Microsoft Cabinet archive data, many, 6005 bytes, 2 files, at 0x44 "HexagonRadial.glox" "Content.inf", flags 0x4, number 1, extra bytes 20 in head, 1 datablock, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab7623.tmp
Microsoft Cabinet archive data, many, 4410 bytes, 2 files, at 0x44 "PictureFrame.glox" "Content.inf", flags 0x4, number 1, extra bytes 20 in head, 1 datablock, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab7634.tmp
Microsoft Cabinet archive data, many, 7453 bytes, 2 files, at 0x44 "pictureorgchart.glox" "Content.inf", flags 0x4, number 1, extra bytes 20 in head, 1 datablock, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab7635.tmp
Microsoft Cabinet archive data, many, 9170 bytes, 2 files, at 0x44 "InterconnectedBlockProcess.glox" "Content.inf", flags 0x4, number 1, extra bytes 20 in head, 1 datablock, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab7636.tmp
Microsoft Cabinet archive data, many, 291188 bytes, 2 files, at 0x44 +A "Banded.thmx" +A "content.inf", flags 0x4, ID 56338, number 1, extra bytes 20 in head, 18 datablocks, 0x1503 compression
dropped
C:\Users\user\AppData\Local\Temp\cab7736.tmp
Microsoft Cabinet archive data, many, 4967 bytes, 2 files, at 0x44 "TabList.glox" "Content.inf", flags 0x4, number 1, extra bytes 20 in head, 1 datablock, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab7746.tmp
Microsoft Cabinet archive data, many, 5731 bytes, 2 files, at 0x44 "ThemePictureAlternatingAccent.glox" "Content.inf", flags 0x4, number 1, extra bytes 20 in head, 1 datablock, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab7747.tmp
Microsoft Cabinet archive data, many, 5647 bytes, 2 files, at 0x44 "RadialPictureList.glox" "Content.inf", flags 0x4, number 1, extra bytes 20 in head, 1 datablock, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab7748.tmp
Microsoft Cabinet archive data, many, 6450 bytes, 2 files, at 0x44 "ThemePictureAccent.glox" "Content.inf", flags 0x4, number 1, extra bytes 20 in head, 1 datablock, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab7759.tmp
Microsoft Cabinet archive data, many, 3144 bytes, 2 files, at 0x44 "VaryingWidthList.glox" "Content.inf", flags 0x4, number 1, extra bytes 20 in head, 1 datablock, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab776C.tmp
Microsoft Cabinet archive data, many, 3749 bytes, 2 files, at 0x44 "TabbedArc.glox" "Content.inf", flags 0x4, number 1, extra bytes 20 in head, 1 datablock, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab776E.tmp
Microsoft Cabinet archive data, many, 6196 bytes, 2 files, at 0x44 "ThemePictureGrid.glox" "Content.inf", flags 0x4, number 1, extra bytes 20 in head, 1 datablock, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab77A1.tmp
Microsoft Cabinet archive data, many, 704319 bytes, 2 files, at 0x44 +A "content.inf" +A "Wood_Type.thmx", flags 0x4, ID 5778, number 1, extra bytes 20 in head, 51 datablocks, 0x1503 compression
dropped
C:\Users\user\AppData\Local\Temp\cab77A2.tmp
Microsoft Cabinet archive data, many, 5213 bytes, 2 files, at 0x44 "rings.glox" "Content.inf", flags 0x4, number 1, extra bytes 20 in head, 1 datablock, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab77A3.tmp
Microsoft Cabinet archive data, many, 26644 bytes, 2 files, at 0x4c "Element design set.dotx", iFolder 0x1 "Content.inf", 2 cffolders, flags 0x4, number 1, extra bytes 20 in head, 2 datablocks, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab7844.tmp
Microsoft Cabinet archive data, many, 206792 bytes, 2 files, at 0x44 +A "content.inf" +A "View.thmx", flags 0x4, ID 33885, number 1, extra bytes 20 in head, 15 datablocks, 0x1503 compression
dropped
C:\Users\user\AppData\Local\Temp\cab7864.tmp
Microsoft Cabinet archive data, many, 243642 bytes, 2 files, at 0x44 +A "content.inf" +A "Metropolitan.thmx", flags 0x4, ID 19054, number 1, extra bytes 20 in head, 24 datablocks, 0x1503 compression
dropped
C:\Users\user\AppData\Local\Temp\cab78A4.tmp
Microsoft Cabinet archive data, many, 279287 bytes, 2 files, at 0x44 +A "Basis.thmx" +A "content.inf", flags 0x4, ID 55632, number 1, extra bytes 20 in head, 18 datablocks, 0x1503 compression
dropped
C:\Users\user\AppData\Local\Temp\cab78A5.tmp
Microsoft Cabinet archive data, many, 259074 bytes, 2 files, at 0x44 +A "content.inf" +A "Dividend.thmx", flags 0x4, ID 58359, number 1, extra bytes 20 in head, 18 datablocks, 0x1503 compression
dropped
C:\Users\user\AppData\Local\Temp\cab78A6.tmp
Microsoft Cabinet archive data, many, 252241 bytes, 2 files, at 0x44 +A "content.inf" +A "Frame.thmx", flags 0x4, ID 34169, number 1, extra bytes 20 in head, 16 datablocks, 0x1503 compression
dropped
C:\Users\user\AppData\Local\Temp\cab7937.tmp
Microsoft Cabinet archive data, many, 533290 bytes, 2 files, at 0x44 +A "content.inf" +A "Parallax.thmx", flags 0x4, ID 64081, number 1, extra bytes 20 in head, 29 datablocks, 0x1503 compression
dropped
C:\Users\user\AppData\Local\Temp\cab7969.tmp
Microsoft Cabinet archive data, many, 214772 bytes, 2 files, at 0x44 +A "content.inf" +A "Parcel.thmx", flags 0x4, ID 26500, number 1, extra bytes 20 in head, 19 datablocks, 0x1503 compression
dropped
C:\Users\user\AppData\Local\Temp\cab7999.tmp
Microsoft Cabinet archive data, many, 624532 bytes, 2 files, at 0x44 +A "content.inf" +A "Quotable.thmx", flags 0x4, ID 13510, number 1, extra bytes 20 in head, 30 datablocks, 0x1503 compression
dropped
C:\Users\user\AppData\Local\Temp\cab79FA.tmp
Microsoft Cabinet archive data, many, 682092 bytes, 2 files, at 0x44 +A "Berlin.thmx" +A "content.inf", flags 0x4, ID 46672, number 1, extra bytes 20 in head, 30 datablocks, 0x1503 compression
dropped
C:\Users\user\AppData\Local\Temp\cab7AD6.tmp
Microsoft Cabinet archive data, many, 1049713 bytes, 2 files, at 0x44 +A "content.inf" +A "Savon.thmx", flags 0x4, ID 60609, number 1, extra bytes 20 in head, 37 datablocks, 0x1503 compression
dropped
C:\Users\user\AppData\Local\Temp\cab7AF7.tmp
Microsoft Cabinet archive data, many, 937309 bytes, 2 files, at 0x44 +A "content.inf" +A "Gallery.thmx", flags 0x4, ID 44349, number 1, extra bytes 20 in head, 34 datablocks, 0x1503 compression
dropped
C:\Users\user\AppData\Local\Temp\cab7B86.tmp
Microsoft Cabinet archive data, many, 1081343 bytes, 2 files, at 0x44 +A "Circuit.thmx" +A "content.inf", flags 0x4, ID 11309, number 1, extra bytes 20 in head, 45 datablocks, 0x1503 compression
dropped
C:\Users\user\AppData\Local\Temp\cab7BA6.tmp
Microsoft Cabinet archive data, many, 1291243 bytes, 2 files, at 0x44 +A "content.inf" +A "Droplet.thmx", flags 0x4, ID 47417, number 1, extra bytes 20 in head, 54 datablocks, 0x1503 compression
dropped
C:\Users\user\AppData\Local\Temp\cab7CD2.tmp
Microsoft Cabinet archive data, many, 1750009 bytes, 2 files, at 0x44 +A "content.inf" +A "Slate.thmx", flags 0x4, ID 28969, number 1, extra bytes 20 in head, 72 datablocks, 0x1503 compression
dropped
C:\Users\user\AppData\Local\Temp\cab7D61.tmp
Microsoft Cabinet archive data, many, 1865728 bytes, 2 files, at 0x44 +A "content.inf" +A "Damask.thmx", flags 0x4, ID 63852, number 1, extra bytes 20 in head, 68 datablocks, 0x1503 compression
dropped
C:\Users\user\AppData\Local\Temp\cab7EAB.tmp
Microsoft Cabinet archive data, many, 2573508 bytes, 2 files, at 0x44 +A "content.inf" +A "Mesh.thmx", flags 0x4, ID 62129, number 1, extra bytes 20 in head, 94 datablocks, 0x1503 compression
dropped
C:\Users\user\AppData\Local\Temp\cab7ECB.tmp
Microsoft Cabinet archive data, many, 2511552 bytes, 2 files, at 0x44 +A "content.inf" +A "Main_Event.thmx", flags 0x4, ID 59889, number 1, extra bytes 20 in head, 90 datablocks, 0x1503 compression
dropped
C:\Users\user\AppData\Local\Temp\cab80F1.tmp
Microsoft Cabinet archive data, many, 3400898 bytes, 2 files, at 0x4c "Insight design set.dotx", iFolder 0x1 "Content.inf", 2 cffolders, flags 0x4, number 1, extra bytes 20 in head, 106 datablocks, 0x1203 compression
dropped
C:\Users\user\AppData\Local\Temp\cab8170.tmp
Microsoft Cabinet archive data, many, 3239239 bytes, 2 files, at 0x44 +A "content.inf" +A "Vapor_Trail.thmx", flags 0x4, ID 19811, number 1, extra bytes 20 in head, 111 datablocks, 0x1503 compression
dropped
C:\Users\user\AppData\Local\Temp\~DF2DAD41EEEC1B4270.TMP
data
dropped
C:\Users\user\AppData\Local\Temp\~DF33AF846BE17DAFA4.TMP
data
dropped
C:\Users\user\AppData\Local\Temp\~DFBD795A53581157E5.TMP
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Office\MSO3072.acl
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\-11-2021.LNK
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Oct 4 13:16:55 2023, mtime=Sat Oct 5 11:50:18 2024, atime=Sat Oct 5 11:50:12 2024, length=967680, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Templates.LNK
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Directory, ctime=Sat Oct 5 11:50:13 2024, mtime=Sat Oct 5 11:51:38 2024, atime=Sat Oct 5 11:51:38 2024, length=0, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat
Generic INItialization configuration [folders]
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03090430[[fn=Banded]].thmx (copy)
Microsoft OOXML
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03090434[[fn=Wood Type]].thmx (copy)
Microsoft OOXML
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03457444[[fn=Basis]].thmx (copy)
Microsoft OOXML
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03457464[[fn=Dividend]].thmx (copy)
Microsoft OOXML
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03457475[[fn=Frame]].thmx (copy)
Microsoft OOXML
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03457485[[fn=Mesh]].thmx (copy)
Microsoft OOXML
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03457491[[fn=Metropolitan]].thmx (copy)
Microsoft OOXML
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03457496[[fn=Parallax]].thmx (copy)
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03457503[[fn=Quotable]].thmx (copy)
Microsoft OOXML
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03457510[[fn=Savon]].thmx (copy)
Microsoft OOXML
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03457515[[fn=View]].thmx (copy)
Microsoft OOXML
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM04033917[[fn=Berlin]].thmx (copy)
Microsoft OOXML
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM04033919[[fn=Circuit]].thmx (copy)
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM04033921[[fn=Damask]].thmx (copy)
Microsoft OOXML
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM04033925[[fn=Droplet]].thmx (copy)
Microsoft OOXML
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM04033927[[fn=Main Event]].thmx (copy)
Microsoft OOXML
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM04033929[[fn=Slate]].thmx (copy)
Microsoft OOXML
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM04033937[[fn=Vapor Trail]].thmx (copy)
Microsoft OOXML
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM10001114[[fn=Gallery]].thmx (copy)
Microsoft OOXML
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM10001115[[fn=Parcel]].thmx (copy)
Microsoft OOXML
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328884[[fn=architecture]].glox (copy)
Microsoft OOXML
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328893[[fn=BracketList]].glox (copy)
Microsoft OOXML
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328905[[fn=Chevron Accent]].glox (copy)
Microsoft OOXML
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328908[[fn=Circle Process]].glox (copy)
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328916[[fn=Converging Text]].glox (copy)
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328919[[fn=Hexagon Radial]].glox (copy)
Microsoft OOXML
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328925[[fn=Interconnected Block Process]].glox (copy)
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328932[[fn=Picture Frame]].glox (copy)
Microsoft OOXML
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328935[[fn=Picture Organization Chart]].glox (copy)
Microsoft OOXML
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328940[[fn=Radial Picture List]].glox (copy)
Microsoft OOXML
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328951[[fn=Tabbed Arc]].glox (copy)
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328972[[fn=Tab List]].glox (copy)
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328975[[fn=Theme Picture Accent]].glox (copy)
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328983[[fn=Theme Picture Alternating Accent]].glox (copy)
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328986[[fn=Theme Picture Grid]].glox (copy)
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328990[[fn=Varying Width List]].glox (copy)
Microsoft OOXML
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328998[[fn=Rings]].glox (copy)
