'
metaflows logo
Category Started On Completed On Duration Cuckoo Version
FILE 2016-11-08 17:34:21.865230 2016-11-08 17:36:53.786379 151 seconds 2.0-dev
Machine Label Manager Started On Shutdown On
win7cuckoo2 win7 Clone 2 VirtualBox 2016-11-08 17:34:22 2016-11-08 17:36:52

File Details

File name 136a68fad2f04efe53cd19e20006fb1415b00e21.zip
File size 1106 bytes
File type Zip archive data, at least v2.0 to extract
CRC32 6B7159D4
MD5 2fdf8cc175ccc9b4e31c71b170732c75
SHA1 136a68fad2f04efe53cd19e20006fb1415b00e21
SHA256 28940a4fb8f0394c031c63340f39437d35edcf0a02ff07db263429127f7b5559
SHA512 8d36eb93d90694e9ee46e9b9e81713a16a091ecaa56c4c749873e894cb5bb94cb6e2d68427c143a2c272afb2ef4bcdc2178cc081f26894c3a8480aa75579bd14
Ssdeep 24:9hrspa64G9iR5J5blIuDWH2sogtN+VV0F164RbP9Lu0W0a:9hr4axJIuyH2RVV46ou0ba
PEiD None matched
Yara
  • PM_Zip_with_js ()
VirusTotal Permalink
VirusTotal Scan Date: 2016-11-08 13:55:26
Detection Rate: 6/55 (Expand)

MetaFlows Scores

Metaflows Analysis Results (Signatures=125, Anomalies=0, PEiD=0, Yara=2, VT[1478626634]=100): Snort Events=1, AV Events=2
Total Score=125

SNORT EVENTS:
ET POLICY PE EXE or DLL Windows file download HTTP

CLAMAV DETECTED:
Sanesecurity.Malware.26447.JsHeur.UNOFFICIAL FOUND
DROPPED FILE - NRV_KL460_.js: Sanesecurity.Malware.26447.JsHeur.UNOFFICIAL FOUND

Dropped File/Buffer Yara Signatures:
5a57a3575e28bb0de93533f392c9ab3a2941d9c2 [BUFFER]: Str_Win32_Http_API
404a4f65e41aa86d2b4d5cdf1c09fc82abf61b6b [BUFFER]: shellcode

Signatures

antivm_queries_computername details
recon_fingerprint details
antivm_memory_available details
dumped_buffer details
creates_doc details
antivm_network_adapters details
dumped_buffer2 details
antivm_vbox_files details
Windows_Proxy_Tinkering details
network_wscript_downloader details
persistence_ads details
antiav_detectfile details
exploit_heapspray details
malicious_document_urls details
network_document_file details
network_downloader_exe details
antivm_vbox_devices details
antivm_vbox_files details
modifies_files details

Screenshots

No screenshots available.

Static Analysis

Nothing to display.

