'
metaflows logo
Category Started On Completed On Duration Cuckoo Version
FILE 2016-11-08 13:15:30.522242 2016-11-08 13:18:49.368159 198 seconds 2.0-dev
Machine Label Manager Started On Shutdown On
win7cuckoo win7 Clone 1 VirtualBox 2016-11-08 13:15:31 2016-11-08 13:18:49

File Details

File name 1ed6fdb8ca5c13e352b2f88d627ff7b8bef188b3.zip
File size 1099 bytes
File type Zip archive data, at least v2.0 to extract
CRC32 A7BE9914
MD5 80c01db6e57bddf1aede6775d73cd88e
SHA1 1ed6fdb8ca5c13e352b2f88d627ff7b8bef188b3
SHA256 eef97a67b7caa008461b65132e143407e9f71071df4cfbef2434ead92e61a00e
SHA512 cb5a11cec59d09fecaa60ec6f4158d7bf8e6c98874c2a6c3416d867b4a501df29f822d75a40a1af28161a22d80402d9cc71b3ae5c183745f4bc8d6a35bdf0891
Ssdeep 24:9Am64WR295Yl1AwdpmNUuTyL5osvWzEe06QMbssCJy4wtkWUiIWlmhz/l:9DXwlQU564amJZwaWUiYb
PEiD None matched
Yara
  • PM_Zip_with_js ()
VirusTotal Permalink
VirusTotal Scan Date: 2016-11-08 13:01:02
Detection Rate: 7/55 (Expand)

MetaFlows Scores

Metaflows Analysis Results (Signatures=125, Anomalies=0, PEiD=0, Yara=2, VT[1478611163]=100): Snort Events=1, AV Events=2
Total Score=125

SNORT EVENTS:
ET POLICY PE EXE or DLL Windows file download HTTP

CLAMAV DETECTED:
Sanesecurity.Malware.26447.JsHeur.UNOFFICIAL FOUND
DROPPED FILE - NRV_AM00I_.js: Sanesecurity.Malware.26447.JsHeur.UNOFFICIAL FOUND

Dropped File/Buffer Yara Signatures:
977efb67050cf5adaf25ebb7ca7a6e7d7246a8fb [BUFFER]: Str_Win32_Http_API
47afc987b7e70ee87dcfa87553f48976ebc3c782 [BUFFER]: shellcode

Signatures

antivm_queries_computername details
recon_fingerprint details
antivm_memory_available details
dumped_buffer details
creates_doc details
antivm_network_adapters details
dumped_buffer2 details
antivm_vbox_files details
Windows_Proxy_Tinkering details
network_wscript_downloader details
persistence_ads details
antiav_detectfile details
exploit_heapspray details
malicious_document_urls details
network_document_file details
network_downloader_exe details
antivm_vbox_devices details
antivm_vbox_files details
modifies_files details

Screenshots

No screenshots available.

Static Analysis

Nothing to display.