Microsoft OOXML
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Bibliography Styles\TM02851216[[fn=apasixtheditionofficeonline]].xsl (copy)
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Bibliography Styles\TM02851217[[fn=chicago]].xsl (copy)
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Bibliography Styles\TM02851218[[fn=gb]].xsl (copy)
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Bibliography Styles\TM02851219[[fn=gostname]].xsl (copy)
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Bibliography Styles\TM02851220[[fn=gosttitle]].xsl (copy)
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Bibliography Styles\TM02851221[[fn=harvardanglia2008officeonline]].xsl (copy)
XML 1.0 document, Unicode text, UTF-8 text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Bibliography Styles\TM02851222[[fn=ieee2006officeonline]].xsl (copy)
XML 1.0 document, Unicode text, UTF-8 text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Bibliography Styles\TM02851223[[fn=iso690]].xsl (copy)
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Bibliography Styles\TM02851224[[fn=iso690nmerical]].xsl (copy)
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Bibliography Styles\TM02851225[[fn=mlaseventheditionofficeonline]].xsl (copy)
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Bibliography Styles\TM02851226[[fn=turabian]].xsl (copy)
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Bibliography Styles\TM02851227[[fn=sist02]].xsl (copy)
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Building Blocks\1033\TM01840907[[fn=Equations]].dotx (copy)
Microsoft Word 2007+
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Building Blocks\1033\TM02835233[[fn=Text Sidebar (Annual Report Red and Black design)]].docx (copy)
Microsoft Word 2007+
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Building Blocks\1033\TM03998158[[fn=Element]].dotx (copy)
Microsoft Word 2007+
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Building Blocks\1033\TM03998159[[fn=Insight]].dotx (copy)
Microsoft Word 2007+
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\Normal.dotm (copy)
Microsoft Word 2007+
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Templates\~WRD0002.tmp
Microsoft Word 2007+
dropped
C:\Users\user\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC
Unicode text, UTF-16, little-endian text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Microsoft\UProof\ExcludeDictionaryEN0409.lex
Unicode text, UTF-16, little-endian text, with no line terminators
dropped
C:\Users\user\AppData\Roaming\Microsoft\UProof\ExcludeDictionaryEN0809.lex
Unicode text, UTF-16, little-endian text, with no line terminators
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Oct 5 11:50:51 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Oct 5 11:50:50 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Oct 5 11:50:50 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Oct 5 11:50:50 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Oct 5 11:50:50 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\Desktop\-11-2021.doc (copy)
Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, Code page: -535, Title: , Author: main, Template: Normal, Last Saved By: user, Revision Number: 122, Name of Creating Application: Microsoft Office Word, Total Editing Time: 2d+04:23:00, Last Printed: Thu Jun 1 17:53:00 2017, Create Time/Date: Tue Jun 29 03:02:00 2021, Last Saved Time/Date: Sat Oct 5 13:51:00 2024, Number of Pages: 123, Number of Words: 40334, Number of Characters: 229904, Security: 0
dropped
C:\Users\user\Desktop\~$1-2021.doc
data
dropped
C:\Users\user\Desktop\~WRD0000.tmp
Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, Code page: -535, Title: , Author: main, Template: Normal, Last Saved By: user, Revision Number: 122, Name of Creating Application: Microsoft Office Word, Total Editing Time: 2d+04:23:00, Last Printed: Thu Jun 1 17:53:00 2017, Create Time/Date: Tue Jun 29 03:02:00 2021, Last Saved Time/Date: Sat Oct 5 13:51:00 2024, Number of Pages: 123, Number of Words: 40334, Number of Characters: 229904, Security: 0
dropped
C:\Users\user\Desktop\~WRD0000.tmp:Zone.Identifier
ASCII text, with CRLF line terminators
dropped
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1576_1100513832\Google.Widevine.CDM.dll
PE32+ executable (DLL) (console) x86-64, for MS Windows
dropped
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1576_1100513832\_metadata\verified_contents.json
JSON data
dropped
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1576_1100513832\manifest.fingerprint
ASCII text, with no line terminators
dropped
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1576_1100513832\manifest.json
JSON data
dropped
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1576_338466912\LICENSE
ASCII text
dropped
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1576_338466912\_metadata\verified_contents.json
JSON data
dropped
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1576_338466912\manifest.fingerprint
ASCII text, with no line terminators
dropped
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1576_338466912\manifest.json
JSON data
dropped
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1576_338466912\sets.json
JSON data
dropped
Chrome Cache Entry: 453
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1440x550, components 3
downloaded
Chrome Cache Entry: 454
ASCII text, with very long lines (18130), with no line terminators
downloaded
Chrome Cache Entry: 455
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x11, components 3
downloaded
Chrome Cache Entry: 456
ASCII text, with very long lines (607)
dropped
Chrome Cache Entry: 457
PNG image data, 1497 x 1473, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 458
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1440x550, components 3
downloaded
Chrome Cache Entry: 459
PNG image data, 1680 x 943, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 460
Web Open Font Format (Version 2), TrueType, length 9852, version 1.0
downloaded
Chrome Cache Entry: 461
PNG image data, 1680 x 665, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 462
ASCII text, with very long lines (945)
downloaded
Chrome Cache Entry: 463
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x13, components 3
downloaded
Chrome Cache Entry: 464
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 465
Unicode text, UTF-8 text, with very long lines (11811), with no line terminators
downloaded
Chrome Cache Entry: 466
PNG image data, 400 x 400, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 467
data
dropped
Chrome Cache Entry: 468
PNG image data, 400 x 400, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 469
RIFF (little-endian) data, Web/P image
dropped
Chrome Cache Entry: 470
PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 471
PNG image data, 1104 x 630, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 472
PNG image data, 512 x 512, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 473
PNG image data, 20 x 13, 8-bit/color RGB, non-interlaced
dropped
Chrome Cache Entry: 474
PNG image data, 32 x 36, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 475
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x13, components 3
downloaded
Chrome Cache Entry: 476
ASCII text, with very long lines (3391)
downloaded
Chrome Cache Entry: 477
PNG image data, 512 x 512, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 478
PNG image data, 20 x 13, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 479
ASCII text, with very long lines (37504), with no line terminators
downloaded
Chrome Cache Entry: 480
PNG image data, 600 x 300, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 481
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x20, components 3
downloaded
Chrome Cache Entry: 482
PNG image data, 400 x 400, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 483
data
dropped
Chrome Cache Entry: 484
ASCII text, with very long lines (11579)
downloaded
Chrome Cache Entry: 485
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x13, components 3
dropped
Chrome Cache Entry: 486
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 487
PNG image data, 461 x 100, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 488
ASCII text, with very long lines (1428)
dropped
Chrome Cache Entry: 489
PNG image data, 300 x 300, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 490
ASCII text, with very long lines (2401), with no line terminators
downloaded
Chrome Cache Entry: 491
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x13, components 3
downloaded
Chrome Cache Entry: 492
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 493
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1440x550, components 3
dropped
Chrome Cache Entry: 494
PNG image data, 512 x 512, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 495
PNG image data, 274 x 68, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 496
PNG image data, 1680 x 1120, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 497
PNG image data, 400 x 400, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 498
ASCII text, with very long lines (8721), with no line terminators
downloaded
Chrome Cache Entry: 499
PNG image data, 1000 x 500, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 500
HTML document, Unicode text, UTF-8 text, with very long lines (1136)
dropped
Chrome Cache Entry: 501
ASCII text, with very long lines (33380)
dropped
Chrome Cache Entry: 502
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 360x203, components 3
downloaded
Chrome Cache Entry: 503
data
dropped
Chrome Cache Entry: 504
PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 505
data
dropped
Chrome Cache Entry: 506
PNG image data, 20 x 11, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 507
PNG image data, 461 x 100, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 508
PNG image data, 20 x 13, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 509
PNG image data, 600 x 300, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 510
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x15, components 3
downloaded
Chrome Cache Entry: 511
Unicode text, UTF-8 text, with very long lines (20670)
downloaded
Chrome Cache Entry: 512
PNG image data, 20 x 13, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 513
ASCII text, with very long lines (24231)
downloaded
Chrome Cache Entry: 514
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 515
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x14, components 3
downloaded
Chrome Cache Entry: 516
PNG image data, 1680 x 943, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 517
ASCII text, with very long lines (1325), with no line terminators
downloaded
Chrome Cache Entry: 518
HTML document, Unicode text, UTF-8 text, with very long lines (23044), with no line terminators
dropped
Chrome Cache Entry: 519
PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 520
ASCII text, with very long lines (6265), with no line terminators
downloaded
Chrome Cache Entry: 521
PNG image data, 180 x 177, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 522
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 360x240, components 3
downloaded
Chrome Cache Entry: 523
ASCII text, with very long lines (32072)
dropped
Chrome Cache Entry: 524
PNG image data, 32 x 36, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 525
PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 526
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x11, components 3
dropped
Chrome Cache Entry: 527
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 528
ASCII text, with very long lines (14872), with no line terminators
dropped
Chrome Cache Entry: 529
ASCII text, with very long lines (1918), with no line terminators
dropped
Chrome Cache Entry: 530
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
downloaded
Chrome Cache Entry: 531
PNG image data, 512 x 512, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 532
PNG image data, 1000 x 500, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 533
PNG image data, 400 x 400, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 534
ASCII text, with very long lines (945)
dropped
Chrome Cache Entry: 535
Web Open Font Format (Version 2), TrueType, length 18536, version 1.0
downloaded
Chrome Cache Entry: 536
PNG image data, 1680 x 1008, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 537
PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 538
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x20, components 3
dropped
Chrome Cache Entry: 539
PNG image data, 20 x 13, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 540
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x11, components 3