Dropped Files

8a1c8dde9b0c349c_gizcrygc-7am0-f7er-0a46-be98285d5096.thor

571fb2167c9d5d6c_gizcrygc-7am0-f7er-e904-50756238fdb0.thor

f3aaf25ef9848c68_gizcrygc-7am0-f7er-7a61-0737640d3372.thor

97c957c5c4e16517_gizcrygc-7am0-f7er-0c63-e2d8cffe15cc.thor

f180db48de7469d2_gizcrygc-7am0-f7er-ab98-f8b58756ab91.thor

24696fe19c9cc22c_gizcrygc-7am0-f7er-d48a-c9877349a56f.thor

efe36a5744e636a1_gizcrygc-7am0-f7er-e5a7-a55101199542.thor

7961a49946ea6f02_gizcrygc-7am0-f7er-fe13-5ebec969e894.thor

a1894ab21e450cf0_gizcrygc-7am0-f7er-5e2f-918f0246f6de.thor

e25270769c6710ef_gizcrygc-7am0-f7er-69d9-0aeed00f2abf.thor

debf22bc0eee8d8b_gizcrygc-7am0-f7er-e710-dbea9c6dcff0.thor

56d6328fb4279a91_gizcrygc-7am0-f7er-5be2-32c4dd00a93c.thor

e8b7e97e79f522ca_gizcrygc-7am0-f7er-5615-9aed959d9b57.thor

2901ee88a3829c19_gizcrygc-7am0-f7er-263b-e3469e7a442e.thor

acab847631e00b96_gizcrygc-7am0-f7er-b3ef-e8da81a669d1.thor

1e044e4b1c62765c_gizcrygc-7am0-f7er-82de-d483f01b0e2e.thor

5402626abaf0a8e6_gizcrygc-7am0-f7er-aaaa-6694ea13d8aa.thor

c7055a4ff8bad4a7_gizcrygc-7am0-f7er-f911-c1188341111c.thor

33816fcd1a7aa1e7_gizcrygc-7am0-f7er-fca4-7077f2581daf.thor

a04d05c5394beae1_gizcrygc-7am0-f7er-369e-39cd2c7e0ec7.thor

f558f5f7f8eb914c_gizcrygc-7am0-f7er-0cc4-03ba957037f0.thor

03262f8622060849_gizcrygc-7am0-f7er-d028-eca7cfe1bded.thor

77148d6b4631dd56_gizcrygc-7am0-f7er-efbb-b64f744ce60f.thor

187ef65f7936eb16_gizcrygc-7am0-f7er-7fa1-cc1b916391ec.thor

b34f9921fa4e12c5_gizcrygc-7am0-f7er-327e-2ea2c769f150.thor

172aef97352938a2_gizcrygc-7am0-f7er-9289-ce300ce40267.thor

4c23b158e6e240da_gizcrygc-7am0-f7er-28cb-fe52be92f5b7.thor

a18da5cefdd9d1cf_gizcrygc-7am0-f7er-6c21-e1a288312b00.thor

80ad4858566a9dbb_gizcrygc-7am0-f7er-c589-963c314d46c9.thor

fd5f68b59aa2b3e8_resource.xml

72240f755461307f_gizcrygc-7am0-f7er-95b4-2d18ce6e1423.thor

40fc6453f60e28fc_gizcrygc-7am0-f7er-d945-73fd4d74dac5.thor

38f5293ed90ccd12_gizcrygc-7am0-f7er-087b-94ab234080c4.thor

cae7587695ce8c26_gizcrygc-7am0-f7er-1358-a35ea780b8ff.thor

bd68594c3e0261f3_gizcrygc-7am0-f7er-338f-7fe2a814d1e4.thor

104b70b1f4d3b22a_gizcrygc-7am0-f7er-4445-8b92f1274dea.thor

1dd277671791375b_gizcrygc-7am0-f7er-1c32-4e2e3b140e29.thor

5522b98b0b55dfa3_gizcrygc-7am0-f7er-442f-31a31c445b1f.thor

30d0d04e8bf4f3cf_gizcrygc-7am0-f7er-451b-685ceeb0c07b.thor

eab1c78075f51b9e_gizcrygc-7am0-f7er-3bc1-a8ae853f93e9.thor

86caeeec078bcfad_gizcrygc-7am0-f7er-2770-0def824907a1.thor

cfefea712156c7f7_gizcrygc-7am0-f7er-845d-2fafa526149d.thor

06d329bd532689e9_gizcrygc-7am0-f7er-a8e2-b96007de710d.thor

63c63a3ff53696f5_gizcrygc-7am0-f7er-90ed-f2327cfc40a6.thor

f786ec0ed1a95ab9_gizcrygc-7am0-f7er-bf1b-5bda95dcfec0.thor

e97e7a17bc6a9998_gizcrygc-7am0-f7er-6b8c-43be7281c1a3.thor

f9613e22bc5b834e_gizcrygc-7am0-f7er-d954-6424bc0301f1.thor

22b2e768b9ceec4e_gizcrygc-7am0-f7er-af13-98d6a0a7afae.thor

2face77e27f5d8c5_gizcrygc-7am0-f7er-52af-1a92821c056c.thor

14e281d22e34cb71_gizcrygc-7am0-f7er-3d32-7170b7fe766f.thor

76e72ccb6ccf7cd1_gizcrygc-7am0-f7er-b1b3-50070e829080.thor

d14d0735338ecbbc_gizcrygc-7am0-f7er-bc8b-6069d1049a13.thor

5a339e5ce06ee4ca_gizcrygc-7am0-f7er-481e-8e360cdcc8b3.thor

e6974cc4f2367c8e_gizcrygc-7am0-f7er-8d97-5023dbb94f70.thor

b9c91896da0b4dac_gizcrygc-7am0-f7er-2618-9d873488e229.thor

e06eb9b6ef7f9737_gizcrygc-7am0-f7er-902c-4fbff8444890.thor

549cdd783eb92a2e_gizcrygc-7am0-f7er-dcf2-6387a52468fd.thor

dd817ab211488204_gizcrygc-7am0-f7er-6ade-e713370c8121.thor

6645d5272c80badf_gizcrygc-7am0-f7er-e6f1-624b00a044b5.thor

38b75a3c45b27870_gizcrygc-7am0-f7er-67bb-e096a4177fda.thor

5433099c07ab5eec_gizcrygc-7am0-f7er-99ff-744ee47dedc7.thor

8a9872212e13e812_gizcrygc-7am0-f7er-9ee3-c18e0fb80968.thor

e9cc4d7dd0b16482_gizcrygc-7am0-f7er-5500-4c0c7b1a166d.thor

520217ae2fc4087b_gizcrygc-7am0-f7er-6849-5fbed1ba5589.thor

9f198903bbc920c2_gizcrygc-7am0-f7er-d3b7-1e9e421de522.thor

b504969d3dfb3e93_gizcrygc-7am0-f7er-467a-412279d15bfd.thor

a03f6b6182721bbc_gizcrygc-7am0-f7er-da6c-d5c29f1978f3.thor

8ca6a39fa9c4ac8c_gizcrygc-7am0-f7er-a08f-0bd15c60a5f8.thor

22967fe9bc90210e_gizcrygc-7am0-f7er-ab37-367852d3d078.thor

728674affb7ddc2b_gizcrygc-7am0-f7er-da9b-8b997af9bb84.thor

c9a4f04be4efcec6_gizcrygc-7am0-f7er-93cc-3eba2e899d92.thor

23c2029fb3579e33_gizcrygc-7am0-f7er-6e25-9f466d78d38e.thor

dbae3fdac68d2e66_gizcrygc-7am0-f7er-91b7-c9a2e220cfb5.thor

094b5c0879a4d1a4_gizcrygc-7am0-f7er-d8fd-d189562e7d41.thor

01a785ae23592c61_gizcrygc-7am0-f7er-f3d2-d1ee8c7d5134.thor

996ef4b60e28e296_gizcrygc-7am0-f7er-c862-6ea51ec41c5a.thor

14dfb2d4430793d7_gizcrygc-7am0-f7er-6487-a3498f7373a7.thor

9003f6568234f289_gizcrygc-7am0-f7er-c69e-2c2bb3584fbd.thor

b3ab248645c98846_gizcrygc-7am0-f7er-74f5-d14d1091d673.thor

5ba455dbf38da10e_gizcrygc-7am0-f7er-02c7-7e47cc139c68.thor

64871763768ee5d6_gizcrygc-7am0-f7er-0f3d-3bcdecf0ffdd.thor

84cd3ca7b312cb81_gizcrygc-7am0-f7er-af20-ca9cf5bb7f7a.thor

0484c8bc00320151_gizcrygc-7am0-f7er-da7c-91bb2f6614a3.thor

928c155d2cde17b0_gizcrygc-7am0-f7er-411c-d7c48b5cf261.thor

856637cde661ff47_gizcrygc-7am0-f7er-f862-c378e198dd5a.thor

07703066c7a0d9d5_gizcrygc-7am0-f7er-b4c1-94458ed636d5.thor

1152e4b7ad0c7de2_gizcrygc-7am0-f7er-9ca4-db5d2b8e0d76.thor

822e8d387cd20833_gizcrygc-7am0-f7er-965d-3705090cf4f6.thor

e2836c92a487636c_gizcrygc-7am0-f7er-e4b1-046a3de2f980.thor

ba6a73a78c753263_gizcrygc-7am0-f7er-3747-4bc437f956d1.thor

48bcbf795871959f_gizcrygc-7am0-f7er-54b6-750ae50dd997.thor

18c278b73a2008b6_gizcrygc-7am0-f7er-4ef2-4f4228ffa7aa.thor

6ec1bf2e790a8944_gizcrygc-7am0-f7er-5e75-0435a3dd37cb.thor

b93cf2bb7206c6ba_gizcrygc-7am0-f7er-659d-836d7861eea5.thor

3fb7219bf94cf2a4_gizcrygc-7am0-f7er-a7d8-436852fb45f7.thor

32bdb138c7b02a05_gizcrygc-7am0-f7er-880a-039bd5123872.thor

be3538b4b0be77d4_gizcrygc-7am0-f7er-97fa-69ba53a9603d.thor

f1aef9786682add4_gizcrygc-7am0-f7er-5344-2270b141e6a8.thor

5ab08448d4c7fc37_gizcrygc-7am0-f7er-5b59-c4ac9a8a9ec5.thor

81d5e1a88b2479a4_gizcrygc-7am0-f7er-ffea-291e1876818b.thor

7ca7d0cf02af3ea2_gizcrygc-7am0-f7er-8de0-b0b5a803ab06.thor

141b960593e3856c_gizcrygc-7am0-f7er-2a05-4551c7039161.thor

50ea7937b597fc80_gizcrygc-7am0-f7er-5ba6-3eceecee05a3.thor

8815495e9a67eb43_gizcrygc-7am0-f7er-1f30-a70ae1964b94.thor

c53e52e38e4afeb5_gizcrygc-7am0-f7er-0c85-ad9cbd15c30f.thor

b947110b0359daec_gizcrygc-7am0-f7er-63ad-ea2899f20075.thor

9639c81a580057a4_gizcrygc-7am0-f7er-8c71-c9dcca91f82d.thor

93431e0979a26686_gizcrygc-7am0-f7er-2b10-74af83bef006.thor

a61ac4a99da923d9_gizcrygc-7am0-f7er-2976-4af423187b5b.thor

92991a6e06e18498_gizcrygc-7am0-f7er-a94f-12dcc63595a4.thor

ddd0ad469b1e7717_gizcrygc-7am0-f7er-3492-8f29a98464a9.thor

54a0ff9509125b04_gizcrygc-7am0-f7er-dffa-ed903d4b9e49.thor

f2e158e68c8d2f5e_gizcrygc-7am0-f7er-6a39-967830ba62cb.thor

32b32c954ed70e58_gizcrygc-7am0-f7er-8203-c926aa9bb315.thor

ac47751841ceb442_gizcrygc-7am0-f7er-77ff-c9e34cebc49b.thor

3c0576d241018a24_gizcrygc-7am0-f7er-b8e4-ff9f90495778.thor

90532dd44771db3b_gizcrygc-7am0-f7er-5fa5-838898cfe20a.thor

fd3e748e74d56e61_gizcrygc-7am0-f7er-5d1d-74d764575dcd.thor

e3bc47f85b874881_gizcrygc-7am0-f7er-cd6e-62396718ab46.thor

7a4bebf9e581346e_gizcrygc-7am0-f7er-14ba-222b21dff465.thor

b9b06887863e91f5_gizcrygc-7am0-f7er-54e1-851b341c5de8.thor

ff411eb2376fbdfc_gizcrygc-7am0-f7er-3861-e32790a806d2.thor

c55776c83d30e034_gizcrygc-7am0-f7er-4541-f804a304d89c.thor

bb5670db55635e50_gizcrygc-7am0-f7er-d100-15143a5ddabc.thor

d17c27cad4ac1a58_gizcrygc-7am0-f7er-1562-bdf858d57398.thor

b1540668dd264cfb_gizcrygc-7am0-f7er-7858-814519bed789.thor

8390d38894461502_gizcrygc-7am0-f7er-41bd-93146156925a.thor

255a2cd45ee867d5_gizcrygc-7am0-f7er-6a73-76d27d5aa143.thor

ddae48240c48819b_gizcrygc-7am0-f7er-e1d9-ccf04df14457.thor

850319e55da707cb_gizcrygc-7am0-f7er-2b8a-a5d36d2dd0dc.thor

c7a2a8900e4332af_gizcrygc-7am0-f7er-ce07-7009550727fd.thor

f6532d6ba92eef7f_gizcrygc-7am0-f7er-b23d-ef27c258c098.thor

09338d90eeb15c68_gizcrygc-7am0-f7er-3519-ebc078dabdf8.thor

666b12ebd347f4b4_gizcrygc-7am0-f7er-390e-4cad917a5e65.thor

0474a139ae5f0646_gizcrygc-7am0-f7er-c722-808d27d31226.thor

a5e2fde1accba45c_gizcrygc-7am0-f7er-8114-1d85c46490f4.thor

e285365821c1a050_gizcrygc-7am0-f7er-adad-1188144b81eb.thor

98cde7b8f9e23f5e_gizcrygc-7am0-f7er-393d-c784c3478097.thor

ddf37afc3efd9ea6_gizcrygc-7am0-f7er-8380-6f108b54159a.thor

4250763ffabe896d_gizcrygc-7am0-f7er-e7fd-2dfaa9441cb2.thor

32062dd5a8e20d40_gizcrygc-7am0-f7er-225a-c506a3d858b0.thor

f01983d513e72b0b_gizcrygc-7am0-f7er-e66e-9e7f825583e8.thor

7c24922c74115af6_gizcrygc-7am0-f7er-6b1a-7a7e3a2c346b.thor

d04c38c1b51381c7_gizcrygc-7am0-f7er-81d6-47992a60b92a.thor

cba70e08c97c3f4b_gizcrygc-7am0-f7er-7831-ccb1156d7ae6.thor

49dbd1e27986e47d_gizcrygc-7am0-f7er-7973-70881a369ad1.thor

89fd1c35af68334f_gizcrygc-7am0-f7er-2bdf-b8a2ba9a8ace.thor

f6b33480bf41997d_gizcrygc-7am0-f7er-8477-1fda90724b08.thor

b69f632f25cc153c_gizcrygc-7am0-f7er-218c-b25f3e083c3f.thor

cdb840be0b369682_gizcrygc-7am0-f7er-fc9f-1d5390e2cd85.thor

1d786bfaac64a11b_gizcrygc-7am0-f7er-33e2-11ea310a5693.thor

b99a3f245438a619_gizcrygc-7am0-f7er-a33d-9fb1744ebc9a.thor

c167fd55750baa4c_gizcrygc-7am0-f7er-61a6-73c7220d8426.thor

770692d236744945_gizcrygc-7am0-f7er-8212-fedd74d4e637.thor

70a49b7d28eba63b_gizcrygc-7am0-f7er-83f3-411942e98957.thor

5a1c4ccae2da04c7_gizcrygc-7am0-f7er-6f24-f9a19efa53c4.thor

06695094bc24f022_gizcrygc-7am0-f7er-4b32-8b2c07af7b6d.thor

c0fadc17f01b230f_gizcrygc-7am0-f7er-97bc-7c5ccbdf437d.thor

fea9fa3acd976c24_gizcrygc-7am0-f7er-c95d-f6d3627ea9dd.thor

554a60e50953638f_gizcrygc-7am0-f7er-016e-518dbd31c518.thor

c6a18f3e0c6cd212_gizcrygc-7am0-f7er-753a-c9a5b5692b09.thor

671eabfe06e80e01_gizcrygc-7am0-f7er-ec68-45b4728d75a1.thor

cc4d1dbea8630eba_gizcrygc-7am0-f7er-4527-c194a061a771.thor

6b6f1c902077d9aa_gizcrygc-7am0-f7er-d400-f8f344b112f6.thor

6ae58fbac2d6c384_gizcrygc-7am0-f7er-df81-275a8d4dd41c.thor

e0d83b0da1d112fc_gizcrygc-7am0-f7er-9f7b-fdcaaa6f22f0.thor

7f26129b18fbf71c_gizcrygc-7am0-f7er-94e4-cef8eda9693b.thor

98954d3b658e64f0_gizcrygc-7am0-f7er-1eaf-272cfd90b81e.thor

5cbb83214dd87a32_gizcrygc-7am0-f7er-7040-9f06a74e669c.thor

1b4a8bcf0acd9075_gizcrygc-7am0-f7er-ac7a-5aba3fa4e4b3.thor

5a5d23f09dda6b8b_gizcrygc-7am0-f7er-fb99-c1e5980dd3be.thor

8931d34acc2d60b8_behavior.xml

599b20630b8feaf8_gizcrygc-7am0-f7er-12a2-36daa8884013.thor

79d4121c1286129c_6sbdh[1]