Dropped Files

4273cd8e5ea17048_076e35c0-5e29-6be8-0739-f6d7bc16864c.thor

1d48e7d0d9560b2c_076e35c0-5e29-6be8-abf7-37e9f4977692.thor

efa3758405a8f36e_076e35c0-5e29-6be8-5c87-febd6b92f2a9.thor

19571b510e7a2e08_076e35c0-5e29-6be8-c4dc-3a8f2df6f670.thor

36f36e9e1ed5b793_076e35c0-5e29-6be8-de36-8f0805736fdf.thor

139f2b93af84d30c_076e35c0-5e29-6be8-dcd0-f74618d8be0b.thor

d272decc68b21e51_076e35c0-5e29-6be8-facf-29ffb274e5ec.thor

63c81d3881f8854d_076e35c0-5e29-6be8-4ccd-167b066fd144.thor

faf021b3c06abc41_tasks.xml

e317feba4c55e5ca_076e35c0-5e29-6be8-286c-38354fc5d0db.thor

c16b670d6caba6fe_076e35c0-5e29-6be8-8a17-b9c30f4d5b3f.thor

b4666da4baaa120e_ddxhpysyr9klfk.dll

b073c9e786375e42_076e35c0-5e29-6be8-a832-63a799be95f7.thor

a6addb78cb1303d6_076e35c0-5e29-6be8-13a1-9b476d61ce5e.thor

863ec3b29fb44258_076e35c0-5e29-6be8-d33d-b304ae4375df.thor

0f6df96c77104055_076e35c0-5e29-6be8-74bd-53673aa32a42.thor

d6019e11292f65d1_076e35c0-5e29-6be8-cfc0-28adf22de6b3.thor

8cae6549fa3a46ac_076e35c0-5e29-6be8-7aca-c7222e6805b8.thor

143e7daabfbffed6_076e35c0-5e29-6be8-5770-f71acf224a4b.thor

41f030154268c8b7_076e35c0-5e29-6be8-6f68-372d7ccaafe5.thor

a5f1beaf56a77a1b_076e35c0-5e29-6be8-3bec-c7fe813dadca.thor

049d79de3b8d71a7_076e35c0-5e29-6be8-3b11-df9675e3264b.thor

6e24e094fadb5cd7_076e35c0-5e29-6be8-b29b-0f1f30d188bc.thor

47972ee1b13d58b9_076e35c0-5e29-6be8-ab93-37a20f53fa68.thor

0b2c8b71303cf5e2_076e35c0-5e29-6be8-5ef8-6aaf91953917.thor

009833018ae7c1e9_076e35c0-5e29-6be8-ac3b-c0de4c7e0530.thor

fd5f68b59aa2b3e8_resource.xml

48b5d6078a16503c_076e35c0-5e29-6be8-7410-c109c07d22e3.thor

2da58f7acebbc6f8_076e35c0-5e29-6be8-8623-05b573e2cf4d.thor

7f934e5dd4066c59_076e35c0-5e29-6be8-927d-c7d8b6044a72.thor

143f722ef56f422a_076e35c0-5e29-6be8-6e9a-b8b157914a47.thor

bbb5cdcd0eb50cbd_076e35c0-5e29-6be8-05ef-ad8609fb248a.thor

06199219658955a9_076e35c0-5e29-6be8-4cfc-c45e42ebeb2c.thor

d04a06bebb52eec5_076e35c0-5e29-6be8-0764-b08bbfd83f08.thor

f97ebca2a370270a_076e35c0-5e29-6be8-2657-80ccd4a1e6ac.thor

5194b97980d9d9a7_076e35c0-5e29-6be8-58bf-e1d375fa0fdc.thor

4923b0650c5e5ce4_076e35c0-5e29-6be8-7e53-4281f898af59.thor

b7d3f5c546b0a1f1_076e35c0-5e29-6be8-1be0-5599671a7685.thor

44e0d38ab733f6d6_076e35c0-5e29-6be8-6782-28275f8104d7.thor

d31635da7a0fdce7_076e35c0-5e29-6be8-d6ef-ea289265867f.thor

8d740a2e9b4cc841_076e35c0-5e29-6be8-7705-6eb28d6f5c26.thor

030b3ae1625e09f1_076e35c0-5e29-6be8-61e5-367158034f02.thor

f58388718c553646_076e35c0-5e29-6be8-4c7a-450e0c7ffcf4.thor

8de75b11332c01e4_076e35c0-5e29-6be8-f6b4-e8f379129a8d.thor

e5ea8213458cfabf_076e35c0-5e29-6be8-083a-abe78caa6ece.thor

af7a12135db48bf2_resource.xml

e6a82f1c1bd806fe_076e35c0-5e29-6be8-59ad-2099593adb15.thor

2f5ba5e41720c6b9_076e35c0-5e29-6be8-9f9f-1d7f09413197.thor

7db6c572cbd24687_076e35c0-5e29-6be8-f925-2721c47b77ad.thor

30d426ff7d7b9b72_076e35c0-5e29-6be8-2bc2-72def2a58642.thor

807dfee5a0b428c7_076e35c0-5e29-6be8-e65b-a006126331e0.thor

1ceb472cabec9858_076e35c0-5e29-6be8-d6de-807acb1f1b12.thor

3c8ab4e530baf53a_076e35c0-5e29-6be8-c0fa-231d84995f86.thor

ddb51774cdd2be20_076e35c0-5e29-6be8-6b75-cf98da9cb0b0.thor

07c0d24ca6c68db3_076e35c0-5e29-6be8-2b35-65dd7844cfb3.thor

e8e9aa325517248a_076e35c0-5e29-6be8-61ef-2baef513bfe1.thor

9e4a2b43e3d0e1e2_076e35c0-5e29-6be8-dbbd-c3362132cb80.thor

359322576c87a234_076e35c0-5e29-6be8-4979-fba13fbb33e2.thor

7ac6b0cd66a8c102_076e35c0-5e29-6be8-9798-61049d12bd8e.thor

03f3ac5565277914_076e35c0-5e29-6be8-d84c-21c56963dfeb.thor

9a99597c7bc77737_076e35c0-5e29-6be8-235d-1f5ee1d7ead7.thor

00eb798eaa6e72f8_076e35c0-5e29-6be8-dc20-5b27b790152c.thor

898d14069b357151_076e35c0-5e29-6be8-fa66-b2551a809253.thor

09621e1102694868_076e35c0-5e29-6be8-ce9a-2bd5140f0d01.thor

ce8396bd0fe210a6_076e35c0-5e29-6be8-0788-a617b4920bfa.thor

0f11bd871a4a2c36_076e35c0-5e29-6be8-c84f-f50a7b0493b8.thor

86c05252eacc2b5d_tasks.xml

f112ad2a1c0f4d38_076e35c0-5e29-6be8-cd37-f17ad8ddff50.thor

4261b1af60f9daa3_076e35c0-5e29-6be8-eff4-be5cc266aabf.thor

407d33f4ead8620e_076e35c0-5e29-6be8-ce58-f591fd57f61a.thor

b6a77979724b0017_076e35c0-5e29-6be8-79a0-aea633892a04.thor

afbbf2802a41fa3e_076e35c0-5e29-6be8-4334-6ce2c4eea48f.thor

ecb5093aaa8dce8f_076e35c0-5e29-6be8-f137-5becfbfeba8a.thor

23fea150315ab794_076e35c0-5e29-6be8-6c48-ee8503b67123.thor

52e9217c156ec436_076e35c0-5e29-6be8-608c-85b2bcef717a.thor

54f70e0234c30392_076e35c0-5e29-6be8-8f20-2445cf20c4cf.thor

8edb9355f352a723_076e35c0-5e29-6be8-638d-de6a77aec442.thor

d5a6d5a3f30febae_076e35c0-5e29-6be8-2905-04c82c7fc70a.thor

e188f81f5dbb657d_076e35c0-5e29-6be8-9e4b-0709aafd3690.thor

84c4c594bd941f79_076e35c0-5e29-6be8-9436-777cb34da1c0.thor

ed8681adffa1e93c_076e35c0-5e29-6be8-2c69-26759c17f75d.thor

85cf7c3f0d3022d0_076e35c0-5e29-6be8-dcb7-06a5d3524ac3.thor

7d5cea45d14bc130_076e35c0-5e29-6be8-177b-2bb645d117ad.thor

cf9423d5e85f3bce_076e35c0-5e29-6be8-0b04-f246a2b244cc.thor

81827d4ee11c9da1_076e35c0-5e29-6be8-f1a7-cdb654e615ed.thor

d79deb4583e75093_076e35c0-5e29-6be8-9116-16cf63747ab6.thor

8cc73bea6211b312_076e35c0-5e29-6be8-06c8-9c7deffd6f2d.thor

c7fea08e2aecf486_076e35c0-5e29-6be8-90d6-a28d38f22646.thor

e3a297eb7f1a31e3_076e35c0-5e29-6be8-55a0-39655123813e.thor

21e6f782342b9994_076e35c0-5e29-6be8-2836-cd702fb3b5fb.thor

bb140d8e9d5ea965_076e35c0-5e29-6be8-74c5-c95be669915a.thor

0078d657c4fc2e70_076e35c0-5e29-6be8-c0a9-43506a556308.thor

9dd0a111ed2c63c9_076e35c0-5e29-6be8-6463-cbeb6715945d.thor

34be90f701c0ca20_076e35c0-5e29-6be8-2a60-7119fc14604d.thor

11b9e60b332906c2_076e35c0-5e29-6be8-6248-48b299dffcaa.thor

2d27561e50ef86c4_076e35c0-5e29-6be8-fafa-724892131a9e.thor

da21f8ce6fec8e36_076e35c0-5e29-6be8-b702-e61bcfae1c90.thor

189762aa4b358dee_076e35c0-5e29-6be8-8dce-ea162d2ec92d.thor

b5e32c34ed49e2dd_076e35c0-5e29-6be8-e134-b919e64bdb72.thor

4694a4088e91610b_076e35c0-5e29-6be8-87fb-2cbea0692b22.thor

83c76bca4f6c8ec0_076e35c0-5e29-6be8-ca77-0671f0b3ad48.thor

d5cbd51d6f1904ce_076e35c0-5e29-6be8-8f09-07869f4d8d15.thor

3c311e73df87639e_076e35c0-5e29-6be8-3dc8-fbcf2029d24e.thor

4d05f68e40793363_076e35c0-5e29-6be8-493a-ba13380460e3.thor

c9f55ae2a5af36b0_076e35c0-5e29-6be8-f427-12d27e2c652e.thor

4e99da466db64274_076e35c0-5e29-6be8-119f-eb9a9cf8efbf.thor

16b43afd45b7b00d_076e35c0-5e29-6be8-d123-b876accac813.thor

efc603a6b9d4cbea_076e35c0-5e29-6be8-4297-2f10e856b54e.thor

d3affac230f297c3_076e35c0-5e29-6be8-76d6-e8fcccff87f5.thor

230d337c4c89887e_076e35c0-5e29-6be8-dbdb-fa5fdda9dcea.thor

997f6435210862e9_076e35c0-5e29-6be8-cfd3-88435c6e1b59.thor

7fb07688bf7c845d_076e35c0-5e29-6be8-a38f-b631bd143623.thor

d84f89388d08a7d7_076e35c0-5e29-6be8-b9fa-01b345e5c5ad.thor

42d81ead52f12470_076e35c0-5e29-6be8-86ce-0553eaac80da.thor

91981379c60c8e61_076e35c0-5e29-6be8-f1a8-4a07dda66686.thor

a471852ca500f4b7_076e35c0-5e29-6be8-720b-5ea0a24f461f.thor

5ed6f8ba47f67589_076e35c0-5e29-6be8-78f9-c4c8fee4b432.thor

4608046937b0dec8_076e35c0-5e29-6be8-409b-fcc82e6de3c8.thor

196833620747f0ea_076e35c0-5e29-6be8-db48-d99d22364f0e.thor

fb2e44a2f94bd9f9_076e35c0-5e29-6be8-1f9a-f652b9354423.thor

98588c7162ea6433_076e35c0-5e29-6be8-eb14-fbba143f1b92.thor

738b09e67daba985_076e35c0-5e29-6be8-a451-aaab75a1fe38.thor

940029dae810652d_076e35c0-5e29-6be8-b1ff-1421b5305f93.thor

f7c319aa4614ffe4_076e35c0-5e29-6be8-8b4d-a722dd9278f6.thor

8cf37dd5f1fac77c_076e35c0-5e29-6be8-7791-c977dd9dbe3f.thor

3ad52a498ae17c27_076e35c0-5e29-6be8-8872-81e9ebd18154.thor

a9e59152dc46d1ce_076e35c0-5e29-6be8-d378-e7c9322d4a2a.thor

7a1702ef437cfd44_076e35c0-5e29-6be8-4b00-3db4ab28116d.thor

d040ca6995213bbe_076e35c0-5e29-6be8-f594-30510a623e28.thor

d98ecee3ec7dbfa3_076e35c0-5e29-6be8-0947-4f8ea5497183.thor

80aa36e5e28ba18b_076e35c0-5e29-6be8-1b62-992c152b7591.thor

9563b5a6d112aac3_076e35c0-5e29-6be8-fd97-5f83f5f53179.thor

cfe980d8f1df7186_076e35c0-5e29-6be8-49d9-3d771dde47b9.thor

f04621857669e57c_076e35c0-5e29-6be8-5a0d-c342e56a29f0.thor

04d3473aa4f1adcb_076e35c0-5e29-6be8-30bb-e724847367bb.thor

3df884d0e730b0e7_076e35c0-5e29-6be8-71c2-5c0436268a94.thor

6844807974420f5f_076e35c0-5e29-6be8-5e05-07d46f6798e7.thor

97826f7ff1bd904a_076e35c0-5e29-6be8-f521-cea7eeb9de25.thor

69104f24667b8095_076e35c0-5e29-6be8-ef77-c13a3f4246ab.thor

c63222765dd31b56_076e35c0-5e29-6be8-24e1-415f53ecf14a.thor

44279230608d832c_076e35c0-5e29-6be8-e0a1-b20feb107614.thor

aada99c784caf7d9_076e35c0-5e29-6be8-9c29-a4e6978d6d2f.thor

aa0f1046ba1953bc_076e35c0-5e29-6be8-6aa2-b046c993bad1.thor

224d85d5edc4da61_076e35c0-5e29-6be8-6729-394f68116645.thor

d3d35ade15865762_076e35c0-5e29-6be8-d56b-cd0a5922e3f2.thor

b00d83b2a0a155bd_076e35c0-5e29-6be8-211a-4397f1ac5a06.thor

8b8d91806b5d76cc_076e35c0-5e29-6be8-1885-a3083ac21275.thor

ca37e032f96f48e5_076e35c0-5e29-6be8-6733-aa4df14c2805.thor

318016fefc220378_076e35c0-5e29-6be8-07b1-891b7259ec44.thor

cb1c316df5d8f1e1_076e35c0-5e29-6be8-4425-d8b2884bbb18.thor

f6ef7768b4e4810d_076e35c0-5e29-6be8-c5ad-58f5ce22a00a.thor

3a5c74a9445e4190_076e35c0-5e29-6be8-23eb-d2ee2a729b12.thor

36eb65423d6c3031_076e35c0-5e29-6be8-bb27-303bc741fc73.thor

550bbc76d62411a8_076e35c0-5e29-6be8-00d6-e3e0aa2d058c.thor

52b1af421bee996b_076e35c0-5e29-6be8-bb5c-cda7d968a776.thor

6e2330d7aa5f3f63_076e35c0-5e29-6be8-d601-f7073723cdb4.thor

f0785de6b56b611a_076e35c0-5e29-6be8-d343-75aa9690bcdd.thor

83cf057b8d62de39_076e35c0-5e29-6be8-bf8e-67ac6b36db14.thor

bbd46f313695cdc6_076e35c0-5e29-6be8-f4c4-5134880e59f7.thor

e43617cd5d3c2e3c__13_what_is.html

1e5329d476f8ab17_076e35c0-5e29-6be8-9b58-95693a2893d7.thor

edb33082f9d541cd_076e35c0-5e29-6be8-88fd-9dd07bc60b22.thor

ebbf1fa76e2a6099_076e35c0-5e29-6be8-a3ce-8f68471716c3.thor

9be54b0dc7719696_076e35c0-5e29-6be8-a6be-1672c32e7b50.thor

f333a726aef169cb_076e35c0-5e29-6be8-1a0a-48715f6b65bb.thor

ef593eacf4eb342f_076e35c0-5e29-6be8-6551-1139f95a5965.thor

81e8dfd6eb936827_076e35c0-5e29-6be8-60e4-8ca300c3e85e.thor

5f03d125d3e9ff8a_076e35c0-5e29-6be8-cd53-c7c6d737d359.thor

a14048b1c1b6c2ad_076e35c0-5e29-6be8-16b0-0a2dc813fbc2.thor

103625544e340804_076e35c0-5e29-6be8-594c-006fe2f1a0f5.thor

179c43ddf049df0b_076e35c0-5e29-6be8-3dee-50bb01d549a3.thor

be2d044b1256a0c9_076e35c0-5e29-6be8-9138-d2426aa909c8.thor

4864b8e6746704b4_076e35c0-5e29-6be8-c86e-4f8a49990bdd.thor

bfd8c14749eff96f_076e35c0-5e29-6be8-08fa-e0b156774c26.thor

8931d34acc2d60b8_behavior.xml

71bf5eda73041de7_076e35c0-5e29-6be8-d8da-25e12a25a1c5.thor