dropped
Chrome Cache Entry: 541
PNG image data, 512 x 512, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 542
ASCII text, with very long lines (2615), with no line terminators
downloaded
Chrome Cache Entry: 543
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1440x550, components 3
downloaded
Chrome Cache Entry: 544
HTML document, Unicode text, UTF-8 text, with very long lines (1842)
dropped
Chrome Cache Entry: 545
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 546
ASCII text, with very long lines (568)
dropped
Chrome Cache Entry: 547
Unicode text, UTF-8 text, with very long lines (32021), with CRLF line terminators
dropped
Chrome Cache Entry: 548
ASCII text, with very long lines (4514), with no line terminators
downloaded
Chrome Cache Entry: 549
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 550
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1440x550, components 3
dropped
Chrome Cache Entry: 551
PNG image data, 1440 x 548, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 552
PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 553
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 554
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 88x88, components 3
downloaded
Chrome Cache Entry: 555
GIF image data, version 89a, 1 x 1
dropped
Chrome Cache Entry: 556
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1440x550, components 3
dropped
Chrome Cache Entry: 557
ASCII text, with very long lines (34334), with no line terminators
dropped
Chrome Cache Entry: 558
PNG image data, 20 x 21, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 559
Web Open Font Format (Version 2), TrueType, length 9964, version 1.0
downloaded
Chrome Cache Entry: 560
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 360x240, components 3
downloaded
Chrome Cache Entry: 561
PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 562
PNG image data, 1680 x 1120, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 563
PNG image data, 20 x 14, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 564
Web Open Font Format (Version 2), TrueType, length 51436, version 1.0
downloaded
Chrome Cache Entry: 565
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 566
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1440x550, components 3
downloaded
Chrome Cache Entry: 567
PNG image data, 20 x 18, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 568
PNG image data, 1104 x 630, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 569
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 570
PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 571
Unicode text, UTF-8 text, with very long lines (65506), with no line terminators
dropped
Chrome Cache Entry: 572
PNG image data, 600 x 300, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 573
ASCII text, with very long lines (2162)
downloaded
Chrome Cache Entry: 574
HTML document, Unicode text, UTF-8 text, with very long lines (1136)
dropped
Chrome Cache Entry: 575
PNG image data, 20 x 14, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 576
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x20, components 3
dropped
Chrome Cache Entry: 577
PNG image data, 512 x 512, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 578
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 360x240, components 3
dropped
Chrome Cache Entry: 579
GIF image data, version 89a, 1 x 1
dropped
Chrome Cache Entry: 580
PNG image data, 400 x 400, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 581
ASCII text, with very long lines (16115)
dropped
Chrome Cache Entry: 582
ASCII text, with very long lines (2615), with no line terminators
dropped
Chrome Cache Entry: 583
PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 584
HTML document, Unicode text, UTF-8 text, with very long lines (1842)
downloaded
Chrome Cache Entry: 585
PNG image data, 20 x 17, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 586
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 587
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x15, components 3
dropped
Chrome Cache Entry: 588
PNG image data, 600 x 300, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 589
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 360x240, components 3
dropped
Chrome Cache Entry: 590
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 591
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x13, components 3
dropped
Chrome Cache Entry: 592
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=1280, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=960], baseline, precision 8, 20x26, components 3
dropped
Chrome Cache Entry: 593
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x13, components 3
dropped
Chrome Cache Entry: 594
RIFF (little-endian) data, Web/P image
downloaded
Chrome Cache Entry: 595
PNG image data, 20 x 14, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 596
PNG image data, 1104 x 630, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 597
ASCII text
downloaded
Chrome Cache Entry: 598
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1440x550, components 3
downloaded
Chrome Cache Entry: 599
Unicode text, UTF-8 (with BOM) text, with very long lines (567)
downloaded
Chrome Cache Entry: 600
Unicode text, UTF-8 text, with very long lines (20670)
dropped
Chrome Cache Entry: 601
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
dropped
Chrome Cache Entry: 602
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 603
PNG image data, 600 x 300, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 604
ASCII text, with very long lines (561)
downloaded
Chrome Cache Entry: 605
data
dropped
Chrome Cache Entry: 606
PNG image data, 1000 x 500, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 607
PNG image data, 300 x 300, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 608
data
dropped
Chrome Cache Entry: 609
ASCII text, with very long lines (2162)
downloaded
Chrome Cache Entry: 610
ASCII text, with very long lines (32680), with no line terminators
downloaded
Chrome Cache Entry: 611
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 360x240, components 3
dropped
Chrome Cache Entry: 612
Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
downloaded
Chrome Cache Entry: 613
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x20, components 3
downloaded
Chrome Cache Entry: 614
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x20, components 3
dropped
Chrome Cache Entry: 615
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x20, components 3
downloaded
Chrome Cache Entry: 616
PNG image data, 1104 x 630, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 617
PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 618
PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 619
PNG image data, 512 x 512, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 620
PNG image data, 512 x 512, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 621
PNG image data, 512 x 512, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 622
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 360x240, components 3
downloaded
Chrome Cache Entry: 623
data
dropped
Chrome Cache Entry: 624
PNG image data, 20 x 22, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 625
ASCII text, with very long lines (53360)
downloaded
Chrome Cache Entry: 626
data
dropped
Chrome Cache Entry: 627
ASCII text, with very long lines (34334), with no line terminators
downloaded
Chrome Cache Entry: 628
PNG image data, 20 x 17, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 629
ASCII text, with very long lines (14872), with no line terminators
downloaded
Chrome Cache Entry: 630
ASCII text, with very long lines (26847), with no line terminators
dropped
Chrome Cache Entry: 631
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x15, components 3
downloaded
Chrome Cache Entry: 632
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 360x240, components 3
downloaded
Chrome Cache Entry: 633
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 360x240, components 3
downloaded
Chrome Cache Entry: 634
PNG image data, 274 x 68, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 635
Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
downloaded
Chrome Cache Entry: 636
ASCII text, with very long lines (65319), with CRLF line terminators
downloaded
Chrome Cache Entry: 637
PNG image data, 600 x 300, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 638
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1440x550, components 3
dropped
Chrome Cache Entry: 639
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 24x20, components 3
dropped
Chrome Cache Entry: 640
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x13, components 3
downloaded
Chrome Cache Entry: 641
Web Open Font Format (Version 2), TrueType, length 9832, version 1.0
downloaded
Chrome Cache Entry: 642
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x13, components 3
downloaded
Chrome Cache Entry: 643
ASCII text, with very long lines (11579)
dropped
Chrome Cache Entry: 644
PNG image data, 600 x 243, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 645
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 360x240, components 3
dropped
Chrome Cache Entry: 646
PNG image data, 20 x 22, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 647
GIF image data, version 89a, 16 x 16
dropped
Chrome Cache Entry: 648
ASCII text, with very long lines (607)
downloaded
Chrome Cache Entry: 649
ASCII text, with very long lines (24231)
dropped
Chrome Cache Entry: 650
PNG image data, 180 x 177, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 651
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1440x550, components 3
dropped
Chrome Cache Entry: 652
PNG image data, 1104 x 630, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 653
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x20, components 3
dropped
Chrome Cache Entry: 654
data
dropped
Chrome Cache Entry: 655
ASCII text, with very long lines (2776), with no line terminators
downloaded
Chrome Cache Entry: 656
data
downloaded
Chrome Cache Entry: 657
Unicode text, UTF-8 text, with very long lines (32021), with CRLF line terminators
downloaded
Chrome Cache Entry: 658
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 659
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1440x550, components 3
dropped
Chrome Cache Entry: 660
ASCII text, with very long lines (2401), with no line terminators
downloaded
Chrome Cache Entry: 661
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1440x550, components 3
downloaded
Chrome Cache Entry: 662
ASCII text, with very long lines (1323)
downloaded
Chrome Cache Entry: 663
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 24x20, components 3
downloaded
Chrome Cache Entry: 664
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x14, components 3
dropped
Chrome Cache Entry: 665
GIF image data, version 89a, 1 x 1
downloaded
Chrome Cache Entry: 666
ASCII text, with very long lines (1159)
downloaded
Chrome Cache Entry: 667
GIF image data, version 89a, 1 x 1
downloaded
Chrome Cache Entry: 668
HTML document, ASCII text, with very long lines (4333), with no line terminators
dropped
Chrome Cache Entry: 669
data
dropped
Chrome Cache Entry: 670
Unicode text, UTF-8 text, with very long lines (65526), with no line terminators
downloaded
Chrome Cache Entry: 671
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x13, components 3
downloaded
Chrome Cache Entry: 672
PNG image data, 512 x 512, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 673
PNG image data, 600 x 300, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 674
PNG image data, 512 x 512, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 675
PNG image data, 1497 x 1473, 8-bit colormap, non-interlaced
downloaded
Chrome Cache Entry: 676
ASCII text, with very long lines (20581)
downloaded
Chrome Cache Entry: 677
PNG image data, 20 x 13, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 678
Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
downloaded
Chrome Cache Entry: 679
PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 680
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 30x20, components 3
dropped
Chrome Cache Entry: 681
ASCII text, with very long lines (37504), with no line terminators
dropped
Chrome Cache Entry: 682
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x20, components 3
downloaded
Chrome Cache Entry: 683
PNG image data, 1440 x 548, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 684
PNG image data, 512 x 512, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 685
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 360x203, components 3
dropped
Chrome Cache Entry: 686