5a1ddea7f0db3989_gizcrygc-7am0-f7er-2e71-e21b4152d112.thor

3f7d1d812dba9593__3_what_is.html

1f63b60f9b208039_gizcrygc-7am0-f7er-35e9-5b29f83037b0.thor

c8afa54b88642b02_gizcrygc-7am0-f7er-c1ab-facbc7ef8004.thor

8bd348445700d337_gizcrygc-7am0-f7er-0290-9772033df2a2.thor

b1835345873f8143_gizcrygc-7am0-f7er-f127-676cf9e31bad.thor

75d538bd3505e5f4_gizcrygc-7am0-f7er-4efb-b34fe91b8480.thor

4cf8f0c4eaf1734b_gizcrygc-7am0-f7er-ab3e-b259f9cb08fe.thor

9d9bbdbd9cbe4618_gizcrygc-7am0-f7er-a6ed-7452d1b28411.thor

41319c20f4eb4db8_gizcrygc-7am0-f7er-89d0-194b226b7666.thor

450480e4fe056c6a_gizcrygc-7am0-f7er-8d8c-d79a6b80e127.thor

33f9a07e9630aaf3_gizcrygc-7am0-f7er-7768-bb8d14b2da76.thor

d2b2969ba49f4739_gizcrygc-7am0-f7er-1156-d36bc40329e2.thor

76c2a26d478326dc_gizcrygc-7am0-f7er-9299-3b149243107e.thor

86cb5fe07a4b3c46_gizcrygc-7am0-f7er-ead6-08605e0888ee.thor

f6bc1f1d9aa772cd_gizcrygc-7am0-f7er-a0da-fa412dd0a797.thor

1f0bc08bf4bd9a56_gizcrygc-7am0-f7er-5a53-6f62f33cf9a5.thor

ec1bd55d26459fcc_gizcrygc-7am0-f7er-30da-0aeb2220b6dd.thor

70e3e538637dc27f_gizcrygc-7am0-f7er-f7fb-d94088ad60a6.thor

5625e0bdb3fcd6d2_gizcrygc-7am0-f7er-9ed7-de62066fb15a.thor

c5635fb103d05dee_gizcrygc-7am0-f7er-0ff7-20002e9c6a40.thor

404be95ce8491656_gizcrygc-7am0-f7er-31eb-e6f0bc939091.thor

e3776647155dcff4_gizcrygc-7am0-f7er-3e86-02c934e83a55.thor

c6e1e7571419a0a4_gizcrygc-7am0-f7er-6573-32f1baab111a.thor

b6f9a82e1a2cecf3_gizcrygc-7am0-f7er-769a-045ef89e0cbc.thor

706c6064b654c511_gizcrygc-7am0-f7er-55aa-8067e0fbc370.thor

d28e10f62f28fb56_gizcrygc-7am0-f7er-af68-226523385c04.thor

7ce4844e4abdaf86_gizcrygc-7am0-f7er-65c0-8caa253a1f93.thor

9c4c3764b12e69d6_gizcrygc-7am0-f7er-f425-91dee934ee8f.thor

6001aa3edf354932_gizcrygc-7am0-f7er-e438-42c5a91fd605.thor

7d7e60df906e8bcc_gizcrygc-7am0-f7er-c5e1-50ff6d766400.thor

5b35f409b4eb1515_gizcrygc-7am0-f7er-1f4b-07d48375c999.thor

76b03de272c3c9b7_gizcrygc-7am0-f7er-22ac-aac2aca17fce.thor

0234659939ce9215_gizcrygc-7am0-f7er-63ae-0067bcd239a4.thor

c235ed40ef591bb4_gizcrygc-7am0-f7er-2039-3febdeec4701.thor

70e4966a69c79497_gizcrygc-7am0-f7er-a92a-1bb0b7430b44.thor

d7f17b08fa6dda7c_gizcrygc-7am0-f7er-6cf1-b7fffdbd4833.thor

17302e650e898ea5_gizcrygc-7am0-f7er-86f6-2ee2dfe285bc.thor

0f2517af9bd80e85_gizcrygc-7am0-f7er-b4e1-e53df1723eb8.thor

ba7c65e8b3a8029a_gizcrygc-7am0-f7er-65c3-24cabfa50ee2.thor

6e8b0a81113a753d_gizcrygc-7am0-f7er-6167-8ac84376e06b.thor

4653598fcf3b0168_gizcrygc-7am0-f7er-f0ff-615f1e81b1f2.thor

c915cd33cbf8a487_gizcrygc-7am0-f7er-0e73-a15faec284b6.thor

311a855dfe3c162b_gizcrygc-7am0-f7er-4d58-140e94a7c857.thor

5d3ebc1fa0d8b415_gizcrygc-7am0-f7er-86cb-f63b769ca8ce.thor

49bb876c9f231748_gizcrygc-7am0-f7er-c439-d43bf843bc7a.thor

59ff458875eaaf48_gizcrygc-7am0-f7er-ebce-643b34108190.thor

95e79761e81442c7_gizcrygc-7am0-f7er-b611-cc7272c9dbf1.thor

f0572b5708c83015_behavior.xml

f9884173e852f826_gizcrygc-7am0-f7er-1098-9faf8ed61904.thor

01a628e9e52a393f_gizcrygc-7am0-f7er-52f5-e1e2f1bc5782.thor

da2155d6899127f7_gizcrygc-7am0-f7er-7234-5fbff2dca498.thor

08ac0d40b5bc42a1_gizcrygc-7am0-f7er-782f-2d52d0036fcf.thor

3b1d087dd0469c7b_gizcrygc-7am0-f7er-eb47-998fa2a984c6.thor

5b8796f190320c81_gizcrygc-7am0-f7er-e1f4-72cae5627998.thor

3c77507e1cdfc0bb_gizcrygc-7am0-f7er-e993-78637d62e1a8.thor

7090af94cc8f0df5_gizcrygc-7am0-f7er-698f-5dd1ea2b4d9e.thor

b86a3fbe9823a378_gizcrygc-7am0-f7er-5a27-b39ff53efe91.thor

4e61b8aa68f039ab_gizcrygc-7am0-f7er-4ddf-34718f6c53f8.thor

d730b70a57a42782_gizcrygc-7am0-f7er-56ae-e3ec286e6c44.thor

d78685bb83f7f15e_gizcrygc-7am0-f7er-d7a6-d62d00cea682.thor

9c0610e33acd4081_gizcrygc-7am0-f7er-e4d3-e499485ee97f.thor

e22b68073e0da449_gizcrygc-7am0-f7er-ac27-d618f1961ec7.thor

efbe23f68372bbcf_gizcrygc-7am0-f7er-1a43-af1c8b5b4986.thor

3e3b5b84022414a9_gizcrygc-7am0-f7er-2119-8b343ce236bb.thor

ef1e974f6f105f8d_gizcrygc-7am0-f7er-073b-098d34c0ee29.thor

b19228c2a7c9c3ee_gizcrygc-7am0-f7er-2747-ab42aa15c171.thor

5c710c05f7f73040_gizcrygc-7am0-f7er-bed0-662edd4ce964.thor

c7c9fb47614da7b4_gizcrygc-7am0-f7er-1f54-2cea6fabe7ae.thor

f2a8b79083d8c5a1_gizcrygc-7am0-f7er-d189-6185ef5e17d2.thor

f47855681465f0f3_gizcrygc-7am0-f7er-6e88-f590d468d6db.thor

fdb28d037052f01c_gizcrygc-7am0-f7er-7384-61d201caa785.thor

425415c31b6f0bbb_gizcrygc-7am0-f7er-a463-e95d13f3e5d9.thor

abb850e97a4aed23_gizcrygc-7am0-f7er-ffbd-0a2af32462d0.thor

1ba946e6b5db4b3e_gizcrygc-7am0-f7er-3d6b-a1bfc0970608.thor

ab9b094efb48b6c4_gizcrygc-7am0-f7er-eaf5-d7f6f794b997.thor

dd7ce910bd5f86b8_gizcrygc-7am0-f7er-d1f7-a08ac7363e05.thor

c67292103751e563_gizcrygc-7am0-f7er-2852-81c7186d8f0e.thor

2f1ae7b84db6da27_gizcrygc-7am0-f7er-da2d-678035962206.thor

706876fbd5652da1_gizcrygc-7am0-f7er-b9b7-6ee2a7994a7b.thor

edf0552c20b4dc49_gizcrygc-7am0-f7er-20f3-bc386749dfa4.thor

32a6ebb1934a1104_gizcrygc-7am0-f7er-6d22-c3f342075f1f.thor

8a6e9f425e80deb9_gizcrygc-7am0-f7er-0732-f8338b81ef40.thor

6436f6dd8257d656_gizcrygc-7am0-f7er-3047-5151886f9df4.thor

849ad4e17888a826_gizcrygc-7am0-f7er-b90f-a734c0671e11.thor

ab5dd4dd7653d243_gizcrygc-7am0-f7er-f781-47b22c32ee7a.thor

b0fea9e2c8912a4d_gizcrygc-7am0-f7er-85d8-db280ae17af6.thor

ee03020347438f8e_gizcrygc-7am0-f7er-2dfe-d7fee96fb5b6.thor

28ff8d707c25afc8_gizcrygc-7am0-f7er-b341-35264e3c4896.thor

495ad9a4630634c9_gizcrygc-7am0-f7er-f884-a8a4d9eced34.thor

81f1f9b01ff51bfb_gizcrygc-7am0-f7er-c35e-1e2a07335033.thor

33b8d497e3e18bd5_gizcrygc-7am0-f7er-20f9-61bd53202b6a.thor

dbe40e20c83a3223_gizcrygc-7am0-f7er-b188-1c798a9b4bd8.thor

e45e55ef522f413e_gizcrygc-7am0-f7er-2442-f4ded2ca6b3a.thor

4ea45289031f8bae_gizcrygc-7am0-f7er-ed4f-472015690330.thor

f80021d7508dd229_gizcrygc-7am0-f7er-ced7-234e42ca46f1.thor

fdb2043b0e81293f_gizcrygc-7am0-f7er-3885-aee1123863b4.thor

3f711948cf5654cc_gizcrygc-7am0-f7er-ab92-d97507267e11.thor

6124898a26076a71_gizcrygc-7am0-f7er-ce0d-c0191c898a15.thor

79b2c69febb04b2a_gizcrygc-7am0-f7er-a5e5-5a6202f62234.thor

8d70352379b5c84d_gizcrygc-7am0-f7er-9562-e67d789a3e13.thor

225c997240eb2daa_gizcrygc-7am0-f7er-5af9-9b841b3bf42f.thor

ce372031a2f740de_gizcrygc-7am0-f7er-f4b7-d2b0a1a03aec.thor

86b36e1bbf96f285_gizcrygc-7am0-f7er-7533-224cd5814967.thor

a191ef5a10fd289e_gizcrygc-7am0-f7er-135a-f83bcf211810.thor

0a10623e4244eda3_gizcrygc-7am0-f7er-fe39-059f932d59e5.thor

d0fbfd010a51a201_gizcrygc-7am0-f7er-09b8-4db0653d9d77.thor

5c3449d829211fea_gizcrygc-7am0-f7er-20e7-c184aaf3c288.thor

74e654a403db7f23_gizcrygc-7am0-f7er-b425-2cf09575c613.thor

NRV_KL460_.js

Network Analysis

Hosts Involved

DNS Requests

HTTP Requests

Behavior Summary

File-Read
  • C:\Users\Harry Dresden\Desktop\desktop.ini
  • C:\Windows\System32\wshom.ocx
  • C:\Windows\System32\wscript.exe
  • C:\Windows\System32\msxml3.dll
  • C:\Users\Harry Dresden\AppData\Local\Temp\NRV_KL460_.js
  • c:\Users\Harry Dresden\Desktop\SfkURRmrkYTZZ.rtf
  • c:\Python27\Lib\email\test\data\msg_26.txt
  • c:\Python27\include\pyexpat.h
  • c:\Users\Harry Dresden\Desktop\gdjFFizwzVkg.docx
  • c:\6cdeacda242012e0e5b593e657\1029\LocalizedData.xml
  • c:\Python27\include\errcode.h
  • c:\Users\Harry Dresden\Desktop\leFWUAtzoIAi.docm
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office64ww.msi.16.x-none.xml
  • c:\Python27\Lib\test\keycert3.pem
  • c:\Users\Harry Dresden\Desktop\EmXudaFxET.docx
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\tasks.xml
  • c:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.0.xml
  • c:\Python27\Lib\email\test\data\msg_28.txt
  • c:\Python27\Lib\test\https_svn_python_org_root.pem
  • c:\Python27\Lib\test\ssl_cert.pem
  • c:\Python27\include\tupleobject.h
  • c:\Python27\include\parsetok.h
  • c:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\behavior.xml
  • c:\6cdeacda242012e0e5b593e657\1045\LocalizedData.xml
  • c:\Python27\include\pyerrors.h
  • c:\Python27\Lib\email\test\data\msg_19.txt
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.outlookmui.msi.16.en-us.xml
  • c:\Python27\include\cobject.h
  • c:\Python27\include\floatobject.h
  • c:\Python27\include\Python-ast.h
  • c:\Python27\include\osdefs.h
  • c:\Python27\Lib\email\test\data\msg_34.txt
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.en-us.xml
  • c:\6cdeacda242012e0e5b593e657\1025\LocalizedData.xml
  • c:\6cdeacda242012e0e5b593e657\1030\LocalizedData.xml
  • c:\Python27\include\pymacconfig.h
  • c:\6cdeacda242012e0e5b593e657\1055\LocalizedData.xml
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml
  • c:\Python27\tcl\tix8.4.3\pref\SGIGray.cs
  • c:\Python27\include\ceval.h
  • c:\Python27\Lib\lib2to3\PatternGrammar.txt
  • c:\Python27\include\grammar.h
  • c:\Python27\include\intobject.h
  • c:\Python27\include\import.h
  • c:\Python27\Lib\email\test\data\msg_07.txt
  • \\?\PIPE\browser
  • c:\Python27\include\pythonrun.h
  • c:\Python27\include\pymem.h
  • c:\Python27\Lib\site-packages\pip\_vendor\requests\cacert.pem
  • c:\Python27\Lib\idlelib\README.txt
  • c:\Python27\include\pyarena.h
  • c:\Python27\include\pygetopt.h
  • c:\Python27\Lib\email\test\data\msg_30.txt
  • c:\Python27\tcl\tix8.4.3\pref\WmDefault.cs
  • c:\6cdeacda242012e0e5b593e657\1033\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1043\eula.rtf
  • c:\Python27\Lib\test\selfsigned_pythontestdotnet.pem
  • c:\6cdeacda242012e0e5b593e657\1032\LocalizedData.xml
  • c:\Python27\Lib\email\test\data\msg_22.txt
  • c:\Python27\Lib\email\test\data\msg_10.txt
  • c:\Python27\Lib\email\test\data\msg_33.txt
  • c:\Python27\include\ast.h
  • c:\Python27\tcl\tix8.4.3\pref\Blue.cs
  • c:\6cdeacda242012e0e5b593e657\1029\eula.rtf
  • c:\Python27\include\rangeobject.h
  • c:\Python27\include\pgenheaders.h
  • c:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.2.xml
  • c:\Python27\include\pythread.h
  • c:\6cdeacda242012e0e5b593e657\1038\LocalizedData.xml
  • c:\Python27\Lib\email\test\data\msg_31.txt
  • c:\Python27\include\patchlevel.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office64mui.msi.16.en-us.xml
  • c:\Python27\Lib\email\test\data\msg_36.txt
  • c:\6cdeacda242012e0e5b593e657\2070\eula.rtf
  • c:\Python27\Lib\email\test\data\msg_24.txt
  • c:\Python27\include\iterobject.h
  • c:\6cdeacda242012e0e5b593e657\1035\eula.rtf