6ca076fb4a9c7b49_076e35c0-5e29-6be8-77e1-a9413de601ea.thor

4ab70b82ba4b9b63_076e35c0-5e29-6be8-aa4e-184254d44c83.thor

765bda9619c15725_076e35c0-5e29-6be8-1193-da1a8cb83a75.thor

2b056772c6cf1abc_076e35c0-5e29-6be8-48ac-12fe94daf13b.thor

54fa9e60e3c01feb_076e35c0-5e29-6be8-42b3-10434e5d5668.thor

da2b374c8edbc544_076e35c0-5e29-6be8-ae76-ead0fb1d3d47.thor

a192751d6902df97_076e35c0-5e29-6be8-eabb-958cbef21e56.thor

3fb0047cc169f3d5_076e35c0-5e29-6be8-3d39-229e44b6e3a0.thor

cc53b9c2993ff04e_076e35c0-5e29-6be8-0608-2463997f47bd.thor

82afa1d6568aeee0_076e35c0-5e29-6be8-fcb0-9e20fdd0f201.thor

e4ac69c81abec881_076e35c0-5e29-6be8-f626-d3a688406104.thor

55aa3a65f55ebb99_076e35c0-5e29-6be8-ee04-3b984f34930b.thor

a84f62f3a925b146_076e35c0-5e29-6be8-2c65-5e38bd5bc827.thor

7dc58279db6cd80e_076e35c0-5e29-6be8-dcdc-572d50711a85.thor

5114c6dab3bbb798_076e35c0-5e29-6be8-05e8-fd106fd8217b.thor

3d854985f510d7bb_076e35c0-5e29-6be8-6d24-27a723f646e0.thor

237b9683f687b23d_076e35c0-5e29-6be8-0723-dc0db2f54ffc.thor

3ef33593c1ad0e26_076e35c0-5e29-6be8-5320-82e5765cdb1b.thor

ea1a2cff696ac2ad_076e35c0-5e29-6be8-b0f5-0f8843715e42.thor

caf7e1616c108599_076e35c0-5e29-6be8-a32c-6e4815f64bd9.thor

f7e7a64e174c067b_076e35c0-5e29-6be8-d8d6-d56aa457d8fa.thor

5f76729506bd68c6_076e35c0-5e29-6be8-b19d-2fa76bdd0dc7.thor

da115f5feae4258d_076e35c0-5e29-6be8-b520-e7910e612d8a.thor

322162dc2c209350_076e35c0-5e29-6be8-ceeb-6f415db2c0e6.thor

5375321745fffeab_076e35c0-5e29-6be8-fbe9-7f8a4afc1a17.thor

1ce24d031efd56cc_076e35c0-5e29-6be8-e695-73b13cb30bc1.thor

a948753341af07d0_076e35c0-5e29-6be8-6fc2-c35372b590f4.thor

d4811a3c5d000d77_076e35c0-5e29-6be8-3281-46ab7abbe3ff.thor

63c06dbf115b88f8_076e35c0-5e29-6be8-332e-47436630b310.thor

56ffdddbcb1d663b_076e35c0-5e29-6be8-1317-af70cabb8ef9.thor

49249fc575261d0f_076e35c0-5e29-6be8-1a77-539634f27fce.thor

8d57d640bef392b6_076e35c0-5e29-6be8-632e-a6fdbfe7d0f2.thor

6742383735757739_076e35c0-5e29-6be8-e0f1-1c92f9e1689b.thor

9de3c77f463bbc2d_076e35c0-5e29-6be8-1fa0-411dd484079d.thor

d457bd6621d523ae_076e35c0-5e29-6be8-6feb-bb363e0bddda.thor

e0c635a14c3b244c_076e35c0-5e29-6be8-6f8e-7b766615abda.thor

047cad42f95ecac8_076e35c0-5e29-6be8-c177-0913d3be7073.thor

6fe1a2466512baab_076e35c0-5e29-6be8-a1fa-baffe07a2e85.thor

e5a487e4e2b3e99c_076e35c0-5e29-6be8-cd9d-2e190ae890c6.thor

f2c9c89153633efb_076e35c0-5e29-6be8-8001-412cb31849d5.thor

043d915af92f0f2d_076e35c0-5e29-6be8-ad88-d0d21b5ad1eb.thor

112538df14b2c373_076e35c0-5e29-6be8-c80e-923d09b565a9.thor

41a2e415f65db2c8_076e35c0-5e29-6be8-160c-f9a7bfc683e7.thor

f0572b5708c83015_behavior.xml

58ad476711a7732a_076e35c0-5e29-6be8-88a5-68fb40633c42.thor

a9e405dcb3ab7009_076e35c0-5e29-6be8-a481-56c7ca8f3c95.thor

77f0490c44194a86_076e35c0-5e29-6be8-fa82-f4698b946ccf.thor

ff581e8b1abfafd5_076e35c0-5e29-6be8-78b7-dca629c303f5.thor

8ef885c1e45f866b_076e35c0-5e29-6be8-43ef-b7d5ca41239c.thor

51c52a44774a1054_076e35c0-5e29-6be8-b793-f30e8541f380.thor

48ac3edb903404cc_076e35c0-5e29-6be8-c25e-3862bd31f9f8.thor

1d4019bc073a6bf7_076e35c0-5e29-6be8-29c6-beec1f0cf86d.thor

dce24f317998ae2a_076e35c0-5e29-6be8-359f-389f4d24ac70.thor

e881b23169553b73_076e35c0-5e29-6be8-98c1-a8b9f82cf796.thor

5bb2353293332fb3_076e35c0-5e29-6be8-6a6c-ea6adeda6e45.thor

4222d352ac18a19a_076e35c0-5e29-6be8-e328-005e9fe88b37.thor

169b3219ccc5c8a6_076e35c0-5e29-6be8-2453-c388d8b7df7b.thor

94caf056600cf754_076e35c0-5e29-6be8-c275-e888d6913c29.thor

e25a5174fbeb9b17_076e35c0-5e29-6be8-17ae-ce834db1df0f.thor

bd9818587c234090_076e35c0-5e29-6be8-5d85-b0b62143c04c.thor

bc5aeebe5c5dfd2f_076e35c0-5e29-6be8-cbbe-5589c9ca3620.thor

251e4dcae56b3d87_076e35c0-5e29-6be8-d451-70ce50ada419.thor

ae09cca6dd647c57_076e35c0-5e29-6be8-0fbf-40fe65f2c489.thor

446477068245d99b_076e35c0-5e29-6be8-695b-e83b08b61db2.thor

1ad4f94d8d20dea1_076e35c0-5e29-6be8-3eff-92cd0c17b311.thor

e16c5a5cbb4d624c_076e35c0-5e29-6be8-725b-b857d3f4b63a.thor

3bc8803d459086e2_076e35c0-5e29-6be8-a1f5-7996c9dea53e.thor

cd9e4d35536ecfe3_076e35c0-5e29-6be8-7964-b6befdad5929.thor

e73ecb56d43cf79a_076e35c0-5e29-6be8-fe7d-ca69f4c5280d.thor

573286aaaa5dc4e3_076e35c0-5e29-6be8-5953-78cb709dd113.thor

f3c1a54cb0407a38_076e35c0-5e29-6be8-b24e-00b40bea5cb2.thor

4fbb357d118701ca_076e35c0-5e29-6be8-edb8-0b6a3ef2fd75.thor

e52ae646294dfbde_076e35c0-5e29-6be8-3d9c-d7e96d3f43cb.thor

15c0f96d83184707_076e35c0-5e29-6be8-2761-165ba5364c2f.thor

f264a2542e80d15d_076e35c0-5e29-6be8-5ba0-5c86839fb755.thor

bf70e65763634ec4_076e35c0-5e29-6be8-e1d3-16bd8f619b7d.thor

444644e8643e96cd_076e35c0-5e29-6be8-b195-fc9e562b2533.thor

004478b5ef60ede4_076e35c0-5e29-6be8-c03a-caae830e2d7e.thor

aea4e2ecb388ddcf_076e35c0-5e29-6be8-590a-0d39322506fc.thor

3c778c9ebc878400_076e35c0-5e29-6be8-7789-aa7e1674a624.thor

2dde2b9a197f35c2_076e35c0-5e29-6be8-6b56-b31366d1f62c.thor

bbc3f1614a7f7029_076e35c0-5e29-6be8-4f88-14bd82aa268a.thor

e96c8542b897fdd4_076e35c0-5e29-6be8-c79b-27c9c2cd32e6.thor

eabb5e4ce16ca13e_076e35c0-5e29-6be8-5bb4-8fa3ef5f6174.thor

60472435090ff40e_076e35c0-5e29-6be8-59cc-5c54cbd27bc0.thor

0343b82473a8f7f8_076e35c0-5e29-6be8-c66f-f6ddaf279816.thor

24df514b7af0bc0a_076e35c0-5e29-6be8-c6eb-8c8967cb4428.thor

62614b3b0bb7164b_076e35c0-5e29-6be8-dae4-75269aaf70d6.thor

bd13277fde2060d6_076e35c0-5e29-6be8-18c5-a8086431b1f4.thor

8ee94e599e2ae328_076e35c0-5e29-6be8-66d5-1ec173b75450.thor

ec5adf512029d6de_076e35c0-5e29-6be8-9a2d-29b90e7635e8.thor

d051a1cf0f52df06_076e35c0-5e29-6be8-9e56-b11f7978590c.thor

7f87fc4a4095a3e6_076e35c0-5e29-6be8-4c49-f77cc4bef425.thor

07b3f73a1339684e_076e35c0-5e29-6be8-d2d4-369396b98e71.thor

bd25fd988a1fba0b_076e35c0-5e29-6be8-0c1b-f05a324387d5.thor

f2c7cb614772bdca_076e35c0-5e29-6be8-9cbb-caeee8c2d887.thor

7fd15a1a13d0f277_076e35c0-5e29-6be8-f6a5-4f63bfea7ad1.thor

a67048cbe2681bcf_076e35c0-5e29-6be8-6ca5-ebfd0184848a.thor

735d7a89323ad393_076e35c0-5e29-6be8-d5bc-32b4afddea1c.thor

b7350d4de18d5da1_076e35c0-5e29-6be8-5912-1647f7821922.thor

b5c635d6b7c4cb48_076e35c0-5e29-6be8-1b01-bfa8fcc696ae.thor

c4d36ebc83ba2aab_076e35c0-5e29-6be8-8131-a164493131bb.thor

0269ecdc289bee8f_076e35c0-5e29-6be8-023f-bd226a5ba1cf.thor

770c37a33d820503_076e35c0-5e29-6be8-6e26-a93ddfdcfef5.thor

34cae1ce064263a1_076e35c0-5e29-6be8-4594-114bf2a01337.thor

46b5382b29d9b9dc_076e35c0-5e29-6be8-cf2a-9104ae29d4d6.thor

NRV_AM00I_.js

Network Analysis

Hosts Involved

DNS Requests

HTTP Requests

Behavior Summary

File-Read
  • C:\Users\Harry Dresden\Desktop\desktop.ini
  • C:\Users\Harry Dresden\AppData\Local\Temp\NRV_AM00I_.js
  • C:\Windows\System32\wscript.exe
  • C:\Windows\System32\msxml3.dll
  • C:\Windows\System32\wshom.ocx
  • c:\Python27\include\pyexpat.h
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\JGxUGsQbamW.docm
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office64ww.msi.16.x-none.xml
  • c:\Python27\include\ast.h
  • c:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.0.xml
  • c:\Python27\include\tupleobject.h
  • c:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\behavior.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Enterprise PDF Reader.bmp
  • c:\Python27\include\descrobject.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ProfileRibbon.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\content_showbg.jpg
  • c:\Python27\tcl\tix8.4.3\pref\SGIGray.cs
  • c:\Python27\include\grammar.h
  • c:\Python27\include\import.h
  • \\?\PIPE\browser
  • c:\Python27\Lib\email\test\data\msg_30.txt
  • c:\6cdeacda242012e0e5b593e657\1040\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1043\eula.rtf
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\tab.png
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Integrate PDF into your mobile apps.bmp
  • c:\Python27\tcl\tix8.4.3\pref\Blue.cs
  • c:\6cdeacda242012e0e5b593e657\1049\eula.rtf
  • UNC\SHARDREALM\Users\Public\Music\Sample Music\Maid with the Flaxen Hair.mp3
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\classic-16-open.png
  • c:\Python27\Lib\email\test\data\msg_36.txt
  • c:\6cdeacda242012e0e5b593e657\1042\eula.rtf
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Penguins.jpg
  • c:\Python27\Lib\idlelib\TODO.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\history.txt
  • c:\Python27\include\marshal.h
  • c:\Python27\Lib\email\test\data\msg_23.txt
  • c:\Python27\Lib\email\test\data\msg_19.txt
  • c:\Python27\Lib\idlelib\extend.txt
  • c:\Python27\Lib\test\badcert.pem
  • c:\Python27\Lib\test\cjkencodings\euc_kr.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\base.css
  • c:\Python27\include\pgen.h
  • c:\Python27\include\memoryobject.h
  • c:\Python27\include\objimpl.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml
  • c:\Python27\Lib\idlelib\idle_test\README.txt
  • c:\Python27\include\abstract.h
  • c:\ProgramData\WebEx\WebEx\12_1324\gpc.php
  • c:\Python27\Lib\test\keycert.passwd.pem
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\ribbon-16.png
  • c:\Python27\Lib\test\cjkencodings\gb18030-utf8.txt
  • c:\Python27\include\object.h
  • c:\6cdeacda242012e0e5b593e657\1036\eula.rtf
  • c:\Python27\Lib\test\cjkencodings\euc_jisx0213.txt
  • c:\Python27\tcl\tclConfig.sh
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal create pdf from scanner documents.bmp
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\tabs-ie.css
  • c:\Python27\include\pyport.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml
  • c:\Python27\Lib\email\test\data\msg_04.txt
  • c:\6cdeacda242012e0e5b593e657\1030\eula.rtf
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.es-es.xml
  • c:\Python27\include\code.h
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\DeploymentConfiguration.xml
  • c:\Python27\include\dtoa.h
  • c:\Python27\include\asdl.h
  • c:\Python27\Lib\test\empty.vbs
  • c:\ProgramData\Microsoft\IlsCache\ilrcache.xml
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.proofing.msi.16.en-us.xml
  • c:\Python27\include\complexobject.h
  • c:\Python27\Lib\email\test\data\msg_13.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\history_winbg.jpg
  • c:\6cdeacda242012e0e5b593e657\3082\eula.rtf
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon create pdf from scanner documents.bmp
  • c:\Python27\Lib\lib2to3\Grammar.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Protect Sensitive PDF Documents.bmp