ASCII text, with very long lines (8721), with no line terminators
downloaded
Chrome Cache Entry: 687
PNG image data, 512 x 512, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 688
PNG image data, 600 x 300, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 689
PNG image data, 1497 x 1473, 8-bit colormap, non-interlaced
downloaded
Chrome Cache Entry: 690
PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 691
ASCII text, with very long lines (29166), with no line terminators
downloaded
Chrome Cache Entry: 692
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 30x20, components 3
downloaded
Chrome Cache Entry: 693
PNG image data, 1104 x 630, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 694
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x13, components 3
downloaded
Chrome Cache Entry: 695
ASCII text, with very long lines (3391)
dropped
Chrome Cache Entry: 696
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1440x550, components 3
downloaded
Chrome Cache Entry: 697
ASCII text, with very long lines (53360)
dropped
Chrome Cache Entry: 698
JSON data
dropped
Chrome Cache Entry: 699
PNG image data, 512 x 512, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 700
PNG image data, 512 x 512, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 701
data
dropped
Chrome Cache Entry: 702
Unicode text, UTF-8 text, with very long lines (32013), with CRLF line terminators
dropped
Chrome Cache Entry: 703
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1440x550, components 3
dropped
Chrome Cache Entry: 704
ASCII text
downloaded
Chrome Cache Entry: 705
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 706
Unicode text, UTF-8 text, with very long lines (65506), with no line terminators
downloaded
Chrome Cache Entry: 707
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x20, components 3
dropped
Chrome Cache Entry: 708
PNG image data, 512 x 512, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 709
PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 710
PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 711
PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 712
PNG image data, 600 x 300, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 713
PNG image data, 600 x 300, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 714
PNG image data, 1680 x 476, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 715
PNG image data, 1104 x 630, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 716
PNG image data, 20 x 13, 8-bit/color RGB, non-interlaced
downloaded
Chrome Cache Entry: 717
ASCII text, with very long lines (561)
dropped
Chrome Cache Entry: 718
PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 719
PNG image data, 300 x 300, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 720
ASCII text, with very long lines (18130), with no line terminators
downloaded
Chrome Cache Entry: 721
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x15, components 3
dropped
Chrome Cache Entry: 722
PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 723
PNG image data, 20 x 18, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 724
Web Open Font Format (Version 2), TrueType, length 18588, version 1.0
downloaded
Chrome Cache Entry: 725
JSON data
dropped
Chrome Cache Entry: 726
ASCII text, with very long lines (18130), with no line terminators
dropped
Chrome Cache Entry: 727
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x13, components 3
dropped
Chrome Cache Entry: 728
PNG image data, 20 x 11, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 729
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x30, components 3
dropped
Chrome Cache Entry: 730
HTML document, Unicode text, UTF-8 text, with very long lines (1136)
dropped
Chrome Cache Entry: 731
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x13, components 3
dropped
Chrome Cache Entry: 732
RIFF (little-endian) data, Web/P image, VP8 encoding, 1680x1120, Scaling: [none]x[none], YUV color, decoders should clamp
dropped
Chrome Cache Entry: 733
PNG image data, 20 x 13, 8-bit/color RGB, non-interlaced
dropped
Chrome Cache Entry: 734
PNG image data, 20 x 13, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 735
PNG image data, 1000 x 500, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 736
PNG image data, 20 x 14, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 737
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x15, components 3
downloaded
Chrome Cache Entry: 738
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=1280, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=960], baseline, precision 8, 20x26, components 3
downloaded
Chrome Cache Entry: 739
PNG image data, 512 x 512, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 740
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x19, components 3
downloaded
Chrome Cache Entry: 741
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x19, components 3
dropped
Chrome Cache Entry: 742
PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 743
PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 744
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 745
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x13, components 3
downloaded
Chrome Cache Entry: 746
RIFF (little-endian) data, Web/P image, VP8 encoding, 1680x1120, Scaling: [none]x[none], YUV color, decoders should clamp
downloaded
Chrome Cache Entry: 747
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 25x20, components 3
downloaded
Chrome Cache Entry: 748
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 33x20, components 3
downloaded
Chrome Cache Entry: 749
PNG image data, 1000 x 500, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 750
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x13, components 3
downloaded
Chrome Cache Entry: 751
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x15, components 3
downloaded
Chrome Cache Entry: 752
HTML document, Unicode text, UTF-8 text, with very long lines (1136)
dropped
Chrome Cache Entry: 753
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1440x550, components 3
dropped
Chrome Cache Entry: 754
PNG image data, 1680 x 943, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 755
PNG image data, 1680 x 943, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 756
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x13, components 3
dropped
Chrome Cache Entry: 757
PNG image data, 1497 x 1473, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 758
ASCII text, with very long lines (3739), with no line terminators
downloaded
Chrome Cache Entry: 759
PNG image data, 1000 x 500, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 760
ASCII text, with very long lines (24231)
downloaded
Chrome Cache Entry: 761
PNG image data, 512 x 512, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 762
PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 763
ASCII text, with very long lines (16115)
downloaded
Chrome Cache Entry: 764
data
dropped
Chrome Cache Entry: 765
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 766
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 360x240, components 3
dropped
Chrome Cache Entry: 767
PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 768
PNG image data, 512 x 512, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 769
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 68x68, components 3
dropped
Chrome Cache Entry: 770
PNG image data, 300 x 285, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 771
PNG image data, 600 x 243, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 772
PNG image data, 20 x 19, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 773
ASCII text, with very long lines (8721), with no line terminators
dropped
Chrome Cache Entry: 774
PNG image data, 1440 x 548, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 775
PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 776
HTML document, ASCII text, with very long lines (4480), with no line terminators
downloaded
Chrome Cache Entry: 777
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 68x68, components 3
downloaded
Chrome Cache Entry: 778
ASCII text, with very long lines (20581)
dropped
Chrome Cache Entry: 779
ASCII text, with very long lines (758), with no line terminators
downloaded
Chrome Cache Entry: 780
ASCII text, with very long lines (26847), with no line terminators
downloaded
Chrome Cache Entry: 781
PNG image data, 512 x 512, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 782
PNG image data, 400 x 400, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 783
ASCII text, with very long lines (1323)
dropped
Chrome Cache Entry: 784
PNG image data, 512 x 512, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 785
PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 786
PNG image data, 512 x 512, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 787
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x20, components 3
dropped
Chrome Cache Entry: 788
PNG image data, 512 x 512, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 789
ASCII text, with very long lines (21555), with no line terminators
downloaded
Chrome Cache Entry: 790
PNG image data, 1000 x 500, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 791
ASCII text, with very long lines (501)
dropped
Chrome Cache Entry: 792
JSON data
downloaded
Chrome Cache Entry: 793
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 794
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 360x240, components 3
downloaded
Chrome Cache Entry: 795
PNG image data, 400 x 400, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 796
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 360x240, components 3
dropped
Chrome Cache Entry: 797
PNG image data, 512 x 512, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 798
ASCII text, with very long lines (21555), with no line terminators
dropped
Chrome Cache Entry: 799
ASCII text, with very long lines (758), with no line terminators
downloaded
Chrome Cache Entry: 800
PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 801
Web Open Font Format (Version 2), TrueType, length 18492, version 1.0
downloaded
Chrome Cache Entry: 802
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x18, components 3
downloaded
Chrome Cache Entry: 803
PNG image data, 20 x 19, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 804
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 25x20, components 3
dropped
Chrome Cache Entry: 805
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x13, components 3
dropped
Chrome Cache Entry: 806
Web Open Font Format (Version 2), TrueType, length 9684, version 1.0
downloaded
Chrome Cache Entry: 807
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 808
PNG image data, 1440 x 548, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 809
PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 810
HTML document, Unicode text, UTF-8 text, with very long lines (1842)
downloaded
Chrome Cache Entry: 811
PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 812
PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 813
PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 814
MS Windows icon resource - 4 icons, 64x64, 32 bits/pixel, 32x32, 32 bits/pixel
dropped
Chrome Cache Entry: 815
PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 816
ASCII text, with very long lines (33380)
downloaded
Chrome Cache Entry: 817
PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 818
Web Open Font Format (Version 2), TrueType, length 9780, version 1.0
downloaded
Chrome Cache Entry: 819
PNG image data, 512 x 512, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 820
ASCII text, with very long lines (2162)
dropped
Chrome Cache Entry: 821
ASCII text, with very long lines (1159)
dropped
Chrome Cache Entry: 822
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 823
Web Open Font Format (Version 2), TrueType, length 85380, version 1.655
downloaded
Chrome Cache Entry: 824
PNG image data, 600 x 300, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 825
PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 826
PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 827
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 828
data
dropped
Chrome Cache Entry: 829
PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 830
PNG image data, 400 x 400, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 831
PNG image data, 1104 x 630, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 832
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x13, components 3
dropped
Chrome Cache Entry: 833
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 834
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 33x20, components 3
dropped
Chrome Cache Entry: 835