  • c:\Python27\Lib\email\test\data\msg_14.txt
  • c:\Python27\Lib\email\test\data\msg_39.txt
  • c:\6cdeacda242012e0e5b593e657\1042\eula.rtf
  • c:\inetpub\history\CFGHISTORY_0000000005\schema\NetFx40_IIS_schema_update.xml
  • c:\6cdeacda242012e0e5b593e657\UiInfo.xml
  • c:\Python27\include\funcobject.h
  • c:\6cdeacda242012e0e5b593e657\1031\eula.rtf
  • c:\Python27\Lib\test\keycert.pem
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\53955D98-F46F-4906-AE49-9B6F52BA18A9\x-none.16\MasterDescriptor.x-none.xml
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml
  • c:\Python27\include\traceback.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.shared.Office.x-none.msi.16.x-none.xml
  • c:\Python27\include\marshal.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.onenotemui.msi.16.en-us.xml
  • c:\Python27\Lib\email\test\data\msg_23.txt
  • c:\6cdeacda242012e0e5b593e657\1028\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1044\eula.rtf
  • c:\Python27\Lib\email\test\data\msg_40.txt
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.powerpointmui.msi.16.en-us.xml
  • c:\Python27\include\frameobject.h
  • c:\Python27\Lib\email\test\data\msg_06.txt
  • c:\Python27\include\longintrepr.h
  • c:\Python27\Lib\email\test\data\msg_09.txt
  • c:\Python27\Lib\idlelib\extend.txt
  • c:\Python27\include\opcode.h
  • c:\Python27\Lib\email\test\data\msg_15.txt
  • c:\Users\Harry Dresden\Desktop\mKQsYBosaaxa.pptx
  • c:\Python27\Lib\test\badcert.pem
  • c:\6cdeacda242012e0e5b593e657\1041\LocalizedData.xml
  • c:\6cdeacda242012e0e5b593e657\1033\LocalizedData.xml
  • c:\6cdeacda242012e0e5b593e657\1043\LocalizedData.xml
  • c:\6cdeacda242012e0e5b593e657\1046\LocalizedData.xml
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\53955D98-F46F-4906-AE49-9B6F52BA18A9\en-us.16\MasterDescriptor.en-us.xml
  • c:\6cdeacda242012e0e5b593e657\1025\eula.rtf
  • c:\Python27\tcl\tix8.4.3\pref\TK.cs
  • c:\Python27\include\sliceobject.h
  • c:\Python27\include\pgen.h
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\UserDeploymentConfiguration.xml
  • c:\Python27\Lib\test\wrongcert.pem
  • c:\6cdeacda242012e0e5b593e657\1040\LocalizedData.xml
  • c:\Python27\include\moduleobject.h
  • c:\Python27\include\memoryobject.h
  • c:\Python27\tcl\tix8.4.3\pref\TkWin.cs
  • c:\Python27\include\objimpl.h
  • c:\Python27\include\Python.h
  • c:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\behavior.xml
  • c:\Python27\Lib\site-packages\setuptools-16.0.dist-info\top_level.txt
  • c:\6cdeacda242012e0e5b593e657\1045\eula.rtf
  • c:\Python27\Lib\email\test\data\msg_04.txt
  • c:\Python27\include\stringobject.h
  • c:\6cdeacda242012e0e5b593e657\1053\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1041\eula.rtf
  • c:\Python27\Lib\email\test\data\msg_12.txt
  • c:\Python27\Lib\idlelib\idle_test\README.txt
  • c:\Python27\include\token.h
  • c:\nftzmo\bin\cert.p12
  • c:\Python27\include\warnings.h
  • c:\Python27\include\bytes_methods.h
  • c:\Python27\include\dictobject.h
  • c:\Python27\Lib\email\test\data\msg_20.txt
  • c:\Python27\tcl\tix8.4.3\pref\Gray.cs
  • c:\ProgramData\WebEx\WebEx\12_1324\gpc.php
  • c:\Python27\Lib\test\ssl_key.pem
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.officemuiset.msi.16.en-us.xml
  • c:\Python27\include\pycapsule.h
  • c:\Python27\Lib\email\test\data\msg_05.txt
  • c:\Python27\Lib\test\ieee754.txt
  • c:\Python27\include\methodobject.h
  • c:\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\js\DD_belatedPNG.js
  • c:\Python27\include\object.h
  • c:\Python27\Lib\email\test\data\msg_11.txt
  • c:\Python27\include\ucnhash.h
  • c:\Python27\include\pyconfig.h
  • c:\Python27\include\structseq.h
  • c:\6cdeacda242012e0e5b593e657\1036\eula.rtf
  • \\?\PIPE\wkssvc
  • c:\6cdeacda242012e0e5b593e657\1044\LocalizedData.xml
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Access.Access.x-none.msi.16.x-none.xml
  • c:\Python27\include\pymath.h
  • c:\Python27\Lib\test\leakers\README.txt
  • c:\Python27\Lib\email\test\data\msg_27.txt
  • c:\Python27\Lib\idlelib\NEWS.txt
  • c:\Python27\include\bufferobject.h
  • c:\6cdeacda242012e0e5b593e657\1038\eula.rtf
  • c:\Python27\include\timefuncs.h
  • c:\Python27\tcl\tix8.4.3\pref\TixGray.cs
  • c:\Python27\tcl\tclConfig.sh
  • c:\Python27\Lib\email\test\data\msg_25.txt
  • c:\Python27\Lib\email\test\data\msg_32.txt
  • c:\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\js\nor.js
  • c:\Python27\Lib\email\test\data\msg_03.txt
  • c:\6cdeacda242012e0e5b593e657\2052\eula.rtf
  • c:\Python27\Lib\email\test\data\msg_37.txt
  • c:\6cdeacda242012e0e5b593e657\1037\LocalizedData.xml
  • c:\Users\Harry Dresden\Desktop\ScCHjdPSYDAJTd.doc
  • c:\Python27\Lib\test\check_soundcard.vbs
  • c:\Python27\Lib\test\ssl_key.passwd.pem
  • c:\Python27\Lib\test\keycert2.pem
  • c:\Python27\include\py_curses.h
  • c:\Python27\Lib\test\keycert4.pem
  • c:\Python27\include\pyport.h
  • c:\6cdeacda242012e0e5b593e657\1042\LocalizedData.xml
  • c:\Python27\include\listobject.h
  • c:\Python27\include\graminit.h
  • c:\Python27\Lib\email\test\data\msg_16.txt
  • c:\6cdeacda242012e0e5b593e657\1037\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\Strings.xml
  • c:\Users\Harry Dresden\Desktop\OsHigGklXPL.pptx
  • c:\Python27\include\pystrcmp.h
  • c:\Python27\include\symtable.h
  • c:\Python27\include\node.h
  • c:\Python27\include\boolobject.h
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\resource.xml
  • c:\6cdeacda242012e0e5b593e657\1053\LocalizedData.xml
  • c:\Python27\Lib\test\pycacert.pem
  • c:\6cdeacda242012e0e5b593e657\1030\eula.rtf
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.es-es.xml
  • c:\Python27\include\code.h
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\DeploymentConfiguration.xml
  • c:\Python27\Lib\email\test\data\msg_12a.txt
  • c:\Python27\include\dtoa.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.wordmui.msi.16.en-us.xml
  • c:\Python27\include\asdl.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.fr-fr.xml
  • c:\Python27\Lib\test\empty.vbs
  • c:\Python27\include\codecs.h
  • c:\Python27\Lib\idlelib\idle.bat
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.proofing.msi.16.en-us.xml
  • c:\Python27\include\complexobject.h
  • c:\6cdeacda242012e0e5b593e657\1046\eula.rtf
  • c:\Python27\Lib\email\test\data\msg_21.txt
  • c:\6cdeacda242012e0e5b593e657\1049\eula.rtf
  • c:\Python27\Lib\email\test\data\msg_13.txt
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.publishermui.msi.16.en-us.xml
  • c:\inetpub\history\CFGHISTORY_0000000005\schema\NetFx45_IIS_schema_update.xml
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.excelmui.msi.16.en-us.xml
  • c:\6cdeacda242012e0e5b593e657\1036\LocalizedData.xml
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml
  • c:\6cdeacda242012e0e5b593e657\3082\eula.rtf
  • c:\Python27\Lib\test\math_testcases.txt
  • c:\6cdeacda242012e0e5b593e657\1031\LocalizedData.xml
  • c:\Python27\Lib\lib2to3\Grammar.txt
  • c:\6cdeacda242012e0e5b593e657\1035\LocalizedData.xml
  • c:\Python27\include\bytearrayobject.h
  • c:\Users\Harry Dresden\Desktop\weCxJaujur.docx
  • c:\Python27\include\bitset.h
  • c:\Python27\include\pystrtod.h
  • c:\Python27\include\longobject.h
  • c:\Python27\Lib\idlelib\CREDITS.txt
  • c:\Python27\include\setobject.h
  • c:\Python27\Lib\test\badkey.pem
  • c:\Python27\include\cStringIO.h
  • c:\Python27\tcl\tix8.4.3\pref\Bisque.cs
  • c:\6cdeacda242012e0e5b593e657\3082\LocalizedData.xml
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml
  • c:\Python27\include\bytesobject.h
  • c:\Python27\include\pyctype.h
  • c:\6cdeacda242012e0e5b593e657\1049\LocalizedData.xml
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.officemui.msi.16.en-us.xml
  • c:\Python27\include\sysmodule.h
  • c:\Python27\include\pymactoolbox.h
  • c:\Python27\Lib\email\test\data\msg_35.txt
  • c:\Python27\Lib\email\test\data\msg_29.txt
  • c:\Python27\Lib\email\test\data\msg_01.txt
  • c:\6cdeacda242012e0e5b593e657\2070\LocalizedData.xml
  • c:\Python27\Lib\test\nokia.pem
  • c:\inetpub\history\CFGHISTORY_0000000004\schema\NetFx40_IIS_schema_update.xml
  • c:\Python27\include\intrcheck.h
  • c:\Python27\include\pydebug.h
  • \\?\PIPE\lsarpc
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.accessmui.msi.16.en-us.xml
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Word.Word.x-none.msi.16.x-none.xml
  • c:\Python27\include\abstract.h
  • c:\Python27\Lib\email\test\data\msg_38.txt
  • c:\6cdeacda242012e0e5b593e657\2052\LocalizedData.xml
  • c:\Python27\include\pystate.h
  • c:\Python27\Lib\test\nullbytecert.pem
  • c:\Python27\Lib\email\test\data\msg_41.txt
  • c:\Python27\include\structmember.h
  • c:\6cdeacda242012e0e5b593e657\1032\eula.rtf
  • c:\Python27\Lib\test\dh1024.pem
  • c:\Python27\Lib\test\185test.db
  • c:\6cdeacda242012e0e5b593e657\1055\eula.rtf
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office64muiset.msi.16.en-us.xml
  • c:\Python27\include\fileobject.h
  • c:\Python27\Lib\test\sha256.pem
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.accessmuiset.msi.16.en-us.xml
  • c:\Python27\Lib\test\keycert.passwd.pem
  • c:\Python27\include\modsupport.h
  • c:\Python27\include\enumobject.h
  • c:\Python27\include\descrobject.h
  • c:\Python27\include\classobject.h
  • c:\Python27\Lib\site-packages\pip-7.0.1.dist-info\entry_points.txt
  • c:\Python27\include\weakrefobject.h
  • c:\Python27\Lib\email\test\data\msg_08.txt
  • c:\Python27\include\eval.h
  • c:\Python27\include\datetime.h
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\en-US\resource.xml
  • c:\Python27\Lib\email\test\data\msg_18.txt
  • c:\inetpub\history\CFGHISTORY_0000000004\schema\NetFx45_IIS_schema_update.xml
  • c:\6cdeacda242012e0e5b593e657\1028\LocalizedData.xml
  • c:\Python27\include\unicodeobject.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml
  • c:\Python27\include\metagrammar.h
  • c:\Python27\include\pyfpe.h
  • c:\Python27\Lib\email\test\data\msg_17.txt
  • c:\Python27\include\compile.h
  • c:\Python27\include\genobject.h
  • c:\Python27\include\cellobject.h
  • c:\6cdeacda242012e0e5b593e657\1040\eula.rtf
File-Written