  • c:\Python27\include\pystrtod.h
  • c:\Python27\include\longobject.h
  • c:\Python27\include\intobject.h
  • c:\Python27\Lib\email\test\data\msg_12.txt
  • c:\Python27\tcl\tix8.4.3\pref\Bisque.cs
  • c:\Python27\include\pyctype.h
  • c:\Python27\Lib\email\test\data\msg_02.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\index.html
  • c:\Python27\Lib\test\nokia.pem
  • c:\Python27\include\pydebug.h
  • c:\Python27\include\structmember.h
  • c:\Python27\include\fileobject.h
  • c:\Python27\Lib\email\test\data\msg_11.txt
  • c:\Python27\include\enumobject.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Enterprise PDF Reader.bmp
  • c:\Python27\include\metagrammar.h
  • c:\Python27\include\pyfpe.h
  • c:\Python27\include\compile.h
  • c:\Python27\tcl\tix8.4.3\pref\WmDefault.cs
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.en-us.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\line.jpg
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\config.css
  • c:\Python27\Lib\test\https_svn_python_org_root.pem
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.officemui.msi.16.en-us.xml
  • c:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\en-US\resource.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Protect your PDF files with AD RMS.bmp
  • c:\Python27\include\cobject.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\js\nor.js
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.onenotemui.msi.16.en-us.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\right_over_bg.jpg
  • c:\Python27\Lib\email\test\data\msg_22.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\tabs.css
  • c:\Python27\include\pgenheaders.h
  • c:\Python27\include\pythread.h
  • c:\Python27\Lib\email\test\data\msg_31.txt
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Koala.jpg
  • c:\Python27\Lib\email\test\data\msg_14.txt
  • c:\Python27\Lib\email\test\data\msg_39.txt
  • c:\Python27\Lib\site-packages\setuptools\command\launcher manifest.xml
  • c:\Python27\Lib\email\test\data\msg_40.txt
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.powerpointmui.msi.16.en-us.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\index.html
  • c:\Python27\include\opcode.h
  • c:\6cdeacda242012e0e5b593e657\1025\eula.rtf
  • c:\Python27\Lib\test\wrongcert.pem
  • c:\Python27\include\moduleobject.h
  • c:\6cdeacda242012e0e5b593e657\1045\eula.rtf
  • UNC\SHARDREALM\Users\Public\Music\Sample Music\Kalimba.mp3
  • c:\Python27\Lib\email\test\data\msg_25.txt
  • c:\Python27\include\boolobject.h
  • c:\Python27\Lib\site-packages\setuptools-16.0.dist-info\dependency_links.txt
  • c:\Python27\include\bitset.h
  • c:\Python27\include\warnings.h
  • c:\Python27\include\pycapsule.h
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\9E1D94D2-471F-4DC3-9EBD-E31E1E099E00\en-us.16\MasterDescriptor.en-us.xml
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Access.Access.x-none.msi.16.x-none.xml
  • c:\Python27\Lib\email\test\data\msg_27.txt
  • c:\Python27\Lib\idlelib\NEWS.txt
  • c:\Python27\Lib\email\test\data\msg_42.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Create PDF from Office-convert PDF to office.bmp
  • c:\Python27\include\modsupport.h
  • c:\Python27\tcl\tix8.4.3\pref\TixGray.cs
  • c:\Python27\Lib\idlelib\help.txt
  • c:\6cdeacda242012e0e5b593e657\2052\eula.rtf
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.excelmui.msi.16.en-us.xml
  • c:\Python27\include\ucnhash.h
  • c:\Python27\Lib\test\check_soundcard.vbs
  • c:\Python27\Lib\test\keycert4.pem
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Integrate PDF into your mobile apps.bmp
  • c:\Python27\Lib\test\cjkencodings\cp949-utf8.txt
  • c:\Python27\Lib\email\test\data\msg_16.txt
  • c:\Python27\include\symtable.h
  • c:\Python27\include\node.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\phantomPDF_b.png
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\right_move_bg.jpg
  • c:\Python27\Lib\idlelib\HISTORY.txt
  • UNC\SHARDREALM\Users\Harry Dresden\Downloads\big-hero-6-2.jpg
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Tulips.jpg
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Fastest PDF Search and Index.bmp
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\WjPXtMOpPDP.ppt
  • c:\Python27\Lib\email\test\data\msg_41.txt
  • c:\Python27\include\cStringIO.h
  • c:\Python27\Lib\test\cjkencodings\euc_jp.txt
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml
  • c:\ProgramData\Sun\Java\Java Update\jaureglist.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Design form fields easily.bmp
  • c:\Python27\Lib\email\test\data\msg_29.txt
  • c:\Python27\Lib\email\test\data\msg_01.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\skin.css
  • \\?\PIPE\lsarpc
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Jellyfish.jpg
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\bfPeuWLJYMo.docm
  • c:\Python27\Lib\test\sha256.pem
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\phantomPDF_s.png
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml
  • c:\Python27\include\classobject.h
  • c:\Python27\include\datetime.h
  • c:\6cdeacda242012e0e5b593e657\1028\LocalizedData.xml
  • c:\Python27\Lib\email\test\data\msg_18.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Integrate PDF into your application.bmp
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\tasks.xml
  • c:\Python27\include\errcode.h
  • c:\Python27\Lib\site-packages\pip-7.0.1.dist-info\top_level.txt
  • c:\Python27\Lib\test\keycert3.pem
  • c:\Python27\Lib\email\test\data\msg_09.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Fastest PDF Search and Index.bmp
  • c:\Python27\include\pyerrors.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.outlookmui.msi.16.en-us.xml
  • c:\Python27\include\Python-ast.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\blank.gif
  • c:\Python27\Lib\email\test\data\msg_21.txt
  • c:\Python27\include\ceval.h
  • c:\Python27\Lib\lib2to3\PatternGrammar.txt
  • c:\Python27\Lib\email\test\data\msg_07.txt
  • c:\Python27\include\pythonrun.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\classic-16.png
  • c:\Python27\Lib\idlelib\README.txt
  • c:\Python27\include\pygetopt.h
  • c:\Python27\include\codecs.h
  • c:\Python27\Lib\email\test\data\msg_10.txt
  • c:\Python27\Lib\email\test\data\msg_33.txt
  • c:\Python27\Lib\test\cjkencodings\euc_jisx0213-utf8.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\Profile.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\index_ori.html
  • c:\Python27\include\patchlevel.h
  • c:\Python27\include\bytes_methods.h
  • c:\6cdeacda242012e0e5b593e657\1035\eula.rtf
  • c:\Python27\Lib\test\cjkencodings\cp949.txt
  • c:\6cdeacda242012e0e5b593e657\1031\eula.rtf
  • c:\Python27\Lib\test\keycert.pem
  • c:\Python27\include\traceback.h
  • c:\6cdeacda242012e0e5b593e657\1028\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1044\eula.rtf
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Powerful Word Processor.bmp
  • c:\Python27\include\longintrepr.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\buy_phantom.png
  • c:\Python27\include\parsetok.h
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\UserDeploymentConfiguration.xml
  • c:\Python27\include\Python.h
  • c:\Python27\Lib\email\test\data\msg_34.txt
  • c:\Python27\Lib\site-packages\setuptools-16.0.dist-info\entry_points.txt
  • c:\6cdeacda242012e0e5b593e657\1041\eula.rtf
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon View PDFs on mobile devices.bmp
  • c:\Python27\include\pystate.h
  • c:\Python27\Lib\email\test\data\msg_05.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\version.xml
  • c:\Python27\include\pyconfig.h
  • c:\Python27\include\pymacconfig.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.shared.Office.x-none.msi.16.x-none.xml
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\unfERXGafU.ppt
  • c:\Python27\include\bufferobject.h
  • c:\Python27\include\timefuncs.h
  • c:\Python27\Lib\email\test\data\msg_37.txt
  • c:\Python27\include\graminit.h
  • c:\6cdeacda242012e0e5b593e657\1037\eula.rtf
  • c:\Python27\include\pystrcmp.h
  • c:\Python27\include\floatobject.h
  • UNC\SHARDREALM\Users\Default\NTUSER.DAT.LOG
  • c:\Python27\Lib\email\test\data\msg_26.txt
  • c:\Python27\Lib\test\pycacert.pem
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\top_tb_bg.jpg
  • c:\Python27\Lib\test\badkey.pem
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Powerful Word Processor.bmp
  • c:\Python27\Lib\test\cjkencodings\big5.txt
  • c:\Python27\Lib\site-packages\setuptools-16.0.dist-info\top_level.txt
  • c:\Python27\Lib\test\cjkencodings\euc_jp-utf8.txt
  • c:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\tasks.xml
  • UNC\SHARDREALM\Users\Public\Videos\Sample Videos\Wildlife.wmv
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.publishermui.msi.16.en-us.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\js\DD_belatedPNG.js
  • c:\Python27\include\bytesobject.h
  • c:\Python27\include\sysmodule.h
  • c:\Python27\include\pymactoolbox.h
  • c:\Python27\Lib\email\test\data\msg_35.txt
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\en-US\resource.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Protect Sensitive PDF Documents.bmp
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.accessmui.msi.16.en-us.xml
  • c:\Python27\Lib\test\185test.db
  • c:\Python27\Lib\site-packages\pip\_vendor\requests\cacert.pem
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Design form fields easily.bmp
  • c:\Python27\Lib\email\test\data\msg_08.txt
  • c:\Python27\include\eval.h
  • c:\Python27\Lib\email\test\data\msg_15.txt
  • c:\Python27\Lib\site-packages\README.txt
  • c:\Python27\include\genobject.h
  • UNC\SHARDREALM\Users\Harry Dresden\Downloads\cleandesktop.py.txt
  • c:\6cdeacda242012e0e5b593e657\1029\LocalizedData.xml
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Desert.jpg
  • c:\Python27\Lib\test\cjkencodings\big5hkscs.txt
  • c:\Python27\Lib\email\test\data\msg_28.txt
  • c:\Python27\Lib\test\ssl_cert.pem
  • c:\Python27\Lib\email\test\data\msg_17.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Protect your PDF files with AD RMS.bmp
  • c:\Python27\include\osdefs.h
  • c:\6cdeacda242012e0e5b593e657\1025\LocalizedData.xml
  • \\?\PIPE\wkssvc