PNG image data, 512 x 512, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 836
MS Windows icon resource - 4 icons, 64x64, 32 bits/pixel, 32x32, 32 bits/pixel
downloaded
Chrome Cache Entry: 837
ASCII text, with very long lines (1918), with no line terminators
downloaded
Chrome Cache Entry: 838
PNG image data, 512 x 512, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 839
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x15, components 3
dropped
Chrome Cache Entry: 840
PNG image data, 400 x 400, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 841
PNG image data, 512 x 512, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 842
ASCII text, with very long lines (32072)
downloaded
Chrome Cache Entry: 843
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 360x240, components 3
dropped
Chrome Cache Entry: 844
PNG image data, 300 x 300, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 845
PNG image data, 600 x 300, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 846
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 360x240, components 3
dropped
Chrome Cache Entry: 847
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x13, components 3
downloaded
Chrome Cache Entry: 848
PNG image data, 1000 x 500, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 849
PNG image data, 1000 x 500, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 850
PNG image data, 512 x 512, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 851
HTML document, Unicode text, UTF-8 text, with very long lines (1136)
dropped
Chrome Cache Entry: 852
HTML document, ASCII text, with very long lines (4333), with no line terminators
downloaded
Chrome Cache Entry: 853
Web Open Font Format (Version 2), TrueType, length 52188, version 1.0
downloaded
Chrome Cache Entry: 854
PNG image data, 300 x 300, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 855
ASCII text, with very long lines (6616), with no line terminators
downloaded
Chrome Cache Entry: 856
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x20, components 3
downloaded
Chrome Cache Entry: 857
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x30, components 3
downloaded
Chrome Cache Entry: 858
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 360x240, components 3
downloaded
Chrome Cache Entry: 859
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 30x20, components 3
downloaded
Chrome Cache Entry: 860
Unicode text, UTF-8 text, with very long lines (42549), with no line terminators
downloaded
Chrome Cache Entry: 861
PNG image data, 300 x 300, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 862
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 863
PNG image data, 1680 x 476, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 864
HTML document, Unicode text, UTF-8 text, with very long lines (23044), with no line terminators
downloaded
Chrome Cache Entry: 865
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1440x550, components 3
downloaded
Chrome Cache Entry: 866
Web Open Font Format (Version 2), TrueType, length 18596, version 1.0
downloaded
Chrome Cache Entry: 867
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x20, components 3
dropped
Chrome Cache Entry: 868
PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 869
PNG image data, 1680 x 1008, 8-bit colormap, non-interlaced
downloaded
Chrome Cache Entry: 870
HTML document, ASCII text, with very long lines (525)
downloaded
Chrome Cache Entry: 871
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1440x550, components 3
dropped
Chrome Cache Entry: 872
HTML document, Unicode text, UTF-8 text, with very long lines (1136)
dropped
Chrome Cache Entry: 873
HTML document, Unicode text, UTF-8 text, with very long lines (3964)
downloaded
Chrome Cache Entry: 874
PNG image data, 600 x 300, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 875
PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 876
Web Open Font Format (Version 2), TrueType, length 50180, version 1.0
downloaded
Chrome Cache Entry: 877
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1440x550, components 3
downloaded
Chrome Cache Entry: 878
PNG image data, 512 x 512, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 879
Unicode text, UTF-8 text, with very long lines (32013), with CRLF line terminators
downloaded
Chrome Cache Entry: 880
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x20, components 3
downloaded
Chrome Cache Entry: 881
HTML document, Unicode text, UTF-8 text, with very long lines (9253), with CRLF, LF line terminators
downloaded
Chrome Cache Entry: 882
ASCII text, with very long lines (11579)
downloaded
Chrome Cache Entry: 883
PNG image data, 512 x 512, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 884
PNG image data, 230 x 230, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 885
ASCII text, with CRLF line terminators
downloaded
Chrome Cache Entry: 886
Unicode text, UTF-8 text, with very long lines (20670)
downloaded
Chrome Cache Entry: 887
PNG image data, 1000 x 500, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 888
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 30x20, components 3
dropped
Chrome Cache Entry: 889
GIF image data, version 89a, 16 x 16
downloaded
Chrome Cache Entry: 890
ASCII text
downloaded
Chrome Cache Entry: 891
PNG image data, 1000 x 500, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 892
PNG image data, 1680 x 665, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 893
PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 894
ASCII text, with very long lines (12162), with no line terminators
downloaded
Chrome Cache Entry: 895
PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 896
PNG image data, 600 x 300, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 897
PNG image data, 400 x 400, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 898
ASCII text, with very long lines (34334), with no line terminators
downloaded
Chrome Cache Entry: 899
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x20, components 3
downloaded
Chrome Cache Entry: 900
ASCII text, with very long lines (29166), with no line terminators
dropped
Chrome Cache Entry: 901
PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 902
ASCII text, with CRLF line terminators
dropped
Chrome Cache Entry: 903
PNG image data, 600 x 300, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 904
PNG image data, 600 x 300, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 905
PNG image data, 400 x 400, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 906
PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 907
HTML document, ASCII text, with very long lines (4480), with no line terminators
dropped
Chrome Cache Entry: 908
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 360x240, components 3
downloaded
Chrome Cache Entry: 909
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x20, components 3
downloaded
Chrome Cache Entry: 910
PNG image data, 1000 x 500, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 911
JSON data
downloaded
Chrome Cache Entry: 912
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x11, components 3
downloaded
Chrome Cache Entry: 913
ASCII text, with very long lines (1918), with no line terminators
downloaded
Chrome Cache Entry: 914
data
dropped
Chrome Cache Entry: 915
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 916
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x13, components 3
dropped
Chrome Cache Entry: 917
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x13, components 3
downloaded
Chrome Cache Entry: 918
PNG image data, 1000 x 500, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 919
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x15, components 3
dropped
Chrome Cache Entry: 920
ASCII text, with very long lines (1428)
downloaded
Chrome Cache Entry: 921
ASCII text, with very long lines (4514), with no line terminators
downloaded
Chrome Cache Entry: 922
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x13, components 3
dropped
Chrome Cache Entry: 923
ASCII text, with very long lines (568)
downloaded
Chrome Cache Entry: 924
PNG image data, 20 x 21, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 925
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1440x548, components 3
downloaded
Chrome Cache Entry: 926
Unicode text, UTF-8 text, with very long lines (11811), with no line terminators
dropped
Chrome Cache Entry: 927
PNG image data, 230 x 230, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 928
ASCII text, with very long lines (2776), with no line terminators
downloaded
Chrome Cache Entry: 929
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 88x88, components 3
dropped
Chrome Cache Entry: 930
ASCII text, with very long lines (501)
downloaded
Chrome Cache Entry: 931
PNG image data, 512 x 512, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 932
Unicode text, UTF-8 (with BOM) text, with very long lines (567)
dropped
Chrome Cache Entry: 933
PNG image data, 1000 x 500, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 934
PNG image data, 400 x 400, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 935
PNG image data, 300 x 285, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 936
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x20, components 3
dropped
Chrome Cache Entry: 937
Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
downloaded
Chrome Cache Entry: 938
PNG image data, 20 x 13, 8-bit/color RGB, non-interlaced
downloaded
Chrome Cache Entry: 939
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x13, components 3
dropped
Chrome Cache Entry: 940
PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 941
PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 942
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x18, components 3
dropped
There are 763 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
"C:\Program Files (x86)\Microsoft Office\Root\Office16\WINWORD.EXE" /Automation -Embedding
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2080 --field-trial-handle=2000,i,5869631330175666811,13025162450598300511,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://miit.ru/"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4000 --field-trial-handle=2000,i,5869631330175666811,13025162450598300511,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6312 --field-trial-handle=2000,i,5869631330175666811,13025162450598300511,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8

URLs

Name
IP
Malicious
https://static.tildacdn.com/tild3364-6639-4232-b665-326366323464/favicon.ico
92.223.124.62
https://wieistmeineip.de
unknown
https://mercadoshops.com.co
unknown
https://thb.tildacdn.com/tild6534-3738-4135-a365-346463643563/-/empty/1.jpg
92.223.124.62
https://static.tildacdn.com/tild3164-3937-4636-a433-663130666362/-/resizeb/x20/_ZHC2342.jpg
92.223.124.62
https://mercadolivre.com
unknown
https://medonet.pl
unknown
https://static.tildacdn.com/css/tilda-slds-1.4.min.css
92.223.124.62
https://miit.ru/content/%D0%91%D0%B0%D0%BD%D0%BD%D0%B5%D1%80.%20%D0%9D%D0%B0%20%D1%81%D0%B0%D0%B8%CC%86%D1%82.jpg?id_wm=988463&SWidth=1440
195.245.205.104
https://mercadoshops.com.br
unknown
https://static.tildacdn.com/tild6464-3034-4865-a362-333661653332/yappy.png
92.223.124.62
https://johndeere.com
unknown
https://static.tildacdn.com/css/tooltipster.min.css
92.223.124.62
https://baomoi.com
unknown
https://elfinancierocr.com
unknown
https://thb.tildacdn.com/tild6432-3261-4332-a531-383939366465/-/empty/icons8---512.png
92.223.124.62
https://mc.yandex.com/watch/83391895?wmode=7&page-url=https%3A%2F%2Fmiit.ru%2F&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A1f7b5m6qwdrmpv8tqq4z7n9f657%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1470%3Acn%3A1%3Adp%3A0%3Als%3A723801423855%3Ahid%3A1003185294%3Az%3A-240%3Ai%3A20241005085057%3Aet%3A1728132657%3Ac%3A1%3Arn%3A1015722171%3Arqn%3A1%3Au%3A1728132657676591199%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A4799%3Awv%3A2%3Ads%3A252%2C1007%2C331%2C526%2C1143%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1728132650710%3Arqnl%3A1%3Ast%3A1728132659%3At%3A%D0%A0%D0%A3%D0%A2%20(%D0%9C%D0%98%D0%98%D0%A2)&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rcm(1)cdl(na)eco(42009088)ti(1)
93.158.134.119
https://thb.tildacdn.com/tild3336-3961-4865-b732-376139343462/-/empty/icons8--500.png
92.223.124.62
https://bolasport.com
unknown
https://miit.ru/content/logo_T_title.svg?id_wm=874196
195.245.205.104
https://miit.ru/content/%D0%91%D0%B0%D0%BD%D0%BD%D0%B5%D1%80.%20%D0%9D%D0%B0%20%D1%81%D0%B0%D0%B8%CC%86%D1%82.png?id_wm=983419&SWidth=1440
195.245.205.104
https://desimartini.com
unknown
https://hearty.app
unknown
https://thb.tildacdn.com/tild6530-3465-4239-b261-636462376531/-/empty/zFwZeBe4vCo-2.jpg
92.223.124.62
https://static.tildacdn.