  • C:\Users\Harry Dresden\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YLC2QM2Y\6sbdh[1]
  • C:\Users\Harry Dresden\AppData\Local\Temp\jC8HxNFtcZzoLHmS.dll
  • c:\Users\Harry Dresden\Desktop\SfkURRmrkYTZZ.rtf
  • c:\Python27\Lib\email\test\data\msg_26.txt
  • c:\Python27\include\pyexpat.h
  • c:\Users\Harry Dresden\Desktop\gdjFFizwzVkg.docx
  • c:\6cdeacda242012e0e5b593e657\1029\LocalizedData.xml
  • c:\Python27\include\errcode.h
  • c:\Users\Harry Dresden\Desktop\leFWUAtzoIAi.docm
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office64ww.msi.16.x-none.xml
  • c:\Python27\Lib\test\keycert3.pem
  • c:\Users\Harry Dresden\Desktop\EmXudaFxET.docx
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.es-es.xml
  • c:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\GIZCRYGC-7AM0-F7ER-7FA1-CC1B916391EC.thor
  • c:\inetpub\history\CFGHISTORY_0000000005\schema\_39_WHAT_is.html
  • c:\Python27\Lib\email\test\data\msg_28.txt
  • c:\Python27\Lib\test\https_svn_python_org_root.pem
  • c:\Python27\Lib\test\ssl_cert.pem
  • c:\Python27\include\tupleobject.h
  • c:\Python27\include\parsetok.h
  • c:\6cdeacda242012e0e5b593e657\1049\_24_WHAT_is.html
  • c:\6cdeacda242012e0e5b593e657\1045\LocalizedData.xml
  • c:\Python27\include\pyerrors.h
  • c:\Python27\Lib\email\test\data\msg_19.txt
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.outlookmui.msi.16.en-us.xml
  • c:\Python27\include\cobject.h
  • c:\Python27\include\floatobject.h
  • c:\Python27\include\Python-ast.h
  • c:\Python27\include\osdefs.h
  • c:\Python27\Lib\test\empty.vbs
  • c:\Python27\Lib\email\test\data\msg_34.txt
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.en-us.xml
  • c:\ProgramData\WebEx\WebEx\12_1324\_30_WHAT_is.html
  • c:\6cdeacda242012e0e5b593e657\1025\LocalizedData.xml
  • c:\6cdeacda242012e0e5b593e657\1030\LocalizedData.xml
  • c:\ProgramData\Microsoft\ClickToRun\_40_WHAT_is.html
  • c:\Python27\include\pymacconfig.h
  • c:\6cdeacda242012e0e5b593e657\1055\LocalizedData.xml
  • c:\6cdeacda242012e0e5b593e657\1031\_9_WHAT_is.html
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml
  • c:\Python27\tcl\tix8.4.3\pref\SGIGray.cs
  • c:\Python27\include\ceval.h
  • c:\Python27\Lib\lib2to3\PatternGrammar.txt
  • c:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\_47_WHAT_is.html
  • c:\Python27\include\grammar.h
  • c:\Python27\include\intobject.h
  • c:\Python27\include\import.h
  • c:\Python27\Lib\email\test\data\msg_07.txt
  • \\?\PIPE\browser
  • c:\Python27\include\pythonrun.h
  • c:\6cdeacda242012e0e5b593e657\1040\_16_WHAT_is.html
  • c:\Python27\Lib\site-packages\pip\_vendor\requests\cacert.pem
  • c:\Python27\Lib\idlelib\README.txt
  • c:\Python27\include\pyarena.h
  • c:\Python27\Lib\site-packages\pip\_vendor\requests\_2_WHAT_is.html
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\_41_WHAT_is.html
  • c:\Python27\Lib\email\test\data\msg_30.txt
  • c:\Python27\include\structmember.h
  • c:\6cdeacda242012e0e5b593e657\1040\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1033\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1043\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1053\_25_WHAT_is.html
  • c:\Python27\Lib\test\nullcert.pem
  • c:\6cdeacda242012e0e5b593e657\_36_WHAT_is.html
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.proofing.msi.16.en-us.xml
  • c:\Python27\Lib\test\selfsigned_pythontestdotnet.pem
  • c:\6cdeacda242012e0e5b593e657\1032\LocalizedData.xml
  • c:\Python27\Lib\email\test\data\msg_22.txt
  • c:\Python27\Lib\email\test\data\msg_10.txt
  • c:\Python27\Lib\email\test\data\msg_33.txt
  • c:\Python27\include\ast.h
  • c:\Python27\tcl\tix8.4.3\pref\Blue.cs
  • c:\6cdeacda242012e0e5b593e657\1029\eula.rtf
  • c:\Python27\include\rangeobject.h
  • c:\Python27\tcl\_32_WHAT_is.html
  • c:\Python27\include\pgenheaders.h
  • c:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.2.xml
  • c:\Python27\include\pythread.h
  • c:\6cdeacda242012e0e5b593e657\1045\_21_WHAT_is.html
  • c:\6cdeacda242012e0e5b593e657\1038\LocalizedData.xml
  • c:\Python27\Lib\email\test\data\msg_31.txt
  • c:\Python27\include\patchlevel.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office64mui.msi.16.en-us.xml
  • c:\Python27\Lib\email\test\data\msg_36.txt
  • c:\6cdeacda242012e0e5b593e657\2070\eula.rtf
  • c:\Python27\Lib\email\test\data\msg_24.txt
  • c:\6cdeacda242012e0e5b593e657\3082\eula.rtf
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\GIZCRYGC-7AM0-F7ER-94E4-CEF8EDA9693B.thor
  • c:\Python27\include\pymem.h
  • c:\6cdeacda242012e0e5b593e657\2052\_27_WHAT_is.html
  • c:\6cdeacda242012e0e5b593e657\1035\eula.rtf
  • c:\Users\Harry Dresden\Desktop\_3_WHAT_is.html
  • c:\6cdeacda242012e0e5b593e657\1032\_10_WHAT_is.html
  • c:\Python27\Lib\email\test\data\msg_39.txt
  • c:\6cdeacda242012e0e5b593e657\1042\eula.rtf
  • c:\inetpub\history\CFGHISTORY_0000000005\schema\NetFx40_IIS_schema_update.xml
  • c:\6cdeacda242012e0e5b593e657\UiInfo.xml
  • c:\Python27\include\funcobject.h
  • c:\6cdeacda242012e0e5b593e657\1031\eula.rtf
  • c:\Python27\Lib\test\keycert.pem
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\53955D98-F46F-4906-AE49-9B6F52BA18A9\x-none.16\MasterDescriptor.x-none.xml
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml
  • c:\Python27\include\traceback.h
  • c:\6cdeacda242012e0e5b593e657\2070\_28_WHAT_is.html
  • c:\6cdeacda242012e0e5b593e657\1036\_13_WHAT_is.html
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.shared.Office.x-none.msi.16.x-none.xml
  • c:\Python27\include\marshal.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.onenotemui.msi.16.en-us.xml
  • c:\Python27\Lib\email\test\data\msg_23.txt
  • c:\6cdeacda242012e0e5b593e657\1028\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1044\eula.rtf
  • c:\Python27\Lib\email\test\data\msg_18.txt
  • c:\Python27\Lib\email\test\data\msg_17.txt
  • c:\6cdeacda242012e0e5b593e657\1037\_14_WHAT_is.html
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.powerpointmui.msi.16.en-us.xml
  • c:\6cdeacda242012e0e5b593e657\1044\_20_WHAT_is.html
  • c:\Python27\include\frameobject.h
  • c:\Python27\Lib\email\test\data\msg_06.txt
  • c:\6cdeacda242012e0e5b593e657\1025\_4_WHAT_is.html
  • c:\Python27\Lib\test\_0_WHAT_is.html
  • c:\Python27\include\longintrepr.h
  • c:\6cdeacda242012e0e5b593e657\1038\_15_WHAT_is.html
  • c:\6cdeacda242012e0e5b593e657\1030\_8_WHAT_is.html
  • c:\Python27\include\opcode.h
  • c:\Python27\include\boolobject.h
  • c:\Users\Harry Dresden\Desktop\mKQsYBosaaxa.pptx
  • c:\Python27\Lib\test\badcert.pem
  • c:\6cdeacda242012e0e5b593e657\1041\LocalizedData.xml
  • c:\6cdeacda242012e0e5b593e657\1033\LocalizedData.xml
  • c:\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\js\_33_WHAT_is.html
  • c:\6cdeacda242012e0e5b593e657\1046\LocalizedData.xml
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\53955D98-F46F-4906-AE49-9B6F52BA18A9\en-us.16\MasterDescriptor.en-us.xml
  • c:\6cdeacda242012e0e5b593e657\1025\eula.rtf
  • c:\Python27\tcl\tix8.4.3\pref\TK.cs
  • c:\Python27\include\sliceobject.h
  • c:\Python27\include\pgen.h
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\UserDeploymentConfiguration.xml
  • c:\Python27\Lib\test\wrongcert.pem
  • c:\6cdeacda242012e0e5b593e657\1040\LocalizedData.xml
  • c:\Python27\include\moduleobject.h
  • c:\inetpub\history\CFGHISTORY_0000000004\schema\_38_WHAT_is.html
  • c:\Python27\include\memoryobject.h
  • c:\6cdeacda242012e0e5b593e657\1041\_17_WHAT_is.html
  • c:\Python27\include\objimpl.h
  • c:\Python27\include\Python.h
  • c:\Python27\Lib\site-packages\pip-7.0.1.dist-info\_35_WHAT_is.html
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\GIZCRYGC-7AM0-F7ER-5500-4C0C7B1A166D.thor
  • c:\Python27\Lib\test\leakers\_42_WHAT_is.html
  • c:\6cdeacda242012e0e5b593e657\1045\eula.rtf
  • c:\Python27\Lib\email\test\data\msg_04.txt
  • c:\Python27\include\stringobject.h
  • c:\6cdeacda242012e0e5b593e657\1053\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1041\eula.rtf
  • c:\Python27\Lib\email\test\data\msg_12.txt
  • c:\Python27\Lib\idlelib\idle_test\README.txt
  • c:\Python27\include\token.h
  • c:\nftzmo\bin\cert.p12
  • c:\Python27\include\warnings.h
  • c:\Python27\include\bytes_methods.h
  • c:\Python27\include\dictobject.h
  • c:\Python27\Lib\email\test\data\msg_20.txt
  • c:\Python27\tcl\tix8.4.3\pref\Gray.cs
  • c:\ProgramData\WebEx\WebEx\12_1324\gpc.php
  • c:\6cdeacda242012e0e5b593e657\1043\LocalizedData.xml
  • c:\Python27\Lib\test\ssl_key.pem
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.officemuiset.msi.16.en-us.xml
  • c:\Python27\include\pycapsule.h
  • c:\Python27\Lib\email\test\data\msg_05.txt
  • c:\Python27\include\iterobject.h
  • c:\Python27\include\methodobject.h
  • c:\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\js\DD_belatedPNG.js
  • c:\Python27\include\object.h
  • c:\Python27\Lib\email\test\data\msg_11.txt
  • c:\Python27\include\ucnhash.h
  • c:\Python27\Lib\idlelib\_31_WHAT_is.html
  • c:\Python27\include\pyconfig.h
  • c:\Python27\include\structseq.h
  • c:\6cdeacda242012e0e5b593e657\1036\eula.rtf
  • \\?\PIPE\wkssvc
  • c:\6cdeacda242012e0e5b593e657\1044\LocalizedData.xml
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Access.Access.x-none.msi.16.x-none.xml
  • c:\Python27\include\pymath.h
  • c:\6cdeacda242012e0e5b593e657\1028\_6_WHAT_is.html
  • c:\Python27\Lib\email\test\data\msg_27.txt
  • c:\Python27\Lib\idlelib\NEWS.txt
  • c:\Python27\include\bufferobject.h
  • c:\6cdeacda242012e0e5b593e657\1038\eula.rtf
  • c:\Python27\include\timefuncs.h
  • c:\Python27\tcl\tix8.4.3\pref\TixGray.cs
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\_51_WHAT_is.html
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\en-US\GIZCRYGC-7AM0-F7ER-CED7-234E42CA46F1.thor
  • c:\Python27\tcl\tclConfig.sh
  • c:\Python27\Lib\email\test\data\msg_25.txt
  • c:\Python27\Lib\email\test\data\msg_32.txt
  • c:\Python27\Lib\email\test\data\msg_14.txt
  • c:\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\js\nor.js
  • c:\Python27\Lib\email\test\data\msg_03.txt
  • c:\6cdeacda242012e0e5b593e657\2052\eula.rtf
  • c:\Python27\Lib\email\test\data\msg_37.txt
  • c:\Python27\tcl\tix8.4.3\pref\_22_WHAT_is.html