  • c:\Python27\include\pymem.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Edit and reflow paragraphs in PDF files.bmp
  • c:\Python27\include\pyarena.h
  • c:\6cdeacda242012e0e5b593e657\1033\eula.rtf
  • c:\Python27\Lib\test\selfsigned_pythontestdotnet.pem
  • c:\Python27\Lib\email\test\data\msg_46.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Create PDF from Office-convert PDF to office.bmp
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Integrate PDF into your application.bmp
  • c:\Python27\include\rangeobject.h
  • c:\puosftl\bin\cert.p12
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\body_bg.jpg
  • c:\6cdeacda242012e0e5b593e657\2070\eula.rtf
  • c:\Python27\include\iterobject.h
  • c:\6cdeacda242012e0e5b593e657\1029\eula.rtf
  • c:\Python27\include\funcobject.h
  • c:\Python27\include\listobject.h
  • c:\Python27\Lib\email\test\data\msg_44.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\ribbon-16-open.png
  • c:\Python27\include\frameobject.h
  • c:\Python27\Lib\email\test\data\msg_06.txt
  • c:\Python27\include\sliceobject.h
  • c:\Python27\tcl\tix8.4.3\pref\TK.cs
  • c:\Python27\Lib\email\test\data\msg_43.txt
  • c:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\behavior.xml
  • c:\Python27\include\stringobject.h
  • c:\6cdeacda242012e0e5b593e657\1053\eula.rtf
  • UNC\SHARDREALM\Users\Harry Dresden\Contacts\Harry Dresden.contact
  • c:\Python27\Lib\email\test\data\msg_20.txt
  • c:\Python27\tcl\tix8.4.3\pref\Gray.cs
  • c:\Python27\Lib\test\ssl_key.pem
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.officemuiset.msi.16.en-us.xml
  • c:\Python27\include\methodobject.h
  • c:\Python27\include\structseq.h
  • c:\Python27\Lib\test\cjkencodings\gb18030.txt
  • c:\Python27\include\pymath.h
  • UNC\SHARDREALM\Users\Public\Music\Sample Music\Sleep Away.mp3
  • c:\6cdeacda242012e0e5b593e657\1038\eula.rtf
  • c:\Python27\Lib\email\test\data\msg_32.txt
  • c:\Python27\Lib\email\test\data\msg_03.txt
  • c:\Python27\Lib\email\test\data\msg_24.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\show_con_bg.jpg
  • c:\Python27\Lib\test\ssl_key.passwd.pem
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Edit and reflow paragraphs in PDF files.bmp
  • c:\Python27\Lib\test\keycert2.pem
  • c:\Python27\include\py_curses.h
  • c:\ProgramData\WebEx\WebEx\atsdk.xml
  • c:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.2.xml
  • c:\Python27\include\setobject.h
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\resource.xml
  • c:\Python27\Lib\test\cjkencodings\big5-utf8.txt
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\9E1D94D2-471F-4DC3-9EBD-E31E1E099E00\x-none.16\MasterDescriptor.x-none.xml
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\TeXnBbjSaZGb.docm
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.wordmui.msi.16.en-us.xml
  • c:\6cdeacda242012e0e5b593e657\1046\eula.rtf
  • c:\Python27\Lib\email\test\data\msg_45.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal View PDFs on mobile devices.bmp
  • c:\Python27\tcl\tix8.4.3\pref\TkWin.cs
  • c:\Python27\include\bytearrayobject.h
  • c:\Python27\Lib\email\test\data\msg_12a.txt
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.fr-fr.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal View and annotate PDFs.bmp
  • c:\Python27\Lib\idlelib\CREDITS.txt
  • c:\Python27\include\dictobject.h
  • c:\Python27\Lib\test\cjkencodings\big5hkscs-utf8.txt
  • c:\Python27\include\intrcheck.h
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Lighthouse.jpg
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Word.Word.x-none.msi.16.x-none.xml
  • c:\Python27\Lib\email\test\data\msg_38.txt
  • c:\Python27\Lib\test\cjkencodings\euc_kr-utf8.txt
  • c:\ProgramData\Microsoft\IlsCache\imcrcache.xml
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office64mui.msi.16.en-us.xml
  • c:\Python27\Lib\test\nullbytecert.pem
  • c:\6cdeacda242012e0e5b593e657\1032\eula.rtf
  • c:\Python27\Lib\test\dh1024.pem
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Hydrangeas.jpg
  • c:\6cdeacda242012e0e5b593e657\1055\eula.rtf
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office64muiset.msi.16.en-us.xml
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Chrysanthemum.jpg
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\eDyNSOahSI.doc
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.accessmuiset.msi.16.en-us.xml
  • c:\Python27\Lib\site-packages\pip-7.0.1.dist-info\entry_points.txt
  • c:\Python27\include\weakrefobject.h
  • c:\Python27\Lib\idlelib\idle.bat
  • c:\Python27\include\unicodeobject.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon View and annotate PDFs.bmp
  • c:\Python27\include\cellobject.h
File-Written
  • C:\Users\Harry Dresden\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YLC2QM2Y\3muv7[1]
  • C:\Users\Harry Dresden\AppData\Local\Temp\DdxhPYsYr9klfk.dll
  • c:\Python27\include\pyexpat.h
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\076E35C0-5E29-6BE8-A1F5-7996C9DEA53E.thor
  • c:\6cdeacda242012e0e5b593e657\1033\_25_WHAT_is.html
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\JGxUGsQbamW.docm
  • c:\Python27\Lib\email\test\data\msg_06.txt
  • c:\Python27\include\ast.h
  • c:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.0.xml
  • c:\Python27\include\tupleobject.h
  • c:\Python27\tcl\tix8.4.3\pref\_29_WHAT_is.html
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Enterprise PDF Reader.bmp
  • c:\Python27\include\descrobject.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ProfileRibbon.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\content_showbg.jpg
  • c:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\en-US\_42_WHAT_is.html
  • c:\Python27\tcl\tix8.4.3\pref\SGIGray.cs
  • c:\Python27\include\grammar.h
  • c:\Python27\include\import.h
  • \\?\PIPE\browser
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\_41_WHAT_is.html
  • c:\Python27\Lib\email\test\data\msg_30.txt
  • c:\6cdeacda242012e0e5b593e657\1040\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1043\eula.rtf
  • c:\Python27\Lib\test\nullcert.pem
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.proofing.msi.16.en-us.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Integrate PDF into your mobile apps.bmp
  • c:\6cdeacda242012e0e5b593e657\1044\_9_WHAT_is.html
  • c:\Python27\tcl\tix8.4.3\pref\Blue.cs
  • UNC\SHARDREALM\Users\Public\Music\Sample Music\Maid with the Flaxen Hair.mp3
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\classic-16-open.png
  • c:\Python27\Lib\email\test\data\msg_36.txt
  • c:\6cdeacda242012e0e5b593e657\1042\eula.rtf
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Penguins.jpg
  • c:\Python27\Lib\idlelib\TODO.txt
  • c:\6cdeacda242012e0e5b593e657\2070\_16_WHAT_is.html
  • c:\6cdeacda242012e0e5b593e657\1055\_14_WHAT_is.html
  • c:\6cdeacda242012e0e5b593e657\1053\_13_WHAT_is.html
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\history.txt
  • c:\Python27\include\marshal.h
  • c:\Python27\Lib\email\test\data\msg_23.txt
  • c:\6cdeacda242012e0e5b593e657\1046\_11_WHAT_is.html
  • c:\Python27\Lib\email\test\data\msg_19.txt
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\_33_WHAT_is.html
  • c:\Python27\Lib\idlelib\extend.txt
  • c:\Python27\Lib\site-packages\pip\_vendor\requests\_1_WHAT_is.html
  • c:\Python27\Lib\test\badcert.pem
  • c:\Python27\Lib\test\cjkencodings\euc_kr.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\base.css
  • c:\Python27\include\pgen.h
  • c:\Python27\include\memoryobject.h
  • c:\Python27\include\objimpl.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml
  • c:\6cdeacda242012e0e5b593e657\1032\_24_WHAT_is.html
  • c:\Python27\Lib\idlelib\idle_test\README.txt
  • c:\6cdeacda242012e0e5b593e657\1040\_5_WHAT_is.html
  • c:\Python27\include\abstract.h
  • c:\ProgramData\WebEx\WebEx\12_1324\gpc.php
  • c:\Python27\Lib\test\keycert.passwd.pem
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\ribbon-16.png
  • c:\Python27\Lib\test\cjkencodings\gb18030-utf8.txt
  • c:\Python27\include\object.h
  • c:\Python27\Lib\idlelib\_31_WHAT_is.html
  • c:\6cdeacda242012e0e5b593e657\1036\eula.rtf
  • c:\Python27\Lib\test\cjkencodings\euc_jisx0213.txt
  • c:\Python27\tcl\tclConfig.sh
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\9E1D94D2-471F-4DC3-9EBD-E31E1E099E00\x-none.16\_35_WHAT_is.html
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal create pdf from scanner documents.bmp
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\tabs-ie.css
  • c:\Python27\include\pyport.h
  • c:\6cdeacda242012e0e5b593e657\1045\eula.rtf
  • c:\Python27\Lib\email\test\data\msg_04.txt
  • c:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\076E35C0-5E29-6BE8-CD53-C7C6D737D359.thor
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\_3_WHAT_is.html
  • c:\6cdeacda242012e0e5b593e657\1030\eula.rtf
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.es-es.xml
  • c:\Python27\include\code.h
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\DeploymentConfiguration.xml
  • c:\Python27\include\dtoa.h
  • c:\Python27\include\asdl.h
  • c:\Python27\Lib\test\empty.vbs
  • c:\ProgramData\Microsoft\IlsCache\ilrcache.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\tab.png
  • c:\Python27\include\complexobject.h
  • c:\Python27\Lib\email\test\data\msg_13.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\history_winbg.jpg
  • c:\6cdeacda242012e0e5b593e657\3082\eula.rtf
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon create pdf from scanner documents.bmp
  • c:\Python27\Lib\lib2to3\Grammar.txt
  • c:\6cdeacda242012e0e5b593e657\1030\_22_WHAT_is.html
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Protect Sensitive PDF Documents.bmp
  • c:\Python27\include\pystrtod.h
  • c:\Python27\include\longobject.h
  • c:\6cdeacda242012e0e5b593e657\1035\_26_WHAT_is.html
  • c:\Python27\include\intobject.h
  • c:\Python27\Lib\email\test\data\msg_12.txt
  • c:\Python27\tcl\tix8.4.3\pref\Bisque.cs
  • c:\Python27\Lib\email\test\data\msg_02.txt
  • c:\Python27\include\pyctype.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\index.html
  • c:\Python27\Lib\test\nokia.pem
  • c:\Python27\include\pydebug.h
  • c:\Python27\include\structmember.h
  • c:\ProgramData\Microsoft\IlsCache\_44_WHAT_is.html