unknown
https://mercadoshops.com
unknown
https://nlc.hu
unknown
https://miit.ru/content/cover_%D0%9E%D0%91%D0%9B%D0%9E%D0%96%D0%9A%D0%90.jpg?id_wm=998325&SWidth=360
195.245.205.104
https://p106.net
unknown
https://thb.tildacdn.com/tild6438-3861-4434-a533-353362326262/-/resizeb/20x/Frame_5.png
92.223.124.62
https://thb.tildacdn.com/tild6230-3335-4135-a238-643139353033/-/resizeb/20x/iyoyGFdTThY.jpg
92.223.124.62
https://radio2.be
unknown
http://miit.ru/
195.245.205.104
https://songshare.com
unknown
https://smaker.pl
unknown
https://thb.tildacdn.com/tild3933-6130-4662-a532-613835633362/-/resizeb/20x/_DSC5833.jpg
92.223.124.62
https://thb.tildacdn.com/tild6136-6131-4338-a636-663133656433/-/resizeb/20x/Frame_3.png
92.223.124.62
https://p24.hu
unknown
https://thb.tildacdn.com/tild3336-3733-4838-a366-383038613265/-/empty/12.jpg
92.223.124.62
https://thb.tildacdn.com/tild6163-3931-4338-a566-643565336332/-/resizeb/20x/Desktop_-_3.png
92.223.124.62
https://24.hu
unknown
https://www.youtube.com/generate_204?cpn=
unknown
https://thb.tildacdn.com/tild3035-3561-4631-a532-323866393737/-/resizeb/20x/_.jpg
92.223.124.62
https://miit.ru/resources/css/core.17a4da90.css
195.245.205.104
https://static.tildacdn.com/js/tilda-popup-1.0.min.js
92.223.124.62
https://thb.tildacdn.com/tild6265-3832-4062-b839-323037386538/-/empty/photo.jpg
92.223.124.62
https://miit.ru/content/favicon.ico?id_wm=803912
195.245.205.104
https://mightytext.net
unknown
https://hazipatika.com
unknown
https://joyreactor.com
unknown
https://miit.ru/resources/js/main.7c6338dd.js
195.245.205.104
https://wildixin.com
unknown
https://eworkbookcloud.com
unknown
https://chennien.com
unknown
https://drimer.travel
unknown
https://mc.yandex.com/watch/83391895?wmode=7&page-url=https%3A%2F%2Fmiit.ru%2Fadmissions%2Foffice%2F128921&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A1f7b5m6qwdrmpv8tqq4z7n9f657%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1470%3Acn%3A1%3Adp%3A0%3Als%3A723801423855%3Ahid%3A346102504%3Az%3A-240%3Ai%3A20241005085233%3Aet%3A1728132753%3Ac%3A1%3Arn%3A665982999%3Arqn%3A4%3Au%3A1728132657676591199%3Aw%3A1280x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C970%2C349%2C%2C3%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1728132751732%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1728132753%3At%3A%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D0%B0%D1%8F%20%D0%B8%D0%BD%D1%84%D0%BE%D1%80%D0%BC%D0%B0%D1%86%D0%B8%D1%8F%20%7C%20%D0%9F%D1%80%D0%B8%D1%91%D0%BC%D0%BD%D0%B0%D1%8F%20%D0%BA%D0%BE%D0%BC%D0%B8%D1%81%D1%81%D0%B8%D1%8F%20%7C%20%D0%A0%D0%A3%D0%A2%20(%D0%9C%D0%98%D0%98%D0%A2)&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rcm(0)cdl(na)eco(42009088)ti(1)
87.250.251.119
https://thb.tildacdn.com/tild3736-6636-4536-a536-373537353364/-/empty/icons8--512.png
92.223.124.62
https://www.youtube.com/s/player/96d06116/www-player.css
216.58.212.142
https://mercadopago.cl
unknown
https://thb.tildacdn.com/tild6135-6636-4630-a561-626636616139/-/resizeb/20x/Frame_8.png
92.223.124.62
https://www.google.com/js/th/mK0xWDPcwcXQhJC0zos_TWAHQXo6uV6sCgJ_cLtDow8.js
142.250.186.36
https://naukri.com
unknown
https://interia.pl
unknown
https://bonvivir.com
unknown
https://miit.ru/content/Frame%2041.png?id_wm=797882
195.245.205.104
https://sapo.io
unknown
https://wpext.pl
unknown
https://welt.de
unknown
https://optim.tildacdn.com/tild3661-6536-4466-a236-376438636631/-/resize/240x/-/format/webp/red_arrow_PNG1.png
92.223.124.62
https://poalim.site
unknown
https://drimer.io
unknown
https://infoedgeindia.com
unknown
https://blackrockadvisorelite.it
unknown
https://cognitive-ai.ru
unknown
https://thb.tildacdn.com/tild3462-6535-4238-a438-353836613366/-/resizeb/20x/noroot.png
92.223.124.62
https://cafemedia.com
unknown
https://graziadaily.co.uk
unknown
https://thirdspace.org.au
unknown
https://mercadoshops.com.ar
unknown
https://mc.yandex.com/watch/83391895/1?page-url=https%3A%2F%2Fmiit.ru%2Fadmissions%2Foffice%2F128921&charset=utf-8&hittoken=1728132754_c8b9492df098cf00a431796f72f757c419b3df78972bd06c3e4d3c5d10b26481&browser-info=nb%3A1%3Acl%3A1098%3Aar%3A1%3Avf%3A1f7b5m6qwdrmpv8tqq4z7n9f657%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1470%3Acn%3A1%3Adp%3A1%3Als%3A723801423855%3Ahid%3A346102504%3Az%3A-240%3Ai%3A20241005085248%3Aet%3A1728132768%3Ac%3A1%3Arn%3A16442111%3Arqn%3A6%3Au%3A1728132657676591199%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A1544%3Awv%3A2%3Ads%3A%2C%2C%2C442%2C%2C%2C%2C830%2C1%2C3121%2C3121%2C1%2C2641%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1728132751732%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1728132768&t=gdpr(14)clc(0-0-0)rqnt(2)lt(8300)aw(0)rcm(0)cdl(na)eco(42009088)dss(2)ti(0)&force-urlencoded=1&site-info=%7B%22__ym%22%3A%7B%22ct%22%3A%5B%5D%7D%7D
87.250.251.119
https://thb.tildacdn.com/tild3930-3962-4837-a234-633032323466/-/empty/icons8----512.png
92.223.124.62
https://thb.tildacdn.com/tild3166-6564-4537-b530-366564613064/-/resizeb/20x/Desktop_-_6.png
92.223.124.62
https://thb.tildacdn.com/tild3565-3235-4931-b464-643665343766/-/empty/boy.png
92.223.124.62
https://commentcamarche.com
unknown
https://rws3nvtvt.com
unknown
https://mercadolivre.com.br
unknown
https://clmbtech.com
unknown
https://thb.tildacdn.com/tild3733-3761-4135-b330-383563613732/-/empty/icons8---512.png
92.223.124.62
https://angular.dev/license
unknown
https://salemovefinancial.com
unknown
https://mercadopago.com.br
unknown
https://developers.google.com/youtube/iframe_api_reference#Events
unknown
https://static.tildacdn.com/tild6333-3165-4364-a631-616635623336/_12.png
92.223.124.62
https://static.tildacdn.com/css/tilda-zoom-2.0.min.css
92.223.124.62
https://commentcamarche.net
unknown
https://hj.rs
unknown
https://youtu.be/
unknown
https://hearty.me
unknown
https://thb.tildacdn.com/tild3835-3538-4836-a431-643836653337/-/resizeb/20x/noroot.png
92.223.124.62
https://mercadolibre.com.gt
unknown
There are 90 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
mc.yandex.ru
87.250.251.119
rr3.sn-vgqskn6s.googlevideo.com
173.194.55.104
rr2.sn-ab5l6nrr.googlevideo.com
74.125.172.7
i.ytimg.com
142.250.185.246
ws.tildacdn.com
178.248.236.28
static.doubleclick.net
142.250.184.198
feeds.tildaapi.com
185.129.100.50
youtube-ui.l.google.com
216.58.206.46
googleads.g.doubleclick.net
142.250.185.98
play.google.com
142.250.74.206
photos-ugc.l.googleusercontent.com
216.58.206.65
www.google.com
142.250.186.164
neo.tildacdn.com
5.181.161.181
mmcrut.ru
176.57.64.126
stat.tildacdn.com
5.181.161.197
miit.ru
195.245.205.104
navigator-rut.ru
185.215.4.10
cl-1707279c.gcdn.co
92.223.124.62
yt3.ggpht.com
unknown
mc.yandex.com
unknown
optim.tildacdn.com
unknown
thumb.tildacdn.com
unknown
rr3---sn-vgqskn6s.googlevideo.com
unknown
rr2---sn-ab5l6nrr.googlevideo.com
unknown
thb.tildacdn.com
unknown
www.youtube.com
unknown
static.tildacdn.com
unknown
There are 17 hidden domains, click here to show them.

IPs

IP
Domain
Country
Malicious
176.57.64.126
mmcrut.ru
Bosnia and Herzegowina
216.58.212.142
unknown
United States
142.250.74.206
play.google.com
United States
87.250.250.119
unknown
Russian Federation
192.168.2.6
unknown
unknown
192.168.2.5
unknown
unknown
93.158.134.119
unknown
Russian Federation
185.215.4.10
navigator-rut.ru
Denmark
87.250.251.119
mc.yandex.ru
Russian Federation
5.181.161.181
neo.tildacdn.com
Moldova Republic of
142.250.184.196
unknown
United States
142.250.184.198
static.doubleclick.net
United States
142.250.186.36
unknown
United States
195.245.205.104
miit.ru
Russian Federation
193.3.17.197
unknown
Denmark
216.58.206.46
youtube-ui.l.google.com
United States
239.255.255.250
unknown
Reserved
77.88.21.119
unknown
Russian Federation
142.250.186.100
unknown
United States
142.250.185.166
unknown
United States
142.250.185.246
i.ytimg.com
United States
74.125.172.7
rr2.sn-ab5l6nrr.googlevideo.com
United States
142.250.181.238
unknown
United States
5.181.161.197
stat.tildacdn.com
Moldova Republic of
173.194.55.104
rr3.sn-vgqskn6s.googlevideo.com
United States
216.58.206.65
photos-ugc.l.googleusercontent.com
United States
185.129.100.50
feeds.tildaapi.com
Russian Federation
142.250.181.226
unknown
United States
142.250.186.164
www.google.com
United States
92.223.124.62
cl-1707279c.gcdn.co
Austria
142.250.185.97
unknown
United States
142.250.185.98
googleads.g.doubleclick.net
United States
There are 22 hidden IPs, click here to show them.