  • c:\6cdeacda242012e0e5b593e657\1037\LocalizedData.xml
  • c:\Python27\Lib\email\test\data\msg_09.txt
  • c:\Users\Harry Dresden\Desktop\ScCHjdPSYDAJTd.doc
  • c:\Python27\Lib\test\check_soundcard.vbs
  • c:\Python27\Lib\test\ssl_key.passwd.pem
  • c:\Python27\Lib\test\keycert2.pem
  • c:\Python27\include\py_curses.h
  • c:\Python27\Lib\test\keycert4.pem
  • c:\Python27\include\pyport.h
  • c:\6cdeacda242012e0e5b593e657\1042\LocalizedData.xml
  • c:\Python27\Lib\test\leakers\README.txt
  • c:\Python27\Lib\idlelib\idle_test\_48_WHAT_is.html
  • c:\Python27\include\listobject.h
  • c:\Python27\include\graminit.h
  • c:\Python27\Lib\email\test\data\msg_16.txt
  • c:\6cdeacda242012e0e5b593e657\1037\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\Strings.xml
  • c:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.0.xml
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\en-US\_50_WHAT_is.html
  • c:\Users\Harry Dresden\Desktop\OsHigGklXPL.pptx
  • c:\Python27\include\pystrcmp.h
  • c:\Python27\include\symtable.h
  • c:\Python27\include\node.h
  • c:\Python27\include\weakrefobject.h
  • c:\6cdeacda242012e0e5b593e657\1053\LocalizedData.xml
  • c:\Python27\Lib\test\pycacert.pem
  • c:\6cdeacda242012e0e5b593e657\1030\eula.rtf
  • c:\Python27\Lib\email\test\data\msg_15.txt
  • c:\Python27\include\code.h
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\DeploymentConfiguration.xml
  • c:\Python27\Lib\email\test\data\msg_08.txt
  • c:\Python27\Lib\email\test\data\msg_12a.txt
  • c:\Python27\include\dtoa.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.wordmui.msi.16.en-us.xml
  • c:\Python27\include\asdl.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.fr-fr.xml
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.accessmui.msi.16.en-us.xml
  • c:\6cdeacda242012e0e5b593e657\1046\_23_WHAT_is.html
  • c:\Python27\include\codecs.h
  • c:\Python27\Lib\idlelib\idle.bat
  • c:\nftzmo\bin\_1_WHAT_is.html
  • c:\Python27\Lib\site-packages\setuptools-16.0.dist-info\top_level.txt
  • c:\Python27\include\complexobject.h
  • c:\6cdeacda242012e0e5b593e657\1046\eula.rtf
  • c:\Python27\Lib\idlelib\CREDITS.txt
  • c:\Python27\Lib\email\test\data\msg_21.txt
  • c:\6cdeacda242012e0e5b593e657\1049\eula.rtf
  • c:\Python27\Lib\email\test\data\msg_13.txt
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.publishermui.msi.16.en-us.xml
  • c:\inetpub\history\CFGHISTORY_0000000005\schema\NetFx45_IIS_schema_update.xml
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.excelmui.msi.16.en-us.xml
  • c:\6cdeacda242012e0e5b593e657\1036\LocalizedData.xml
  • c:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\_49_WHAT_is.html
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml
  • c:\Python27\tcl\tix8.4.3\pref\TkWin.cs
  • c:\Python27\Lib\test\math_testcases.txt
  • c:\6cdeacda242012e0e5b593e657\1031\LocalizedData.xml
  • c:\Python27\Lib\lib2to3\Grammar.txt
  • c:\6cdeacda242012e0e5b593e657\1035\LocalizedData.xml
  • c:\Python27\include\bytearrayobject.h
  • c:\Users\Harry Dresden\Desktop\weCxJaujur.docx
  • c:\Python27\include\bitset.h
  • c:\Python27\include\pystrtod.h
  • c:\Python27\Lib\email\test\data\_34_WHAT_is.html
  • c:\Python27\include\longobject.h
  • c:\6cdeacda242012e0e5b593e657\1029\_7_WHAT_is.html
  • c:\Python27\include\setobject.h
  • c:\Python27\Lib\test\badkey.pem
  • c:\Python27\include\cStringIO.h
  • c:\Python27\tcl\tix8.4.3\pref\Bisque.cs
  • c:\6cdeacda242012e0e5b593e657\3082\LocalizedData.xml
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml
  • c:\Python27\include\bytesobject.h
  • c:\Python27\include\pyctype.h
  • c:\6cdeacda242012e0e5b593e657\1049\LocalizedData.xml
  • c:\Python27\include\unicodeobject.h
  • c:\Python27\Lib\idlelib\extend.txt
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.officemui.msi.16.en-us.xml
  • c:\Python27\include\sysmodule.h
  • c:\Python27\include\pymactoolbox.h
  • c:\Python27\Lib\email\test\data\msg_35.txt
  • c:\Python27\Lib\email\test\data\msg_29.txt
  • c:\Python27\Lib\email\test\data\msg_01.txt
  • c:\6cdeacda242012e0e5b593e657\2070\LocalizedData.xml
  • c:\Python27\Lib\test\nokia.pem
  • c:\6cdeacda242012e0e5b593e657\1055\_26_WHAT_is.html
  • c:\inetpub\history\CFGHISTORY_0000000004\schema\NetFx40_IIS_schema_update.xml
  • c:\Python27\include\intrcheck.h
  • c:\Python27\include\pydebug.h
  • \\?\PIPE\lsarpc
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\_46_WHAT_is.html
  • c:\6cdeacda242012e0e5b593e657\3082\_29_WHAT_is.html
  • c:\6cdeacda242012e0e5b593e657\1043\_19_WHAT_is.html
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Word.Word.x-none.msi.16.x-none.xml
  • c:\Python27\include\abstract.h
  • c:\Python27\Lib\email\test\data\msg_38.txt
  • c:\6cdeacda242012e0e5b593e657\2052\LocalizedData.xml
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\53955D98-F46F-4906-AE49-9B6F52BA18A9\x-none.16\_44_WHAT_is.html
  • c:\Python27\include\pystate.h
  • c:\Python27\Lib\test\nullbytecert.pem
  • c:\Python27\Lib\email\test\data\msg_41.txt
  • c:\6cdeacda242012e0e5b593e657\1042\_18_WHAT_is.html
  • c:\6cdeacda242012e0e5b593e657\1032\eula.rtf
  • c:\Python27\Lib\test\dh1024.pem
  • c:\Python27\Lib\test\185test.db
  • c:\Python27\include\_5_WHAT_is.html
  • c:\6cdeacda242012e0e5b593e657\1055\eula.rtf
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office64muiset.msi.16.en-us.xml
  • c:\Python27\include\fileobject.h
  • c:\Python27\Lib\test\sha256.pem
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.accessmuiset.msi.16.en-us.xml
  • c:\Python27\Lib\test\keycert.passwd.pem
  • c:\Python27\include\modsupport.h
  • c:\Python27\include\enumobject.h
  • c:\Python27\include\descrobject.h
  • c:\Python27\include\classobject.h
  • c:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\GIZCRYGC-7AM0-F7ER-4527-C194A061A771.thor
  • c:\Python27\Lib\site-packages\pip-7.0.1.dist-info\entry_points.txt
  • c:\Python27\include\pygetopt.h
  • c:\Python27\Lib\test\ieee754.txt
  • c:\Python27\include\eval.h
  • c:\Python27\include\datetime.h
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\53955D98-F46F-4906-AE49-9B6F52BA18A9\en-us.16\_43_WHAT_is.html
  • c:\Python27\include\genobject.h
  • c:\inetpub\history\CFGHISTORY_0000000004\schema\NetFx45_IIS_schema_update.xml
  • c:\Python27\Lib\email\test\data\msg_40.txt
  • c:\6cdeacda242012e0e5b593e657\1028\LocalizedData.xml
  • c:\6cdeacda242012e0e5b593e657\1035\_12_WHAT_is.html
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml
  • c:\Python27\Lib\site-packages\setuptools-16.0.dist-info\_45_WHAT_is.html
  • c:\Python27\include\metagrammar.h
  • c:\Python27\include\pyfpe.h
  • c:\Python27\Lib\lib2to3\_37_WHAT_is.html
  • c:\Python27\include\compile.h
  • c:\6cdeacda242012e0e5b593e657\1033\_11_WHAT_is.html
  • c:\Python27\include\cellobject.h
  • c:\Python27\tcl\tix8.4.3\pref\WmDefault.cs
File-Deleted
  • c:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\behavior.xml
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\resource.xml
  • c:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\behavior.xml
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\en-US\resource.xml
File-Opened
  • C:\Windows\System32\wshqos.dll
  • C:\Windows\System32\wshom.ocx
  • C:\Users\Harry Dresden\AppData\Local\
  • C:\
  • C:\Users\Harry Dresden\AppData\Local\Temp\NRV_KL460_.js
  • C:\Users\
  • C:\Users\Harry Dresden\
  • C:\Users\Harry Dresden\AppData\
  • C:\Windows\Globalization\Sorting\sortdefault.nls
  • C:\Windows\
  • C:\Users\Harry Dresden\AppData\Local\Microsoft\Windows\Caches\cversions.1.db
  • C:\Windows\System32\en-US\wshqos.dll.mui
  • C:\Users\Harry Dresden\Desktop\desktop.ini
  • C:\Windows\System32\en-US\wshtcpip.dll.mui
  • C:\Windows\SysWOW64\rundll32.exe
  • C:\Windows\System32\rsaenh.dll
  • C:\Windows\System32\msxml3.dll
  • C:\Windows\System32\en-US\wship6.dll.mui
  • C:\Windows\System32\wscript.exe
  • C:\Users\Harry Dresden\AppData\Local\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000001.db
  • C:\Windows\SysWOW64\
  • c:\Users\Harry Dresden\Desktop\SfkURRmrkYTZZ.rtf
  • c:\Python27\include\frameobject.h
  • c:\Python27\include\pyexpat.h
  • c:\Python27\Lib\ctypes
  • c:\Users\Default\Links
  • c:\ProgramData\Microsoft\Windows NT\MSFax\Common Coverpages
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office64ww.msi.16.x-none.xml
  • c:\Python27\include\ast.h
  • c:\Python27\include\memoryobject.h
  • c:\Python27\Lib\site-packages\pip\_vendor\colorama
  • c:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.0.xml
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources
  • c:\Python27\DLLs
  • c:\Python27\Lib\site-packages\pip\_vendor\cachecontrol
  • c:\Python27\include\tupleobject.h
  • c:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\behavior.xml
  • c:\nftzmo\lib
  • c:\ProgramData\Adobe\Setup
  • c:\6cdeacda242012e0e5b593e657\1030\LocalizedData.xml
  • c:\ProgramData\Microsoft\Assistance\Client\1.0\en-US
  • c:\Python27\Lib\site-packages\pip\_vendor\requests\packages\urllib3\packages
  • c:\Python27\tcl\tix8.4.3\pref\SGIGray.cs
  • c:\Users\Harry Dresden\OneDrive
  • c:\Python27\include\grammar.h
  • c:\ProgramData\Microsoft\PlayReady\Cache\S-1-5-21-3416602863-1947377224-293699093-1001
  • c:\Python27\include\import.h
  • c:\Users\Public\Libraries
  • \\?\PIPE\browser
  • c:\Python27\Lib\test\tracedmodules
  • c:\Python27\tcl\tcl8.5\tzdata\Indian
  • c:\Users\Public
  • c:\6cdeacda242012e0e5b593e657\1043\eula.rtf
  • c:\ProgramData\Microsoft\Windows NT\MSFax\Queue
  • c:\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl
  • c:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Resource
  • c:\Python27\Lib
  • \??\VBoxMiniRdrDN
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.proofing.msi.16.en-us.xml
  • c:\6cdeacda242012e0e5b593e657\1032\LocalizedData.xml
  • c:\ProgramData
  • c:\Python27\tcl\tix8.4.3\pref\Blue.cs
  • c:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}
  • c:\Python27\Lib\site-packages\pip
  • c:\Python27\Lib\site-packages\pip\_vendor\requests\packages\chardet
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\A6
  • c:\Python27\Lib\email\test\data\msg_36.txt
  • c:\Python27\Lib\ctypes\macholib