  • c:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\076E35C0-5E29-6BE8-13A1-9B476D61CE5E.thor
  • c:\Python27\include\fileobject.h
  • c:\Python27\include\modsupport.h
  • c:\Python27\include\enumobject.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Enterprise PDF Reader.bmp
  • c:\ProgramData\Sun\Java\Java Update\_49_WHAT_is.html
  • c:\Python27\include\metagrammar.h
  • c:\Python27\include\pyfpe.h
  • c:\Python27\include\compile.h
  • c:\Python27\tcl\tix8.4.3\pref\WmDefault.cs
  • UNC\SHARDREALM\Users\Harry Dresden\Contacts\_11_WHAT_is.html
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.en-us.xml
  • UNC\SHARDREALM\Users\Public\Videos\Sample Videos\_10_WHAT_is.html
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\line.jpg
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\config.css
  • c:\Python27\Lib\test\https_svn_python_org_root.pem
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.officemui.msi.16.en-us.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Protect your PDF files with AD RMS.bmp
  • c:\Python27\include\cobject.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\js\nor.js
  • c:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\en-US\076E35C0-5E29-6BE8-6E9A-B8B157914A47.thor
  • c:\6cdeacda242012e0e5b593e657\1028\_20_WHAT_is.html
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\right_over_bg.jpg
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\_8_WHAT_is.html
  • c:\Python27\Lib\email\test\data\msg_22.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\tabs.css
  • c:\Python27\include\pgenheaders.h
  • c:\Python27\include\pythread.h
  • c:\Python27\Lib\email\test\data\msg_31.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\_12_WHAT_is.html
  • c:\Python27\Lib\email\test\data\msg_42.txt
  • c:\6cdeacda242012e0e5b593e657\1043\_8_WHAT_is.html
  • c:\Python27\Lib\email\test\data\msg_14.txt
  • c:\Python27\Lib\email\test\data\msg_39.txt
  • c:\Python27\Lib\site-packages\setuptools\command\launcher manifest.xml
  • c:\Python27\Lib\email\test\data\msg_40.txt
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.powerpointmui.msi.16.en-us.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\js\_1_WHAT_is.html
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\index.html
  • c:\Python27\Lib\email\test\data\_48_WHAT_is.html
  • c:\Python27\include\opcode.h
  • c:\6cdeacda242012e0e5b593e657\1025\eula.rtf
  • c:\Python27\Lib\test\wrongcert.pem
  • c:\Python27\include\moduleobject.h
  • c:\Python27\Lib\site-packages\pip-7.0.1.dist-info\_47_WHAT_is.html
  • c:\Python27\include\_4_WHAT_is.html
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml
  • UNC\SHARDREALM\Users\Public\Music\Sample Music\Kalimba.mp3
  • c:\Python27\Lib\email\test\data\msg_25.txt
  • c:\Python27\include\boolobject.h
  • c:\Python27\Lib\site-packages\setuptools-16.0.dist-info\dependency_links.txt
  • c:\Python27\include\bitset.h
  • c:\Python27\include\warnings.h
  • c:\ProgramData\Microsoft\ClickToRun\_32_WHAT_is.html
  • c:\Python27\include\pycapsule.h
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\9E1D94D2-471F-4DC3-9EBD-E31E1E099E00\en-us.16\MasterDescriptor.en-us.xml
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Access.Access.x-none.msi.16.x-none.xml
  • c:\Python27\Lib\email\test\data\msg_27.txt
  • c:\Python27\Lib\idlelib\NEWS.txt
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Koala.jpg
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Create PDF from Office-convert PDF to office.bmp
  • c:\Python27\Lib\email\test\data\msg_11.txt
  • c:\Python27\tcl\tix8.4.3\pref\TixGray.cs
  • c:\Python27\Lib\idlelib\help.txt
  • c:\6cdeacda242012e0e5b593e657\2052\eula.rtf
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.excelmui.msi.16.en-us.xml
  • c:\Python27\include\ucnhash.h
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\en-US\076E35C0-5E29-6BE8-119F-EB9A9CF8EFBF.thor
  • c:\Python27\Lib\test\check_soundcard.vbs
  • c:\Python27\Lib\test\keycert4.pem
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Integrate PDF into your mobile apps.bmp
  • c:\6cdeacda242012e0e5b593e657\1038\_3_WHAT_is.html
  • c:\Python27\Lib\test\cjkencodings\cp949-utf8.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\right_move_bg.jpg
  • c:\Python27\include\symtable.h
  • c:\Python27\include\node.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\phantomPDF_b.png
  • UNC\SHARDREALM\Users\Default\_13_WHAT_is.html
  • c:\Python27\Lib\email\test\data\msg_16.txt
  • c:\Python27\Lib\idlelib\HISTORY.txt
  • UNC\SHARDREALM\Users\Harry Dresden\Downloads\big-hero-6-2.jpg
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Tulips.jpg
  • c:\6cdeacda242012e0e5b593e657\2052\_15_WHAT_is.html
  • c:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\_43_WHAT_is.html
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Fastest PDF Search and Index.bmp
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\_5_WHAT_is.html
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\_6_WHAT_is.html
  • c:\6cdeacda242012e0e5b593e657\1025\_19_WHAT_is.html
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\WjPXtMOpPDP.ppt
  • c:\Python27\Lib\email\test\data\msg_41.txt
  • c:\Python27\include\cStringIO.h
  • c:\Python27\Lib\test\cjkencodings\euc_jp.txt
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml
  • c:\ProgramData\Sun\Java\Java Update\jaureglist.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Design form fields easily.bmp
  • c:\Python27\Lib\email\test\data\msg_29.txt
  • c:\Python27\Lib\email\test\data\msg_01.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\skin.css
  • \\?\PIPE\lsarpc
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Jellyfish.jpg
  • c:\Python27\Lib\site-packages\_46_WHAT_is.html
  • c:\Python27\tcl\_30_WHAT_is.html
  • c:\Python27\Lib\test\sha256.pem
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\phantomPDF_s.png
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml
  • c:\Python27\Lib\test\cjkencodings\_53_WHAT_is.html
  • c:\Python27\include\classobject.h
  • c:\Python27\include\datetime.h
  • c:\6cdeacda242012e0e5b593e657\1045\_10_WHAT_is.html
  • c:\6cdeacda242012e0e5b593e657\1028\LocalizedData.xml
  • c:\6cdeacda242012e0e5b593e657\1041\_6_WHAT_is.html
  • c:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\_38_WHAT_is.html
  • c:\Python27\Lib\email\test\data\msg_18.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Integrate PDF into your application.bmp
  • c:\Python27\include\errcode.h
  • c:\Python27\Lib\site-packages\pip-7.0.1.dist-info\top_level.txt
  • c:\Python27\Lib\test\keycert3.pem
  • c:\Python27\Lib\email\test\data\msg_09.txt
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\9E1D94D2-471F-4DC3-9EBD-E31E1E099E00\en-us.16\_34_WHAT_is.html
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Fastest PDF Search and Index.bmp
  • c:\Python27\include\pyerrors.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.outlookmui.msi.16.en-us.xml
  • c:\Python27\include\Python-ast.h
  • c:\6cdeacda242012e0e5b593e657\1042\_7_WHAT_is.html
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\blank.gif
  • c:\Python27\Lib\email\test\data\msg_21.txt
  • c:\Python27\include\ceval.h
  • c:\Python27\Lib\lib2to3\PatternGrammar.txt
  • c:\Python27\Lib\email\test\data\msg_07.txt
  • c:\Python27\include\pythonrun.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\classic-16.png
  • c:\Python27\Lib\idlelib\README.txt
  • c:\Python27\include\pygetopt.h
  • c:\Python27\include\codecs.h
  • c:\ProgramData\WebEx\WebEx\12_1324\_18_WHAT_is.html
  • c:\Python27\Lib\email\test\data\msg_10.txt
  • c:\Python27\Lib\email\test\data\msg_33.txt
  • c:\Python27\Lib\test\cjkencodings\euc_jisx0213-utf8.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\Profile.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\index_ori.html
  • c:\Python27\Lib\test\_2_WHAT_is.html
  • c:\Python27\include\patchlevel.h
  • c:\Python27\include\bytes_methods.h
  • c:\6cdeacda242012e0e5b593e657\1035\eula.rtf
  • c:\Python27\Lib\test\cjkencodings\cp949.txt
  • c:\6cdeacda242012e0e5b593e657\1031\eula.rtf
  • c:\Python27\Lib\test\keycert.pem
  • c:\6cdeacda242012e0e5b593e657\1029\_21_WHAT_is.html
  • c:\Python27\include\traceback.h
  • c:\6cdeacda242012e0e5b593e657\1028\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1044\eula.rtf
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Powerful Word Processor.bmp
  • c:\Python27\include\longintrepr.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\buy_phantom.png
  • c:\Python27\Lib\email\test\data\msg_17.txt
  • c:\6cdeacda242012e0e5b593e657\1036\_27_WHAT_is.html
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\UserDeploymentConfiguration.xml
  • c:\Python27\include\Python.h
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\_0_WHAT_is.html
  • c:\Python27\Lib\email\test\data\msg_34.txt
  • c:\Python27\Lib\site-packages\setuptools-16.0.dist-info\entry_points.txt
  • c:\6cdeacda242012e0e5b593e657\1041\eula.rtf
  • c:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\076E35C0-5E29-6BE8-DBBD-C3362132CB80.thor
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon View PDFs on mobile devices.bmp
  • c:\Python27\include\pystate.h
  • c:\Python27\Lib\email\test\data\msg_05.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\version.xml
  • c:\ProgramData\WebEx\WebEx\_50_WHAT_is.html
  • c:\Python27\include\pyconfig.h
  • c:\Python27\include\pymacconfig.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.shared.Office.x-none.msi.16.x-none.xml
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\unfERXGafU.ppt
  • c:\Python27\include\bufferobject.h
  • c:\Python27\include\timefuncs.h
  • c:\Python27\Lib\email\test\data\msg_37.txt
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.wordmui.msi.16.en-us.xml
  • c:\6cdeacda242012e0e5b593e657\1037\eula.rtf
  • c:\Python27\include\pystrcmp.h
  • c:\Python27\include\floatobject.h
  • UNC\SHARDREALM\Users\Default\NTUSER.DAT.LOG
  • c:\Python27\Lib\email\test\data\msg_26.txt
  • c:\Python27\Lib\test\pycacert.pem
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\top_tb_bg.jpg
  • c:\Python27\Lib\email\test\data\msg_12a.txt
  • c:\Python27\Lib\site-packages\setuptools\command\_45_WHAT_is.html
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Powerful Word Processor.bmp
  • c:\Python27\Lib\test\cjkencodings\big5.txt