Registry

Path
Value
Malicious
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\ClientTelemetry\Sampling
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7344
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Resiliency\StartupItems
be?
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Wizards
PageSize
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\MailSettings
Template
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Options
AutoRecoverySaveIntervalMetadata
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Experiment\word
Language
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Experiment\word
EcsRequestPending
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Experiment\word
SubscriptionCustomerLicenseInfo
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Options
ACUpdated
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Options
DefaultKerningLigatures
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\WEF
Word_RequireForceRefreshAtBoot
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Experiment\word
BuildNumber
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word
Expires
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
1
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
1.1
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
1.2
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
1.3
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
1.4
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
1.5
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
1.6
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
1.7
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
1.8
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
1.9
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
1.10
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
1.11
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
1.12
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
1.13
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
1.14
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
1.15
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
1.16
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
1.17
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
1.18
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
1.19
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
1.20
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
1.21
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
1.22
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
1.23
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
1.24
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
1.25
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
1.26
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
1.27
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
1.28
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
1.29
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
VersionId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word
ETag
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word
DeferredConfigs
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word
ConfigIds
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Resiliency\StartupItems
rr?
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F00000000000000000F01FEC\Usage
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F00000000000000000F01FEC\Usage
VBAFiles
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Security\FileBlock
FileTypeBlockList
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Security\FileBlock
OoxmlConverterBlockList
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\Smart Tag\Recognizers\{3133A7FE-BC5F-4D81-BF02-184ECC88D66E}
NULL
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\Smart Tag\Actions\{16A933D2-A296-49D5-96FC-C7C2DAEE88B4}
NULL
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\Smart Tag\Actions\{16A933D2-A296-49D5-96FC-C7C2DAEE88B4}
filename
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\Smart Tag\Actions\{3CC385AC-95CC-4A75-BF35-AB36AE645BCF}
NULL
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\Smart Tag\Actions\{99E0D1EC-0A0D-4E50-B8A1-82A8B6ECE5CB}
NULL
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}
Solution
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\Smart Tag
migratedBitValues
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\Smart Tag\Applications\OpusApp
FriendlyName
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\Smart Tag\Applications\OpusApp
Save
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\Smart Tag\Applications\OpusApp
ShowButtons
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\Smart Tag\Applications\OpusApp
ShowIndicators
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Resiliency
PotentialDataLossInfo2
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ReviewCycle
ReviewToken
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Resiliency\DocumentRecovery\3421C
3421C
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\ExdCache\Word8.0
MSForms
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\ExdCache\Word8.0
MSComctlLib
HKEY_CURRENT_USER\SOFTWARE\Microsoft\VBA\Forms3\Controls
EnableActiveXControlArchitetureIndependent
HKEY_CURRENT_USER\SOFTWARE\Microsoft\VBA\Forms3\Controls
EnableActiveXControlMSWebBrowserArchiteturePersistenceIssue
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Licensing\BootTimeSkuOverride
{30CAC893-3CA4-494C-A5E9-A99141352216}
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Licensing\CachedLicenseData
winword.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\TypeLib\{F3550673-8241-4E6A-92AC-B9D8CC8CC0D7}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\TypeLib\{F3550673-8241-4E6A-92AC-B9D8CC8CC0D7}\2.0
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\TypeLib\{F3550673-8241-4E6A-92AC-B9D8CC8CC0D7}\2.0\FLAGS
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\TypeLib\{F3550673-8241-4E6A-92AC-B9D8CC8CC0D7}\2.0\0
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\TypeLib\{F3550673-8241-4E6A-92AC-B9D8CC8CC0D7}\2.0\0\win32
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\TypeLib\{F3550673-8241-4E6A-92AC-B9D8CC8CC0D7}\2.0\HELPDIR
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{BEF6E003-A874-101A-8BBA-00AA00300CAB}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{EC72F590-F375-11CE-B9E8-00AA006B1A69}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{82B02370-B5BC-11CF-810F-00A0C9030074}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{82B02372-B5BC-11CF-810F-00A0C9030074}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{8A683C90-BA84-11CF-8110-00A0C9030074}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{8A683C91-BA84-11CF-8110-00A0C9030074}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{04598FC6-866C-11CF-AB7C-00AA00C08FCF}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{04598FC7-866C-11CF-AB7C-00AA00C08FCF}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{29B86A70-F52E-11CE-9BCE-00AA00608E01}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{9A4BBF53-4E46-101B-8BBD-00AA003E3B29}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{5B9D8FC8-4A71-101B-97A6-00000B65C08B}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{CF3F94A0-F546-11CE-9BCE-00AA00608E01}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{04598FC1-866C-11CF-AB7C-00AA00C08FCF}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{8BD21D13-EC42-11CE-9E0D-00AA006002F3}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{8BD21D23-EC42-11CE-9E0D-00AA006002F3}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{8BD21D43-EC42-11CE-9E0D-00AA006002F3}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{A38BFFC3-A5A0-11CE-8107-00AA00611080}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{944ACF93-A1E6-11CE-8104-00AA00611080}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{04598FC2-866C-11CF-AB7C-00AA00C08FCF}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{4C599243-6926-101B-9992-00000B65C6F9}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{5512D111-5CC6-11CF-8D67-00AA00BDCE1D}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{5512D115-5CC6-11CF-8D67-00AA00BDCE1D}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{5512D11B-5CC6-11CF-8D67-00AA00BDCE1D}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{5512D11F-5CC6-11CF-8D67-00AA00BDCE1D}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{5512D123-5CC6-11CF-8D67-00AA00BDCE1D}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{7B020EC1-AF6C-11CE-9F46-00AA00574A4F}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{8BD21D12-EC42-11CE-9E0D-00AA006002F3}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{47FF8FE2-6198-11CF-8CE8-00AA006CB389}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{47FF8FE3-6198-11CF-8CE8-00AA006CB389}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{47FF8FE6-6198-11CF-8CE8-00AA006CB389}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F10090400000000000F01FEC\Usage
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F10090400000000000F01FEC\Usage
SpellingAndGrammarFiles_1033
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F100C0400000000000F01FEC\Usage
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F100C0400000000000F01FEC\Usage
SpellingAndGrammarFiles_1036
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F100A0C00000000000F01FEC\Usage
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F100A0C00000000000F01FEC\Usage
SpellingAndGrammarFiles_3082
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word
WordName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\IdentityCRL\ClockData
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\IdentityCRL\ClockData
ClockTimeSeconds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\IdentityCRL\ClockData
TickCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Roaming\Identities\Anonymous\Settings\1342\{00000000-0000-0000-0000-000000000000}
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Roaming\Identities\Anonymous\Settings\1342\{00000000-0000-0000-0000-000000000000}\PendingChanges
Data
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Draw
InkToolboxPensWordV2
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Shared Tools\Proofing Tools\1.0\Custom Dictionaries
1
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Shared Tools\Proofing Tools\1.0\Custom Dictionaries
UpdateComplete
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocBibs\1033
TM02851216
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328884
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM03090430
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM03457444
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM04033917
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328893
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328905
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocBibs\1033
TM02851217
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328908
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM04033919
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328916
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM04033921
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM03457464
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM04033925
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocParts\1033
TM03998158
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocParts\1033
TM01840907
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM03457475
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM10001114
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocBibs\1033
TM02851218
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocBibs\1033
TM02851219
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocBibs\1033
TM02851220
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocBibs\1033
TM02851221
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328919
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocBibs\1033
TM02851222
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocParts\1033
TM03998159
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328925
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocBibs\1033
TM02851223
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocBibs\1033
TM02851224
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM04033927
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM03457485
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM03457491
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocBibs\1033
TM02851225
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM03457496
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM10001115
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328932
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328935
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM03457503
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328940
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328998
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM03457510
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocBibs\1033
TM02851227
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM04033929
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328972
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328951
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocParts\1033
TM02835233
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328975
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328983
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328986
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocBibs\1033
TM02851226
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM04033937
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328990
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM03457515
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM03090434
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocBibs\1033
NextUpdate
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocBibs\1033
LastUpdate
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
NextUpdate
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
LastUpdate
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Roaming
RoamingLastWriteTimeWord
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocParts\1033
NextUpdate
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocParts\1033
LastUpdate
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
NextUpdate
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
LastUpdate
HKEY_CURRENT_USER\SOFTWARE\Microsoft\IdentityCRL\Immersive\production\Property
00180011DA2E1800
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\ClientTelemetry\Volatile
MsaDevice
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\Word\Text Converters\Import
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\Word\Text Converters\Import
Name
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\Word\Text Converters\Import
Path
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\Word\Text Converters\Import
Extensions
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Shared Tools\Panose
Times New Roman
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Shared Tools\Panose
Symbol
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Shared Tools\Panose
Arial
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Shared Tools\Panose
Calibri
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Shared Tools\Panose
Courier New
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Shared Tools\Panose
Cambria
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Shared Tools\Panose
Tahoma
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Shared Tools\Panose
Candara
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Shared Tools\Panose
Book Antiqua
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Shared Tools\Panose
Calibri Light
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Shared Tools\Panose
Wingdings
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Shared Tools\Panose
Cambria Math
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Reading Locations\Document 0
File Path
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Reading Locations\Document 0
Datetime
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Reading Locations\Document 0
Position
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Roaming
RoamingLastSyncTimeWord
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Security\Trusted Documents
LastPurgeTime
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Data
Toolbars
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Toolbars\Settings
Microsoft Word
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Shared Tools\Panose
Segoe UI Emoji
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Data
Settings
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Options
VisiForceField
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Options
IgnoreFilenamesEmailAliases
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Options
AutoSpell
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Options
NoContextSpell
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Options