  • c:\ProgramData\Adobe\Acrobat\11.0\Replicate\Security
  • c:\6cdeacda242012e0e5b593e657\1042\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\UiInfo.xml
  • c:\inetpub\history\CFGHISTORY_0000000004\schema
  • c:\Python27\Lib\unittest\test
  • c:\ProgramData\Microsoft\PlayReady
  • c:\Python27\Lib\xml\dom
  • c:\Python27\Lib\site-packages\pip\models
  • c:\Python27\include\marshal.h
  • c:\ProgramData\Adobe\Acrobat\11.0\Replicate
  • c:\Python27\Tools\i18n
  • c:\Python27\tcl\tcl8\8.4
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog
  • c:\ProgramData\Microsoft\Crypto\Keys
  • c:\Python27\Lib\test
  • c:\Python27\Lib\email\test\data\msg_19.txt
  • c:\inetpub\wwwroot\aspnet_client\system_web\4_0_30319
  • c:\Python27\Lib\ctypes\test
  • c:\Python27\Lib\idlelib\extend.txt
  • c:\Users\Harry Dresden\Searches
  • c:\Users\Harry Dresden\Desktop\mKQsYBosaaxa.pptx
  • c:\Python27\Lib\test\badcert.pem
  • c:\Python27\Lib\ensurepip
  • c:\Python27\include\pgen.h
  • c:\Python27\Lib\test\wrongcert.pem
  • c:\Users\Harry Dresden\Downloads
  • c:\Python27\include\objimpl.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml
  • c:\ProgramData\Microsoft\eHome
  • c:\Python27\tcl\tk8.5\demos\images
  • c:\nftzmo\modules\packages
  • c:\Python27\Lib\test\cjkencodings
  • c:\inetpub\wwwroot\aspnet_client\system_web
  • c:\ProgramData\Microsoft\Event Viewer\Views\ApplicationViewsRootNode
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\en-US
  • c:\Python27\include\abstract.h
  • c:\ProgramData\WebEx\WebEx\12_1324\gpc.php
  • c:\Python27\Lib\test\keycert.passwd.pem
  • c:\Python27\include\object.h
  • c:\Python27\tcl\tix8.4.3
  • c:\6cdeacda242012e0e5b593e657\1036\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1044\LocalizedData.xml
  • c:\ProgramData\Microsoft\RAC\PublishedData
  • c:\Python27\include\Python-ast.h
  • c:\inetpub\history\CFGHISTORY_0000000005
  • c:\inetpub\history\CFGHISTORY_0000000004
  • c:\inetpub\history\CFGHISTORY_0000000001
  • c:\Python27\include\pydebug.h
  • c:\inetpub\history\CFGHISTORY_0000000003
  • c:\ProgramData\Microsoft\Vault\AC658CB4-9126-49BD-B877-31EEDAB3F204
  • c:\Users\Harry Dresden\Favorites\Links for United States
  • c:\Python27\Lib\lib2to3\tests\data\fixers
  • c:\Python27\Lib\email\test\data\msg_14.txt
  • c:\Python27\tcl\tcl8.5\tzdata\US
  • c:\Python27\tcl\tcl8.5\tzdata
  • c:\Python27\include\pyport.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml
  • c:\Python27\Lib\email
  • c:\Python27\tcl\tix8.4.3\demos\samples
  • c:\Python27\Lib\email\test\data\msg_15.txt
  • c:\Python27\Lib\lib-tk\test\test_tkinter
  • c:\6cdeacda242012e0e5b593e657\1053\eula.rtf
  • c:\Python27\Tools\webchecker
  • c:\Python27\tcl\tcl8.5\tzdata\America\North_Dakota
  • c:\Python27\Lib\test\crashers
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\DeploymentConfiguration.xml
  • c:\ProgramData\Microsoft\Windows Defender\LocalCopy
  • c:\Python27\include\dtoa.h
  • c:\Python27\include\asdl.h
  • c:\ProgramData\Microsoft\Diagnosis\Sideload
  • c:\Python27\Lib\test\empty.vbs
  • c:\Users\Harry Dresden\Contacts
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\E0
  • c:\PerfLogs
  • c:\
  • c:\Python27\include\complexobject.h
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Entries
  • c:\Python27\Lib\email\test\data\msg_13.txt
  • c:\Python27\tcl\tix8.4.3\pref\Bisque.cs
  • c:\Python27\Lib\site-packages\pip\_vendor\html5lib\treebuilders
  • c:\Python27\tcl\tcl8\8.5
  • c:\6cdeacda242012e0e5b593e657\3082\eula.rtf
  • c:\Python27\libs
  • c:\ProgramData\Microsoft\ClickToRun\MachineData
  • c:\Python27\Lib\lib2to3\Grammar.txt
  • c:\Python27\include\bitset.h
  • c:\Python27\include\pystrtod.h
  • c:\Python27\include\longobject.h
  • c:\Python27\Lib\email\test\data\msg_12.txt
  • c:\ProgramData\Microsoft\Assistance
  • c:\Python27\include\bytesobject.h
  • c:\Python27\include\pyctype.h
  • c:\ProgramData\Microsoft\Windows Defender\Scans\History\Results
  • c:\Users\Harry Dresden\Videos
  • c:\Python27\Lib\pydoc_data
  • c:\Python27\Lib\test\nokia.pem
  • c:\ProgramData\Microsoft\Crypto\DSS
  • c:\ProgramData\Adobe\Acrobat
  • c:\Python27\tcl\tcl8.5\tzdata\Atlantic
  • c:\ProgramData\NovaTech Network\NovaBench\3.0.2.0
  • c:\ProgramData\Microsoft\Network
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\1A
  • c:\ProgramData\Microsoft\Diagnosis\ETLLogs\AutoLogger
  • c:\Users\Default\Downloads
  • c:\Python27\Lib\xml
  • c:\Python27\tcl\tcl8.5\tzdata\Australia
  • c:\Users\Public\Foxit Software\Foxit Reader\StartPage
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\17
  • c:\Python27\include\fileobject.h
  • c:\Python27\tcl\tk8.5
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.officemuiset.msi.16.en-us.xml
  • c:\ProgramData\Microsoft\PlayReady\Cache
  • c:\6cdeacda242012e0e5b593e657\3082
  • c:\Python27\Lib\site-packages\pip\compat
  • c:\Python27\Lib\test\leakers
  • c:\Python27\tcl\tcl8\8.4\platform
  • c:\Python27\include\modsupport.h
  • c:\ProgramData\regid.1991-06.com.microsoft
  • c:\Python27\Lib\site-packages\pip\_vendor\html5lib\filters
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\DD
  • c:\Python27\Tools\pynche\X
  • c:\Python27\Tools\Scripts
  • c:\Python27\include\cellobject.h
  • c:\Python27\Lib\email\test\data\msg_30.txt
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\35
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore
  • c:\Python27\include\pyfpe.h
  • c:\Python27\include\compile.h
  • c:\6cdeacda242012e0e5b593e657\1032\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1040\eula.rtf
  • C:\Users\Harry Dresden\AppData\Local\Temp
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.en-us.xml
  • c:\Python27\tcl\tk8.5\images
  • c:\ProgramData\Microsoft\DRM
  • c:\ProgramData\Microsoft\Windows NT\MSFax\Common Coverpages\en-US
  • c:\Python27\Lib\idlelib\idle_test
  • c:\Python27\tcl\tcl8.5\tzdata\America\Kentucky
  • c:\Python27\Lib\test\https_svn_python_org_root.pem
  • c:\Python27\include
  • c:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.2.xml
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.officemui.msi.16.en-us.xml
  • c:\Python27\Lib\test\nullcert.pem
  • c:\Python27\Lib\site-packages\setuptools
  • c:\Python27\include\cobject.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml
  • c:\6cdeacda242012e0e5b593e657\1029
  • c:\6cdeacda242012e0e5b593e657\1028
  • c:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}
  • c:\Python27\Lib\site-packages\pip\commands
  • c:\Python27\Lib\lib2to3\tests\data\fixers\myfixes
  • c:\6cdeacda242012e0e5b593e657\1025
  • c:\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us
  • c:\Python27\tcl\tclConfig.sh
  • c:\Python27\Lib\email\test\data
  • c:\ProgramData\Microsoft\Windows Defender\Support
  • c:\ProgramData\WebEx\WebEx
  • c:\nftzmo\lib\api
  • c:\6cdeacda242012e0e5b593e657\2052
  • c:\Python27\Lib\email\test\data\msg_22.txt
  • c:\Python27\Lib\email\test\data\msg_12a.txt
  • c:\Python27\tcl\tcl8.5\opt0.4
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases
  • c:\Python27\include\pgenheaders.h
  • c:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\en-US
  • c:\Python27\tcl\tcl8.5\encoding
  • c:\ProgramData\Microsoft\Diagnosis\ETLLogs
  • c:\Python27\Lib\email\test\data\msg_31.txt
  • c:\Python27\Lib\msilib
  • c:\ProgramData\Microsoft\WwanSvc\Profiles
  • c:\Python27\Lib\encodings
  • c:\Python27\Lib\site-packages\pip\_vendor\distlib\_backport
  • c:\ProgramData\Microsoft\Assistance\Client
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\95
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\C0D2A2B7-8AE4-4D06-93E4-F1A7BD5FEC3F
  • c:\Python27\Lib\site-packages\_markerlib
  • c:\Python27\Lib\email\test\data\msg_39.txt
  • c:\ProgramData\Microsoft\Diagnosis\LocalTraceStore
  • c:\Python27\Lib\email\test\data\msg_40.txt
  • c:\inetpub\custerr
  • c:\Python27\include\longintrepr.h
  • c:\inetpub\custerr\en-US
  • c:\Python27\Lib\site-packages\pip\_vendor\cachecontrol\caches
  • c:\Python27\Lib\test\185test.db
  • c:\Python27\include\opcode.h
  • c:\ProgramData\Microsoft\Crypto\RSA
  • c:\6cdeacda242012e0e5b593e657\1046\LocalizedData.xml
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\53955D98-F46F-4906-AE49-9B6F52BA18A9\en-us.16\MasterDescriptor.en-us.xml
  • c:\6cdeacda242012e0e5b593e657\1025\eula.rtf
  • c:\Python27\tcl\tk8.5\ttk
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\01
  • c:\Users\Default\Favorites
  • c:\inetpub\history
  • c:\Python27\include\moduleobject.h
  • c:\ProgramData\Microsoft\Windows NT
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\A5
  • c:\Python27\Lib\email\test\data\msg_17.txt
  • c:\ProgramData\Microsoft\Vault
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData
  • c:\6cdeacda242012e0e5b593e657\1045\eula.rtf
  • c:\Python27\Lib\email\test\data\msg_04.txt
  • c:\Python27\Lib\email\test\data\msg_25.txt
  • c:\Python27\include\boolobject.h
  • C:\Windows\SysWOW64\en-US\VssTrace.DLL.mui
  • c:\Python27\include\token.h
  • c:\nftzmo\bin\cert.p12
  • c:\Python27\include\warnings.h
  • c:\Python27\Lib\site-packages\pip\_vendor\requests\packages
  • c:\Python27\tcl\tk8.5\demos
  • c:\ProgramData\Mozilla\logs
  • c:\6cdeacda242012e0e5b593e657\1037\LocalizedData.xml
  • c:\Python27\include\pycapsule.h
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\70
  • c:\Python27\tcl\tcl8.5\tzdata\Mexico
  • c:\Python27\include\ucnhash.h
  • c:\Python27\Lib\importlib
  • c:\ProgramData\Microsoft\Crypto
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Access.Access.x-none.msi.16.x-none.xml
  • c:\ProgramData\NovaTech Network\NovaBench\3.0.2.0\media
  • c:\Python27\Lib\email\test\data\msg_27.txt
  • c:\Python27\tcl\tcl8.5
  • c:\Python27\tcl\tcl8.5\tzdata\Africa
  • c:\Python27\Lib\email\test\data\msg_11.txt
  • c:\Python27\tcl\tix8.4.3\pref\TixGray.cs
  • c:\ProgramData\McAfee
  • c:\Python27\include\enumobject.h
  • c:\Python27\Lib\site-packages\pip\vcs
  • c:\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\js\nor.js
  • c:\Python27\Lib\bsddb\test
  • c:\6cdeacda242012e0e5b593e657\2052\eula.rtf
  • c:\Python27\Lib\test\keycert2.pem
  • c:\ProgramData\Microsoft\Search\Data\Applications