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.onenotemui.msi.16.en-us.xml
  • c:\Python27\Lib\site-packages\setuptools-16.0.dist-info\top_level.txt
  • c:\Python27\Lib\test\cjkencodings\euc_jp-utf8.txt
  • UNC\SHARDREALM\Users\Public\Videos\Sample Videos\Wildlife.wmv
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\076E35C0-5E29-6BE8-EE04-3B984F34930B.thor
  • c:\Python27\Lib\site-packages\setuptools-16.0.dist-info\_36_WHAT_is.html
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.publishermui.msi.16.en-us.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\js\DD_belatedPNG.js
  • c:\Python27\include\bytesobject.h
  • c:\Python27\include\sysmodule.h
  • c:\Python27\include\pymactoolbox.h
  • c:\Python27\Lib\email\test\data\msg_35.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\_4_WHAT_is.html
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Protect Sensitive PDF Documents.bmp
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.accessmui.msi.16.en-us.xml
  • c:\Python27\Lib\test\185test.db
  • c:\Python27\Lib\site-packages\pip\_vendor\requests\cacert.pem
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Design form fields easily.bmp
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\en-US\_40_WHAT_is.html
  • c:\Python27\Lib\email\test\data\msg_08.txt
  • c:\Python27\include\eval.h
  • c:\Python27\Lib\lib2to3\_51_WHAT_is.html
  • c:\Python27\Lib\email\test\data\msg_15.txt
  • c:\Python27\Lib\site-packages\README.txt
  • c:\Python27\include\genobject.h
  • c:\Python27\Lib\idlelib\idle_test\_52_WHAT_is.html
  • UNC\SHARDREALM\Users\Harry Dresden\Downloads\cleandesktop.py.txt
  • c:\6cdeacda242012e0e5b593e657\1029\LocalizedData.xml
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Desert.jpg
  • c:\Python27\Lib\test\cjkencodings\big5hkscs.txt
  • c:\Python27\Lib\email\test\data\msg_28.txt
  • c:\Python27\Lib\test\ssl_cert.pem
  • c:\Python27\include\parsetok.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Protect your PDF files with AD RMS.bmp
  • c:\Python27\include\osdefs.h
  • c:\6cdeacda242012e0e5b593e657\1025\LocalizedData.xml
  • \\?\PIPE\wkssvc
  • UNC\SHARDREALM\Users\Harry Dresden\Downloads\_2_WHAT_is.html
  • c:\Python27\include\pymem.h
  • c:\6cdeacda242012e0e5b593e657\1037\_28_WHAT_is.html
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Edit and reflow paragraphs in PDF files.bmp
  • c:\Python27\include\pyarena.h
  • c:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\_39_WHAT_is.html
  • c:\6cdeacda242012e0e5b593e657\1033\eula.rtf
  • c:\Python27\Lib\test\selfsigned_pythontestdotnet.pem
  • c:\Python27\Lib\email\test\data\msg_46.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Create PDF from Office-convert PDF to office.bmp
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Integrate PDF into your application.bmp
  • c:\Python27\include\rangeobject.h
  • c:\puosftl\bin\cert.p12
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\body_bg.jpg
  • c:\6cdeacda242012e0e5b593e657\2070\eula.rtf
  • c:\Python27\include\iterobject.h
  • c:\6cdeacda242012e0e5b593e657\1029\eula.rtf
  • c:\Python27\include\funcobject.h
  • c:\Python27\include\listobject.h
  • c:\Python27\Lib\email\test\data\msg_44.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\ribbon-16-open.png
  • c:\Python27\include\frameobject.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office64ww.msi.16.x-none.xml
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\_7_WHAT_is.html
  • UNC\SHARDREALM\Users\Public\Music\Sample Music\_9_WHAT_is.html
  • c:\Python27\Lib\email\test\data\msg_45.txt
  • c:\Python27\include\sliceobject.h
  • c:\Python27\tcl\tix8.4.3\pref\TK.cs
  • c:\Python27\Lib\email\test\data\msg_43.txt
  • c:\6cdeacda242012e0e5b593e657\3082\_17_WHAT_is.html
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\bfPeuWLJYMo.docm
  • c:\Python27\include\stringobject.h
  • c:\6cdeacda242012e0e5b593e657\1053\eula.rtf
  • UNC\SHARDREALM\Users\Harry Dresden\Contacts\Harry Dresden.contact
  • c:\Python27\Lib\email\test\data\msg_20.txt
  • c:\Python27\tcl\tix8.4.3\pref\Gray.cs
  • c:\Python27\Lib\test\ssl_key.pem
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.officemuiset.msi.16.en-us.xml
  • c:\Python27\include\methodobject.h
  • c:\puosftl\bin\_0_WHAT_is.html
  • c:\Python27\include\structseq.h
  • c:\Python27\Lib\test\cjkencodings\gb18030.txt
  • c:\Python27\include\pymath.h
  • UNC\SHARDREALM\Users\Public\Music\Sample Music\Sleep Away.mp3
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\_37_WHAT_is.html
  • c:\6cdeacda242012e0e5b593e657\1038\eula.rtf
  • c:\Python27\Lib\email\test\data\msg_32.txt
  • c:\Python27\Lib\email\test\data\msg_03.txt
  • c:\Python27\Lib\email\test\data\msg_24.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\show_con_bg.jpg
  • c:\Python27\Lib\test\ssl_key.passwd.pem
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Edit and reflow paragraphs in PDF files.bmp
  • c:\Python27\Lib\test\keycert2.pem
  • c:\Python27\include\py_curses.h
  • c:\ProgramData\WebEx\WebEx\atsdk.xml
  • c:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.2.xml
  • c:\Python27\include\setobject.h
  • c:\Python27\Lib\test\cjkencodings\big5-utf8.txt
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\9E1D94D2-471F-4DC3-9EBD-E31E1E099E00\x-none.16\MasterDescriptor.x-none.xml
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\TeXnBbjSaZGb.docm
  • c:\Python27\include\graminit.h
  • c:\6cdeacda242012e0e5b593e657\1046\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1049\eula.rtf
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal View PDFs on mobile devices.bmp
  • c:\Python27\tcl\tix8.4.3\pref\TkWin.cs
  • c:\Python27\include\bytearrayobject.h
  • c:\6cdeacda242012e0e5b593e657\1031\_23_WHAT_is.html
  • c:\Python27\Lib\test\badkey.pem
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.fr-fr.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal View and annotate PDFs.bmp
  • c:\Python27\Lib\idlelib\CREDITS.txt
  • c:\Python27\include\dictobject.h
  • c:\Python27\Lib\test\cjkencodings\big5hkscs-utf8.txt
  • c:\Python27\include\intrcheck.h
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Lighthouse.jpg
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Word.Word.x-none.msi.16.x-none.xml
  • c:\Python27\Lib\email\test\data\msg_38.txt
  • c:\Python27\Lib\test\cjkencodings\euc_kr-utf8.txt
  • c:\ProgramData\Microsoft\IlsCache\imcrcache.xml
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office64mui.msi.16.en-us.xml
  • c:\Python27\Lib\test\nullbytecert.pem
  • c:\6cdeacda242012e0e5b593e657\1032\eula.rtf
  • c:\Python27\Lib\test\dh1024.pem
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Hydrangeas.jpg
  • c:\6cdeacda242012e0e5b593e657\1055\eula.rtf
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office64muiset.msi.16.en-us.xml
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Chrysanthemum.jpg
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\eDyNSOahSI.doc
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.accessmuiset.msi.16.en-us.xml
  • c:\Python27\Lib\site-packages\pip-7.0.1.dist-info\entry_points.txt
  • c:\Python27\include\weakrefobject.h
  • c:\Python27\Lib\idlelib\idle.bat
  • c:\Python27\include\unicodeobject.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon View and annotate PDFs.bmp
  • c:\Python27\include\cellobject.h
File-Deleted
  • C:\Users\Harry Dresden\AppData\Local\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000000.db
  • c:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\behavior.xml
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\tasks.xml
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\en-US\resource.xml
  • c:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\en-US\resource.xml
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\resource.xml
  • c:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\tasks.xml
  • c:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\behavior.xml
File-Opened
  • C:\Windows\System32\wshqos.dll
  • C:\Windows\System32\wshom.ocx
  • C:\Windows\System32\en-US\wshqos.dll.mui
  • C:\
  • C:\Windows\Globalization\Sorting\sortdefault.nls
  • C:\Users\
  • C:\Users\Harry Dresden\
  • C:\Users\Harry Dresden\AppData\
  • C:\Users\Harry Dresden\AppData\Local\
  • C:\Windows\SysWOW64\rundll32.exe
  • C:\Users\Harry Dresden\AppData\Local\Temp\NRV_AM00I_.js
  • C:\Users\Harry Dresden\Desktop\desktop.ini
  • C:\Windows\System32\en-US\wshtcpip.dll.mui
  • C:\Windows\System32\rsaenh.dll
  • C:\Windows\System32\msxml3.dll
  • C:\Windows\System32\en-US\wship6.dll.mui
  • C:\Windows\System32\wscript.exe
  • C:\Windows\
  • C:\Windows\SysWOW64\
  • c:\Python27\Lib\email\test\data\msg_02.txt
  • c:\Python27\include\frameobject.h
  • c:\Python27\include\pyexpat.h
  • c:\Python27\Lib\ctypes
  • UNC\SHARDREALM\Users\Harry Dresden\Documents
  • c:\Users\Default\Links
  • c:\ProgramData\Microsoft\Windows NT\MSFax\Common Coverpages
  • c:\Python27\Lib\email\test\data\msg_06.txt
  • c:\Python27\include\pymacconfig.h
  • c:\Python27\include\ast.h
  • c:\Python27\include\memoryobject.h
  • c:\Python27\Lib\site-packages\pip\_vendor\colorama
  • c:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.0.xml
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources
  • c:\Python27\DLLs
  • c:\Python27\Lib\site-packages\pip\_vendor\cachecontrol
  • c:\Python27\include\tupleobject.h
  • UNC\SHARDREALM\Users\Harry Dresden\Favorites\Links for United States
  • c:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\behavior.xml
  • c:\ProgramData\Microsoft\Event Viewer\Views\ApplicationViewsRootNode
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Enterprise PDF Reader.bmp
  • c:\ProgramData\Adobe\Setup
  • c:\Python27\Lib\test\empty.vbs
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\content_showbg.jpg
  • c:\ProgramData\Microsoft\Assistance\Client\1.0\en-US
  • c:\Python27\Lib\site-packages\pip\_vendor\requests\packages\urllib3\packages
  • UNC\SHARDREALM\Users\Harry Dresden\OneDrive
  • c:\Python27\tcl\tix8.4.3\pref\SGIGray.cs
  • c:\Users\Harry Dresden\OneDrive
  • c:\Python27\include\grammar.h
  • c:\ProgramData\Microsoft\PlayReady\Cache\S-1-5-21-3416602863-1947377224-293699093-1001
  • c:\Python27\include\import.h
  • c:\Users\Public\Libraries
  • \\?\PIPE\browser
  • c:\Python27\Lib\test\tracedmodules