WritingStyle
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Options
InsPic
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Options
NavPaneAdvertised
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Options
SoundFeedback
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Options
BkgrndPag
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Options
ATUserAdded
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Options
AccentOnUpper
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Options
AppWindowPos
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Options
AppWindowPosKey
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Signals\Stats\Anonymous\Microsoft.Word.Document
ClicksData
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\GracefulExit\WINWORD\7344
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
en-CH
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
en-GB
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
en-CH
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
en-GB
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common
SessionId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7344
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7344
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7344
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7344
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7344
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=8192&uilcid=1033&build=16.0.16827&crev=3\0
FilePath
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=8192&uilcid=1033&build=16.0.16827&crev=3\0
StartDate
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=8192&uilcid=1033&build=16.0.16827&crev=3\0
EndDate
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Internet\WebServiceCache
LastClean
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7344
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word
Expires
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7344
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7344
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7344
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Resiliency
PotentialDataLossInfo2
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7344
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7344
0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F00000000000000000F01FEC\Usage
VBAFiles
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\TypeLib\{F3550673-8241-4E6A-92AC-B9D8CC8CC0D7}\2.0
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\TypeLib\{F3550673-8241-4E6A-92AC-B9D8CC8CC0D7}\2.0\FLAGS
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\TypeLib\{F3550673-8241-4E6A-92AC-B9D8CC8CC0D7}\2.0\0\win32
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\TypeLib\{F3550673-8241-4E6A-92AC-B9D8CC8CC0D7}\2.0\HELPDIR
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{EC72F590-F375-11CE-B9E8-00AA006B1A69}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{82B02370-B5BC-11CF-810F-00A0C9030074}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{82B02371-B5BC-11CF-810F-00A0C9030074}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{82B02372-B5BC-11CF-810F-00A0C9030074}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{8A683C90-BA84-11CF-8110-00A0C9030074}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{8A683C91-BA84-11CF-8110-00A0C9030074}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{04598FC6-866C-11CF-AB7C-00AA00C08FCF}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{04598FC7-866C-11CF-AB7C-00AA00C08FCF}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{29B86A70-F52E-11CE-9BCE-00AA00608E01}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{04598FC8-866C-11CF-AB7C-00AA00C08FCF}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{9A4BBF53-4E46-101B-8BBD-00AA003E3B29}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{5B9D8FC8-4A71-101B-97A6-00000B65C08B}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{CF3F94A0-F546-11CE-9BCE-00AA00608E01}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{04598FC1-866C-11CF-AB7C-00AA00C08FCF}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{04598FC4-866C-11CF-AB7C-00AA00C08FCF}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{8BD21D13-EC42-11CE-9E0D-00AA006002F3}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{8BD21D23-EC42-11CE-9E0D-00AA006002F3}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{8BD21D33-EC42-11CE-9E0D-00AA006002F3}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{8BD21D43-EC42-11CE-9E0D-00AA006002F3}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{8BD21D53-EC42-11CE-9E0D-00AA006002F3}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{8BD21D63-EC42-11CE-9E0D-00AA006002F3}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{04598FC3-866C-11CF-AB7C-00AA00C08FCF}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{A38BFFC3-A5A0-11CE-8107-00AA00611080}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{944ACF93-A1E6-11CE-8104-00AA00611080}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{04598FC2-866C-11CF-AB7C-00AA00C08FCF}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{79176FB3-B7F2-11CE-97EF-00AA006D2776}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{4C599243-6926-101B-9992-00000B65C6F9}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{5512D111-5CC6-11CF-8D67-00AA00BDCE1D}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{5512D113-5CC6-11CF-8D67-00AA00BDCE1D}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{5512D115-5CC6-11CF-8D67-00AA00BDCE1D}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{5512D117-5CC6-11CF-8D67-00AA00BDCE1D}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{5512D119-5CC6-11CF-8D67-00AA00BDCE1D}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{5512D11B-5CC6-11CF-8D67-00AA00BDCE1D}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{5512D11D-5CC6-11CF-8D67-00AA00BDCE1D}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{5512D11F-5CC6-11CF-8D67-00AA00BDCE1D}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{5512D123-5CC6-11CF-8D67-00AA00BDCE1D}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{5512D125-5CC6-11CF-8D67-00AA00BDCE1D}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{978C9E22-D4B0-11CE-BF2D-00AA003F40D0}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{7B020EC1-AF6C-11CE-9F46-00AA00574A4F}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Wow6432Node\Interface\{8BD21D12-EC42-11CE-9E0D-00AA006002F3}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{8BD21D12-EC42-11CE-9E0D-00AA006002F3}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{8BD21D22-EC42-11CE-9E0D-00AA006002F3}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{8BD21D32-EC42-11CE-9E0D-00AA006002F3}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{8BD21D42-EC42-11CE-9E0D-00AA006002F3}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{8BD21D52-EC42-11CE-9E0D-00AA006002F3}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{8BD21D62-EC42-11CE-9E0D-00AA006002F3}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{7B020EC2-AF6C-11CE-9F46-00AA00574A4F}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{7B020EC7-AF6C-11CE-9F46-00AA00574A4F}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{79176FB2-B7F2-11CE-97EF-00AA006D2776}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{4C5992A5-6926-101B-9992-00000B65C6F9}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{796ED650-5FE9-11CF-8D68-00AA00BDCE1D}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{47FF8FE0-6198-11CF-8CE8-00AA006CB389}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{47FF8FE1-6198-11CF-8CE8-00AA006CB389}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{47FF8FE2-6198-11CF-8CE8-00AA006CB389}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{47FF8FE3-6198-11CF-8CE8-00AA006CB389}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{47FF8FE4-6198-11CF-8CE8-00AA006CB389}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{47FF8FE5-6198-11CF-8CE8-00AA006CB389}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{47FF8FE6-6198-11CF-8CE8-00AA006CB389}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{47FF8FE8-6198-11CF-8CE8-00AA006CB389}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{47FF8FE9-6198-11CF-8CE8-00AA006CB389}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{5CEF5613-713D-11CE-80C9-00AA00611080}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{92E11A03-7358-11CE-80CB-00AA00611080}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{04598FC9-866C-11CF-AB7C-00AA00C08FCF}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{7B020EC8-AF6C-11CE-9F46-00AA00574A4F}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F10090400000000000F01FEC\Usage
SpellingAndGrammarFiles_1033
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F10090400000000000F01FEC\Usage
SpellingAndGrammarFiles_1033
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F100C0400000000000F01FEC\Usage
SpellingAndGrammarFiles_1036
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F100C0400000000000F01FEC\Usage
SpellingAndGrammarFiles_1036
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F100A0C00000000000F01FEC\Usage
SpellingAndGrammarFiles_3082
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F100A0C00000000000F01FEC\Usage
SpellingAndGrammarFiles_3082
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Roaming\Identities\Anonymous\Settings\1342\{00000000-0000-0000-0000-000000000000}\PendingChanges
Data
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F10090400000000000F01FEC\Usage
SpellingAndGrammarFiles_1033
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F10090400000000000F01FEC\Usage
SpellingAndGrammarFiles_1033
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F10090400000000000F01FEC\Usage
SpellingAndGrammarFiles_1033
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F10090400000000000F01FEC\Usage
SpellingAndGrammarFiles_1033
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F10090400000000000F01FEC\Usage
SpellingAndGrammarFiles_1033
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F10090400000000000F01FEC\Usage
SpellingAndGrammarFiles_1033
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F10090400000000000F01FEC\Usage
SpellingAndGrammarFiles_1033
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F10090400000000000F01FEC\Usage
SpellingAndGrammarFiles_1033
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocBibs\1033
TM02851220
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328916
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocBibs\1033
TM02851221
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocBibs\1033
TM02851218
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocBibs\1033
TM02851226
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocParts\1033
TM02835233
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocBibs\1033
TM02851223
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocBibs\1033
TM02851217
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocBibs\1033
TM02851224
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocBibs\1033
TM02851225
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328893
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocParts\1033
TM01840907
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocBibs\1033
TM02851227
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM03090430
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328935
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328908
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328925
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocBibs\1033
TM02851222
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328905
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocBibs\1033
TM02851219
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328919
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocBibs\1033
TM02851216
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328884
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328932
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328972
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328975
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328986
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328940
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328990
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328951
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328998
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocParts\1033
TM03998158
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\SmartArt\1033
TM03328983
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM03090434
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Roaming
RoamingConfigurableSettings
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM03457515
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Roaming
RoamingConfigurableSettings
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM03457464
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM03457491
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM03457475
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM03457444
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM03457496
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM10001115
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM03457503
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM04033917
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM03457510
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM10001114
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM04033919
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM04033925
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM04033929
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM04033921
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM03457485
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM04033927
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\WordDocParts\1033
TM03998159
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LCCache\Themes\1033
TM04033937
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7344
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Resiliency
PotentialDataLossInfo2
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7344
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\IdentityCRL\Immersive\production\Token\{2B379600-B42B-4FE9-A59C-A312FB934935}
DeviceTicket
HKEY_CURRENT_USER\SOFTWARE\Microsoft\IdentityCRL\Immersive\production\Token\{2B379600-B42B-4FE9-A59C-A312FB934935}
DeviceId
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\Word\Text Converters\Import
Name
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\Word\Text Converters\Import
Path
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\Word\Text Converters\Import
Extensions
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\Word\Text Converters\Import
Name
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\Word\Text Converters\Import
Path
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\Word\Text Converters\Import
Extensions
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Resiliency\DocumentRecovery\3421C
3421C
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7344
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Resiliency
PotentialDataLossInfo2
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Roaming
RoamingLastWriteTimeWord
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F100C0400000000000F01FEC\Usage
SpellingAndGrammarFiles_1036
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F100C0400000000000F01FEC\Usage
SpellingAndGrammarFiles_1036
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Reading Locations\Document 0
Position
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7344
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7344
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7344
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7344
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7344
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7344
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7344
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7344
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7344
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7344
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7344
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7344
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7344
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7344
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7344
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7344
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7344
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\WINWORD\7344
0
There are 428 hidden registries, click here to show them.

DOM / HTML

URL
Malicious
https://miit.ru/
https://miit.ru/
https://miit.ru/
https://navigator-rut.ru/
https://navigator-rut.ru/
https://miit.ru/page/163199
https://miit.ru/admissions/office/128921
https://mmcrut.ru/
https://mmcrut.ru/
https://mmcrut.ru/
https://mmcrut.ru/
https://mmcrut.ru/
https://mmcrut.ru/
https://mmcrut.ru/
There are 4 hidden doms, click here to show them.