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\F7
  • c:\Users\Harry Dresden\Desktop\ScCHjdPSYDAJTd.doc
  • c:\Python27\include\py_curses.h
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\F3
  • c:\Python27\Lib\xml\parsers
  • c:\Python27\Lib\test\check_soundcard.vbs
  • c:\Python27\Lib\test\keycert4.pem
  • c:\Python27\tcl\tcl8.5\msgs
  • c:\Python27\Lib\email\test\data\msg_16.txt
  • c:\ProgramData\Microsoft\Windows NT\MSFax\Inbox
  • c:\Users\Harry Dresden
  • c:\nftzmo\modules
  • c:\Python27\include\node.h
  • c:\ProgramData\McAfee\MCLOGS\Common\jxpiinstall
  • c:\inetpub\history\CFGHISTORY_0000000004\schema\NetFx40_IIS_schema_update.xml
  • c:\ProgramData\Microsoft\Windows Defender\Quarantine
  • c:\Users\Public\Favorites
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\70
  • c:\nftzmo
  • c:\Users\Public\Pictures
  • c:\ProgramData\NovaTech Network\NovaBench
  • c:\nftzmo\lib\common
  • c:\Python27\Lib\site-packages\pip\_vendor\_markerlib
  • c:\Python27\tcl\reg1.2
  • c:\Users\ruiner
  • c:\Python27\Lib\xml\etree
  • c:\Users\Harry Dresden\Desktop\OsHigGklXPL.pptx
  • c:\Python27\include\pymacconfig.h
  • c:\Users\Harry Dresden\Desktop\weCxJaujur.docx
  • c:\Users\Public\Videos\Sample Videos
  • c:\Python27\include\symtable.h
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\01
  • c:\Python27\Lib\email\test\data\msg_41.txt
  • c:\Python27\include\cStringIO.h
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml
  • c:\Python27\Lib\site-packages\pip\_vendor\requests\packages\urllib3\util
  • c:\ProgramData\Microsoft\OfficeSoftwareProtectionPlatform
  • c:\Python27\tcl\tcl8.5\tzdata\Antarctica
  • c:\Python27\Lib\email\test\data\msg_29.txt
  • c:\Python27\Lib\email\test\data\msg_01.txt
  • c:\Python27\Lib\xml\sax
  • c:\Python27\Lib\site-packages\pip\_vendor\html5lib\trie
  • c:\Users\Harry Dresden\Desktop
  • c:\Users\Public\Recorded TV
  • c:\ProgramData\Microsoft\Office\Heartbeat
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\42
  • c:\Python27\tcl\tcl8.5\tzdata\Etc
  • c:\Python27\Lib\bsddb
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\47
  • c:\Python27\Lib\email\test\data\msg_23.txt
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\95
  • c:\6cdeacda242012e0e5b593e657\2052\LocalizedData.xml
  • c:\nftzmo\bin
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Integration\ShortcutBackups
  • c:\6cdeacda242012e0e5b593e657\1053\LocalizedData.xml
  • c:\Python27\Lib\wsgiref
  • c:\Python27\Lib\site-packages\pip\_vendor\requests\packages\urllib3\contrib
  • c:\ProgramData\Microsoft\User Account Pictures
  • c:\ProgramData\Sun\Java\Java Update
  • c:\Python27\Lib\test\sha256.pem
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\53955D98-F46F-4906-AE49-9B6F52BA18A9
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml
  • c:\Users
  • c:\Users\Default\Saved Games
  • c:\Python27\Lib\site-packages\pip\_vendor\pkg_resources
  • c:\inetpub\history\CFGHISTORY_0000000005\schema
  • c:\Python27\include\datetime.h
  • c:\inetpub
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.powerpointmui.msi.16.en-us.xml
  • c:\Users\Default
  • c:\6cdeacda242012e0e5b593e657\1028\LocalizedData.xml
  • c:\Python27\tcl\tcl8.5\tzdata\Pacific
  • c:\ProgramData\Microsoft\Windows NT\MSFax\ActivityLog
  • c:\Python27\tcl\tk8.5\msgs
  • c:\Python27\tcl\tcl8.5\tzdata\America
  • c:\ProgramData\Microsoft\Diagnosis\DownloadedSettings
  • c:\ProgramData\Microsoft\Windows Defender\Definition Updates\{98101498-C465-4F51-8751-D1919E97D29D}
  • c:\Python27\Lib\multiprocessing\dummy
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\tasks.xml
  • c:\ProgramData\Microsoft\MF
  • c:\Python27\include\errcode.h
  • c:\Users\Harry Dresden\Desktop\leFWUAtzoIAi.docm
  • c:\Python27\Lib\test\keycert3.pem
  • c:\Users\Harry Dresden\Desktop\EmXudaFxET.docx
  • c:\Users\Public\Downloads
  • c:\Python27\Lib\site-packages
  • c:\Python27\Lib\idlelib\NEWS.txt
  • c:\ProgramData\Microsoft\Device Stage\Task
  • c:\nftzmo\modules\auxiliary
  • c:\Python27\Lib\email\test\data\msg_09.txt
  • c:\Users\Harry Dresden\Desktop\gdjFFizwzVkg.docx
  • c:\6cdeacda242012e0e5b593e657\1045\LocalizedData.xml
  • c:\Python27\include\pyerrors.h
  • c:\Python27\Lib\unittest
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.outlookmui.msi.16.en-us.xml
  • c:\6cdeacda242012e0e5b593e657\Graphics
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}
  • c:\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default
  • c:\Recovery
  • c:\ProgramData\Microsoft\Device Stage
  • c:\6cdeacda242012e0e5b593e657\1055\LocalizedData.xml
  • c:\Python27\Lib\email\test\data\msg_21.txt
  • c:\Python27\include\ceval.h
  • c:\ProgramData\Microsoft\Crypto\RSA\S-1-5-18
  • c:\ProgramData\Microsoft\Assistance\Client\1.0
  • c:\Python27\Lib\email\test\data\msg_07.txt
  • c:\Python27\include\pythonrun.h
  • c:\Python27\include\structmember.h
  • c:\ProgramData\Microsoft\Office
  • c:\Python27\Lib\idlelib\README.txt
  • c:\Python27\include\pygetopt.h
  • c:\Python27\Lib\distutils\tests
  • c:\Python27\include\codecs.h
  • c:\Python27\Lib\logging
  • c:\ProgramData\Microsoft\RAC
  • c:\Python27\Lib\site-packages\pip\req
  • c:\Users\Harry Dresden\Links
  • c:\ProgramData\Microsoft\DeviceSync
  • c:\Python27\Doc
  • c:\Python27\Lib\email\test\data\msg_10.txt
  • c:\Python27\Lib\email\test\data\msg_33.txt
  • c:\6cdeacda242012e0e5b593e657\1046\eula.rtf
  • c:\Python27\tcl\tix8.4.3\demos\bitmaps
  • c:\Python27\Lib\site-packages\pip\_vendor\requests
  • c:\6cdeacda242012e0e5b593e657\1038\LocalizedData.xml
  • c:\Python27\include\patchlevel.h
  • c:\Python27\include\bytes_methods.h
  • c:\Python27\Lib\compiler
  • c:\Python27\Scripts
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\47
  • c:\6cdeacda242012e0e5b593e657\1035\eula.rtf
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\43
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\42
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\17
  • c:\inetpub\history\CFGHISTORY_0000000005\schema\NetFx40_IIS_schema_update.xml
  • c:\6cdeacda242012e0e5b593e657\1031\eula.rtf
  • c:\Python27\Lib\test\keycert.pem
  • c:\Python27\include\traceback.h
  • c:\Python27\tcl\dde1.3
  • c:\Python27\tcl\tcl8.5\tzdata\SystemV
  • c:\ProgramData\Oracle
  • c:\ProgramData\NovaTech Network
  • c:\6cdeacda242012e0e5b593e657\1028\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1044\eula.rtf
  • c:\ProgramData\Sun\Java
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.excelmui.msi.16.en-us.xml
  • c:\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\js
  • c:\ProgramData\Microsoft\Diagnosis\AsimovUploader
  • c:\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images
  • c:\6cdeacda242012e0e5b593e657\1041\LocalizedData.xml
  • c:\Python27\tcl\tcl8.5\tzdata\Chile
  • c:\ProgramData\Microsoft\ClickToRun\UserData
  • c:\Python27\Lib\test\xmltestdata
  • c:\ProgramData\Microsoft\WPD
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\UserDeploymentConfiguration.xml
  • c:\6cdeacda242012e0e5b593e657\1040\LocalizedData.xml
  • c:\Python27\Lib\site-packages\pip\_vendor
  • c:\ProgramData\Sun
  • c:\Python27\include\Python.h
  • c:\Python27\Lib\email\test\data\msg_34.txt
  • c:\6cdeacda242012e0e5b593e657\1041\eula.rtf
  • c:\ProgramData\Microsoft\Diagnosis\ETLLogs\ShutdownLogger
  • c:\6cdeacda242012e0e5b593e657\1029\LocalizedData.xml
  • c:\Python27\include\metagrammar.h
  • c:\Python27\include\pystate.h
  • c:\Users\Default\Desktop
  • c:\Python27\Lib\email\test\data\msg_05.txt
  • c:\Python27\Lib\test\ieee754.txt
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\1A
  • c:\Python27\Lib\site-packages\pip\_vendor\html5lib\treewalkers
  • c:\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\js\DD_belatedPNG.js
  • c:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}
  • c:\ProgramData\Microsoft\WwanSvc
  • c:\Python27\include\pyconfig.h
  • c:\Python27\Lib\lib2to3\PatternGrammar.txt
  • \\?\PIPE\wkssvc
  • c:\ProgramData\Microsoft\Event Viewer\Views
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.shared.Office.x-none.msi.16.x-none.xml
  • c:\Python27\Lib\json\tests
  • c:\Python27\Lib\site-packages\pip\_vendor\html5lib\serializer
  • c:\Python27\include\osdefs.h
  • c:\Python27\Tools
  • c:\Python27\include\timefuncs.h
  • c:\ProgramData\Microsoft\IlsCache
  • c:\Python27\Lib\lib-tk
  • c:\ProgramData\Microsoft\Windows Defender\Scans\History\Store
  • c:\ProgramData\Microsoft\Windows NT\MSFax\SentItems
  • c:\Users\Public\Foxit Software\Foxit Reader
  • c:\Python27\Lib\site-packages\pip\operations
  • c:\ProgramData\Microsoft\Windows NT\MSFax\VirtualInbox
  • c:\Python27\Lib\site-packages\pip\_vendor\lockfile
  • c:\Python27\Lib\curses
  • c:\6cdeacda242012e0e5b593e657\1037\eula.rtf
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}
  • c:\Python27\include\pystrcmp.h
  • c:\Python27\include\floatobject.h
  • c:\inetpub\history\CFGHISTORY_0000000005\schema\NetFx45_IIS_schema_update.xml
  • c:\Python27\Lib\email\test\data\msg_26.txt
  • c:\Python27\Lib\test\pycacert.pem
  • c:\Python27\include\pymactoolbox.h
  • c:\Python27\Lib\test\badkey.pem
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Integration
  • c:\Users\Default\Music
  • c:\Python27\Lib\email\mime
  • c:\Users\Harry Dresden\Music
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.onenotemui.msi.16.en-us.xml
  • c:\Python27\Lib\site-packages\setuptools-16.0.dist-info\top_level.txt
  • c:\6cdeacda242012e0e5b593e657\1053
  • c:\6cdeacda242012e0e5b593e657\1055
  • c:\6cdeacda242012e0e5b593e657\1036\LocalizedData.xml
  • c:\Python27\Lib\site-packages\pip\_vendor\requests\packages\urllib3
  • c:\Python27\Lib\test\math_testcases.txt
  • c:\Python27\tcl\tcl8.5\tzdata\Asia
  • c:\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css
  • c:\Python27\Lib\multiprocessing
  • c:\Users\Default\Documents
  • c:\Python27\Tools\pynche
  • c:\Users\Public\Desktop
  • c:\ProgramData\Microsoft\User Account Pictures\Default Pictures
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.publishermui.msi.16.en-us.xml
  • c:\Python27\Lib\lib-tk\test\test_ttk
  • c:\Users\Harry Dresden\Documents