  • c:\ProgramData\Adobe\ARM
  • c:\Python27\tcl\tcl8.5\tzdata\Indian
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\JGxUGsQbamW.docm
  • c:\6cdeacda242012e0e5b593e657\1043\eula.rtf
  • c:\ProgramData\Microsoft\Windows NT\MSFax\Queue
  • c:\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl
  • c:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Resource
  • c:\Python27\Lib
  • \??\VBoxMiniRdrDN
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\tab.png
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Integrate PDF into your mobile apps.bmp
  • c:\ProgramData
  • c:\Python27\tcl\tix8.4.3\pref\Blue.cs
  • c:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}
  • UNC\SHARDREALM\Users\Public\Music\Sample Music\Maid with the Flaxen Hair.mp3
  • c:\Python27\Lib\site-packages\pip
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\classic-16-open.png
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\A5
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\A6
  • c:\Python27\Lib\email\test\data\msg_36.txt
  • c:\Python27\Lib\ctypes\macholib
  • c:\ProgramData\Adobe\Acrobat\11.0\Replicate\Security
  • c:\6cdeacda242012e0e5b593e657\1042\eula.rtf
  • c:\inetpub\history\CFGHISTORY_0000000004\schema
  • c:\Python27\Lib\unittest\test
  • c:\ProgramData\Microsoft\PlayReady
  • c:\puosftl\lib\api
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\9E1D94D2-471F-4DC3-9EBD-E31E1E099E00
  • c:\Python27\Lib\site-packages\pip\models
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\history.txt
  • c:\Python27\include\marshal.h
  • UNC\SHARDREALM\Users\Public\Foxit Software
  • c:\ProgramData\Adobe\Acrobat\11.0\Replicate
  • c:\Python27\Tools\i18n
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon create pdf from scanner documents.bmp
  • c:\Python27\tcl\tcl8\8.4
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog
  • c:\ProgramData\Microsoft\Crypto\Keys
  • UNC\SHARDREALM\Users\Public\Music\Sample Music
  • c:\Python27\Lib\email\test\data\msg_19.txt
  • c:\inetpub\wwwroot\aspnet_client\system_web\4_0_30319
  • c:\Python27\Lib\ctypes\test
  • c:\Python27\Lib\idlelib\extend.txt
  • c:\Users\Harry Dresden\Searches
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.powerpointmui.msi.16.en-us.xml
  • c:\Python27\Lib\test\badcert.pem
  • c:\ProgramData\Adobe\ARM\S
  • c:\Python27\Lib\test\cjkencodings\euc_kr.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\base.css
  • c:\Python27\Lib\ensurepip
  • c:\Python27\include\pgen.h
  • UNC\SHARDREALM\Users
  • c:\Python27\tcl\tcl8.5\tzdata\Canada
  • c:\Python27\Lib\test\wrongcert.pem
  • c:\Users\Harry Dresden\Downloads
  • c:\Python27\include\objimpl.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml
  • c:\ProgramData\Microsoft\eHome
  • c:\Python27\tcl\tk8.5\demos\images
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images
  • c:\Python27\Lib\test\cjkencodings
  • c:\inetpub\wwwroot\aspnet_client\system_web
  • UNC\SHARDREALM\Users\Public\Music
  • c:\Python27\tcl\tcl8.5\tzdata\America\Kentucky
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\en-US
  • c:\Python27\include\abstract.h
  • c:\ProgramData\WebEx\WebEx\12_1324\gpc.php
  • c:\Python27\Lib\test\keycert.passwd.pem
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\ribbon-16.png
  • c:\puosftl\bin
  • c:\Python27\Lib\test\cjkencodings\gb18030-utf8.txt
  • c:\Python27\include\object.h
  • c:\Python27\tcl\tix8.4.3
  • c:\6cdeacda242012e0e5b593e657\1036\eula.rtf
  • c:\ProgramData\Microsoft\RAC\PublishedData
  • UNC\SHARDREALM\Users\Harry Dresden\Links
  • c:\inetpub\history\CFGHISTORY_0000000005
  • c:\inetpub\history\CFGHISTORY_0000000004
  • c:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\tasks.xml
  • c:\inetpub\history\CFGHISTORY_0000000001
  • c:\Python27\include\pydebug.h
  • c:\inetpub\history\CFGHISTORY_0000000003
  • c:\ProgramData\Microsoft\Vault\AC658CB4-9126-49BD-B877-31EEDAB3F204
  • c:\Users\Harry Dresden\Favorites\Links for United States
  • c:\Python27\Lib\lib2to3\tests\data\fixers
  • c:\Python27\Lib\email\test\data\msg_14.txt
  • c:\Python27\tcl\tcl8.5\tzdata\US
  • c:\Python27\tcl\tcl8.5\tzdata
  • UNC\SHARDREALM\Users\Public\Videos
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal create pdf from scanner documents.bmp
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\tabs-ie.css
  • c:\Python27\include\pyport.h
  • c:\6cdeacda242012e0e5b593e657\1045\eula.rtf
  • UNC\SHARDREALM\Users\Public\Documents
  • c:\Python27\Lib\email
  • UNC\SHARDREALM\Users\Public\Music\Sample Music\Kalimba.mp3
  • c:\Python27\tcl\tix8.4.3\demos\samples
  • c:\Python27\Lib\email\test\data\msg_15.txt
  • c:\Python27\Lib\lib-tk\test\test_tkinter
  • c:\6cdeacda242012e0e5b593e657\1053\eula.rtf
  • UNC\SHARDREALM\Users\Harry Dresden\Music
  • c:\Python27\Tools\webchecker
  • c:\Python27\tcl\tcl8.5\tzdata\America\North_Dakota
  • c:\Python27\Lib\test\crashers
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\DeploymentConfiguration.xml
  • c:\ProgramData\Microsoft\Windows Defender\LocalCopy
  • c:\Python27\include\dtoa.h
  • c:\Python27\include\asdl.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ProfileRibbon.xml
  • c:\Users\Harry Dresden\Contacts
  • c:\ProgramData\Microsoft\IlsCache\ilrcache.xml
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\E0
  • c:\PerfLogs
  • UNC\SHARDREALM\Users\Public\Libraries
  • c:\
  • c:\Python27\include\complexobject.h
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Entries
  • c:\Python27\Lib\email\test\data\msg_13.txt
  • c:\Python27\tcl\tix8.4.3\pref\Bisque.cs
  • c:\Python27\Lib\site-packages\pip\_vendor\html5lib\treebuilders
  • c:\Python27\tcl\tcl8\8.5
  • UNC\SHARDREALM\Users\Default\Desktop
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\js\DD_belatedPNG.js
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\history_winbg.jpg
  • c:\6cdeacda242012e0e5b593e657\3082\eula.rtf
  • c:\Python27\libs
  • c:\ProgramData\Microsoft\ClickToRun\MachineData
  • c:\Python27\Lib\lib2to3\Grammar.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Protect Sensitive PDF Documents.bmp
  • c:\Python27\include\pystrtod.h
  • c:\Python27\include\longobject.h
  • c:\puosftl\modules
  • UNC\SHARDREALM\Users\Harry Dresden\Contacts\Harry Dresden.contact
  • c:\Python27\Lib\email\test\data\msg_12.txt
  • c:\ProgramData\Microsoft\Assistance
  • c:\Python27\include\bytesobject.h
  • c:\Python27\include\pyctype.h
  • c:\ProgramData\Microsoft\Windows Defender\Scans\History\Results
  • c:\Users\Harry Dresden\Videos
  • c:\Python27\Lib\pydoc_data
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml
  • c:\6cdeacda242012e0e5b593e657\1029\eula.rtf
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\index.html
  • UNC\SHARDREALM\Users\Default\Music
  • c:\ProgramData\Microsoft\Crypto\DSS
  • c:\ProgramData\Adobe\Acrobat
  • c:\Python27\tcl\tcl8.5\tzdata\Atlantic
  • c:\ProgramData\NovaTech Network\NovaBench\3.0.2.0
  • c:\ProgramData\Microsoft\Network
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\1A
  • c:\ProgramData\Microsoft\Diagnosis\ETLLogs\AutoLogger
  • c:\Users\Default\Downloads
  • c:\Python27\include\structmember.h
  • c:\puosftl\lib\common
  • c:\Python27\Lib\xml
  • c:\Python27\tcl\tcl8.5\tzdata\Australia
  • c:\Users\Public\Foxit Software\Foxit Reader\StartPage
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\17
  • c:\Python27\include\fileobject.h
  • c:\Python27\tcl\tk8.5
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.officemuiset.msi.16.en-us.xml
  • c:\ProgramData\Microsoft\PlayReady\Cache
  • c:\6cdeacda242012e0e5b593e657\3082
  • c:\Python27\Lib\site-packages\pip\compat
  • c:\Python27\Lib\test\leakers
  • c:\Python27\tcl\tcl8\8.4\platform
  • c:\Python27\include\modsupport.h
  • c:\ProgramData\regid.1991-06.com.microsoft
  • c:\Python27\Lib\site-packages\pip\_vendor\html5lib\filters
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\9E1D94D2-471F-4DC3-9EBD-E31E1E099E00\x-none.16
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\DD
  • c:\Python27\Tools\pynche\X
  • c:\Python27\Tools\Scripts
  • c:\Python27\include\cellobject.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Enterprise PDF Reader.bmp
  • c:\Python27\Lib\email\test\data\msg_30.txt
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\35
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore
  • c:\Python27\Lib\test\nokia.pem
  • c:\Python27\include\compile.h
  • c:\6cdeacda242012e0e5b593e657\1032\eula.rtf
  • c:\Users\Public
  • C:\Users\Harry Dresden\AppData\Local\Temp
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.en-us.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\line.jpg
  • c:\Python27\tcl\tk8.5\images
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\config.css
  • c:\ProgramData\Microsoft\DRM
  • UNC\SHARDREALM\Users\Harry Dresden\Videos
  • c:\ProgramData\Microsoft\Windows NT\MSFax\Common Coverpages\en-US
  • c:\Python27\Lib\idlelib\idle_test
  • c:\Python27\Lib\test\https_svn_python_org_root.pem
  • c:\Python27\include
  • c:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.2.xml
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.officemui.msi.16.en-us.xml
  • c:\Python27\Lib\test\nullcert.pem
  • c:\Python27\Lib\site-packages\setuptools
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Protect your PDF files with AD RMS.bmp
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Design form fields easily.bmp
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml
  • c:\6cdeacda242012e0e5b593e657\1029
  • c:\6cdeacda242012e0e5b593e657\1028
  • c:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}
  • c:\Python27\Lib\site-packages\pip\commands
  • c:\Python27\Lib\lib2to3\tests\data\fixers\myfixes
  • c:\6cdeacda242012e0e5b593e657\1025
  • c:\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us
  • c:\ProgramData\Adobe\ARM\S\5521
  • c:\Python27\Lib\email\test\data
  • c:\ProgramData\Microsoft\Windows Defender\Support
  • c:\ProgramData\WebEx\WebEx
  • c:\ProgramData\Microsoft\IlsCache\imcrcache.xml
  • c:\puosftl\lib
  • c:\6cdeacda242012e0e5b593e657\2052
  • UNC\SHARDREALM\Users\Public\Music\Sample Music\Sleep Away.mp3
  • c:\Python27\Lib\email\test\data\msg_22.txt
  • c:\Python27\Lib\email\test\data\msg_44.txt
  • c:\Python27\Lib\email\test\data\msg_12a.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Fox